Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5de5nKWHlfFK1f6Zm2-E8jFmzqw.roa
File: 5de5nKWHlfFK1f6Zm2-E8jFmzqw.roa (raw, json)
Hash identifier: HwOcFmZgnl5x6NXtl2N9Nl1zrb7cyaQVVqegSo23Tj8=
Subject key identifier: E5:D7:B9:9C:A5:87:95:F1:4A:D5:FE:99:9B:6F:84:F2:31:66:CE:AC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0186568B95E2FAAEB5F16ECE0C3EEB0ECEF2
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5de5nKWHlfFK1f6Zm2-E8jFmzqw.roa
Signing time: Wed 15 Feb 2023 19:27:13 +0000
ROA not before: Wed 15 Feb 2023 19:27:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 194.147.17.0/24 maxlen: 24
45.147.227.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 09:24:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:56:8b:95:e2:fa:ae:b5:f1:6e:ce:0c:3e:eb:0e:ce:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 15 19:27:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5d7b99ca58795f14ad5fe999b6f84f23166ceac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:9c:7e:29:43:b9:f0:c3:b4:c0:8b:4e:9e:2d:
ef:ab:f8:69:c3:a2:14:c7:de:94:3e:89:a7:bd:c1:
f1:ce:06:03:da:89:fc:f6:90:48:d1:f7:b1:a1:b7:
7c:38:92:ed:33:93:67:d3:e9:20:87:ab:aa:d8:a7:
7d:90:e0:2a:b4:f5:64:a3:46:23:06:a7:54:c7:5c:
96:e3:9d:17:b3:4e:ab:0c:68:0d:10:76:b4:04:3b:
c5:4e:49:2b:71:8a:3f:48:f6:c4:65:a4:76:f6:66:
58:40:57:c1:2e:d8:66:f3:ae:1f:b3:bd:b1:af:a3:
2d:fe:cc:23:26:50:7d:f2:c1:72:b5:88:59:1c:0b:
1a:20:5e:50:ed:94:35:59:11:25:4d:97:77:a2:6d:
c2:5c:89:30:90:40:31:0d:86:7a:a7:77:a5:d9:bd:
e4:c5:ab:4b:8e:2b:8b:f3:12:b6:f5:fa:04:63:ed:
d7:47:d9:9c:09:c2:08:11:57:dc:07:5c:cd:b0:17:
d2:05:8f:05:52:bd:a3:19:67:86:19:8b:7b:3d:2d:
45:4b:bf:c5:af:5f:95:cf:c4:00:aa:21:f0:ad:d9:
a7:a4:aa:a1:33:06:d5:0d:67:c2:78:da:49:75:7f:
00:b6:88:f1:89:e1:69:ea:1d:b4:10:76:6b:65:b4:
2f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D7:B9:9C:A5:87:95:F1:4A:D5:FE:99:9B:6F:84:F2:31:66:CE:AC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/5de5nKWHlfFK1f6Zm2-E8jFmzqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.227.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
15:bb:c7:e9:22:2e:6b:68:19:e4:31:fd:91:76:80:26:00:fc:
6d:36:62:6d:f2:28:c4:08:c3:06:88:38:db:e2:45:ed:7b:a6:
ea:9f:cb:0e:e1:f4:99:7a:f2:96:a4:58:1e:a9:c0:1f:54:8d:
66:cb:a6:f7:46:9b:a3:46:f2:8c:13:c5:d1:6d:3a:6c:45:8b:
6b:61:ba:a1:16:2c:e1:50:eb:40:3b:87:3e:11:08:38:58:a4:
05:fc:18:b1:52:69:7e:3f:13:08:c1:3c:f1:4c:3e:9f:d6:3a:
21:4b:5e:6d:58:2b:24:a0:9e:eb:25:17:70:6a:d3:0a:7c:3b:
2e:b6:f8:10:f8:99:f4:bf:63:21:e8:a7:99:b2:a2:61:28:a8:
fb:39:f9:27:5b:f4:d0:0d:8a:96:8e:05:d0:4c:d5:1f:bf:06:
1a:b0:ea:85:e8:e8:2f:f9:2d:fe:6b:32:a8:7a:3f:ea:c0:8c:
a4:24:e7:00:c7:70:46:f0:ed:ee:cf:4d:93:42:6e:f1:17:e3:
7e:bb:f2:d2:48:ca:7d:2e:47:51:65:57:0b:c0:62:c9:4a:11:
56:0f:09:f0:54:88:65:22:e0:a0:a3:10:be:94:f5:32:ab:48:
36:70:51:6d:16:d0:1e:20:6d:1b:4c:c1:70:4a:e9:bd:02:e4:
b2:19:5f:b9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYZWi5Xi+q618W7ODD7rDs7yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwMjE1MTkyNzEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWQ3Yjk5Y2E1ODc5NWYxNGFkNWZlOTk5YjZmODRmMjMxNjZjZWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZx+KUO58MO0wItOni3vq/hpw6IU
x96UPomnvcHxzgYD2on89pBI0fexobd8OJLtM5Nn0+kgh6uq2Kd9kOAqtPVko0Yj
BqdUx1yW450Xs06rDGgNEHa0BDvFTkkrcYo/SPbEZaR29mZYQFfBLthm864fs72x
r6Mt/swjJlB98sFytYhZHAsaIF5Q7ZQ1WRElTZd3om3CXIkwkEAxDYZ6p3el2b3k
xatLjiuL8xK29foEY+3XR9mcCcIIEVfcB1zNsBfSBY8FUr2jGWeGGYt7PS1FS7/F
r1+Vz8QAqiHwrdmnpKqhMwbVDWfCeNpJdX8AtojxieFp6h20EHZrZbQvkwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOXXuZylh5XxStX+mZtvhPIxZs6sMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvNWRlNW5LV0hsZkZLMWY2Wm0yLUU4akZtenF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZPjAwQA
wpMRMA0GCSqGSIb3DQEBCwUAA4IBAQAVu8fpIi5raBnkMf2RdoAmAPxtNmJt8ijE
CMMGiDjb4kXte6bqn8sO4fSZevKWpFgeqcAfVI1my6b3RpujRvKME8XRbTpsRYtr
YbqhFizhUOtAO4c+EQg4WKQF/BixUml+PxMIwTzxTD6f1johS15tWCskoJ7rJRdw
atMKfDsutvgQ+Jn0v2Mh6KeZsqJhKKj7OfknW/TQDYqWjgXQTNUfvwYasOqF6Ogv
+S3+azKoej/qwIykJOcAx3BG8O3uz02TQm7xF+N+u/LSSMp9LkdRZVcLwGLJShFW
DwnwVIhlIuCgoxC+lPUyq0g2cFFtFtAeIG0bTMFwSum9AuSyGV+5
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org