Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/HsAl5m5lx3gXXBSRyQYOWuOMZNw.roa
File: HsAl5m5lx3gXXBSRyQYOWuOMZNw.roa (raw, json)
Hash identifier: iInKv2PwUyC9BQY2Wy+fhYomjPN+n7dNsBVS69crXh4=
Subject key identifier: 1E:C0:25:E6:6E:65:C7:78:17:5C:14:91:C9:06:0E:5A:E3:8C:64:DC
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018B90502F97452803438E914D54E6416239
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/HsAl5m5lx3gXXBSRyQYOWuOMZNw.roa
Signing time: Thu 02 Nov 2023 13:54:15 +0000
ROA not before: Thu 02 Nov 2023 13:54:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 194.156.1.0/24 maxlen: 24
2.57.148.0/24 maxlen: 24
5.133.110.0/24 maxlen: 24
45.143.140.0/24 maxlen: 24
192.144.16.0/24 maxlen: 24
194.59.12.0/24 maxlen: 24
45.91.161.0/24 maxlen: 24
45.88.83.0/24 maxlen: 24
45.88.82.0/24 maxlen: 24
87.247.143.0/24 maxlen: 24
45.138.145.0/24 maxlen: 24
109.94.217.0/24 maxlen: 24
109.94.216.0/24 maxlen: 24
109.94.219.0/24 maxlen: 24
109.94.218.0/24 maxlen: 24
45.136.248.0/24 maxlen: 24
80.242.62.0/24 maxlen: 24
80.242.63.0/24 maxlen: 24
45.147.244.0/24 maxlen: 24
45.147.245.0/24 maxlen: 24
45.132.207.0/24 maxlen: 24
45.147.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:90:50:2f:97:45:28:03:43:8e:91:4d:54:e6:41:62:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Nov 2 13:54:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ec025e66e65c778175c1491c9060e5ae38c64dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:64:7a:90:11:a0:27:3d:be:02:e2:86:f0:f4:
47:ec:42:bc:3a:12:55:51:be:82:25:0e:87:b8:e4:
02:6a:87:0c:66:42:02:df:28:e5:63:97:36:d9:39:
98:db:5b:1d:3c:e2:83:e3:fd:8c:8e:a7:89:2c:90:
d5:42:8a:ec:c3:c4:db:d8:70:35:d7:91:26:9d:1c:
b3:79:46:0f:58:fd:8d:80:0c:0f:8e:15:02:25:de:
0b:ef:58:1a:f8:e9:e9:70:ae:57:fb:aa:51:eb:d2:
fc:6e:d2:11:25:7f:70:f7:a9:27:62:20:21:5b:4f:
49:71:59:40:cb:88:fa:69:7c:ba:26:6c:30:b7:ef:
6d:6a:db:21:18:9b:2e:0e:79:d0:71:fd:55:80:27:
97:e2:42:39:35:a4:4b:dc:cb:dc:dc:c4:a0:14:89:
c6:53:f4:80:8c:02:98:7d:23:2b:a5:29:22:83:bf:
82:11:48:c5:4b:e2:52:e4:6d:0d:a4:19:4c:30:2a:
97:ed:40:1f:0a:5a:85:72:b6:92:01:76:78:e3:3a:
24:dc:07:0c:ac:bf:8f:d9:ae:be:dc:1e:4a:17:3d:
05:eb:07:ee:60:10:14:7b:25:f2:bb:5a:cc:7f:1a:
98:60:fe:4a:32:72:b9:27:e2:e1:04:8e:4e:e9:f3:
bf:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C0:25:E6:6E:65:C7:78:17:5C:14:91:C9:06:0E:5A:E3:8C:64:DC
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/HsAl5m5lx3gXXBSRyQYOWuOMZNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.148.0/24
5.133.110.0/24
45.88.82.0/23
45.91.161.0/24
45.132.207.0/24
45.136.248.0/24
45.138.145.0/24
45.143.140.0/24
45.147.244.0/23
45.147.247.0/24
80.242.62.0/23
87.247.143.0/24
109.94.216.0/22
192.144.16.0/24
194.59.12.0/24
194.156.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:bd:14:2e:c7:18:33:fe:0f:9c:6b:f1:57:df:6f:4a:8a:6e:
d8:4a:71:4e:69:ab:0a:9e:a0:88:16:3d:51:2d:dd:78:a8:4d:
2c:a8:ec:1e:dc:5b:14:b0:1e:b7:05:86:4f:34:16:34:bf:fc:
34:b6:17:56:8f:da:b9:06:05:b7:45:f3:ea:a9:a7:ef:9a:ef:
3d:17:8b:2f:dd:b7:f4:f0:e5:da:c5:ec:3b:d5:50:94:b1:a3:
0d:08:d7:23:a7:16:ac:53:ab:54:cc:bb:8f:6b:dc:a6:a8:e7:
38:bb:39:66:d4:fe:84:54:7e:02:48:27:0a:03:a3:3a:a2:31:
66:8e:b4:67:af:e9:e4:c0:89:da:9b:ce:a4:b6:ed:86:80:96:
ed:e8:06:71:56:be:4b:e5:73:e0:01:bd:69:77:ee:4e:d5:72:
4d:7a:5e:f3:72:b0:26:8f:91:b4:34:dc:23:38:97:23:3c:5c:
10:6b:62:e0:1c:1e:b6:66:c3:8c:c9:26:8a:b1:83:fa:34:54:
11:56:18:ee:4f:32:71:ff:f6:e6:4c:97:d2:fc:4b:d7:18:28:
8d:1e:63:80:dd:c0:c7:36:c8:ec:e2:8e:d3:50:b2:ab:aa:fd:
0e:0a:16:05:39:e3:14:e4:be:ef:27:e3:be:89:70:5e:12:ec:
ef:c7:04:74
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAYuQUC+XRSgDQ46RTVTmQWI5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjMxMTAyMTM1NDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWMwMjVlNjZlNjVjNzc4MTc1YzE0OTFjOTA2MGU1YWUzOGM2NGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2R6kBGgJz2+AuKG8PRH7EK8OhJV
Ub6CJQ6HuOQCaocMZkIC3yjlY5c22TmY21sdPOKD4/2MjqeJLJDVQorsw8Tb2HA1
15EmnRyzeUYPWP2NgAwPjhUCJd4L71ga+OnpcK5X+6pR69L8btIRJX9w96knYiAh
W09JcVlAy4j6aXy6Jmwwt+9tatshGJsuDnnQcf1VgCeX4kI5NaRL3Mvc3MSgFInG
U/SAjAKYfSMrpSkig7+CEUjFS+JS5G0NpBlMMCqX7UAfClqFcraSAXZ44zok3AcM
rL+P2a6+3B5KFz0F6wfuYBAUeyXyu1rMfxqYYP5KMnK5J+LhBI5O6fO//QIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFB7AJeZuZcd4F1wUkckGDlrjjGTcMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvSHNBbDVtNWx4M2dYWEJTUnlRWU9XdU9NWk53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAAjmUAwQA
BYVuAwQBLVhSAwQALVuhAwQALYTPAwQALYj4AwQALYqRAwQALY+MAwQBLZP0AwQA
LZP3AwQBUPI+AwQAV/ePAwQCbV7YAwQAwJAQAwQAwjsMAwQAwpwBMA0GCSqGSIb3
DQEBCwUAA4IBAQCavRQuxxgz/g+ca/FX329Kim7YSnFOaasKnqCIFj1RLd14qE0s
qOwe3FsUsB63BYZPNBY0v/w0thdWj9q5BgW3RfPqqafvmu89F4sv3bf08OXaxew7
1VCUsaMNCNcjpxasU6tUzLuPa9ymqOc4uzlm1P6EVH4CSCcKA6M6ojFmjrRnr+nk
wInam86ktu2GgJbt6AZxVr5L5XPgAb1pd+5O1XJNel7zcrAmj5G0NNwjOJcjPFwQ
a2LgHB62ZsOMySaKsYP6NFQRVhjuTzJx//bmTJfS/EvXGCiNHmOA3cDHNsjs4o7T
ULKrqv0OChYFOeMU5L7vJ+O+iXBeEuzvxwR0
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:23:38 2024 by rpki-client on console-fra.rpki-client.org