Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/7bfCVuCaf7XenPpkKfMWqS2Mdjc.roa
File: 7bfCVuCaf7XenPpkKfMWqS2Mdjc.roa (raw, json)
Hash identifier: 2rXpO6P6uD2fjFYDtLrVfjSGrBOsM0I+j5lVsSVj/Eg=
Subject key identifier: ED:B7:C2:56:E0:9A:7F:B5:DE:9C:FA:64:29:F3:16:A9:2D:8C:76:37
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0185720C41C982AF2D1403F2722BA006F0AE
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/7bfCVuCaf7XenPpkKfMWqS2Mdjc.roa
Signing time: Mon 02 Jan 2023 10:34:43 +0000
ROA not before: Mon 02 Jan 2023 10:34:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35277
IP address blocks: 5.181.202.0/23 maxlen: 24
185.36.142.0/23 maxlen: 24
185.36.141.0/24 maxlen: 24
45.85.117.0/24 maxlen: 24
45.155.120.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 Mar 2023 15:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:0c:41:c9:82:af:2d:14:03:f2:72:2b:a0:06:f0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 2 10:34:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edb7c256e09a7fb5de9cfa6429f316a92d8c7637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1b:ee:6c:58:80:e4:04:c6:43:a1:77:4c:d0:
a8:ba:40:1f:03:d0:0a:31:1e:68:89:31:4d:8d:5c:
8a:2d:c0:d5:0f:ad:96:33:14:69:d7:36:b3:9e:1a:
8b:37:6c:40:c1:b5:96:98:71:75:22:e2:1a:d8:d8:
bb:79:9a:63:b8:cb:ea:a3:2f:07:f0:ac:1a:d0:c4:
90:3a:08:d7:63:9d:43:89:59:b6:66:11:a3:70:b8:
81:3f:ed:f0:02:0b:32:5d:35:7a:15:7f:00:1a:36:
d1:78:6f:ce:d3:69:94:db:c8:3a:32:e9:0f:eb:15:
77:c3:ce:16:60:cb:5b:32:e9:f8:a4:15:c1:96:76:
3c:e4:21:6f:b8:bd:9b:f8:42:78:48:79:90:a7:eb:
77:d8:b3:6b:99:03:24:ed:0a:41:77:73:68:e3:c9:
bf:45:2d:a1:eb:f9:98:7b:a7:4e:4d:45:33:1a:f4:
11:fd:80:95:dd:d7:03:6c:22:3a:87:71:7c:db:c9:
11:c4:d0:07:28:6e:ae:66:eb:45:ff:8e:19:ec:9f:
a7:ab:92:03:27:ab:40:c2:57:a6:a9:8a:b1:b8:ba:
7d:25:f3:48:93:ee:61:bf:12:2d:fb:62:2a:7c:d4:
20:a0:de:45:7b:09:d0:85:54:57:d9:48:f3:88:f8:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B7:C2:56:E0:9A:7F:B5:DE:9C:FA:64:29:F3:16:A9:2D:8C:76:37
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/7bfCVuCaf7XenPpkKfMWqS2Mdjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.202.0/23
45.85.117.0/24
45.155.120.0/23
185.36.141.0-185.36.143.255
Signature Algorithm: sha256WithRSAEncryption
29:55:d4:cb:74:a4:33:4c:ec:94:3c:54:e0:8a:9b:5a:fe:a1:
1d:4f:ec:d4:ef:cd:a3:f9:c0:95:66:3d:8a:cc:c4:cb:28:00:
a5:d3:17:cf:76:c5:d2:76:33:83:97:d5:67:08:ce:b0:3b:66:
69:17:32:4a:81:eb:1d:a0:c5:a6:bc:71:b0:0b:e4:a2:76:39:
76:96:86:13:18:74:55:f3:8a:e1:9b:55:00:0a:0f:cf:8f:f6:
6b:22:ef:c9:36:38:ac:f9:dc:34:af:2e:a6:d4:21:79:da:7b:
3d:7f:a6:15:9f:6b:52:f8:f3:a1:d5:69:62:11:65:d0:b1:ae:
d3:1b:0e:f5:0d:47:74:d4:4f:a1:42:2e:da:1a:4f:ba:e4:13:
2c:e2:c9:3b:90:c8:06:8c:91:08:1d:82:d1:cb:57:6b:57:22:
fa:ea:8c:e5:80:de:4f:03:3b:c1:b8:d7:94:07:75:5b:c3:33:
84:0f:0e:ef:b6:0c:0a:c1:53:ff:48:ee:3b:37:47:90:dd:3a:
c6:cb:27:d3:a2:40:01:78:16:e1:2f:df:c0:70:d8:a0:8c:56:
29:a4:c2:55:a5:9e:08:42:ba:7d:44:c7:b7:3e:66:71:6f:2d:
84:1d:cc:f7:12:eb:24:e0:bf:eb:85:57:48:48:8d:8c:cd:3d:
9e:68:f7:ff
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYVyDEHJgq8tFAPyciugBvCuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy
NTFkYWQwHhcNMjMwMTAyMTAzNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGI3YzI1NmUwOWE3ZmI1ZGU5Y2ZhNjQyOWYzMTZhOTJkOGM3NjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBvubFiA5ATGQ6F3TNCoukAfA9AK
MR5oiTFNjVyKLcDVD62WMxRp1zaznhqLN2xAwbWWmHF1IuIa2Ni7eZpjuMvqoy8H
8Kwa0MSQOgjXY51DiVm2ZhGjcLiBP+3wAgsyXTV6FX8AGjbReG/O02mU28g6MukP
6xV3w84WYMtbMun4pBXBlnY85CFvuL2b+EJ4SHmQp+t32LNrmQMk7QpBd3No48m/
RS2h6/mYe6dOTUUzGvQR/YCV3dcDbCI6h3F828kRxNAHKG6uZutF/44Z7J+nq5ID
J6tAwlemqYqxuLp9JfNIk+5hvxIt+2IqfNQgoN5FewnQhVRX2UjziPi+WQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFO23wlbgmn+13pz6ZCnzFqktjHY3MB8GA1UdIwQY
MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt
YjdjNTc4Yjc0ZTM1LzEvN2JmQ1Z1Q2FmN1hlblBwa0tmTVdxUzJNZGpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1
LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQBBbXKAwQA
LVV1AwQBLZt4MAwDBAC5JI0DBAS5JIAwDQYJKoZIhvcNAQELBQADggEBAClV1Mt0
pDNM7JQ8VOCKm1r+oR1P7NTvzaP5wJVmPYrMxMsoAKXTF892xdJ2M4OX1WcIzrA7
ZmkXMkqB6x2gxaa8cbAL5KJ2OXaWhhMYdFXziuGbVQAKD8+P9msi78k2OKz53DSv
LqbUIXnaez1/phWfa1L486HVaWIRZdCxrtMbDvUNR3TUT6FCLtoaT7rkEyziyTuQ
yAaMkQgdgtHLV2tXIvrqjOWA3k8DO8G415QHdVvDM4QPDu+2DArBU/9I7js3R5Dd
OsbLJ9OiQAF4FuEv38Bw2KCMVimkwlWlnghCun1Ex7c+ZnFvLYQdzPcS6yTgv+uF
V0hIjYzNPZ5o9/8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:36 2024 by rpki-client on console-ams.rpki-client.org