Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/B5VZsO5FUY0kYyUBXbMGNJqd0aE.roa
File: B5VZsO5FUY0kYyUBXbMGNJqd0aE.roa (raw, json)
Hash identifier: 9NnB+vLgi4HdvE5zt0p7wM1B6v9lDZ8o2ICEIKgE7fw=
Subject key identifier: 07:95:59:B0:EE:45:51:8D:24:63:25:01:5D:B3:06:34:9A:9D:D1:A1
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C53E3CF113772CE1629EA311D5E86F5
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/B5VZsO5FUY0kYyUBXbMGNJqd0aE.roa
Signing time: Sun 01 Jan 2023 07:55:15 +0000
ROA not before: Sun 01 Jan 2023 07:55:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 185.182.50.0/24 maxlen: 24
185.119.253.0/24 maxlen: 24
185.177.81.0/24 maxlen: 24
185.236.82.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:e3:cf:11:37:72:ce:16:29:ea:31:1d:5e:86:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=079559b0ee45518d246325015db306349a9dd1a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:61:a4:a0:6b:52:5a:6e:e6:3a:07:09:82:bb:
f9:64:89:6a:30:22:80:d5:4a:4d:d0:7c:bd:76:be:
db:78:f5:c3:3d:d2:f5:e7:66:5e:00:dd:94:0b:bd:
6e:c4:ce:7f:63:24:29:e4:15:38:10:22:8c:e0:eb:
47:72:c2:03:c8:a7:3b:a3:a0:aa:6a:e7:67:e1:cc:
e2:d6:c8:a3:13:1a:39:cb:82:ee:d2:63:ef:cb:e7:
68:59:63:ef:98:09:73:cd:55:98:45:1b:8e:6a:79:
38:da:56:39:83:ae:22:64:9e:f3:60:8d:47:19:29:
94:b0:de:df:09:ce:11:2b:03:2c:bd:ea:93:51:c7:
9c:8e:d8:bc:60:c3:b7:78:63:24:b2:e8:99:da:54:
7b:98:6b:09:13:25:d7:22:a7:32:00:d6:e1:c6:e2:
11:94:fe:72:0b:33:a7:81:21:f1:a7:9a:c4:e7:8b:
78:df:f9:c5:95:d8:85:d8:b1:2a:e7:17:8f:fa:eb:
73:25:78:b6:2e:0e:07:5c:62:fa:ae:5f:92:ac:40:
d7:cd:3d:e8:f5:48:91:15:07:17:e7:d7:eb:c1:01:
a2:42:47:ec:5a:a6:22:00:0e:b9:37:b5:3e:88:15:
0f:47:ad:a8:42:aa:af:35:2b:f5:68:9e:9e:b3:ea:
6e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:95:59:B0:EE:45:51:8D:24:63:25:01:5D:B3:06:34:9A:9D:D1:A1
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/B5VZsO5FUY0kYyUBXbMGNJqd0aE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.253.0/24
185.177.81.0/24
185.182.50.0/24
185.236.82.0/24
Signature Algorithm: sha256WithRSAEncryption
cc:9d:0f:47:2e:24:6c:f5:cc:23:1d:5f:85:71:ad:bf:5f:df:
53:25:28:d3:4a:24:e1:32:17:d1:ea:04:98:a4:02:43:1f:5b:
e9:c0:a7:43:12:9d:b2:e8:87:f5:07:65:d6:5a:ed:6b:d7:41:
61:51:cf:7b:d9:f1:e1:9d:b5:e4:da:59:e6:83:56:fc:21:14:
36:62:f4:77:eb:f8:43:3b:27:fa:a0:5c:00:c1:d4:5a:3b:d9:
0a:cc:f0:8a:06:54:e7:29:24:c5:31:71:c7:a6:b3:5c:a5:f0:
12:27:b7:9b:80:93:25:ef:55:82:1b:6c:0f:59:41:2f:20:84:
e6:fd:ba:d2:e1:30:44:65:8d:0d:3e:54:dd:39:55:ad:66:f7:
92:e3:a0:58:df:f1:01:c3:f0:a3:68:91:8e:ee:13:fc:1c:e8:
28:fe:28:ac:24:94:86:94:fd:3b:48:d7:7b:9b:ae:59:92:75:
c9:9c:4b:98:da:45:e1:09:d7:2d:07:f0:11:88:35:36:97:5b:
85:70:72:b3:f7:88:f1:b8:dd:40:2d:6f:2d:03:2a:b4:a5:0a:
e5:55:ee:1d:e4:8e:b0:03:f6:41:cb:ee:62:c2:a0:ba:a0:0e:
1e:4a:27:b1:a4:8e:55:3d:db:44:f0:c4:e7:db:69:ae:22:3c:
8a:c9:f2:01
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVsU+PPETdyzhYp6jEdXob1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjMwMTAxMDc1NTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNzk1NTliMGVlNDU1MThkMjQ2MzI1MDE1ZGIzMDYzNDlhOWRkMWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmGkoGtSWm7mOgcJgrv5ZIlqMCKA
1UpN0Hy9dr7bePXDPdL152ZeAN2UC71uxM5/YyQp5BU4ECKM4OtHcsIDyKc7o6Cq
audn4czi1sijExo5y4Lu0mPvy+doWWPvmAlzzVWYRRuOank42lY5g64iZJ7zYI1H
GSmUsN7fCc4RKwMsveqTUcecjti8YMO3eGMksuiZ2lR7mGsJEyXXIqcyANbhxuIR
lP5yCzOngSHxp5rE54t43/nFldiF2LEq5xeP+utzJXi2Lg4HXGL6rl+SrEDXzT3o
9UiRFQcX59frwQGiQkfsWqYiAA65N7U+iBUPR62oQqqvNSv1aJ6es+puhwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAeVWbDuRVGNJGMlAV2zBjSandGhMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvQjVWWnNPNUZVWTBrWXlVQlhiTUdOSnFkMGFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuXf9AwQA
ubFRAwQAubYyAwQAuexSMA0GCSqGSIb3DQEBCwUAA4IBAQDMnQ9HLiRs9cwjHV+F
ca2/X99TJSjTSiThMhfR6gSYpAJDH1vpwKdDEp2y6If1B2XWWu1r10FhUc972fHh
nbXk2lnmg1b8IRQ2YvR36/hDOyf6oFwAwdRaO9kKzPCKBlTnKSTFMXHHprNcpfAS
J7ebgJMl71WCG2wPWUEvIITm/brS4TBEZY0NPlTdOVWtZveS46BY3/EBw/CjaJGO
7hP8HOgo/iisJJSGlP07SNd7m65ZknXJnEuY2kXhCdctB/ARiDU2l1uFcHKz94jx
uN1ALW8tAyq0pQrlVe4d5I6wA/ZBy+5iwqC6oA4eSiexpI5VPdtE8MTn22muIjyK
yfIB
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:55 2024 by rpki-client on console-fra.rpki-client.org