Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/vABFlBq8YfeB2WgrH8zQGPFTR0Y.roa
File: vABFlBq8YfeB2WgrH8zQGPFTR0Y.roa (raw, json)
Hash identifier: i+K+dCrTCBDG3ajgx5DW6jwvYqb5nzXWCV8KXSLvhss=
Subject key identifier: BC:00:45:94:1A:BC:61:F7:81:D9:68:2B:1F:CC:D0:18:F1:53:47:46
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 018C6804118F583F82FB87B02E7F3CF1514B
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/vABFlBq8YfeB2WgrH8zQGPFTR0Y.roa
Signing time: Thu 14 Dec 2023 11:09:06 +0000
ROA not before: Thu 14 Dec 2023 11:09:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204548
IP address blocks: 81.28.6.0/24 maxlen: 24
83.229.84.0/24 maxlen: 24
83.229.85.0/24 maxlen: 24
83.229.86.0/24 maxlen: 24
83.229.87.0/24 maxlen: 24
103.13.211.0/24 maxlen: 24
185.139.230.0/24 maxlen: 24
194.36.88.0/24 maxlen: 24
63.250.59.0/24 maxlen: 24
63.250.60.0/24 maxlen: 24
195.238.122.0/24 maxlen: 24
45.83.41.0/24 maxlen: 24
185.237.97.0/24 maxlen: 24
185.237.96.0/24 maxlen: 24
185.53.210.0/24 maxlen: 24
185.237.14.0/24 maxlen: 24
185.237.15.0/24 maxlen: 24
185.47.174.0/24 maxlen: 24
91.202.170.0/24 maxlen: 24
2a06:c5c0:1100::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:68:04:11:8f:58:3f:82:fb:87:b0:2e:7f:3c:f1:51:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Dec 14 11:09:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc0045941abc61f781d9682b1fccd018f1534746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:04:16:d3:23:e4:66:e8:34:8f:15:64:ad:c7:
6c:da:a8:4c:2f:32:b1:71:d4:87:5b:eb:4f:33:76:
5a:c7:f9:2d:f6:96:f6:57:68:e6:1a:15:6f:f1:ae:
50:3f:9b:44:04:60:a0:9c:99:82:0a:d0:ba:3e:ae:
53:98:af:e3:13:f2:fd:29:39:94:98:2c:cd:e7:e1:
76:5d:8a:2f:76:18:ba:9e:c2:ca:f0:3c:4c:4a:68:
cf:cc:6a:80:5a:70:e0:d4:0f:39:d4:79:9b:a0:a1:
44:88:cb:36:f5:ec:29:7e:a7:3d:be:cd:f7:2c:d6:
d9:80:c9:ba:65:72:66:88:c1:76:72:72:ca:d9:93:
de:9b:f2:c0:65:2d:97:fa:b6:68:cf:da:e5:9d:34:
2d:1a:08:88:19:02:6a:ad:08:84:19:b6:a5:63:fa:
16:2f:f8:91:2c:47:60:6e:62:b7:8e:e1:24:41:e7:
83:fe:67:7f:9f:7f:03:f5:86:a5:02:94:e8:7f:71:
be:53:90:1b:8d:4d:6c:7d:b1:c5:f2:58:c6:08:57:
50:81:f6:d5:0d:4a:b6:0f:20:31:e7:6f:4c:6e:3a:
2d:36:ac:7f:c2:06:8d:f2:ca:94:4b:ce:b0:8a:93:
4f:34:87:7a:76:1a:cd:f6:dc:d9:49:b5:1f:cc:94:
d8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:00:45:94:1A:BC:61:F7:81:D9:68:2B:1F:CC:D0:18:F1:53:47:46
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/vABFlBq8YfeB2WgrH8zQGPFTR0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.41.0/24
63.250.59.0-63.250.60.255
81.28.6.0/24
83.229.84.0/22
91.202.170.0/24
103.13.211.0/24
185.47.174.0/24
185.53.210.0/24
185.139.230.0/24
185.237.14.0/23
185.237.96.0/23
194.36.88.0/24
195.238.122.0/24
IPv6:
2a06:c5c0:1100::/48
Signature Algorithm: sha256WithRSAEncryption
42:25:5c:46:0d:3d:66:4d:2e:98:6a:e6:5f:a0:ad:9f:90:d2:
6c:00:de:34:3b:7e:e7:f5:00:a8:b8:7b:dc:7f:41:65:32:f0:
ea:f1:73:6a:8c:d3:e3:c2:7f:b1:ac:65:c6:d5:ff:0b:a2:44:
55:b9:c8:9d:8d:31:b6:a9:99:c0:fe:a4:74:36:f1:79:03:8c:
6e:0d:40:c1:3f:7d:9f:4d:fd:61:f2:9a:31:57:67:f4:5b:03:
9f:db:98:6e:b8:15:6d:81:0b:90:ec:06:d6:45:bd:0d:11:ab:
69:e4:a5:16:4a:86:33:0b:34:75:ff:3c:53:cb:e1:e7:14:39:
1e:44:b4:de:f2:cc:d5:76:20:84:47:f3:79:63:8b:4a:10:40:
a1:cb:08:1b:0b:01:c1:79:a2:7d:38:80:01:f6:ca:a3:32:9c:
d8:fd:b2:b8:06:72:b5:0f:52:1e:52:84:65:46:d4:4e:a1:c4:
9b:fd:67:61:d6:49:4e:f3:93:86:79:95:98:8d:42:a1:fc:d0:
5d:94:35:24:62:81:0d:55:2a:aa:f4:17:fc:e4:99:2c:c9:5e:
ae:09:15:48:a5:af:59:6b:60:9e:4a:9a:1a:ca:f0:3f:86:8f:
0d:43:de:36:92:73:c8:77:c9:6c:6a:27:08:44:9f:6f:93:27:
54:54:86:fd
-----BEGIN CERTIFICATE-----
MIIFXzCCBEegAwIBAgISAYxoBBGPWD+C+4ewLn888VFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1YmQ3OTIzYWZkYmFlODdkMDdiMjMwOGRkMzg5ZDljZjA4
MmVkNmQwHhcNMjMxMjE0MTEwOTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzAwNDU5NDFhYmM2MWY3ODFkOTY4MmIxZmNjZDAxOGYxNTM0NzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQQW0yPkZug0jxVkrcds2qhMLzKx
cdSHW+tPM3Zax/kt9pb2V2jmGhVv8a5QP5tEBGCgnJmCCtC6Pq5TmK/jE/L9KTmU
mCzN5+F2XYovdhi6nsLK8DxMSmjPzGqAWnDg1A851HmboKFEiMs29ewpfqc9vs33
LNbZgMm6ZXJmiMF2cnLK2ZPem/LAZS2X+rZoz9rlnTQtGgiIGQJqrQiEGbalY/oW
L/iRLEdgbmK3juEkQeeD/md/n38D9YalApTof3G+U5AbjU1sfbHF8ljGCFdQgfbV
DUq2DyAx529MbjotNqx/wgaN8sqUS86wipNPNId6dhrN9tzZSbUfzJTYmQIDAQAB
o4ICazCCAmcwHQYDVR0OBBYEFLwARZQavGH3gdloKx/M0BjxU0dGMB8GA1UdIwQY
MBaAFOW9eSOv266H0HsjCN04nZzwgu1tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2Ut
MjZkMWU1NDU3OGYxLzEvdkFCRmxCcThZZmVCMldnckg4elFHUEZUUjBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8yNjkyMjktMjBlYi00ZjFjLWExM2UtMjZkMWU1NDU3OGYx
LzEvNWIxNUk2X2Jyb2ZRZXlNSTNUaWRuUENDN1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGABggrBgEFBQcBBwEB/wRxMG8wXAQCAAEwVgMEAC1TKTAM
AwQAP/o7AwQAP/o8AwQAURwGAwQCU+VUAwQAW8qqAwQAZw3TAwQAuS+uAwQAuTXS
AwQAuYvmAwQBue0OAwQBue1gAwQAwiRYAwQAw+56MA8EAgACMAkDBwAqBsXAEQAw
DQYJKoZIhvcNAQELBQADggEBAEIlXEYNPWZNLphq5l+grZ+Q0mwA3jQ7fuf1AKi4
e9x/QWUy8Orxc2qM0+PCf7GsZcbV/wuiRFW5yJ2NMbapmcD+pHQ28XkDjG4NQME/
fZ9N/WHymjFXZ/RbA5/bmG64FW2BC5DsBtZFvQ0Rq2nkpRZKhjMLNHX/PFPL4ecU
OR5EtN7yzNV2IIRH83lji0oQQKHLCBsLAcF5on04gAH2yqMynNj9srgGcrUPUh5S
hGVG1E6hxJv9Z2HWSU7zk4Z5lZiNQqH80F2UNSRigQ1VKqr0F/zkmSzJXq4JFUil
r1lrYJ5KmhrK8D+Gjw1D3jaSc8h3yWxqJwhEn2+TJ1RUhv0=
-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:48 2024 by rpki-client on console-fra.rpki-client.org