Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/X2E0jiL9X2vTJxnSqktzyDSOdH0.roa
File: X2E0jiL9X2vTJxnSqktzyDSOdH0.roa (raw, json)
Hash identifier: oUzvfufw3GRXOBzA27kFfFfxWPapgif1NTkr5Vdep5o=
Subject key identifier: 5F:61:34:8E:22:FD:5F:6B:D3:27:19:D2:AA:4B:73:C8:34:8E:74:7D
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 018B3D5310EEF096BF43A09DE569893F4C7B
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/X2E0jiL9X2vTJxnSqktzyDSOdH0.roa
Signing time: Tue 17 Oct 2023 11:08:55 +0000
ROA not before: Tue 17 Oct 2023 11:08:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 194.37.81.0/24 maxlen: 24
185.247.117.0/24 maxlen: 24
185.181.8.0/24 maxlen: 24
185.227.110.0/24 maxlen: 24
2a07:3b80:3::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3d:53:10:ee:f0:96:bf:43:a0:9d:e5:69:89:3f:4c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Oct 17 11:08:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f61348e22fd5f6bd32719d2aa4b73c8348e747d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4d:e5:54:db:9d:51:44:cc:8e:4b:1e:aa:67:
f7:42:5d:72:32:5e:d0:ee:7f:a4:fe:30:7b:e0:4f:
c6:27:67:a5:68:5a:05:b0:ee:4f:a7:e6:ee:cb:5f:
d8:ee:ce:db:72:3e:66:16:27:9b:60:33:2e:bb:4b:
a9:b6:ba:e5:d3:cf:e6:95:51:90:c5:02:7b:d7:90:
ec:81:18:b7:7f:92:70:65:e8:63:f6:67:ad:2c:00:
96:b1:49:78:43:b7:5b:08:02:df:97:9d:27:6b:51:
ca:bc:fe:9b:e4:18:68:da:36:32:e2:e9:53:16:be:
da:59:e9:15:59:c9:fb:48:a3:29:8e:a5:cb:5d:1f:
d1:71:16:a1:95:34:3f:97:66:75:73:0a:0f:aa:e3:
e0:26:6b:d6:41:4c:65:07:55:ad:fb:5e:7a:d7:8f:
6b:7f:77:6e:39:69:df:c1:86:d7:b3:67:2c:35:3a:
07:9b:ec:4c:a4:59:e5:88:2a:84:3b:20:a3:76:cf:
20:07:67:c2:b4:2f:26:e7:a7:ea:ae:2b:37:c6:55:
44:2b:e0:da:aa:b9:43:52:74:a1:81:5a:97:f4:8d:
1e:44:08:21:db:6c:8e:58:0d:35:bb:a9:50:58:fc:
04:7f:04:0f:f6:9e:d8:7b:6c:0c:1b:08:9e:2a:03:
b2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:61:34:8E:22:FD:5F:6B:D3:27:19:D2:AA:4B:73:C8:34:8E:74:7D
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/X2E0jiL9X2vTJxnSqktzyDSOdH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.181.8.0/24
185.227.110.0/24
185.247.117.0/24
194.37.81.0/24
IPv6:
2a07:3b80:3::/48
Signature Algorithm: sha256WithRSAEncryption
2e:85:82:cc:83:54:6a:f5:55:ba:ed:07:34:ef:5b:a9:e8:61:
cd:11:22:06:70:5f:eb:a1:54:60:36:6e:b7:78:bf:23:7e:28:
86:33:71:cf:a3:1a:16:1e:af:da:1c:9d:24:c6:99:ae:fe:2a:
87:2b:b6:69:aa:fa:f7:09:a5:35:cb:a3:f9:9d:c5:83:be:f3:
8b:e5:aa:af:29:88:77:d3:04:2b:a7:03:36:1b:33:fe:cd:24:
2e:d7:97:35:8c:92:01:8a:5c:28:cb:d9:e0:6e:31:de:9b:0d:
73:5e:65:65:de:84:ca:9b:8b:48:3f:3b:a0:86:81:93:f3:ca:
95:08:97:f8:bd:aa:8b:5a:2d:58:15:72:dc:f0:ea:b6:b6:5d:
0f:b4:1b:c7:ae:64:eb:3c:aa:c1:45:63:a9:12:59:76:5e:45:
df:25:7e:07:af:34:fe:68:83:d4:2b:d7:5d:2a:2b:ae:9f:7d:
2b:42:26:c3:01:15:0a:a2:2b:69:ce:56:79:7a:30:27:2c:e9:
b9:ae:c0:9a:0f:c9:98:5e:fa:71:b8:5a:5e:9f:39:67:3b:a2:
08:bc:fc:bf:7d:d5:bc:14:6c:cb:d8:94:11:59:83:b3:28:c6:
e0:62:7a:ee:81:b2:bb:3d:0d:96:a5:53:b0:0b:29:6b:9b:c6:
14:84:2f:3d
-----BEGIN CERTIFICATE-----
MIIFIDCCBAigAwIBAgISAYs9UxDu8Ja/Q6Cd5WmJP0x7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmQ3OTIzYWZkYmFlODdkMDdiMjMwOGRkMzg5ZDljZjA4
MmVkNmQwHhcNMjMxMDE3MTEwODU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjYxMzQ4ZTIyZmQ1ZjZiZDMyNzE5ZDJhYTRiNzNjODM0OGU3NDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj03lVNudUUTMjkseqmf3Ql1yMl7Q
7n+k/jB74E/GJ2elaFoFsO5Pp+buy1/Y7s7bcj5mFiebYDMuu0uptrrl08/mlVGQ
xQJ715DsgRi3f5JwZehj9metLACWsUl4Q7dbCALfl50na1HKvP6b5Bho2jYy4ulT
Fr7aWekVWcn7SKMpjqXLXR/RcRahlTQ/l2Z1cwoPquPgJmvWQUxlB1Wt+156149r
f3duOWnfwYbXs2csNToHm+xMpFnliCqEOyCjds8gB2fCtC8m56fqris3xlVEK+Da
qrlDUnShgVqX9I0eRAgh22yOWA01u6lQWPwEfwQP9p7Ye2wMGwieKgOykQIDAQAB
o4ICLDCCAigwHQYDVR0OBBYEFF9hNI4i/V9r0ycZ0qpLc8g0jnR9MB8GA1UdIwQY
MBaAFOW9eSOv266H0HsjCN04nZzwgu1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2Ut
MjZkMWU1NDU3OGYxLzEvWDJFMGppTDlYMnZUSnhuU3FrdHp5RFNPZEgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2UtMjZkMWU1NDU3OGYx
LzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAeBAIAATAYAwQAubUIAwQA
ueNuAwQAufd1AwQAwiVRMA8EAgACMAkDBwAqBzuAAAMwDQYJKoZIhvcNAQELBQAD
ggEBAC6FgsyDVGr1VbrtBzTvW6noYc0RIgZwX+uhVGA2brd4vyN+KIYzcc+jGhYe
r9ocnSTGma7+Kocrtmmq+vcJpTXLo/mdxYO+84vlqq8piHfTBCunAzYbM/7NJC7X
lzWMkgGKXCjL2eBuMd6bDXNeZWXehMqbi0g/O6CGgZPzypUIl/i9qotaLVgVctzw
6ra2XQ+0G8euZOs8qsFFY6kSWXZeRd8lfgevNP5og9Qr110qK66ffStCJsMBFQqi
K2nOVnl6MCcs6bmuwJoPyZhe+nG4Wl6fOWc7ogi8/L991bwUbMvYlBFZg7MoxuBi
eu6Bsrs9DZalU7ALKWubxhSELz0=
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:48 2024 by rpki-client on console-fra.rpki-client.org