Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/81mSv427Ii_phNEkr97v6ysOuwk.roa
File: 81mSv427Ii_phNEkr97v6ysOuwk.roa (raw, json)
Hash identifier: dI2VyrF+nE6T2UWK/CWotSJ1VO0Fseem5PhGRcMZZzA=
Subject key identifier: F3:59:92:BF:8D:BB:22:2F:E9:84:D1:24:AF:DE:EF:EB:2B:0E:BB:09
Certificate issuer: /CN=5d4fccc994e94131dc11bfc95c64585b345e01f5
Certificate serial: 01856B2EA0D7A2D32DF00790577C0607AF93
Authority key identifier: 5D:4F:CC:C9:94:E9:41:31:DC:11:BF:C9:5C:64:58:5B:34:5E:01:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU_MyZTpQTHcEb_JXGRYWzReAfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/81mSv427Ii_phNEkr97v6ysOuwk.roa
Signing time: Sun 01 Jan 2023 02:34:55 +0000
ROA not before: Sun 01 Jan 2023 02:34:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31424
IP address blocks: 185.83.60.0/22 maxlen: 22
77.245.16.0/20 maxlen: 20
217.147.208.0/20 maxlen: 20
185.22.104.0/22 maxlen: 22
2001:4168::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:2e:a0:d7:a2:d3:2d:f0:07:90:57:7c:06:07:af:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4fccc994e94131dc11bfc95c64585b345e01f5
Validity
Not Before: Jan 1 02:34:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f35992bf8dbb222fe984d124afdeefeb2b0ebb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:95:8f:36:e1:37:5e:0c:3e:59:4c:da:ff:ad:
56:2b:83:23:d1:a9:28:07:10:93:d5:e0:5f:46:e8:
91:1e:fc:f4:77:d4:76:e9:d5:f8:2a:e4:b1:27:2b:
82:54:30:d8:de:38:64:5b:a4:0b:f3:08:1b:e0:a0:
bf:96:74:29:64:ab:ee:80:88:52:30:42:eb:b0:e7:
ee:d3:f0:9f:54:b1:cd:6f:d6:a2:99:06:ac:05:42:
3e:5f:1d:d1:4e:be:fe:78:fe:aa:73:43:d0:e6:3a:
69:9b:aa:3a:ce:c5:40:6f:ac:61:e4:61:0f:24:ee:
f5:19:c1:e9:14:44:d5:49:b8:1d:ee:58:81:11:4c:
14:1c:a3:05:97:24:56:14:64:3a:fb:71:09:93:1c:
bf:8e:0d:fd:58:91:a2:d3:3a:5c:a5:39:b2:5d:27:
7e:a4:09:4b:1a:f3:f9:f5:f6:f3:f0:f9:fa:37:f6:
b1:1c:9e:b5:32:7a:42:04:28:38:87:af:5d:17:c2:
5e:15:59:e4:62:b0:34:e4:f5:dd:1f:87:b9:e6:0f:
70:b0:25:ca:9e:11:5d:98:83:9f:94:9d:40:14:82:
f5:94:ef:59:a2:d8:3a:26:44:a6:6d:b4:15:4f:29:
81:20:87:12:56:a2:19:c9:6d:c3:ae:60:b9:6c:9f:
b2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:59:92:BF:8D:BB:22:2F:E9:84:D1:24:AF:DE:EF:EB:2B:0E:BB:09
X509v3 Authority Key Identifier:
keyid:5D:4F:CC:C9:94:E9:41:31:DC:11:BF:C9:5C:64:58:5B:34:5E:01:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU_MyZTpQTHcEb_JXGRYWzReAfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/81mSv427Ii_phNEkr97v6ysOuwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4f955b-2ba5-4fc4-83f5-02dae131246f/1/XU_MyZTpQTHcEb_JXGRYWzReAfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.245.16.0/20
185.22.104.0/22
185.83.60.0/22
217.147.208.0/20
IPv6:
2001:4168::/32
Signature Algorithm: sha256WithRSAEncryption
7d:e4:1a:96:db:0f:15:f9:cb:79:12:7b:b5:12:f6:8d:c1:8e:
d0:e9:9e:ae:63:34:fb:ae:c2:66:47:15:c6:2c:e3:39:6f:10:
f1:68:ca:a3:44:0f:95:36:85:8c:3e:f6:fb:6d:72:07:ff:29:
64:62:93:10:b1:0f:53:38:97:6d:31:aa:dc:26:45:3d:7a:fe:
a0:27:b8:5f:50:8c:ab:ae:a7:75:df:30:a8:d2:fd:0f:82:23:
0c:69:e0:b5:12:af:5d:ab:72:5c:8c:d0:22:59:97:ea:30:4d:
4f:10:a2:c0:79:0d:c7:c1:60:46:c6:fb:fa:c1:12:e7:ec:8d:
72:8b:8d:89:43:8b:e9:66:64:d4:52:aa:78:62:52:42:f8:c8:
5a:7a:4d:42:a8:d5:03:86:b5:e1:d3:1d:e9:e1:41:76:cc:65:
cf:7a:f5:e2:58:93:f2:74:d4:95:a4:f5:f6:e5:50:6d:38:66:
92:35:1d:17:b8:d7:ec:7e:c1:16:17:5d:d7:3f:aa:c7:84:4b:
5f:b3:84:59:62:8b:73:89:ea:7a:5a:fb:6d:0c:86:12:0a:49:
6c:be:e5:bf:48:30:26:71:97:d9:12:e4:31:b5:8b:83:3d:f1:
e8:af:5d:e5:e6:c2:b2:6c:a6:e8:ef:7b:42:76:3b:6e:ca:93:
46:4b:f2:ea
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYVrLqDXotMt8AeQV3wGB6+TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNGZjY2M5OTRlOTQxMzFkYzExYmZjOTVjNjQ1ODViMzQ1
ZTAxZjUwHhcNMjMwMTAxMDIzNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzU5OTJiZjhkYmIyMjJmZTk4NGQxMjRhZmRlZWZlYjJiMGViYjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJWPNuE3Xgw+WUza/61WK4Mj0ako
BxCT1eBfRuiRHvz0d9R26dX4KuSxJyuCVDDY3jhkW6QL8wgb4KC/lnQpZKvugIhS
MELrsOfu0/CfVLHNb9aimQasBUI+Xx3RTr7+eP6qc0PQ5jppm6o6zsVAb6xh5GEP
JO71GcHpFETVSbgd7liBEUwUHKMFlyRWFGQ6+3EJkxy/jg39WJGi0zpcpTmyXSd+
pAlLGvP59fbz8Pn6N/axHJ61MnpCBCg4h69dF8JeFVnkYrA05PXdH4e55g9wsCXK
nhFdmIOflJ1AFIL1lO9Zotg6JkSmbbQVTymBIIcSVqIZyW3DrmC5bJ+yBQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFPNZkr+NuyIv6YTRJK/e7+srDrsJMB8GA1UdIwQY
MBaAFF1PzMmU6UEx3BG/yVxkWFs0XgH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFVfTXlaVHBRVEhjRWJfSlhHUllXelJlQWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80Zjk1NWItMmJhNS00ZmM0LTgzZjUt
MDJkYWUxMzEyNDZmLzEvODFtU3Y0MjdJaV9waE5Fa3I5N3Y2eXNPdXdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80Zjk1NWItMmJhNS00ZmM0LTgzZjUtMDJkYWUxMzEyNDZm
LzEvWFVfTXlaVHBRVEhjRWJfSlhHUllXelJlQWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQETfUQAwQC
uRZoAwQCuVM8AwQE2ZPQMA0EAgACMAcDBQAgAUFoMA0GCSqGSIb3DQEBCwUAA4IB
AQB95BqW2w8V+ct5Enu1EvaNwY7Q6Z6uYzT7rsJmRxXGLOM5bxDxaMqjRA+VNoWM
Pvb7bXIH/ylkYpMQsQ9TOJdtMarcJkU9ev6gJ7hfUIyrrqd13zCo0v0PgiMMaeC1
Eq9dq3JcjNAiWZfqME1PEKLAeQ3HwWBGxvv6wRLn7I1yi42JQ4vpZmTUUqp4YlJC
+Mhaek1CqNUDhrXh0x3p4UF2zGXPevXiWJPydNSVpPX25VBtOGaSNR0XuNfsfsEW
F13XP6rHhEtfs4RZYotziep6WvttDIYSCklsvuW/SDAmcZfZEuQxtYuDPfHor13l
5sKybKbo73tCdjtuypNGS/Lq
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:50 2024 by rpki-client on console-fra.rpki-client.org