Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/J5kYB64vCwJeMF8F0NjsCEHQUG8.roa
File: J5kYB64vCwJeMF8F0NjsCEHQUG8.roa (raw, json)
Hash identifier: cjWj7xV5AmHGWby/T/h0+PBYEVhWoF1hXM9erJv92vo=
Subject key identifier: 27:99:18:07:AE:2F:0B:02:5E:30:5F:05:D0:D8:EC:08:41:D0:50:6F
Certificate issuer: /CN=5b70f736a4b0524a476f6f1be2964ae99b64789f
Certificate serial: 018AD6D8314B3141C507BF6D15F5661FA960
Authority key identifier: 5B:70:F7:36:A4:B0:52:4A:47:6F:6F:1B:E2:96:4A:E9:9B:64:78:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/J5kYB64vCwJeMF8F0NjsCEHQUG8.roa
Signing time: Wed 27 Sep 2023 13:33:27 +0000
ROA not before: Wed 27 Sep 2023 13:33:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5378
IP address blocks: 83.146.0.0/22 maxlen: 22
83.146.0.0/18 maxlen: 18
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:d8:31:4b:31:41:c5:07:bf:6d:15:f5:66:1f:a9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b70f736a4b0524a476f6f1be2964ae99b64789f
Validity
Not Before: Sep 27 13:33:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27991807ae2f0b025e305f05d0d8ec0841d0506f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7b:8c:b0:48:39:d4:68:52:4f:f6:c2:12:8b:
69:cd:de:04:8b:78:94:25:f3:3a:c5:a0:f0:8d:bb:
8b:09:ea:c6:64:ac:6e:1f:5f:35:5a:99:3f:57:19:
f4:05:7b:e9:de:b6:86:79:b9:18:91:1a:cc:b4:85:
4e:59:73:89:35:b9:13:37:5a:b1:c5:d7:49:ac:7b:
f8:f9:96:6b:7c:60:b4:68:ce:02:b5:5a:a5:8e:8a:
5a:4a:b7:86:b6:64:99:2d:45:3e:d1:e0:ef:6a:47:
7a:33:49:a0:d3:7c:4a:36:ff:c4:94:3f:19:6c:ba:
2d:29:8d:a1:d9:ca:47:c6:fb:c2:0f:f9:fc:d0:84:
1f:8a:fe:d7:02:b3:5a:d9:37:3c:a6:93:bf:74:6c:
16:2b:63:67:ca:d1:7d:6d:e0:dc:04:ae:9e:7d:73:
9f:27:1a:12:b2:8b:82:d9:f8:bf:f7:73:ee:c8:cf:
c5:1c:08:e9:01:50:dd:51:c6:2f:78:bc:2a:65:05:
0c:c6:92:00:6f:04:09:5e:58:a9:30:22:22:fc:17:
9b:25:df:66:cc:db:18:87:ba:90:44:b2:e2:5b:d0:
f7:3f:58:2f:c8:2f:56:7d:50:d4:99:ca:69:86:d0:
bd:5e:7f:f0:62:8b:c6:3d:ac:80:f4:11:6a:cf:4e:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:99:18:07:AE:2F:0B:02:5E:30:5F:05:D0:D8:EC:08:41:D0:50:6F
X509v3 Authority Key Identifier:
keyid:5B:70:F7:36:A4:B0:52:4A:47:6F:6F:1B:E2:96:4A:E9:9B:64:78:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/J5kYB64vCwJeMF8F0NjsCEHQUG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9a3846-85d9-4d94-9eb0-29784d7b68a2/1/W3D3NqSwUkpHb28b4pZK6ZtkeJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.146.0.0/18
Signature Algorithm: sha256WithRSAEncryption
7a:bc:ef:2c:67:18:45:d9:45:d4:52:6a:e9:b2:59:aa:f7:03:
54:d9:12:51:85:2c:28:7b:d8:96:67:a7:7a:31:4e:14:17:b0:
8f:5c:d0:fc:44:d5:50:46:31:82:26:31:27:0c:31:e4:2f:1f:
f0:68:70:de:2f:0b:bf:2c:c6:07:e7:44:f9:0e:46:73:68:25:
8d:8d:c7:66:10:7f:19:e3:54:15:0d:20:ae:d6:9e:99:18:68:
36:31:dc:6d:7f:30:36:99:1d:15:b0:39:7b:d1:fa:12:c6:03:
2f:67:09:66:f8:26:a9:98:18:d2:97:ce:d0:6c:fc:5c:78:4f:
f4:f0:2d:c9:a2:0f:60:1c:2b:97:48:2e:71:56:17:07:5b:3e:
27:bc:a4:82:0e:8c:c2:32:8a:82:0b:1a:20:d6:7a:f4:fd:90:
7a:14:9b:40:21:93:a5:d3:11:96:c0:2a:46:67:3c:23:6a:a9:
74:d8:bf:84:8c:c6:7c:76:7c:31:cb:0d:57:b4:33:04:cf:8b:
ad:6b:ea:c3:3c:66:52:17:0d:6d:66:d9:f4:21:fe:8e:7b:97:
58:c5:8c:43:87:52:3f:17:5d:27:dc:9f:60:c2:c4:46:c5:1f:
09:7a:89:b1:28:b0:af:4e:fb:a4:f6:e9:f6:35:b3:eb:1d:67:
32:b9:62:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrW2DFLMUHFB79tFfVmH6lgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNzBmNzM2YTRiMDUyNGE0NzZmNmYxYmUyOTY0YWU5OWI2
NDc4OWYwHhcNMjMwOTI3MTMzMzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzk5MTgwN2FlMmYwYjAyNWUzMDVmMDVkMGQ4ZWMwODQxZDA1MDZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj3uMsEg51GhST/bCEotpzd4Ei3iU
JfM6xaDwjbuLCerGZKxuH181Wpk/Vxn0BXvp3raGebkYkRrMtIVOWXOJNbkTN1qx
xddJrHv4+ZZrfGC0aM4CtVqljopaSreGtmSZLUU+0eDvakd6M0mg03xKNv/ElD8Z
bLotKY2h2cpHxvvCD/n80IQfiv7XArNa2Tc8ppO/dGwWK2NnytF9beDcBK6efXOf
JxoSsouC2fi/93PuyM/FHAjpAVDdUcYveLwqZQUMxpIAbwQJXlipMCIi/BebJd9m
zNsYh7qQRLLiW9D3P1gvyC9WfVDUmcpphtC9Xn/wYovGPayA9BFqz063uQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCeZGAeuLwsCXjBfBdDY7AhB0FBvMB8GA1UdIwQY
MBaAFFtw9zaksFJKR29vG+KWSumbZHifMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzNEM05xU3dVa3BIYjI4YjRwWks2WnRrZUo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85YTM4NDYtODVkOS00ZDk0LTllYjAt
Mjk3ODRkN2I2OGEyLzEvSjVrWUI2NHZDd0plTUY4RjBOanNDRUhRVUc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85YTM4NDYtODVkOS00ZDk0LTllYjAtMjk3ODRkN2I2OGEy
LzEvVzNEM05xU3dVa3BIYjI4YjRwWks2WnRrZUo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGU5IAMA0G
CSqGSIb3DQEBCwUAA4IBAQB6vO8sZxhF2UXUUmrpslmq9wNU2RJRhSwoe9iWZ6d6
MU4UF7CPXND8RNVQRjGCJjEnDDHkLx/waHDeLwu/LMYH50T5DkZzaCWNjcdmEH8Z
41QVDSCu1p6ZGGg2MdxtfzA2mR0VsDl70foSxgMvZwlm+CapmBjSl87QbPxceE/0
8C3Jog9gHCuXSC5xVhcHWz4nvKSCDozCMoqCCxog1nr0/ZB6FJtAIZOl0xGWwCpG
Zzwjaql02L+EjMZ8dnwxyw1XtDMEz4uta+rDPGZSFw1tZtn0If6Oe5dYxYxDh1I/
F10n3J9gwsRGxR8JeomxKLCvTvuk9un2NbPrHWcyuWLJ
-----END CERTIFICATE-----
Generated at Wed Sep 27 14:52:23 2023 by rpki-client on console-fra.rpki-client.org