Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5_PFbV7f1XW_JMInqv6hFMUTNfg.roa
File: 5_PFbV7f1XW_JMInqv6hFMUTNfg.roa (raw, json)
Hash identifier: eB5O6LPtVJ8cVFeCRmuIvTJBn4rZmgGxC94cobQTK/A=
Subject key identifier: E7:F3:C5:6D:5E:DF:D5:75:BF:24:C2:27:AA:FE:A1:14:C5:13:35:F8
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018C6D19F48099295563A74C6B6A273BC83A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5_PFbV7f1XW_JMInqv6hFMUTNfg.roa
Signing time: Fri 15 Dec 2023 10:51:06 +0000
ROA not before: Fri 15 Dec 2023 10:51:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60798
IP address blocks: 37.46.151.0/24 maxlen: 24
84.245.57.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:19:f4:80:99:29:55:63:a7:4c:6b:6a:27:3b:c8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Dec 15 10:51:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7f3c56d5edfd575bf24c227aafea114c51335f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:99:c5:b1:b0:bc:af:17:73:6e:fe:01:67:93:
37:fa:28:3c:ad:ef:7c:e4:be:c6:b3:bc:9a:92:9e:
2c:d5:ef:31:ae:a4:e5:6d:de:97:fd:2e:a1:77:36:
75:99:de:5c:0f:8e:45:12:e2:b5:47:20:f0:07:8b:
33:40:2b:55:56:56:51:23:a5:cd:15:18:04:c1:60:
33:d5:fb:80:be:d2:29:44:2e:ab:55:f7:03:c5:04:
9d:aa:79:8b:f2:fa:3b:18:82:79:0a:70:0a:16:62:
06:d0:0b:70:0a:de:d9:7f:47:9e:d9:e8:0a:ae:59:
10:b0:79:3f:7a:87:b2:65:ad:9d:35:3f:e4:6b:9a:
e3:31:d5:57:68:3c:64:32:8e:e1:aa:c0:1c:81:9d:
34:de:c4:a4:ea:8a:01:06:ed:7a:fe:6a:12:96:b9:
70:be:7c:72:c0:75:0e:94:79:63:c2:b6:c9:a6:78:
0c:f9:3b:0e:d0:4c:27:d1:e6:17:66:05:2e:e1:72:
b6:ff:83:3c:d5:54:17:0c:64:35:b0:de:39:c5:d8:
31:60:01:31:cd:9c:f0:f0:69:c8:4e:ce:6d:b5:e4:
b1:47:c9:51:73:a3:99:53:5a:7d:5d:a1:d2:26:e1:
60:c1:47:c8:85:f7:f1:94:3d:2e:ae:30:e2:39:41:
96:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F3:C5:6D:5E:DF:D5:75:BF:24:C2:27:AA:FE:A1:14:C5:13:35:F8
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5_PFbV7f1XW_JMInqv6hFMUTNfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.151.0/24
84.245.57.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:be:df:16:a3:e0:56:f1:ff:1f:68:0d:42:21:54:11:47:9b:
76:c4:05:8a:be:bf:8f:de:31:84:12:90:85:e9:c1:ed:cc:1f:
35:50:54:de:3d:2d:27:9d:52:ff:48:a3:3a:88:ae:b2:e8:39:
25:d5:04:03:ef:68:43:12:36:6d:0c:05:35:1c:11:41:d1:00:
a2:3d:aa:5b:84:0e:7a:aa:2f:ae:94:83:fb:a7:90:e8:92:5e:
27:d1:64:a3:eb:17:b4:04:ab:4d:36:78:ca:2a:0c:f3:30:dd:
aa:79:dc:f2:19:59:e7:85:08:df:b1:12:74:63:aa:25:31:01:
55:7d:4f:4c:31:34:2d:f8:22:9b:ba:7a:7d:d2:5d:b0:bf:21:
c5:88:ca:ac:1c:25:2a:ad:1f:d9:d3:1f:87:12:78:da:28:5f:
9b:33:b9:de:5e:5c:72:71:7f:df:e7:04:3f:94:2c:7a:95:e5:
b5:b8:58:8f:a6:ff:dc:c4:f4:b9:ad:fc:44:38:6f:b8:6f:2a:
25:50:fa:64:14:a7:32:69:5e:5d:4f:33:fc:08:0a:4e:2c:da:
c8:f8:fd:49:aa:76:d1:c1:c3:33:e2:f6:7d:16:c3:bc:7a:73:
1e:19:40:f7:08:c7:03:b8:1a:a0:57:2c:2c:a0:85:4e:86:29:
ac:24:d0:4d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYxtGfSAmSlVY6dMa2onO8g6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMxMjE1MTA1MTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2YzYzU2ZDVlZGZkNTc1YmYyNGMyMjdhYWZlYTExNGM1MTMzNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJnFsbC8rxdzbv4BZ5M3+ig8re98
5L7Gs7yakp4s1e8xrqTlbd6X/S6hdzZ1md5cD45FEuK1RyDwB4szQCtVVlZRI6XN
FRgEwWAz1fuAvtIpRC6rVfcDxQSdqnmL8vo7GIJ5CnAKFmIG0AtwCt7Zf0ee2egK
rlkQsHk/eoeyZa2dNT/ka5rjMdVXaDxkMo7hqsAcgZ003sSk6ooBBu16/moSlrlw
vnxywHUOlHljwrbJpngM+TsO0Ewn0eYXZgUu4XK2/4M81VQXDGQ1sN45xdgxYAEx
zZzw8GnITs5tteSxR8lRc6OZU1p9XaHSJuFgwUfIhffxlD0urjDiOUGWLwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOfzxW1e39V1vyTCJ6r+oRTFEzX4MB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvNV9QRmJWN2YxWFdfSk1JbnF2NmhGTVVUTmZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJS6XAwQA
VPU5MA0GCSqGSIb3DQEBCwUAA4IBAQCLvt8Wo+BW8f8faA1CIVQRR5t2xAWKvr+P
3jGEEpCF6cHtzB81UFTePS0nnVL/SKM6iK6y6Dkl1QQD72hDEjZtDAU1HBFB0QCi
PapbhA56qi+ulIP7p5Dokl4n0WSj6xe0BKtNNnjKKgzzMN2qedzyGVnnhQjfsRJ0
Y6olMQFVfU9MMTQt+CKbunp90l2wvyHFiMqsHCUqrR/Z0x+HEnjaKF+bM7neXlxy
cX/f5wQ/lCx6leW1uFiPpv/cxPS5rfxEOG+4byolUPpkFKcyaV5dTzP8CApOLNrI
+P1JqnbRwcMz4vZ9FsO8enMeGUD3CMcDuBqgVywsoIVOhimsJNBN
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:03:17 2024 by rpki-client on console-ams.rpki-client.org