Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9WRe67L2yx5RUa_anSrvigwT6Gs.roa
File: 9WRe67L2yx5RUa_anSrvigwT6Gs.roa (raw, json)
Hash identifier: sQ47iKvmzH4kxSsjatEOGfod5Y3/TbwM5JFlWjRbM0M=
Subject key identifier: F5:64:5E:EB:B2:F6:CB:1E:51:51:AF:DA:9D:2A:EF:8A:0C:13:E8:6B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018B0AAC45ED635F0E2B6B92DFBFCC323451
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9WRe67L2yx5RUa_anSrvigwT6Gs.roa
Signing time: Sat 07 Oct 2023 15:05:44 +0000
ROA not before: Sat 07 Oct 2023 15:05:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61112
IP address blocks: 45.8.186.0/24 maxlen: 24
85.208.104.0/24 maxlen: 24
5.253.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0a:ac:45:ed:63:5f:0e:2b:6b:92:df:bf:cc:32:34:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 7 15:05:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5645eebb2f6cb1e5151afda9d2aef8a0c13e86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:21:b1:91:97:9f:b1:11:19:e2:7a:b9:4f:4c:
72:87:5a:08:37:66:47:c0:04:56:db:e9:8e:d8:80:
48:fb:2b:e5:14:64:51:f2:1b:fa:a3:47:8c:0c:2e:
7b:32:8a:0d:20:46:d9:be:69:e3:e3:2f:a7:a3:70:
6f:18:7a:9f:67:d4:f2:e2:de:7f:02:ca:19:e6:4c:
04:01:5b:12:fd:5e:a7:ec:dd:48:f7:8d:65:12:c7:
25:48:e1:61:3d:2f:e3:77:89:d4:c8:56:b4:f3:46:
2e:06:bc:6c:ce:c2:ff:4a:43:5c:1c:33:8d:31:f5:
86:13:f0:65:3f:75:74:9f:b7:7b:77:a1:a8:7b:67:
f2:24:4c:47:ff:70:22:a7:2e:16:c1:12:9d:6d:44:
79:5d:f8:a2:49:62:fd:c1:94:b4:f7:88:4c:8c:db:
2f:09:a5:f2:8d:fc:8d:55:40:26:b3:b9:04:d3:5b:
a9:54:c6:23:5f:ab:2e:90:ed:8d:21:fa:34:32:df:
0d:cc:2e:22:14:c0:cc:b7:e9:bc:c6:d1:17:c6:c2:
02:5c:b7:bb:53:0e:7e:bc:30:d5:ba:0e:6a:bc:ea:
14:05:bf:4e:c0:f0:e0:db:7f:ac:f7:d7:8c:4a:75:
61:1d:8e:7d:9c:8f:02:8e:13:7e:0e:07:89:5c:86:
30:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:64:5E:EB:B2:F6:CB:1E:51:51:AF:DA:9D:2A:EF:8A:0C:13:E8:6B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/9WRe67L2yx5RUa_anSrvigwT6Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.36.0/24
45.8.186.0/24
85.208.104.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:4f:21:77:1d:d6:a2:b4:e9:6a:5c:d1:51:78:33:cb:0a:e2:
a1:32:50:ae:4c:5f:ec:34:73:52:1b:02:59:6c:7e:2b:04:26:
c8:01:19:de:bc:6f:58:c2:b5:16:f8:0e:0c:2e:f5:ea:0d:68:
92:a9:94:07:45:d6:6a:48:01:a1:ea:ee:ae:49:dc:b8:7d:b8:
29:88:93:4c:f4:85:40:dd:67:e4:79:ab:d3:d3:db:0c:78:66:
21:a8:20:f0:80:73:13:c5:87:64:9e:d8:33:ad:4c:2a:88:64:
bc:3b:17:bb:3a:fa:f0:b6:0f:8a:2d:8c:b8:39:8f:29:17:fb:
ba:45:b0:52:c8:34:20:b4:bc:52:b2:14:11:58:29:91:32:40:
c6:5b:9d:b4:e0:06:2c:e2:01:54:bf:89:96:05:86:85:ac:57:
65:89:9e:8a:62:35:8a:58:a1:65:ce:c1:ff:bb:da:66:1a:88:
96:47:1d:d4:09:10:76:62:a0:c3:b3:ab:f9:fb:9f:af:69:5b:
b6:87:5e:93:08:18:fd:c6:a1:52:eb:f6:82:b6:7a:e6:91:12:
57:52:55:c7:60:a0:e3:05:a1:ce:71:00:c0:4f:0c:77:b7:c8:
4a:5a:68:a4:e0:e2:fc:ca:64:8c:4d:4f:08:82:e5:5e:27:64:
e9:de:40:4b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYsKrEXtY18OK2uS37/MMjRRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMxMDA3MTUwNTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTY0NWVlYmIyZjZjYjFlNTE1MWFmZGE5ZDJhZWY4YTBjMTNlODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyGxkZefsREZ4nq5T0xyh1oIN2ZH
wARW2+mO2IBI+yvlFGRR8hv6o0eMDC57MooNIEbZvmnj4y+no3BvGHqfZ9Ty4t5/
AsoZ5kwEAVsS/V6n7N1I941lEsclSOFhPS/jd4nUyFa080YuBrxszsL/SkNcHDON
MfWGE/BlP3V0n7d7d6Goe2fyJExH/3Aipy4WwRKdbUR5XfiiSWL9wZS094hMjNsv
CaXyjfyNVUAms7kE01upVMYjX6sukO2NIfo0Mt8NzC4iFMDMt+m8xtEXxsICXLe7
Uw5+vDDVug5qvOoUBb9OwPDg23+s99eMSnVhHY59nI8CjhN+DgeJXIYwjwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPVkXuuy9sseUVGv2p0q74oME+hrMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvOVdSZTY3TDJ5eDVSVWFfYW5TcnZpZ3dUNkdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABf0kAwQA
LQi6AwQAVdBoMA0GCSqGSIb3DQEBCwUAA4IBAQBuTyF3HdaitOlqXNFReDPLCuKh
MlCuTF/sNHNSGwJZbH4rBCbIARnevG9YwrUW+A4MLvXqDWiSqZQHRdZqSAGh6u6u
Sdy4fbgpiJNM9IVA3WfkeavT09sMeGYhqCDwgHMTxYdkntgzrUwqiGS8Oxe7Ovrw
tg+KLYy4OY8pF/u6RbBSyDQgtLxSshQRWCmRMkDGW5204AYs4gFUv4mWBYaFrFdl
iZ6KYjWKWKFlzsH/u9pmGoiWRx3UCRB2YqDDs6v5+5+vaVu2h16TCBj9xqFS6/aC
tnrmkRJXUlXHYKDjBaHOcQDATwx3t8hKWmik4OL8ymSMTU8IguVeJ2Tp3kBL
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:03 2024 by rpki-client on console-ams.rpki-client.org