Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/cRJu0CeyiU7F_ta8JVBP7hUG7iM.roa
File: cRJu0CeyiU7F_ta8JVBP7hUG7iM.roa (raw, json)
Hash identifier: +/O84CkmBIwJYdOpl5NJB9sHtlrBUzsKWTmm/zt+KE4=
Subject key identifier: 71:12:6E:D0:27:B2:89:4E:C5:FE:D6:BC:25:50:4F:EE:15:06:EE:23
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01875AC91D11779A03F0485941E75BE99B1F
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/cRJu0CeyiU7F_ta8JVBP7hUG7iM.roa
Signing time: Fri 07 Apr 2023 08:15:42 +0000
ROA not before: Fri 07 Apr 2023 08:15:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212025
IP address blocks: 85.158.145.0/24 maxlen: 24
5.10.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:5a:c9:1d:11:77:9a:03:f0:48:59:41:e7:5b:e9:9b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Apr 7 08:15:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71126ed027b2894ec5fed6bc25504fee1506ee23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:72:df:ab:97:c5:f7:c6:7e:c2:f7:30:7f:3a:
12:01:b6:33:6b:7a:15:d7:e0:4e:38:4d:f4:40:58:
60:db:57:3a:f0:4f:4f:ff:37:b9:c1:4f:86:de:fe:
61:fb:cd:21:0b:f0:73:66:99:33:ba:88:cf:ba:58:
74:4a:55:a2:66:a4:71:e0:08:e2:52:38:59:87:5d:
1b:45:55:19:b9:42:fc:4c:a6:2c:5a:ae:28:4f:f3:
f6:e3:88:e4:71:47:f1:2c:f5:d8:8d:45:c9:25:d2:
19:16:67:22:7b:b7:57:77:7b:cf:5b:5e:21:e6:20:
4e:3f:f9:10:60:4e:e6:ab:6f:8a:8e:19:8f:02:71:
eb:a8:79:08:fc:59:26:1a:52:84:72:68:9f:a9:d3:
cf:8e:e5:67:30:2b:84:20:6a:9f:2f:5a:3f:fc:f1:
ed:94:8d:2f:d0:03:31:97:f7:2d:2b:db:3a:cc:9c:
c9:fc:5b:e1:4a:a5:25:73:f4:8e:48:3b:36:00:5e:
cb:95:bb:1e:9e:a6:03:6f:b3:2c:78:da:37:fc:d0:
fd:d3:b7:c1:8a:05:a2:1f:96:a6:ed:d6:2e:cb:f9:
9f:c8:83:3c:33:c9:7a:f9:a1:f3:27:1a:f1:67:e1:
23:18:0b:c1:df:30:e1:c8:a1:16:5b:3b:8d:35:a2:
b1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:12:6E:D0:27:B2:89:4E:C5:FE:D6:BC:25:50:4F:EE:15:06:EE:23
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/cRJu0CeyiU7F_ta8JVBP7hUG7iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.249.0/24
85.158.145.0/24
Signature Algorithm: sha256WithRSAEncryption
dd:29:3a:1f:60:87:1b:1b:de:69:6b:69:d7:7d:ec:f5:bf:b8:
c0:82:c1:28:77:3e:3b:d5:8b:64:61:a1:6f:e4:2b:96:40:91:
47:c8:7d:ad:e4:38:60:72:f2:c8:17:47:af:fe:b9:43:61:c7:
55:f8:40:24:f3:13:8b:45:8c:54:06:17:5b:05:84:15:e7:5a:
e6:ff:25:0a:fe:00:c4:35:01:97:7a:58:0f:d1:0a:58:58:95:
87:f1:3e:66:ff:17:77:6d:1c:d1:95:4f:6c:6b:aa:0d:12:ad:
e7:4f:f4:bb:53:95:33:a7:c1:0d:16:7a:07:57:a4:34:d0:31:
b8:9f:f0:49:ec:1a:82:4f:0b:2f:51:da:74:2d:f4:cb:45:31:
64:a8:29:ee:0c:60:f6:a8:30:b0:d0:37:44:66:20:72:7f:95:
83:9e:ca:be:c0:49:3e:40:7f:6c:0f:ae:4c:85:b5:7c:e6:ea:
1d:c8:cd:d2:e8:28:34:c8:08:30:fa:4e:14:92:f2:94:f8:56:
29:dd:53:81:d6:bf:f0:d4:72:14:59:e9:bc:f1:94:f9:fa:4f:
57:df:21:61:4e:0d:a7:b9:24:c3:86:cb:a1:72:88:cd:89:38:
3c:03:19:a4:40:1c:b4:e7:d6:1d:eb:19:d8:3b:5a:42:db:b6:
2e:5a:a3:2b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYdayR0Rd5oD8EhZQedb6ZsfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwNDA3MDgxNTQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTEyNmVkMDI3YjI4OTRlYzVmZWQ2YmMyNTUwNGZlZTE1MDZlZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXLfq5fF98Z+wvcwfzoSAbYza3oV
1+BOOE30QFhg21c68E9P/ze5wU+G3v5h+80hC/BzZpkzuojPulh0SlWiZqRx4Aji
UjhZh10bRVUZuUL8TKYsWq4oT/P244jkcUfxLPXYjUXJJdIZFmcie7dXd3vPW14h
5iBOP/kQYE7mq2+KjhmPAnHrqHkI/FkmGlKEcmifqdPPjuVnMCuEIGqfL1o//PHt
lI0v0AMxl/ctK9s6zJzJ/FvhSqUlc/SOSDs2AF7LlbsenqYDb7MseNo3/ND907fB
igWiH5am7dYuy/mfyIM8M8l6+aHzJxrxZ+EjGAvB3zDhyKEWWzuNNaKxsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHESbtAnsolOxf7WvCVQT+4VBu4jMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvY1JKdTBDZXlpVTdGX3RhOEpWQlA3aFVHN2lNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABQr5AwQA
VZ6RMA0GCSqGSIb3DQEBCwUAA4IBAQDdKTofYIcbG95pa2nXfez1v7jAgsEodz47
1YtkYaFv5CuWQJFHyH2t5DhgcvLIF0ev/rlDYcdV+EAk8xOLRYxUBhdbBYQV51rm
/yUK/gDENQGXelgP0QpYWJWH8T5m/xd3bRzRlU9sa6oNEq3nT/S7U5Uzp8ENFnoH
V6Q00DG4n/BJ7BqCTwsvUdp0LfTLRTFkqCnuDGD2qDCw0DdEZiByf5WDnsq+wEk+
QH9sD65MhbV85uodyM3S6Cg0yAgw+k4UkvKU+FYp3VOB1r/w1HIUWem88ZT5+k9X
3yFhTg2nuSTDhsuhcojNiTg8AxmkQBy059Yd6xnYO1pC27YuWqMr
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org