Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/UMHcPfxfLUiaWUMQqG2EUd19DGg.roa
File: UMHcPfxfLUiaWUMQqG2EUd19DGg.roa (raw, json)
Hash identifier: 0iBXMEw2qam9X0huMuxPslLgpThnY1HrvtstuN9p8hg=
Subject key identifier: 50:C1:DC:3D:FC:5F:2D:48:9A:59:43:10:A8:6D:84:51:DD:7D:0C:68
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 0187C97C550FF182BBE5D70C361B30BAA387
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/UMHcPfxfLUiaWUMQqG2EUd19DGg.roa
Signing time: Fri 28 Apr 2023 20:09:41 +0000
ROA not before: Fri 28 Apr 2023 20:09:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 5.183.94.0/24 maxlen: 24
185.244.8.0/23 maxlen: 23
185.244.11.0/24 maxlen: 24
45.82.223.0/24 maxlen: 24
193.42.226.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c9:7c:55:0f:f1:82:bb:e5:d7:0c:36:1b:30:ba:a3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Apr 28 20:09:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=50c1dc3dfc5f2d489a594310a86d8451dd7d0c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:16:f5:9a:94:9e:21:0a:37:a6:03:ae:4c:d1:
69:55:1b:ef:08:52:69:de:37:11:e3:a8:77:e7:7d:
bd:a7:e1:33:38:42:7c:f4:8b:de:95:62:9a:f7:0e:
b5:7a:2f:b8:0b:0d:df:b6:6b:6d:8e:0e:e0:7d:fb:
df:f3:3f:d1:af:0a:1a:ac:b8:57:48:93:bf:30:a8:
30:c0:f5:8c:d9:a2:52:c2:93:37:5c:40:e4:ac:2c:
d0:50:fe:ed:ba:9d:e1:52:cb:1e:a2:4b:ff:9e:d3:
16:f3:ca:59:16:f2:a2:0e:b0:48:d4:4b:8b:36:8a:
a8:1e:a4:df:93:86:a5:86:fc:2d:3c:9d:6f:e2:0e:
7f:1c:2d:7d:a9:06:26:04:2c:27:91:22:e1:d3:a9:
f2:e3:eb:f3:5d:61:a7:d7:c1:31:0d:20:f4:c5:3f:
80:32:b1:b7:7d:5e:50:b8:4a:17:4b:76:39:96:de:
9e:c5:8c:f6:d6:29:92:eb:27:9e:93:d1:79:5e:2b:
5f:fb:85:54:17:d8:68:3e:e5:f6:cc:18:7f:28:49:
1b:1e:8b:55:1f:4b:00:eb:74:e3:dd:24:04:7c:8c:
db:a9:f0:e3:0d:a9:f5:84:64:ad:ac:7d:64:3f:0d:
1d:ca:9a:4f:ea:f1:73:79:b1:6e:eb:42:1f:92:64:
49:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C1:DC:3D:FC:5F:2D:48:9A:59:43:10:A8:6D:84:51:DD:7D:0C:68
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/UMHcPfxfLUiaWUMQqG2EUd19DGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.94.0/24
45.82.223.0/24
185.244.8.0/23
185.244.11.0/24
193.42.226.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:36:33:93:ed:75:e8:52:fb:8d:c3:de:ac:9a:df:92:48:06:
a4:d4:64:62:01:d7:82:56:f1:1e:13:cd:e1:16:a2:98:2f:ec:
ae:f8:af:c6:c3:73:39:ec:6c:79:95:e3:34:18:b2:e1:8a:08:
25:e4:ca:d5:bb:8c:fe:32:aa:b1:5f:5a:64:9b:c7:67:b2:31:
85:ca:ea:1c:96:b7:3d:81:0b:83:ba:00:21:e5:d8:d2:26:c5:
cf:0d:e5:9f:ab:5e:f9:fd:02:01:a2:f3:c4:2f:29:45:04:00:
4f:53:81:be:ae:4a:f1:64:f1:75:c5:f9:3c:3a:9c:3d:49:a1:
d6:b3:ea:09:92:8e:44:6d:ce:fb:16:5a:ad:a5:d2:60:e4:34:
42:59:e5:a7:34:8c:ce:86:df:26:1d:f4:31:a3:4d:38:cc:71:
07:4d:9c:fb:54:33:0d:a4:f7:c8:8c:9a:96:aa:64:36:7e:a0:
98:36:03:cf:72:f2:6f:36:c9:b3:b8:2e:d9:a2:8f:c5:bf:92:
fd:42:41:95:11:ed:db:8a:96:bf:9e:0f:45:d7:af:68:a1:0f:
a0:c0:ee:6c:38:eb:56:c4:c6:f9:0c:57:ac:d8:5e:23:03:73:
79:30:b8:97:4f:a9:fd:ef:86:ad:e4:43:7d:67:e5:54:17:cb:
1a:9c:03:27
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYfJfFUP8YK75dcMNhswuqOHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj
YjUzZDYwHhcNMjMwNDI4MjAwOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MGMxZGMzZGZjNWYyZDQ4OWE1OTQzMTBhODZkODQ1MWRkN2QwYzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRb1mpSeIQo3pgOuTNFpVRvvCFJp
3jcR46h35329p+EzOEJ89IvelWKa9w61ei+4Cw3ftmttjg7gffvf8z/RrwoarLhX
SJO/MKgwwPWM2aJSwpM3XEDkrCzQUP7tup3hUsseokv/ntMW88pZFvKiDrBI1EuL
NoqoHqTfk4alhvwtPJ1v4g5/HC19qQYmBCwnkSLh06ny4+vzXWGn18ExDSD0xT+A
MrG3fV5QuEoXS3Y5lt6exYz21imS6yeek9F5Xitf+4VUF9hoPuX2zBh/KEkbHotV
H0sA63Tj3SQEfIzbqfDjDan1hGStrH1kPw0dyppP6vFzebFu60IfkmRJwwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFFDB3D38Xy1ImllDEKhthFHdfQxoMB8GA1UdIwQY
MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt
NDY5MGEwMDcxNDFmLzEvVU1IY1BmeGZMVWlhV1VNUXFHMkVVZDE5REdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm
LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQABbdeAwQA
LVLfAwQBufQIAwQAufQLAwQBwSriMA0GCSqGSIb3DQEBCwUAA4IBAQAvNjOT7XXo
UvuNw96smt+SSAak1GRiAdeCVvEeE83hFqKYL+yu+K/Gw3M57Gx5leM0GLLhiggl
5MrVu4z+MqqxX1pkm8dnsjGFyuoclrc9gQuDugAh5djSJsXPDeWfq175/QIBovPE
LylFBABPU4G+rkrxZPF1xfk8Opw9SaHWs+oJko5Ebc77FlqtpdJg5DRCWeWnNIzO
ht8mHfQxo004zHEHTZz7VDMNpPfIjJqWqmQ2fqCYNgPPcvJvNsmzuC7Zoo/Fv5L9
QkGVEe3bipa/ng9F169ooQ+gwO5sOOtWxMb5DFes2F4jA3N5MLiXT6n974at5EN9
Z+VUF8sanAMn
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:10 2023 by rpki-client on console-ams.rpki-client.org