Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/P95XWxgrOqEnbzojInAyzur2638.roa
File: P95XWxgrOqEnbzojInAyzur2638.roa (raw, json)
Hash identifier: AjdeYBlB/+Vl30EouBnCCL1l8rYddZTVT/Rv8xl9mno=
Subject key identifier: 3F:DE:57:5B:18:2B:3A:A1:27:6F:3A:23:22:70:32:CE:EA:F6:EB:7F
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01858750DE064F9711837B2FF5EC27E393F7
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/P95XWxgrOqEnbzojInAyzur2638.roa
Signing time: Fri 06 Jan 2023 13:41:41 +0000
ROA not before: Fri 06 Jan 2023 13:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 164.215.103.0/24 maxlen: 24
5.10.240.0/22 maxlen: 22
5.10.252.0/22 maxlen: 22
185.81.218.0/24 maxlen: 24
88.151.192.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:87:50:de:06:4f:97:11:83:7b:2f:f5:ec:27:e3:93:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 6 13:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fde575b182b3aa1276f3a23227032ceeaf6eb7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:47:32:9f:67:28:db:e4:f0:89:7f:e4:88:3c:
58:49:3a:32:2f:e2:54:f9:dd:38:bf:e3:86:39:71:
66:0f:09:06:75:36:11:bf:27:12:2f:4c:cc:3c:3e:
15:ee:2c:51:1f:1a:f0:85:fd:da:16:58:64:82:f1:
bf:6a:d6:20:7f:70:04:6f:17:26:dd:da:56:da:cc:
5f:12:b3:d8:84:a9:f9:e2:ac:cd:20:5d:0e:ed:d5:
38:60:75:f4:2c:f2:15:67:9e:32:4d:38:f1:fb:9e:
24:e5:19:84:b6:b0:3b:88:67:4d:e4:d5:21:17:50:
83:78:55:cf:3f:e8:ad:fb:bd:3e:d4:2f:da:ef:86:
a8:e4:e5:fe:a9:44:69:54:de:ef:d5:ad:bc:fc:be:
4b:1a:6a:b2:1e:be:c4:93:ed:49:56:a9:28:3e:22:
ea:58:5e:1a:f4:57:5c:58:5f:01:a4:5b:c2:67:ec:
0c:27:17:7e:1a:59:e8:4d:54:82:fd:64:c3:13:da:
2b:78:72:2f:88:b0:53:53:6e:be:6d:97:be:c3:47:
fb:3e:b3:ec:2d:5d:b0:05:5a:d9:c3:fd:d9:ab:55:
9e:5d:93:a6:47:7f:e3:21:3c:61:2d:1f:2f:62:da:
98:5e:6f:51:38:df:a6:04:76:94:44:d9:5b:84:f5:
fd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:DE:57:5B:18:2B:3A:A1:27:6F:3A:23:22:70:32:CE:EA:F6:EB:7F
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/P95XWxgrOqEnbzojInAyzur2638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.240.0/22
5.10.252.0/22
88.151.192.0/24
164.215.103.0/24
185.81.218.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:f8:ba:24:2f:e1:e3:81:c5:46:1a:a0:3e:39:c3:ac:6f:71:
ca:44:7c:48:be:02:cd:24:ff:e9:97:6b:5c:3f:50:93:f4:ec:
fb:67:5c:80:0c:18:55:1d:b6:a5:27:1c:78:d2:b0:97:f1:a3:
7f:10:f1:af:ec:90:7a:56:26:91:37:b3:ef:07:82:47:8d:06:
a9:c5:80:e1:db:64:0f:ff:95:19:5c:5c:97:f0:b8:9c:98:ad:
02:a3:ae:71:49:27:2d:be:99:93:cb:c4:36:0b:82:ca:9b:b3:
a7:41:ff:76:9c:55:e6:51:bc:0f:b0:1e:8f:54:3b:f2:14:98:
9e:09:b5:30:2c:66:b8:3e:92:15:a5:92:c3:c6:68:4f:5d:5f:
9e:0c:ac:d0:51:3a:c0:4e:9c:1c:ad:33:7a:03:41:8c:ae:00:
79:30:4e:a3:87:d4:47:64:74:05:e6:7a:5b:8f:b7:ec:48:79:
b5:54:b9:dc:ed:d9:2a:41:9b:a5:1b:af:53:9b:04:21:1f:60:
34:60:4e:81:46:6d:cd:c0:0b:fc:0d:e6:03:5f:52:ab:aa:00:
1a:c4:64:5c:23:83:d8:f8:80:47:9b:38:2e:5c:17:67:c5:45:
7d:0f:33:41:41:3b:d4:70:b0:cc:04:65:e3:8b:bd:6b:f2:18:
2f:45:06:d7
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYWHUN4GT5cRg3sv9ewn45P3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwMTA2MTM0MTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmRlNTc1YjE4MmIzYWExMjc2ZjNhMjMyMjcwMzJjZWVhZjZlYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUcyn2co2+TwiX/kiDxYSToyL+JU
+d04v+OGOXFmDwkGdTYRvycSL0zMPD4V7ixRHxrwhf3aFlhkgvG/atYgf3AEbxcm
3dpW2sxfErPYhKn54qzNIF0O7dU4YHX0LPIVZ54yTTjx+54k5RmEtrA7iGdN5NUh
F1CDeFXPP+it+70+1C/a74ao5OX+qURpVN7v1a28/L5LGmqyHr7Ek+1JVqkoPiLq
WF4a9FdcWF8BpFvCZ+wMJxd+GlnoTVSC/WTDE9oreHIviLBTU26+bZe+w0f7PrPs
LV2wBVrZw/3Zq1WeXZOmR3/jITxhLR8vYtqYXm9RON+mBHaURNlbhPX9TQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFD/eV1sYKzqhJ286IyJwMs7q9ut/MB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvUDk1WFd4Z3JPcUVuYnpvakluQXl6dXIyNjM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCBQrwAwQC
BQr8AwQAWJfAAwQApNdnAwQAuVHaMA0GCSqGSIb3DQEBCwUAA4IBAQDH+LokL+Hj
gcVGGqA+OcOsb3HKRHxIvgLNJP/pl2tcP1CT9Oz7Z1yADBhVHbalJxx40rCX8aN/
EPGv7JB6ViaRN7PvB4JHjQapxYDh22QP/5UZXFyX8LicmK0Co65xSSctvpmTy8Q2
C4LKm7OnQf92nFXmUbwPsB6PVDvyFJieCbUwLGa4PpIVpZLDxmhPXV+eDKzQUTrA
TpwcrTN6A0GMrgB5ME6jh9RHZHQF5npbj7fsSHm1VLnc7dkqQZulG69TmwQhH2A0
YE6BRm3NwAv8DeYDX1KrqgAaxGRcI4PY+IBHmzguXBdnxUV9DzNBQTvUcLDMBGXj
i71r8hgvRQbX
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:00 2023 by rpki-client on console-fra.rpki-client.org