Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/R6lLIQIMFtcXjJITDys382SWhko.roa
File: R6lLIQIMFtcXjJITDys382SWhko.roa (raw, json)
Hash identifier: agUytL9kUboh8yKTyJ5ub+FSMfd9OIextOcOgPIExTY=
Subject key identifier: 47:A9:4B:21:02:0C:16:D7:17:8C:92:13:0F:2B:37:F3:64:96:86:4A
Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial: 018708C3900EC82B722161AC4EA6C2AF8C94
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/R6lLIQIMFtcXjJITDys382SWhko.roa
Signing time: Wed 22 Mar 2023 10:00:46 +0000
ROA not before: Wed 22 Mar 2023 10:00:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202025
IP address blocks: 5.8.253.0/24 maxlen: 24
5.8.252.0/24 maxlen: 24
5.8.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:08:c3:90:0e:c8:2b:72:21:61:ac:4e:a6:c2:af:8c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
Validity
Not Before: Mar 22 10:00:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47a94b21020c16d7178c92130f2b37f36496864a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3e:aa:58:cc:8f:d5:51:8c:86:29:a4:ad:c0:
14:74:fa:57:a8:13:74:ea:e1:a2:31:af:d4:52:67:
12:68:61:98:0a:7b:1f:39:73:82:70:07:68:8a:e4:
1f:37:86:8f:7b:f1:be:70:92:c1:24:ae:9e:ce:c4:
7f:69:db:14:17:17:ba:7b:76:2f:35:b3:2b:73:b3:
53:18:83:9e:07:e6:54:ac:55:45:1f:92:4b:67:57:
9f:a1:34:62:74:75:cc:20:f5:46:aa:83:3e:a3:57:
61:1f:fe:a0:df:b2:e8:5b:86:99:27:bc:db:16:51:
76:eb:da:dc:56:93:2f:fb:79:96:b0:e8:4e:41:b4:
02:c4:12:0f:b8:54:a6:73:64:fd:ac:97:a6:15:ad:
6f:74:bf:05:82:7c:de:a7:51:c1:f8:99:67:28:e4:
dc:3d:dc:15:cd:82:97:58:24:6d:29:51:69:61:9c:
3e:df:b0:54:d3:54:43:c4:e9:8b:7a:23:30:de:65:
8d:36:a5:00:28:45:92:80:96:90:5e:1c:65:91:2d:
c4:b1:30:36:47:2f:ae:76:18:2f:53:8e:2c:9a:e6:
d9:69:16:b9:fd:ed:76:75:f4:d1:3e:80:3c:3c:eb:
2f:b7:ce:0a:c5:f6:63:33:09:b7:b3:fa:cf:29:e2:
e5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A9:4B:21:02:0C:16:D7:17:8C:92:13:0F:2B:37:F3:64:96:86:4A
X509v3 Authority Key Identifier:
keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/R6lLIQIMFtcXjJITDys382SWhko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.252.0-5.8.254.255
Signature Algorithm: sha256WithRSAEncryption
36:cf:3f:ee:b0:bd:4c:48:09:21:30:3a:34:f3:01:a2:15:5e:
c5:01:60:da:91:7d:c3:ba:49:32:81:43:7a:51:1b:5d:cc:e6:
a8:4e:f0:fe:36:97:f7:6c:85:18:bb:24:97:62:23:d1:62:67:
ef:6b:94:58:27:b4:99:43:8b:44:dc:e7:13:5d:04:ab:ca:9d:
3a:e6:73:52:3f:0e:b8:4e:82:60:3b:8c:44:e8:ee:25:70:e2:
38:d2:a3:7a:a8:2c:37:ff:bc:5d:99:ac:0a:e1:24:0c:9e:25:
86:ec:83:85:a4:08:fc:19:1d:9f:06:82:2a:0a:5a:1d:98:ef:
35:68:d1:b0:43:07:a1:c5:7b:4d:f1:bc:86:d6:9a:7b:2d:c6:
7e:a9:06:8e:80:8c:2d:ff:1a:5d:c8:d9:64:d9:52:fb:ca:41:
3f:d3:e3:79:ef:e9:85:6a:ec:4b:88:8e:57:5e:7d:7c:1d:04:
2d:46:92:17:d7:31:f4:6e:79:6c:15:8c:8d:e1:54:c0:14:8e:
b4:12:96:2e:cb:71:54:fc:af:ca:55:64:6b:35:b4:70:2c:22:
82:29:0b:cf:43:64:5b:3c:3b:e2:62:6a:c7:d2:99:62:bd:ea:
b8:45:05:f6:68:01:38:aa:b9:e2:6e:d3:08:92:60:5f:57:79:
4b:ac:91:5e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYcIw5AOyCtyIWGsTqbCr4yUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNjQyYjYwN2I5NGExNDNmZjQxYzU1NGM5MTNiZDVhNjUx
ZjhjMDUwHhcNMjMwMzIyMTAwMDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2E5NGIyMTAyMGMxNmQ3MTc4YzkyMTMwZjJiMzdmMzY0OTY4NjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z6qWMyP1VGMhimkrcAUdPpXqBN0
6uGiMa/UUmcSaGGYCnsfOXOCcAdoiuQfN4aPe/G+cJLBJK6ezsR/adsUFxe6e3Yv
NbMrc7NTGIOeB+ZUrFVFH5JLZ1efoTRidHXMIPVGqoM+o1dhH/6g37LoW4aZJ7zb
FlF269rcVpMv+3mWsOhOQbQCxBIPuFSmc2T9rJemFa1vdL8Fgnzep1HB+JlnKOTc
PdwVzYKXWCRtKVFpYZw+37BU01RDxOmLeiMw3mWNNqUAKEWSgJaQXhxlkS3EsTA2
Ry+udhgvU44smubZaRa5/e12dfTRPoA8POsvt84KxfZjMwm3s/rPKeLluQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEepSyECDBbXF4ySEw8rN/NkloZKMB8GA1UdIwQY
MBaAFABkK2B7lKFD/0HFVMkTvVplH4wFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUt
MTliYzdiZGNjYmMxLzEvUjZsTElRSU1GdGNYakpJVER5czM4MlNXaGtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9hYzlhYmEtOTczNS00YjlkLThlYWUtMTliYzdiZGNjYmMx
LzEvQUdRcllIdVVvVVBfUWNWVXlSTzlXbVVmakFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAIFCPwD
BAAFCP4wDQYJKoZIhvcNAQELBQADggEBADbPP+6wvUxICSEwOjTzAaIVXsUBYNqR
fcO6STKBQ3pRG13M5qhO8P42l/dshRi7JJdiI9FiZ+9rlFgntJlDi0Tc5xNdBKvK
nTrmc1I/DrhOgmA7jETo7iVw4jjSo3qoLDf/vF2ZrArhJAyeJYbsg4WkCPwZHZ8G
gioKWh2Y7zVo0bBDB6HFe03xvIbWmnstxn6pBo6AjC3/Gl3I2WTZUvvKQT/T43nv
6YVq7EuIjldefXwdBC1GkhfXMfRueWwVjI3hVMAUjrQSli7LcVT8r8pVZGs1tHAs
IoIpC89DZFs8O+JiasfSmWK96rhFBfZoATiqueJu0wiSYF9XeUuskV4=
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:27 2024 by rpki-client on console-fra.rpki-client.org