Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/aCNs1lj3y1p0ByhUtt4CQf7PiYQ.roa
File: aCNs1lj3y1p0ByhUtt4CQf7PiYQ.roa (raw, json)
Hash identifier: kxQjWZm7d8Q92qgdrH+0dB8k8YX4fqrQ+en6IGcW2o0=
Subject key identifier: 68:23:6C:D6:58:F7:CB:5A:74:07:28:54:B6:DE:02:41:FE:CF:89:84
Certificate issuer: /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial: 01856F42A9A661AA56F89AD6E1E036AB2F8E
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/aCNs1lj3y1p0ByhUtt4CQf7PiYQ.roa
Signing time: Sun 01 Jan 2023 21:35:17 +0000
ROA not before: Sun 01 Jan 2023 21:35:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13238
IP address blocks: 5.45.192.0/18 maxlen: 24
178.154.128.0/19 maxlen: 24
84.252.160.0/19 maxlen: 24
37.9.64.0/18 maxlen: 24
90.156.176.0/20 maxlen: 24
141.8.128.0/18 maxlen: 24
93.158.128.0/18 maxlen: 24
37.140.128.0/18 maxlen: 24
95.108.128.0/17 maxlen: 24
185.32.187.0/24 maxlen: 24
87.250.224.0/19 maxlen: 24
77.88.0.0/18 maxlen: 24
213.180.192.0/19 maxlen: 24
178.154.160.0/19 maxlen: 24
5.255.192.0/18 maxlen: 24
2a02:6b8::/29 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:a9:a6:61:aa:56:f8:9a:d6:e1:e0:36:ab:2f:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Validity
Not Before: Jan 1 21:35:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=68236cd658f7cb5a74072854b6de0241fecf8984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:92:f9:bb:ed:0a:7b:64:8f:1d:fc:b6:d3:
8f:1c:0e:45:fe:48:c7:d9:b0:ba:f5:c1:9d:6c:08:
7d:6a:f5:cd:92:01:f4:7b:84:7d:ec:a7:45:03:43:
4b:e7:59:6a:33:b3:76:27:38:c5:39:36:b8:31:4f:
8f:4a:08:32:22:f2:86:32:51:56:5d:4b:f8:7b:2e:
55:0c:61:3a:84:c1:b7:52:9b:83:4a:15:9b:ba:59:
ba:07:c2:08:05:80:39:7a:7a:33:b7:d1:b9:26:06:
c2:63:fc:09:d3:84:47:78:c2:2e:25:02:53:b8:b2:
12:c2:05:4a:72:f2:2f:ae:b7:0c:fd:3a:e2:d0:cd:
b6:0c:48:e6:35:05:a3:7c:2e:d6:24:99:ee:4e:fa:
64:0c:11:b2:eb:51:a3:5d:33:6a:d8:8b:94:90:b4:
a8:42:6b:4d:80:49:15:79:c2:df:42:ba:7e:8e:4f:
f7:98:54:fe:3d:8a:88:87:80:cd:79:2c:8a:1f:ca:
dc:b8:a2:8a:e8:01:ad:62:66:78:d4:39:72:df:af:
df:14:fa:f3:7a:1f:d8:de:cf:7a:b0:ad:9d:73:bf:
75:42:d1:e2:0b:55:62:1f:3f:84:5d:39:30:22:1e:
e6:62:ed:30:4d:98:b8:c3:03:99:b2:98:40:84:ab:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:23:6C:D6:58:F7:CB:5A:74:07:28:54:B6:DE:02:41:FE:CF:89:84
X509v3 Authority Key Identifier:
keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/aCNs1lj3y1p0ByhUtt4CQf7PiYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.192.0/18
5.255.192.0/18
37.9.64.0/18
37.140.128.0/18
77.88.0.0/18
84.252.160.0/19
87.250.224.0/19
90.156.176.0/20
93.158.128.0/18
95.108.128.0/17
141.8.128.0/18
178.154.128.0/18
185.32.187.0/24
213.180.192.0/19
IPv6:
2a02:6b8::/29
Signature Algorithm: sha256WithRSAEncryption
94:61:9d:02:c9:40:6c:2f:e1:11:6f:47:65:8a:5d:96:c2:1d:
b6:72:d0:f0:12:42:e0:0c:1d:38:40:6c:ac:04:72:38:3c:c2:
c6:cb:fd:5d:73:b9:92:d1:e1:ff:06:23:8c:1c:7e:9d:fc:3a:
a3:a2:e7:52:03:dc:eb:a5:3c:4e:2c:51:38:a8:8e:54:51:d4:
b9:bd:0b:67:c9:32:92:8c:b1:da:98:89:16:06:d7:79:ee:95:
fd:bf:97:6e:0a:53:51:6f:04:e4:93:c3:12:e0:85:2c:dd:d3:
ac:84:2b:34:c5:e3:25:8b:37:c4:8d:cf:42:b6:31:7b:90:f7:
bb:d8:dd:c8:86:5b:00:d5:1d:b1:1e:58:2e:d7:fb:95:ed:77:
3c:02:f6:3d:db:d5:b1:2f:a1:4f:be:f0:18:45:d3:d9:bd:42:
0e:96:3d:3b:00:83:71:9c:72:66:38:09:91:59:e7:b1:a4:4b:
43:b5:89:8e:17:bc:2d:8a:42:66:c5:c6:ba:58:28:eb:ec:56:
22:5e:c6:9c:89:9e:a5:c0:a3:15:5e:25:3b:70:b1:82:53:b0:
1f:f7:58:06:d9:a3:2d:49:84:e4:32:5c:1b:d0:35:71:75:df:
f7:9f:c5:26:2f:a9:96:78:7a:16:d9:7a:b8:8a:51:2d:2d:30:
cd:71:d1:3f
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgISAYVvQqmmYapW+JrW4eA2qy+OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkODQ0MDRlNWY4YTRiMTE3YWU0NGU3M2Q1M2M0NGVjZGQ1
NzgzNDIwHhcNMjMwMTAxMjEzNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODIzNmNkNjU4ZjdjYjVhNzQwNzI4NTRiNmRlMDI0MWZlY2Y4OTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3OS+bvtCntkjx38ttOPHA5F/kjH
2bC69cGdbAh9avXNkgH0e4R97KdFA0NL51lqM7N2JzjFOTa4MU+PSggyIvKGMlFW
XUv4ey5VDGE6hMG3UpuDShWbulm6B8IIBYA5enozt9G5JgbCY/wJ04RHeMIuJQJT
uLISwgVKcvIvrrcM/Tri0M22DEjmNQWjfC7WJJnuTvpkDBGy61GjXTNq2IuUkLSo
QmtNgEkVecLfQrp+jk/3mFT+PYqIh4DNeSyKH8rcuKKK6AGtYmZ41Dly36/fFPrz
eh/Y3s96sK2dc791QtHiC1ViHz+EXTkwIh7mYu0wTZi4wwOZsphAhKsTYQIDAQAB
o4ICZjCCAmIwHQYDVR0OBBYEFGgjbNZY98tadAcoVLbeAkH+z4mEMB8GA1UdIwQY
MBaAFI2EQE5fiksReuROc9U8ROzdV4NCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjkt
MmNkOThlZTUzNTY5LzEvYUNOczFsajN5MXAwQnloVXR0NENRZjdQaVlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kNTFmNjQtNWQwNi00ZmMwLWFiNjktMmNkOThlZTUzNTY5
LzEvallSQVRsLUtTeEY2NUU1ejFUeEU3TjFYZzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHwGCCsGAQUFBwEHAQH/BG0wazBaBAIAATBUAwQGBS3AAwQG
Bf/AAwQGJQlAAwQGJYyAAwQGTVgAAwQFVPygAwQFV/rgAwQEWpywAwQGXZ6AAwQH
X2yAAwQGjQiAAwQGspqAAwQAuSC7AwQF1bTAMA0EAgACMAcDBQMqAga4MA0GCSqG
SIb3DQEBCwUAA4IBAQCUYZ0CyUBsL+ERb0dlil2Wwh22ctDwEkLgDB04QGysBHI4
PMLGy/1dc7mS0eH/BiOMHH6d/DqjoudSA9zrpTxOLFE4qI5UUdS5vQtnyTKSjLHa
mIkWBtd57pX9v5duClNRbwTkk8MS4IUs3dOshCs0xeMlizfEjc9CtjF7kPe72N3I
hlsA1R2xHlgu1/uV7Xc8AvY929WxL6FPvvAYRdPZvUIOlj07AINxnHJmOAmRWeex
pEtDtYmOF7wtikJmxca6WCjr7FYiXsaciZ6lwKMVXiU7cLGCU7Af91gG2aMtSYTk
Mlwb0DVxdd/3n8UmL6mWeHoW2Xq4ilEtLTDNcdE/
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:50 2023 by rpki-client on console-ams.rpki-client.org