Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/PAxG1maSQO0At3jxJVHpXMYrEbc.roa
File: PAxG1maSQO0At3jxJVHpXMYrEbc.roa (raw, json)
Hash identifier: hMs1eTfmnphd5LWYCSQKLtA4+AlT2c0yOuoV/rWkh5g=
Subject key identifier: 3C:0C:46:D6:66:92:40:ED:00:B7:78:F1:25:51:E9:5C:C6:2B:11:B7
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0186267384384C2D2AA4C179061EF22849BD
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/PAxG1maSQO0At3jxJVHpXMYrEbc.roa
Signing time: Mon 06 Feb 2023 11:19:10 +0000
ROA not before: Mon 06 Feb 2023 11:19:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 193.109.85.0/24 maxlen: 24
5.180.138.0/24 maxlen: 24
84.252.72.0/24 maxlen: 24
2a0f:7b81::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:73:84:38:4c:2d:2a:a4:c1:79:06:1e:f2:28:49:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Feb 6 11:19:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c0c46d6669240ed00b778f12551e95cc62b11b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:68:f3:8d:cf:13:a9:db:6a:aa:52:32:ab:42:
9c:1c:85:7b:43:7a:0b:e7:27:5c:a9:7b:69:71:c8:
77:71:d7:3b:27:a8:2d:89:44:d5:a0:6c:5e:1b:a7:
e6:75:21:71:2b:90:be:a4:d4:a6:ae:9a:b8:5c:73:
f2:f0:6b:aa:60:38:64:87:f5:62:22:3f:ee:6f:3f:
f8:77:57:61:1b:dd:8a:9f:13:07:56:da:15:3e:54:
28:40:54:13:b3:d0:bd:02:92:5a:80:b7:9d:e3:4d:
70:45:82:5a:ca:dc:b8:33:48:5f:4f:7e:d8:96:ef:
78:03:a0:51:ff:4c:f2:07:94:6d:1b:e1:c4:75:85:
b1:ad:4f:9b:8e:64:a2:ff:34:4b:4e:32:14:4c:c9:
91:6b:45:ca:71:ab:65:6a:be:1b:3e:ac:72:dd:fd:
da:9e:d3:11:28:92:38:83:0e:e6:09:b9:c1:83:88:
5c:7d:6a:c0:d3:19:86:ff:e5:28:00:ee:2d:1b:03:
2f:f6:0a:a3:d0:ee:ce:e3:8d:90:8f:52:5b:50:6f:
87:3d:e4:aa:a9:7a:81:66:1b:aa:03:74:27:47:0f:
fd:f8:d6:0e:b7:b5:cd:1f:ed:5a:66:1f:99:c0:92:
5b:0f:8e:ad:18:42:69:73:53:02:5f:95:46:00:1d:
a0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:0C:46:D6:66:92:40:ED:00:B7:78:F1:25:51:E9:5C:C6:2B:11:B7
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/PAxG1maSQO0At3jxJVHpXMYrEbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.138.0/24
84.252.72.0/24
193.109.85.0/24
IPv6:
2a0f:7b81::/48
Signature Algorithm: sha256WithRSAEncryption
50:f8:3c:e9:61:0a:b0:36:c8:75:44:cd:4a:a4:cd:2c:9c:d7:
54:0e:6d:f2:57:50:2f:8a:43:19:cc:cc:df:cb:61:68:67:25:
4a:2e:f2:a6:d5:8c:f4:69:c1:b3:7c:7b:b7:51:20:6d:7c:54:
76:5a:80:e7:02:fb:b1:02:22:19:51:95:4d:a9:f7:a2:d0:64:
c3:7c:3a:dd:0a:91:46:13:79:37:08:11:91:47:55:e7:9b:10:
81:55:c7:c3:36:52:02:4f:92:ec:49:1f:8a:17:55:94:af:54:
17:eb:4f:e6:2d:6a:bf:2a:fe:20:33:b3:67:57:bd:4d:89:90:
20:7b:f4:cb:18:3f:cb:90:11:e7:da:f5:ac:af:65:1b:c5:c8:
21:e6:11:16:dc:fa:37:f5:30:26:36:06:4d:53:8b:90:7e:b4:
13:82:d5:27:be:6d:04:e0:23:43:bd:b8:de:ec:91:56:bc:9f:
ff:d2:0a:1d:11:6e:e9:2c:50:a9:ce:ec:28:4e:9f:ea:14:72:
34:15:fd:7c:00:c0:5f:6f:73:fb:51:61:2d:ba:69:45:42:d7:
a2:da:94:67:15:9f:cd:fc:f0:39:0f:9a:33:69:f5:4a:e7:ce:
79:45:14:e7:dd:82:8c:64:d0:f5:29:9f:63:cf:45:be:44:b6:
85:93:b6:e0
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYYmc4Q4TC0qpMF5Bh7yKEm9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjMwMjA2MTExOTEwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzBjNDZkNjY2OTI0MGVkMDBiNzc4ZjEyNTUxZTk1Y2M2MmIxMWI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2jzjc8TqdtqqlIyq0KcHIV7Q3oL
5ydcqXtpcch3cdc7J6gtiUTVoGxeG6fmdSFxK5C+pNSmrpq4XHPy8GuqYDhkh/Vi
Ij/ubz/4d1dhG92KnxMHVtoVPlQoQFQTs9C9ApJagLed401wRYJayty4M0hfT37Y
lu94A6BR/0zyB5RtG+HEdYWxrU+bjmSi/zRLTjIUTMmRa0XKcatlar4bPqxy3f3a
ntMRKJI4gw7mCbnBg4hcfWrA0xmG/+UoAO4tGwMv9gqj0O7O442Qj1JbUG+HPeSq
qXqBZhuqA3QnRw/9+NYOt7XNH+1aZh+ZwJJbD46tGEJpc1MCX5VGAB2g8wIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFDwMRtZmkkDtALd48SVR6VzGKxG3MB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvUEF4RzFtYVNRTzBBdDNqeEpWSHBYTVlyRWJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQABbSKAwQA
VPxIAwQAwW1VMA8EAgACMAkDBwAqD3uBAAAwDQYJKoZIhvcNAQELBQADggEBAFD4
POlhCrA2yHVEzUqkzSyc11QObfJXUC+KQxnMzN/LYWhnJUou8qbVjPRpwbN8e7dR
IG18VHZagOcC+7ECIhlRlU2p96LQZMN8Ot0KkUYTeTcIEZFHVeebEIFVx8M2UgJP
kuxJH4oXVZSvVBfrT+Ytar8q/iAzs2dXvU2JkCB79MsYP8uQEefa9ayvZRvFyCHm
ERbc+jf1MCY2Bk1Ti5B+tBOC1Se+bQTgI0O9uN7skVa8n//SCh0RbuksUKnO7ChO
n+oUcjQV/XwAwF9vc/tRYS26aUVC16LalGcVn8388DkPmjNp9UrnznlFFOfdgoxk
0PUpn2PPRb5EtoWTtuA=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:29 2023 by rpki-client on console-ams.rpki-client.org