Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/5z_P5tVat7FzaX-NlS-SGvirFF8.roa
File: 5z_P5tVat7FzaX-NlS-SGvirFF8.roa (raw, json)
Hash identifier: t5/5XI+UoC8fPP/GLqiYG+/2HD3Ya2UBFK2+MvHygQM=
Subject key identifier: E7:3F:CF:E6:D5:5A:B7:B1:73:69:7F:8D:95:2F:92:1A:F8:AB:14:5F
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 0186565BF602FF0E522CDD6168D889C5E4C8
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/5z_P5tVat7FzaX-NlS-SGvirFF8.roa
Signing time: Wed 15 Feb 2023 18:35:12 +0000
ROA not before: Wed 15 Feb 2023 18:35:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 185.206.58.0/23 maxlen: 23
31.42.154.0/24 maxlen: 24
185.171.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:56:5b:f6:02:ff:0e:52:2c:dd:61:68:d8:89:c5:e4:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Feb 15 18:35:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e73fcfe6d55ab7b173697f8d952f921af8ab145f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b8:12:2f:00:12:97:b9:94:ae:a8:e2:ef:da:
14:b0:f6:30:7a:8d:2b:e6:39:34:b1:f5:9a:2b:84:
4c:a0:a9:85:ce:e7:0f:f1:27:01:d4:0e:e8:c9:29:
12:ad:ab:76:4c:21:89:33:42:1e:27:4a:0a:b9:16:
9d:c7:70:88:07:14:e2:c5:33:3f:36:1d:9f:d6:68:
e6:ca:47:05:99:b1:9a:b0:27:99:fd:25:83:af:75:
d3:2a:85:a5:13:1a:6a:8f:7c:da:26:de:c4:3b:a5:
0e:c1:a3:9d:a3:ae:3f:f4:0b:b0:6e:a8:63:96:b2:
d8:92:65:88:86:1b:8c:f8:27:38:e0:01:56:62:10:
63:a6:72:87:cb:09:75:c7:5c:23:b7:1d:b5:73:e5:
e0:87:70:ac:8e:c8:d3:b7:3a:b8:31:1a:56:62:52:
16:be:92:25:2c:8f:a1:11:0a:24:64:7c:7f:d0:a0:
ea:32:f0:7b:dc:b6:c6:87:72:ac:ac:83:d6:23:f0:
b0:f9:79:47:6d:b6:e2:ae:a0:51:e7:49:d9:8a:db:
b9:a1:6c:87:81:1b:5b:f5:9f:7d:56:13:a8:75:b7:
87:17:ef:65:7d:2e:84:e2:09:e2:04:98:fb:05:e6:
b1:65:f6:3e:b2:dc:aa:40:b0:c3:83:01:b7:b6:99:
9c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:3F:CF:E6:D5:5A:B7:B1:73:69:7F:8D:95:2F:92:1A:F8:AB:14:5F
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/5z_P5tVat7FzaX-NlS-SGvirFF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.42.154.0/24
185.171.30.0/24
185.206.58.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:93:b2:e5:14:b9:c8:a0:87:b3:99:ce:0e:5f:99:57:2a:f3:
87:f5:fb:eb:42:27:f2:bf:07:4e:89:56:b4:9f:76:ff:4e:a7:
92:d4:f0:0d:41:3b:04:5f:bf:1e:02:73:33:89:b4:ef:a9:16:
58:9a:45:1f:01:e2:21:f4:bb:23:d8:11:d3:eb:73:85:e6:df:
81:97:7d:93:46:24:2f:a6:29:9c:20:3a:09:f8:10:e0:61:d5:
5a:fe:5c:0e:18:5c:fd:57:6b:a8:22:45:61:15:96:96:f7:e5:
a1:52:fc:28:19:3f:ee:a4:34:95:59:ab:96:5f:19:a3:0f:29:
60:89:93:08:e2:68:38:00:27:8f:45:77:1a:bf:31:31:8c:97:
88:6c:44:a3:d2:46:f0:37:66:a4:0a:e9:a0:e0:92:2e:2e:b4:
f1:a5:58:28:04:cf:d9:c3:d9:85:c7:10:22:f4:ba:77:c5:7d:
e1:e6:04:84:c2:9b:34:59:23:6b:e3:52:d8:4e:08:a3:4f:22:
4b:0a:92:27:96:0f:9e:d7:dc:dd:d7:48:f1:4d:8e:2b:5c:c9:
84:88:cf:9d:39:50:7a:a3:85:11:2b:77:ea:af:1a:a2:8a:35:
bc:47:e3:62:dc:cd:45:04:a9:c1:a8:d0:36:f6:60:53:16:11:
9d:61:73:58
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYZWW/YC/w5SLN1haNiJxeTIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTlkMGNkNjU1OTNkOTY5ZThkNDUzODJhMTk0YWFhNzNj
MGZmOGMwHhcNMjMwMjE1MTgzNTEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzNmY2ZlNmQ1NWFiN2IxNzM2OTdmOGQ5NTJmOTIxYWY4YWIxNDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLgSLwASl7mUrqji79oUsPYweo0r
5jk0sfWaK4RMoKmFzucP8ScB1A7oySkSrat2TCGJM0IeJ0oKuRadx3CIBxTixTM/
Nh2f1mjmykcFmbGasCeZ/SWDr3XTKoWlExpqj3zaJt7EO6UOwaOdo64/9Auwbqhj
lrLYkmWIhhuM+Cc44AFWYhBjpnKHywl1x1wjtx21c+Xgh3CsjsjTtzq4MRpWYlIW
vpIlLI+hEQokZHx/0KDqMvB73LbGh3KsrIPWI/Cw+XlHbbbirqBR50nZitu5oWyH
gRtb9Z99VhOodbeHF+9lfS6E4gniBJj7BeaxZfY+styqQLDDgwG3tpmccQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOc/z+bVWrexc2l/jZUvkhr4qxRfMB8GA1UdIwQY
MBaAFOMZ0M1lWT2Wno1FOCoZSqpzwP+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjkt
MjE3Y2Y5Mzg0NWJjLzEvNXpfUDV0VmF0N0Z6YVgtTmxTLVNHdmlyRkY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hZTg2OWMtODEyYy00Y2Q2LWJhZjktMjE3Y2Y5Mzg0NWJj
LzEvNHhuUXpXVlpQWmFlalVVNEtobEtxblBBXzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAHyqaAwQA
uaseAwQBuc46MA0GCSqGSIb3DQEBCwUAA4IBAQCzk7LlFLnIoIezmc4OX5lXKvOH
9fvrQifyvwdOiVa0n3b/TqeS1PANQTsEX78eAnMzibTvqRZYmkUfAeIh9Lsj2BHT
63OF5t+Bl32TRiQvpimcIDoJ+BDgYdVa/lwOGFz9V2uoIkVhFZaW9+WhUvwoGT/u
pDSVWauWXxmjDylgiZMI4mg4ACePRXcavzExjJeIbESj0kbwN2akCumg4JIuLrTx
pVgoBM/Zw9mFxxAi9Lp3xX3h5gSEwps0WSNr41LYTgijTyJLCpInlg+e19zd10jx
TY4rXMmEiM+dOVB6o4URK3fqrxqiijW8R+Ni3M1FBKnBqNA29mBTFhGdYXNY
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:23 2023 by rpki-client on console-ams.rpki-client.org