Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/5NG2Vwmr2pWj0WkbsYCQQx0siLY.roa
File: 5NG2Vwmr2pWj0WkbsYCQQx0siLY.roa (raw, json)
Hash identifier: uBVln8PMw0rZz12XOF5703JYyfN8+MHUu/XL/yP6Vw0=
Subject key identifier: E4:D1:B6:57:09:AB:DA:95:A3:D1:69:1B:B1:80:90:43:1D:2C:88:B6
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01856F5DB7F7B30A39EC5C8730FCBC456900
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/5NG2Vwmr2pWj0WkbsYCQQx0siLY.roa
Signing time: Sun 01 Jan 2023 22:04:51 +0000
ROA not before: Sun 01 Jan 2023 22:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51469
IP address blocks: 81.12.32.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:b7:f7:b3:0a:39:ec:5c:87:30:fc:bc:45:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Jan 1 22:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4d1b65709abda95a3d1691bb18090431d2c88b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:92:58:97:e6:c5:36:aa:1b:03:01:8e:ab:25:
3c:2c:22:08:bd:17:bd:05:97:cc:40:ab:1b:27:25:
fc:e3:85:7c:b0:fd:58:86:41:b0:5a:8a:64:2c:9a:
e2:71:28:5b:08:da:94:c8:80:cc:96:d2:8e:e9:e2:
d3:ca:80:d2:2d:8f:34:5d:93:28:d7:dc:8b:0a:73:
bf:a1:51:e9:c2:56:5b:65:9a:01:ec:c0:8e:b4:4c:
63:98:58:0c:83:dc:22:29:75:77:70:59:8e:17:40:
f2:98:2a:24:c6:c1:24:3f:de:56:0f:46:67:34:1c:
60:cc:e7:8a:28:b0:a6:09:44:01:ab:dc:89:0a:e6:
2f:e7:38:1d:52:b0:14:15:86:a3:00:10:cb:e7:98:
3b:dd:45:83:86:b4:b6:68:23:60:f1:10:02:7b:3b:
0c:95:52:e1:12:aa:a2:12:87:3a:4f:e8:39:81:f4:
46:de:9e:1e:24:4a:86:5c:fd:eb:ab:66:27:59:90:
3e:55:27:79:cb:80:16:48:4e:da:0f:12:b4:eb:f7:
35:0b:2e:93:47:4b:22:e2:2b:40:aa:71:c1:1d:81:
86:6d:18:1f:ff:01:47:37:78:c0:74:17:e1:52:9e:
3e:48:1e:14:1a:5e:d8:0a:cf:29:8f:98:65:f9:77:
d2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D1:B6:57:09:AB:DA:95:A3:D1:69:1B:B1:80:90:43:1D:2C:88:B6
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/5NG2Vwmr2pWj0WkbsYCQQx0siLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.12.32.0/22
Signature Algorithm: sha256WithRSAEncryption
62:a1:4c:18:99:d2:7c:82:61:0a:47:7c:29:76:e1:f0:20:9c:
c1:e2:d3:d8:6d:a9:70:a1:90:a0:cd:e5:e0:73:ee:ea:75:58:
f3:62:68:1c:19:c0:1b:84:41:fc:ff:fd:62:12:db:5c:19:f8:
46:d1:b7:3a:f6:95:15:a2:5f:e5:07:ab:71:5f:02:5f:a7:e8:
1f:87:7c:e9:dd:7a:9e:db:1c:67:19:2d:40:79:6f:ec:36:0d:
e1:7c:6d:2b:b9:e6:23:f2:3c:c4:9c:06:e7:4b:54:74:fa:e0:
e3:0d:5b:d3:6b:a9:38:45:ea:ef:66:a3:35:d5:78:fb:3b:cb:
e0:52:1f:f4:e1:fb:ec:1d:f1:0b:a8:dd:f4:d2:6c:d1:00:47:
9b:48:49:e0:98:06:fb:3a:7a:65:e2:80:b8:07:3e:ef:77:b0:
38:75:13:9a:29:32:5d:f1:70:02:74:75:81:31:96:a9:28:52:
8e:f2:eb:8a:3e:db:85:67:eb:ea:c7:07:c6:2a:ee:2c:75:cb:
b8:46:7f:cb:dc:86:43:70:24:cc:64:89:6e:bd:05:3e:e9:8f:
66:18:01:1a:6b:4d:0d:b3:1a:4a:67:c5:25:e2:0f:f1:0b:06:
e5:be:1b:c1:86:e6:2b:df:c4:1f:b1:b0:bb:b0:14:00:bb:b2:
89:91:dd:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXbf3swo57FyHMPy8RWkAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzc1ZDk0NzFiODVkOTYzZmVmNmQyODM1OTBlMmQ5NDJk
ZDVjMjEwHhcNMjMwMTAxMjIwNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNGQxYjY1NzA5YWJkYTk1YTNkMTY5MWJiMTgwOTA0MzFkMmM4OGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5JYl+bFNqobAwGOqyU8LCIIvRe9
BZfMQKsbJyX844V8sP1YhkGwWopkLJricShbCNqUyIDMltKO6eLTyoDSLY80XZMo
19yLCnO/oVHpwlZbZZoB7MCOtExjmFgMg9wiKXV3cFmOF0DymCokxsEkP95WD0Zn
NBxgzOeKKLCmCUQBq9yJCuYv5zgdUrAUFYajABDL55g73UWDhrS2aCNg8RACezsM
lVLhEqqiEoc6T+g5gfRG3p4eJEqGXP3rq2YnWZA+VSd5y4AWSE7aDxK06/c1Cy6T
R0si4itAqnHBHYGGbRgf/wFHN3jAdBfhUp4+SB4UGl7YCs8pj5hl+XfSvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOTRtlcJq9qVo9FpG7GAkEMdLIi2MB8GA1UdIwQY
MBaAFAB3XZRxuF2WP+9tKDWQ4tlC3VwhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQt
NzZiMzNlNGNlODIxLzEvNU5HMlZ3bXIycFdqMFdrYnNZQ1FReDBzaUxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi82Mzc2MGMtZTIxYi00YmFmLWE5YTQtNzZiMzNlNGNlODIx
LzEvQUhkZGxIRzRYWllfNzIwb05aRGkyVUxkWENFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCUQwgMA0G
CSqGSIb3DQEBCwUAA4IBAQBioUwYmdJ8gmEKR3wpduHwIJzB4tPYbalwoZCgzeXg
c+7qdVjzYmgcGcAbhEH8//1iEttcGfhG0bc69pUVol/lB6txXwJfp+gfh3zp3Xqe
2xxnGS1AeW/sNg3hfG0rueYj8jzEnAbnS1R0+uDjDVvTa6k4RervZqM11Xj7O8vg
Uh/04fvsHfELqN300mzRAEebSEngmAb7Onpl4oC4Bz7vd7A4dROaKTJd8XACdHWB
MZapKFKO8uuKPtuFZ+vqxwfGKu4sdcu4Rn/L3IZDcCTMZIluvQU+6Y9mGAEaa00N
sxpKZ8Ul4g/xCwblvhvBhuYr38QfsbC7sBQAu7KJkd2O
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:35 2024 by rpki-client on console-fra.rpki-client.org