Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/a4kAu1LVhJpV4qaP4lzQGIxBOSk.roa
File: a4kAu1LVhJpV4qaP4lzQGIxBOSk.roa (raw, json)
Hash identifier: D1sjwp1+QzHuvPhZtXebw8WFNA8gfcfvVA7HFpPx/PQ=
Subject key identifier: 6B:89:00:BB:52:D5:84:9A:55:E2:A6:8F:E2:5C:D0:18:8C:41:39:29
Certificate issuer: /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial: 018CC3B67F88CC58507AB11E6DE09B8BE065
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/a4kAu1LVhJpV4qaP4lzQGIxBOSk.roa
Signing time: Mon 01 Jan 2024 06:29:26 +0000
ROA not before: Mon 01 Jan 2024 06:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44725
IP address blocks: 5.250.192.0/19 maxlen: 19
37.114.128.0/18 maxlen: 18
185.91.208.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 05 Feb 2024 07:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:7f:88:cc:58:50:7a:b1:1e:6d:e0:9b:8b:e0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Validity
Not Before: Jan 1 06:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b8900bb52d5849a55e2a68fe25cd0188c413929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:62:41:9f:68:99:49:07:1f:04:ab:c5:dc:60:
15:75:a6:17:8b:5f:7a:ed:0d:31:90:42:46:98:11:
96:b3:eb:8e:8a:e1:70:20:83:04:f1:5d:77:79:22:
39:2a:0b:05:8d:d1:fd:05:7a:04:f3:8b:9f:1e:1c:
a5:21:f4:99:0d:52:a1:ff:6d:22:23:c5:51:ce:66:
47:f3:37:d9:f3:b5:70:60:23:6d:40:b6:ae:22:e7:
79:26:a0:64:d5:96:3b:22:41:f6:29:93:59:e8:90:
b5:9a:f6:2b:75:e5:71:c8:09:cf:ae:4a:0f:16:c6:
3f:6b:09:2c:f6:e2:84:5e:6b:73:b5:cc:ae:89:8d:
df:69:91:2d:2e:e7:98:1f:95:c4:4c:a1:73:7f:ba:
3c:e3:1f:a5:c8:b7:99:b2:55:86:09:d7:02:77:fd:
50:68:4e:0c:c6:79:a4:af:c7:38:1c:ca:37:15:7d:
5a:45:66:b5:d5:17:b6:a6:6d:e8:89:cc:7a:95:58:
92:b4:18:8d:fe:16:84:6f:f3:87:69:1a:17:e4:2b:
c1:70:4d:a5:de:35:46:02:09:41:f4:49:25:fb:1d:
25:75:a7:04:ed:e6:77:94:1e:cb:f9:98:38:9b:10:
83:f5:8d:9c:ae:16:ea:a0:1b:46:00:f9:64:39:63:
33:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:89:00:BB:52:D5:84:9A:55:E2:A6:8F:E2:5C:D0:18:8C:41:39:29
X509v3 Authority Key Identifier:
keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/a4kAu1LVhJpV4qaP4lzQGIxBOSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.192.0/19
37.114.128.0/18
185.91.208.0/22
Signature Algorithm: sha256WithRSAEncryption
70:45:65:93:75:b3:35:0e:6b:8d:0d:13:ce:5e:b3:e8:21:f4:
18:3e:c7:9e:2b:75:3a:82:c3:b9:e8:8e:c3:53:0f:e1:8c:8a:
ad:06:4b:24:0c:3d:66:bf:2f:a6:98:11:9a:bc:04:9b:c6:16:
42:9e:13:80:d3:ac:30:71:59:98:cd:65:c9:03:fa:95:4e:30:
f3:1f:43:5e:64:86:78:0e:11:15:30:5a:83:01:3d:9a:02:63:
81:5a:26:d9:48:e5:97:0b:e7:19:44:68:f7:da:73:3b:9e:cd:
c0:c5:c2:aa:0d:eb:11:1a:64:db:cb:1b:a4:19:30:28:bb:f4:
3c:15:d5:23:8c:27:50:e2:b7:76:bc:0b:6b:02:d6:8f:54:61:
a0:74:01:61:d9:81:71:22:42:56:01:dd:aa:b7:75:09:8f:c3:
b5:90:49:73:22:9c:bf:4f:f6:20:20:85:b0:fb:25:64:84:50:
f6:3a:7d:1c:65:0f:0b:d5:a8:df:5d:b3:1f:2b:f3:3a:87:a9:
25:8a:1f:a4:96:a3:cd:0c:7a:cf:8c:ca:ea:f3:a6:67:f3:94:
b3:e3:d3:8e:9a:82:4c:f0:50:72:e0:75:5c:2d:28:93:15:34:
df:93:22:70:7f:78:f7:cf:f1:dd:3d:36:61:6e:42:a0:6b:2e:
08:ca:ab:d6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzDtn+IzFhQerEebeCbi+BlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDRjZTI4ZWFlNjgyYzk3YWNkMmQ4NjJmZWUyODk3YzNi
MDk2ZmQwHhcNMjQwMTAxMDYyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yjg5MDBiYjUyZDU4NDlhNTVlMmE2OGZlMjVjZDAxODhjNDEzOTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2JBn2iZSQcfBKvF3GAVdaYXi196
7Q0xkEJGmBGWs+uOiuFwIIME8V13eSI5KgsFjdH9BXoE84ufHhylIfSZDVKh/20i
I8VRzmZH8zfZ87VwYCNtQLauIud5JqBk1ZY7IkH2KZNZ6JC1mvYrdeVxyAnPrkoP
FsY/awks9uKEXmtztcyuiY3faZEtLueYH5XETKFzf7o84x+lyLeZslWGCdcCd/1Q
aE4Mxnmkr8c4HMo3FX1aRWa11Re2pm3oicx6lViStBiN/haEb/OHaRoX5CvBcE2l
3jVGAglB9Ekl+x0ldacE7eZ3lB7L+Zg4mxCD9Y2crhbqoBtGAPlkOWMzXwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFGuJALtS1YSaVeKmj+Jc0BiMQTkpMB8GA1UdIwQY
MBaAFBkEzijq5oLJes0thi/uKJfDsJb9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDkt
MTVkNWRlYjIyOGRkLzEvYTRrQXUxTFZoSnBWNHFhUDRselFHSXhCT1NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9kMDQ4ZjYtMzQxYy00YzY0LWIzZDktMTVkNWRlYjIyOGRk
LzEvR1FUT0tPcm1nc2w2elMyR0wtNG9sOE93bHYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFBfrAAwQG
JXKAAwQCuVvQMA0GCSqGSIb3DQEBCwUAA4IBAQBwRWWTdbM1DmuNDRPOXrPoIfQY
PseeK3U6gsO56I7DUw/hjIqtBkskDD1mvy+mmBGavASbxhZCnhOA06wwcVmYzWXJ
A/qVTjDzH0NeZIZ4DhEVMFqDAT2aAmOBWibZSOWXC+cZRGj32nM7ns3AxcKqDesR
GmTbyxukGTAou/Q8FdUjjCdQ4rd2vAtrAtaPVGGgdAFh2YFxIkJWAd2qt3UJj8O1
kElzIpy/T/YgIIWw+yVkhFD2On0cZQ8L1ajfXbMfK/M6h6klih+klqPNDHrPjMrq
86Zn85Sz49OOmoJM8FBy4HVcLSiTFTTfkyJwf3j3z/HdPTZhbkKgay4IyqvW
-----END CERTIFICATE-----
Generated at Mon Feb 5 11:36:22 2024 by rpki-client on console-ams.rpki-client.org