Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/eTvDEAaVdL5JITde7G077_uxM5Q.roa
File: eTvDEAaVdL5JITde7G077_uxM5Q.roa (raw, json)
Hash identifier: YU+ojGNni3ou7cohaPfjRmFK+vJ5njHhpJZAwLyh2jM=
Subject key identifier: 79:3B:C3:10:06:95:74:BE:49:21:37:5E:EC:6D:3B:EF:FB:B1:33:94
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018571155759C74EA4D334E2DAD10AE0C71D
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/eTvDEAaVdL5JITde7G077_uxM5Q.roa
Signing time: Mon 02 Jan 2023 06:05:02 +0000
ROA not before: Mon 02 Jan 2023 06:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201036
IP address blocks: 94.42.102.0/24 maxlen: 24
94.42.176.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:57:59:c7:4e:a4:d3:34:e2:da:d1:0a:e0:c7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 2 06:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=793bc310069574be4921375eec6d3beffbb13394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e1:26:ea:93:35:22:35:f0:80:28:eb:67:dd:
c1:cf:7e:62:92:58:78:52:12:38:48:f8:bd:04:d0:
1f:42:c2:34:46:5a:73:71:d5:8b:4a:ec:26:6d:f4:
6b:28:22:b2:4b:28:69:1a:81:44:69:48:5e:96:12:
11:5d:ba:32:95:ec:19:63:64:55:2f:ef:12:a9:b3:
b0:e3:72:5e:8b:36:24:58:d0:1b:56:ff:49:4c:64:
85:8d:9f:51:db:b6:3b:aa:f3:6a:ed:67:97:ce:7b:
67:80:37:e4:fc:4e:66:49:41:8f:13:1d:fd:92:5d:
71:d0:8e:0d:57:4f:41:c1:55:ac:2d:59:96:2c:93:
83:6f:15:90:fa:f7:41:15:93:7f:45:18:e3:43:92:
24:47:d1:92:e5:06:00:55:84:17:2b:0b:79:3e:43:
c3:84:49:37:30:1a:9d:5a:87:b1:d4:b6:2f:37:b3:
51:2b:42:c9:8d:10:d3:42:2a:4b:db:a4:54:1d:99:
bc:1b:91:82:be:50:7e:c9:0e:53:14:95:74:c5:6e:
9d:8f:83:5c:eb:df:56:9d:36:4c:94:f9:a7:b5:aa:
71:a8:57:86:4e:8a:48:28:ac:58:78:a7:9b:95:ea:
a7:5b:8b:77:7d:d6:b4:a9:37:ef:81:00:d6:e4:50:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3B:C3:10:06:95:74:BE:49:21:37:5E:EC:6D:3B:EF:FB:B1:33:94
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/eTvDEAaVdL5JITde7G077_uxM5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.42.102.0/24
94.42.176.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:35:4d:13:84:3c:8d:a1:87:35:7d:98:ba:6e:3c:9e:17:5a:
05:47:c1:94:25:43:d2:f8:17:ca:2f:f8:12:00:15:f1:bc:ac:
23:53:01:af:bd:24:e6:31:ee:61:57:06:d9:9d:de:6c:c0:78:
07:cc:fe:de:7b:96:ed:08:d1:3b:78:02:a3:e5:ab:9a:1e:10:
1a:be:eb:2c:b6:43:ab:55:3b:39:4f:85:f6:6a:81:83:f5:9d:
c8:0a:cd:4b:69:0b:15:10:2d:33:78:68:a4:19:10:10:51:42:
16:e4:b8:d2:b7:65:2f:15:e3:f1:af:19:c9:25:94:27:09:a8:
9e:51:68:9f:6e:92:b1:2a:0e:4c:56:5a:38:8c:c8:91:d0:70:
83:67:9b:11:5c:b5:3e:4b:b4:0f:9c:44:a1:49:f8:e4:4b:46:
61:21:0e:03:96:28:a6:ab:db:61:77:25:c8:a1:7b:4a:78:36:
d6:05:e6:e5:30:8b:bf:89:22:45:c2:ed:6b:30:b3:39:0e:d6:
9c:d1:a0:d0:14:5a:b6:15:86:39:52:a2:e7:71:3c:a9:83:6a:
20:8e:9d:58:f7:44:36:56:97:84:4b:06:9f:86:e6:0c:2b:7e:
45:56:c3:bd:82:19:20:9f:74:13:ec:e7:e3:0b:dd:dc:4b:88:
d6:8f:3e:ea
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVxFVdZx06k0zTi2tEK4McdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj
ZWY5MzMwHhcNMjMwMTAyMDYwNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTNiYzMxMDA2OTU3NGJlNDkyMTM3NWVlYzZkM2JlZmZiYjEzMzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+Em6pM1IjXwgCjrZ93Bz35iklh4
UhI4SPi9BNAfQsI0RlpzcdWLSuwmbfRrKCKySyhpGoFEaUhelhIRXboylewZY2RV
L+8SqbOw43JeizYkWNAbVv9JTGSFjZ9R27Y7qvNq7WeXzntngDfk/E5mSUGPEx39
kl1x0I4NV09BwVWsLVmWLJODbxWQ+vdBFZN/RRjjQ5IkR9GS5QYAVYQXKwt5PkPD
hEk3MBqdWoex1LYvN7NRK0LJjRDTQipL26RUHZm8G5GCvlB+yQ5TFJV0xW6dj4Nc
699WnTZMlPmntapxqFeGTopIKKxYeKebleqnW4t3fda0qTfvgQDW5FAtNwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHk7wxAGlXS+SSE3XuxtO+/7sTOUMB8GA1UdIwQY
MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt
OTFlMzE4NGJiMGFiLzEvZVR2REVBYVZkTDVKSVRkZTdHMDc3X3V4TTVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi
LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXipmAwQC
XiqwMA0GCSqGSIb3DQEBCwUAA4IBAQBeNU0ThDyNoYc1fZi6bjyeF1oFR8GUJUPS
+BfKL/gSABXxvKwjUwGvvSTmMe5hVwbZnd5swHgHzP7ee5btCNE7eAKj5auaHhAa
vusstkOrVTs5T4X2aoGD9Z3ICs1LaQsVEC0zeGikGRAQUUIW5LjSt2UvFePxrxnJ
JZQnCaieUWifbpKxKg5MVlo4jMiR0HCDZ5sRXLU+S7QPnEShSfjkS0ZhIQ4Dliim
q9thdyXIoXtKeDbWBeblMIu/iSJFwu1rMLM5Dtac0aDQFFq2FYY5UqLncTypg2og
jp1Y90Q2VpeESwafhuYMK35FVsO9ghkgn3QT7OfjC93cS4jWjz7q
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:50:29 2024 by rpki-client on console-fra.rpki-client.org