Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/mQ31QVOB1qJd_xmul2aHd_xgE8Y.roa
File: mQ31QVOB1qJd_xmul2aHd_xgE8Y.roa (raw, json)
Hash identifier: TpD7+eU3bpz4X78xcMu8CO/1LwlpJHFwXgRpc59UsdQ=
Subject key identifier: 99:0D:F5:41:53:81:D6:A2:5D:FF:19:AE:97:66:87:77:FC:60:13:C6
Certificate issuer: /CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Certificate serial: 01857246B1B2D58EC18A136D849B6F4EA9B8
Authority key identifier: C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/mQ31QVOB1qJd_xmul2aHd_xgE8Y.roa
Signing time: Mon 02 Jan 2023 11:38:33 +0000
ROA not before: Mon 02 Jan 2023 11:38:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43045
IP address blocks: 5.182.52.0/22 maxlen: 22
46.17.48.0/21 maxlen: 21
89.221.48.0/20 maxlen: 20
2a02:22c0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:b1:b2:d5:8e:c1:8a:13:6d:84:9b:6f:4e:a9:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Validity
Not Before: Jan 2 11:38:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=990df5415381d6a25dff19ae97668777fc6013c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:37:33:20:55:ab:2e:5f:22:0c:4f:13:33:c3:
78:6a:a7:67:48:00:b3:66:8a:2a:90:db:f3:47:76:
9b:6b:1a:10:a9:db:2f:04:92:22:2f:87:89:4c:8c:
2e:20:2e:c2:a4:1f:ba:6a:d9:0d:6b:32:01:f2:0e:
7e:42:7a:8f:56:08:a1:27:e4:2c:9e:cb:73:45:62:
65:0f:85:5f:ca:72:d4:93:34:f4:8a:b5:da:3c:b5:
9a:ab:ce:91:a6:63:3a:94:d2:62:69:4a:38:30:5b:
72:c4:af:db:d6:71:44:bb:5a:64:9d:fb:af:85:26:
87:e0:02:1c:4d:78:3d:a6:53:1a:ce:f8:03:15:b1:
0c:b6:0b:3a:67:09:be:be:bb:f3:0b:f9:b4:34:a4:
73:d8:cb:a6:b7:7c:dc:e5:b2:34:1f:fe:9f:83:65:
f7:14:0f:3b:5e:07:e1:26:fd:d1:d3:db:81:44:77:
16:08:5b:77:05:09:2a:8a:5d:8c:d3:7b:75:35:43:
3a:8e:80:ed:d0:ca:2b:04:ec:80:9b:82:65:a3:66:
44:6a:e2:0f:e6:6f:26:11:f5:9e:b0:d6:ad:55:87:
c0:e0:37:d1:a1:5d:d1:bf:a6:54:b9:3b:cf:61:be:
16:1e:94:0b:5c:b5:29:3b:71:64:ce:0c:1b:fa:ea:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0D:F5:41:53:81:D6:A2:5D:FF:19:AE:97:66:87:77:FC:60:13:C6
X509v3 Authority Key Identifier:
keyid:C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/mQ31QVOB1qJd_xmul2aHd_xgE8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.52.0/22
46.17.48.0/21
89.221.48.0/20
IPv6:
2a02:22c0::/32
Signature Algorithm: sha256WithRSAEncryption
8c:90:ec:07:29:52:1f:41:32:18:50:14:bf:d4:36:6b:b5:95:
9a:57:89:24:de:df:4d:27:65:ad:98:6e:8b:e5:84:96:a5:0d:
0a:c7:28:fb:36:73:53:71:86:36:af:6b:3c:5c:a7:01:04:1f:
3c:a1:65:fb:f3:16:fc:33:c4:c8:a2:1c:26:75:00:64:17:1a:
00:48:82:5d:44:a7:3b:24:87:a0:93:d0:fb:d7:93:7c:6c:a0:
2b:e1:c4:a4:69:55:c8:0d:76:ac:d7:70:e3:a2:dd:0f:6c:47:
f9:f5:a7:61:dc:d9:08:9d:c6:ef:8d:b3:4a:c6:3b:09:e6:95:
56:61:bd:13:47:31:cc:9f:13:c3:5a:b2:17:f6:a9:c2:d7:2e:
e7:74:82:45:e0:11:df:33:1f:95:eb:3d:73:70:ec:41:36:7b:
9d:bf:45:37:cb:a8:c1:a7:54:4f:5b:c9:28:7d:6c:24:b7:76:
fd:22:b1:70:29:14:5e:7a:42:b5:44:63:93:8a:e3:a9:8f:3b:
54:75:fe:dd:2a:4b:d3:ce:22:d6:00:4c:18:ea:9c:db:98:bf:
75:9e:8b:7a:a3:80:92:95:f7:b6:81:73:c8:47:5e:ca:b8:b0:
dc:e7:cf:43:61:b5:29:3a:14:d1:f7:37:2f:d3:b8:bd:24:b5:
48:f7:1c:72
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVyRrGy1Y7BihNthJtvTqm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTMzM2QwZTgxMDc4ODZkMDMwNWM3YmQ4MWJkZDM1NDg5
NTI3YWUwHhcNMjMwMTAyMTEzODMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTBkZjU0MTUzODFkNmEyNWRmZjE5YWU5NzY2ODc3N2ZjNjAxM2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzczIFWrLl8iDE8TM8N4aqdnSACz
ZooqkNvzR3abaxoQqdsvBJIiL4eJTIwuIC7CpB+6atkNazIB8g5+QnqPVgihJ+Qs
nstzRWJlD4VfynLUkzT0irXaPLWaq86RpmM6lNJiaUo4MFtyxK/b1nFEu1pknfuv
hSaH4AIcTXg9plMazvgDFbEMtgs6Zwm+vrvzC/m0NKRz2Mumt3zc5bI0H/6fg2X3
FA87XgfhJv3R09uBRHcWCFt3BQkqil2M03t1NUM6joDt0MorBOyAm4Jlo2ZEauIP
5m8mEfWesNatVYfA4DfRoV3Rv6ZUuTvPYb4WHpQLXLUpO3Fkzgwb+urwywIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFJkN9UFTgdaiXf8Zrpdmh3f8YBPGMB8GA1UdIwQY
MBaAFMYTM9DoEHiG0DBce9gb3TVIlSeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhNejBPZ1FlSWJRTUZ4NzJCdmROVWlWSjY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9kZDMyYzMtZmU4Zi00MDQ3LWI2OGEt
OGVjNWYwZWVhMDQ1LzEvbVEzMVFWT0IxcUpkX3htdWwyYUhkX3hnRThZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9kZDMyYzMtZmU4Zi00MDQ3LWI2OGEtOGVjNWYwZWVhMDQ1
LzEveGhNejBPZ1FlSWJRTUZ4NzJCdmROVWlWSjY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCBbY0AwQD
LhEwAwQEWd0wMA0EAgACMAcDBQAqAiLAMA0GCSqGSIb3DQEBCwUAA4IBAQCMkOwH
KVIfQTIYUBS/1DZrtZWaV4kk3t9NJ2WtmG6L5YSWpQ0Kxyj7NnNTcYY2r2s8XKcB
BB88oWX78xb8M8TIohwmdQBkFxoASIJdRKc7JIegk9D715N8bKAr4cSkaVXIDXas
13Djot0PbEf59adh3NkIncbvjbNKxjsJ5pVWYb0TRzHMnxPDWrIX9qnC1y7ndIJF
4BHfMx+V6z1zcOxBNnudv0U3y6jBp1RPW8kofWwkt3b9IrFwKRReekK1RGOTiuOp
jztUdf7dKkvTziLWAEwY6pzbmL91not6o4CSlfe2gXPIR17KuLDc589DYbUpOhTR
9zcv07i9JLVI9xxy
-----END CERTIFICATE-----
Generated at Thu Oct 19 09:13:34 2023 by rpki-client on console-ams.rpki-client.org