Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/C5PiQvJRcegOqbBpinWQWXyr0-E.roa
File: C5PiQvJRcegOqbBpinWQWXyr0-E.roa (raw, json)
Hash identifier: F3rWvPU36DzwZAZNERAEjfLQOBKnRhz4bRTcraKJmhE=
Subject key identifier: 0B:93:E2:42:F2:51:71:E8:0E:A9:B0:69:8A:75:90:59:7C:AB:D3:E1
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 018C1B3006C08E4EC6C7AB57EA2D2CB714D4
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/C5PiQvJRcegOqbBpinWQWXyr0-E.roa
Signing time: Wed 29 Nov 2023 13:06:21 +0000
ROA not before: Wed 29 Nov 2023 13:06:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 93.152.205.0/24 maxlen: 24
45.141.234.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1b:30:06:c0:8e:4e:c6:c7:ab:57:ea:2d:2c:b7:14:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Nov 29 13:06:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b93e242f25171e80ea9b0698a7590597cabd3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:36:58:7c:c2:46:47:fe:de:34:85:f7:f9:e6:
db:da:94:f8:bf:d6:ed:66:af:cf:91:95:da:c2:71:
77:54:42:29:6e:d9:c2:0d:be:fa:b8:6b:49:9b:ba:
d4:67:5c:8b:4a:d9:dc:52:2f:22:04:87:69:16:3c:
2b:40:aa:b3:31:ca:9c:54:b1:5d:90:1c:60:6d:7b:
72:3d:c9:f1:17:2c:51:05:d4:16:d8:31:aa:9b:30:
67:ab:00:36:cc:bf:bd:6c:d8:18:6b:9a:0a:d8:99:
2e:a4:eb:3d:fc:27:41:1c:e3:af:b3:c7:fe:63:be:
5e:b9:87:b4:7a:a9:a1:61:5e:8e:5c:79:8b:f6:72:
db:35:90:4e:cb:71:24:6d:f3:25:a3:5f:2a:73:ea:
38:f4:af:ab:78:4e:4d:65:ca:e0:2d:72:50:b8:4d:
74:80:6a:70:24:ac:4e:75:ac:3e:28:1d:1b:29:81:
44:93:6e:3d:72:32:5f:d6:d6:17:85:6d:ea:da:88:
d6:1a:d4:36:78:76:39:42:98:13:ae:e5:66:df:e3:
6f:ec:e2:21:16:9d:a3:b6:03:11:8f:44:3a:ee:a5:
5a:1e:f0:16:d1:a1:b2:a3:59:56:d8:bb:e0:fe:29:
8e:91:55:35:11:f6:48:3d:67:f6:20:81:3d:0f:56:
04:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:93:E2:42:F2:51:71:E8:0E:A9:B0:69:8A:75:90:59:7C:AB:D3:E1
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/C5PiQvJRcegOqbBpinWQWXyr0-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.234.0/24
93.152.205.0/24
94.190.195.0/24
Signature Algorithm: sha256WithRSAEncryption
70:27:fa:bf:36:27:fe:a0:52:6b:c3:66:98:1d:a3:fe:7d:50:
88:9a:84:55:41:d9:ea:91:d0:87:f3:4a:e9:4e:ff:f0:bb:5a:
2f:33:67:02:8a:79:03:3f:b2:34:ea:23:ce:37:c2:e6:70:67:
93:8d:49:b1:39:c8:00:d0:13:a8:44:a8:0d:5e:79:7d:04:f1:
e4:d9:13:c0:d9:aa:68:a4:b7:5a:95:4c:1c:24:87:d5:ee:bf:
2c:ed:81:42:66:16:d1:84:45:83:2c:03:d7:b0:04:14:3d:a9:
d8:8a:f6:f0:3b:32:b4:65:09:b8:6b:b6:49:f0:d9:e2:86:b5:
3d:0c:ff:90:53:ad:67:a9:81:f5:3a:25:cd:01:73:46:05:0a:
bf:6f:ea:e8:ad:d5:e1:46:1d:da:6e:89:27:17:6e:bb:79:ef:
5c:c9:ca:21:84:ef:8a:7c:33:fe:d8:c2:ff:0c:a7:9c:62:aa:
e3:76:bf:c2:59:2b:3a:fb:88:28:eb:d3:53:b2:bb:85:db:73:
33:2e:94:91:f5:55:62:1a:52:2f:fa:1f:3c:a7:d0:4d:4d:08:
30:1c:d2:89:a6:61:80:11:c2:c8:e3:a4:f1:e8:c2:f5:4d:ac:
54:9a:ce:a7:ec:22:96:fa:59:e8:ef:b4:88:dc:d4:ac:e1:83:
bc:dd:0e:7f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYwbMAbAjk7Gx6tX6i0stxTUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjMxMTI5MTMwNjIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjkzZTI0MmYyNTE3MWU4MGVhOWIwNjk4YTc1OTA1OTdjYWJkM2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDZYfMJGR/7eNIX3+ebb2pT4v9bt
Zq/PkZXawnF3VEIpbtnCDb76uGtJm7rUZ1yLStncUi8iBIdpFjwrQKqzMcqcVLFd
kBxgbXtyPcnxFyxRBdQW2DGqmzBnqwA2zL+9bNgYa5oK2JkupOs9/CdBHOOvs8f+
Y75euYe0eqmhYV6OXHmL9nLbNZBOy3EkbfMlo18qc+o49K+reE5NZcrgLXJQuE10
gGpwJKxOdaw+KB0bKYFEk249cjJf1tYXhW3q2ojWGtQ2eHY5QpgTruVm3+Nv7OIh
Fp2jtgMRj0Q67qVaHvAW0aGyo1lW2Lvg/imOkVU1EfZIPWf2IIE9D1YE8QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAuT4kLyUXHoDqmwaYp1kFl8q9PhMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEvQzVQaVF2SlJjZWdPcWJCcGluV1FXWHlyMC1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALY3qAwQA
XZjNAwQAXr7DMA0GCSqGSIb3DQEBCwUAA4IBAQBwJ/q/Nif+oFJrw2aYHaP+fVCI
moRVQdnqkdCH80rpTv/wu1ovM2cCinkDP7I06iPON8LmcGeTjUmxOcgA0BOoRKgN
Xnl9BPHk2RPA2apopLdalUwcJIfV7r8s7YFCZhbRhEWDLAPXsAQUPanYivbwOzK0
ZQm4a7ZJ8NnihrU9DP+QU61nqYH1OiXNAXNGBQq/b+rordXhRh3aboknF267ee9c
ycohhO+KfDP+2ML/DKecYqrjdr/CWSs6+4go69NTsruF23MzLpSR9VViGlIv+h88
p9BNTQgwHNKJpmGAEcLI46Tx6ML1TaxUms6n7CKW+lno77SI3NSs4YO83Q5/
Generated at Sun Dec 31 16:43:08 2023 by rpki-client on console-ams.rpki-client.org