Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3c5ECIVbMRlGIFxCfl-RomNm2ik.roa
File: 3c5ECIVbMRlGIFxCfl-RomNm2ik.roa (raw, json)
Hash identifier: 73EQfeMmUGKH65OqyxgqxCjrZdmb8xI46w5rkCdozzE=
Subject key identifier: DD:CE:44:08:85:5B:31:19:46:20:5C:42:7E:5F:91:A2:63:66:DA:29
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C53E456BCA9D618362302CDBA9426C6
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3c5ECIVbMRlGIFxCfl-RomNm2ik.roa
Signing time: Sun 01 Jan 2023 07:55:15 +0000
ROA not before: Sun 01 Jan 2023 07:55:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 5.183.207.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:e4:56:bc:a9:d6:18:36:23:02:cd:ba:94:26:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddce4408855b311946205c427e5f91a26366da29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:ee:05:4b:ea:3a:bb:99:4e:a2:cd:42:74:
59:a1:58:de:e9:aa:2f:f9:b2:ab:e6:6c:b5:05:9c:
1b:4c:59:53:ed:3b:72:87:15:f3:19:73:1f:4d:a2:
92:73:6d:cc:6c:dd:cc:ff:63:08:07:84:43:e4:0b:
19:00:84:e6:b9:85:88:d8:db:29:c5:c7:fc:30:ea:
cd:78:59:49:e2:3a:e9:06:45:57:14:37:a1:2b:0b:
98:92:eb:93:88:87:6c:41:ed:b2:3c:c5:51:c8:86:
e8:a7:8d:e9:cc:12:8f:42:ee:26:ae:34:10:76:18:
38:09:b0:49:17:aa:6d:62:1b:b1:4b:a3:9e:bf:03:
e3:53:86:90:1a:a9:70:bb:7c:2e:78:1c:6c:b6:61:
1a:21:6c:c3:ba:0f:1d:24:43:13:70:b8:79:f4:6b:
c8:19:a6:e6:b5:6e:9c:69:96:7d:b7:8f:db:26:9e:
ff:77:4f:8f:2d:81:a6:37:7b:4b:75:91:83:38:86:
1e:8b:01:d2:2e:da:20:84:b2:b1:e9:ea:22:56:04:
15:07:99:a8:b2:49:31:61:0e:15:a7:30:38:39:2c:
47:a7:46:ce:2c:b0:b4:7f:97:d2:60:38:79:d8:c5:
c3:86:93:ab:22:66:27:23:22:1d:0a:18:03:e5:3c:
76:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CE:44:08:85:5B:31:19:46:20:5C:42:7E:5F:91:A2:63:66:DA:29
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/3c5ECIVbMRlGIFxCfl-RomNm2ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.207.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:ab:31:1f:7b:4b:16:b5:c4:1d:45:cc:36:a2:7a:ae:3e:4d:
d1:10:5a:0a:6e:ce:4e:1f:c5:69:9a:8c:7e:77:1e:3d:9e:d8:
53:28:72:73:bf:38:7c:46:11:c4:e8:ef:67:20:d5:7a:3d:1f:
39:72:13:90:88:5e:b2:29:27:d0:64:f8:89:59:8b:92:16:77:
b1:54:c3:ab:2c:19:a9:f5:c2:53:85:1d:a5:2d:94:4b:bd:45:
3d:46:d0:8c:93:12:d7:bf:65:c9:26:55:ac:9f:94:fd:dc:f7:
62:20:da:79:aa:32:7f:97:c9:f2:34:81:c9:2f:33:f9:74:19:
3e:23:7a:17:4b:2a:66:01:ca:59:02:2c:67:91:f3:58:5d:ac:
ef:51:bb:8a:94:5e:dc:5f:48:fd:22:38:76:3b:1a:4f:9d:6f:
57:f7:b4:c8:f8:d3:92:aa:3d:a3:b4:71:ca:d6:1a:99:e1:5f:
d9:e5:05:43:37:02:b9:64:b5:fd:55:a5:74:f7:3d:6d:ed:f4:
09:63:df:bc:62:fa:fb:48:92:ba:9a:ef:e9:cd:9d:9e:5c:8b:
93:a9:05:7a:40:b2:f5:7a:1c:b8:95:4b:ce:9d:b0:4a:c0:5a:
d1:70:71:ec:1a:77:27:5b:a6:32:93:d0:a4:18:ce:bd:0f:79:
19:a8:b0:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsU+RWvKnWGDYjAs26lCbGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjMwMTAxMDc1NTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGNlNDQwODg1NWIzMTE5NDYyMDVjNDI3ZTVmOTFhMjYzNjZkYTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg/uBUvqOruZTqLNQnRZoVje6aov
+bKr5my1BZwbTFlT7TtyhxXzGXMfTaKSc23MbN3M/2MIB4RD5AsZAITmuYWI2Nsp
xcf8MOrNeFlJ4jrpBkVXFDehKwuYkuuTiIdsQe2yPMVRyIbop43pzBKPQu4mrjQQ
dhg4CbBJF6ptYhuxS6OevwPjU4aQGqlwu3wueBxstmEaIWzDug8dJEMTcLh59GvI
GabmtW6caZZ9t4/bJp7/d0+PLYGmN3tLdZGDOIYeiwHSLtoghLKx6eoiVgQVB5mo
skkxYQ4VpzA4OSxHp0bOLLC0f5fSYDh52MXDhpOrImYnIyIdChgD5Tx26wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN3ORAiFWzEZRiBcQn5fkaJjZtopMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvM2M1RUNJVmJNUmxHSUZ4Q2ZsLVJvbU5tMmlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbfPMA0G
CSqGSIb3DQEBCwUAA4IBAQArqzEfe0sWtcQdRcw2onquPk3REFoKbs5OH8Vpmox+
dx49nthTKHJzvzh8RhHE6O9nINV6PR85chOQiF6yKSfQZPiJWYuSFnexVMOrLBmp
9cJThR2lLZRLvUU9RtCMkxLXv2XJJlWsn5T93PdiINp5qjJ/l8nyNIHJLzP5dBk+
I3oXSypmAcpZAixnkfNYXazvUbuKlF7cX0j9Ijh2OxpPnW9X97TI+NOSqj2jtHHK
1hqZ4V/Z5QVDNwK5ZLX9VaV09z1t7fQJY9+8Yvr7SJK6mu/pzZ2eXIuTqQV6QLL1
ehy4lUvOnbBKwFrRcHHsGncnW6Yyk9CkGM69D3kZqLAZ
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:00 2024 by rpki-client on console-ams.rpki-client.org