Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/dgdMH12NjCop948p3vqJ17IKC4o.roa
File: dgdMH12NjCop948p3vqJ17IKC4o.roa (raw, json)
Hash identifier: CV7mMchgPbzsxmTKcbErXgUa73hY+9HgVSOqsZoxtG4=
Subject key identifier: 76:07:4C:1F:5D:8D:8C:2A:29:F7:8F:29:DE:FA:89:D7:B2:0A:0B:8A
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 018572D5BD17B9A5EFD799F54B117E91B3F5
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/dgdMH12NjCop948p3vqJ17IKC4o.roa
Signing time: Mon 02 Jan 2023 14:14:47 +0000
ROA not before: Mon 02 Jan 2023 14:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6461
IP address blocks: 185.85.76.0/22 maxlen: 22
91.190.168.0/21 maxlen: 21
5.63.24.0/21 maxlen: 21
2a02:798::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:d5:bd:17:b9:a5:ef:d7:99:f5:4b:11:7e:91:b3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Jan 2 14:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76074c1f5d8d8c2a29f78f29defa89d7b20a0b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:88:ad:30:0e:65:e0:fb:d9:e1:4d:f2:44:
f1:3d:71:25:c9:43:9b:3b:7d:50:54:f2:85:0a:f5:
31:ae:52:94:0c:6b:e2:6e:33:f6:f1:fe:17:28:23:
68:a7:a6:25:88:37:67:dd:aa:29:22:e8:77:09:25:
bb:0e:c1:54:79:4a:9a:19:8b:73:df:53:1b:09:6c:
b3:88:df:6f:c2:66:6c:78:ea:2b:01:98:ce:c3:35:
10:44:f5:ad:90:27:f8:80:22:51:c7:56:dd:6f:ca:
9f:99:1a:18:25:aa:d2:49:49:42:ac:f9:43:80:62:
b5:3c:29:4a:0f:b0:90:58:22:b8:c9:ff:37:f2:b7:
b8:60:fc:b1:34:7d:2b:d3:1f:7a:6e:4d:cd:ef:9b:
d5:ba:6d:37:74:a0:fc:91:23:d0:37:00:21:0d:01:
1d:6e:96:84:59:44:02:4e:2a:a4:39:d4:b6:db:91:
95:79:60:91:39:26:72:be:8c:1c:8f:31:9f:75:0f:
15:67:d3:c3:d8:92:e8:5e:50:22:94:4f:f1:1c:d5:
a9:0a:d5:0a:66:5b:12:a2:ed:89:d1:47:5f:cc:98:
8a:72:a2:0d:cd:c5:03:c2:fc:58:d0:a7:52:43:af:
bd:f5:27:47:cb:8b:0a:47:b8:3e:73:ef:cd:5f:d4:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:07:4C:1F:5D:8D:8C:2A:29:F7:8F:29:DE:FA:89:D7:B2:0A:0B:8A
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/dgdMH12NjCop948p3vqJ17IKC4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.24.0/21
91.190.168.0/21
185.85.76.0/22
IPv6:
2a02:798::/32
Signature Algorithm: sha256WithRSAEncryption
89:b9:f4:35:b4:ff:a1:9f:72:3a:1a:8c:a9:67:21:81:9e:9f:
bf:46:f3:13:62:3d:a0:4d:e3:ba:a6:90:13:8e:90:f1:c2:0a:
16:fb:08:02:b6:8b:a8:27:e7:ef:3f:03:2c:b3:44:1f:2b:c0:
3d:90:a3:4b:c5:f4:37:59:4a:ba:c5:57:80:03:27:94:23:89:
5d:57:13:25:a8:04:83:dd:d1:c0:b8:c9:56:a8:85:6a:60:d3:
97:d8:77:9e:90:33:e0:f1:cd:29:d3:f3:b2:55:31:ab:24:bf:
c2:f5:aa:68:9d:43:9e:d1:e1:ad:3b:be:25:1e:60:5c:3a:7a:
36:ea:9c:d5:23:47:8a:3c:6e:24:4d:f8:ce:5a:a5:8a:26:85:
37:3a:98:69:02:c3:f7:c3:9f:a2:bf:58:e7:fe:e2:1b:9a:cf:
8a:00:8c:a1:15:56:5e:0e:2b:5a:d6:2a:cd:c1:25:fe:6a:f8:
8b:8f:eb:b3:79:cd:7b:f8:bc:3f:6c:23:e5:60:95:64:a2:fa:
18:43:2f:04:e1:a6:6c:a6:67:db:99:26:c5:22:57:94:7d:7a:
93:41:c5:b4:1c:11:4f:07:cc:51:12:3f:da:68:e0:7e:a7:8c:
ca:4c:44:64:7d:97:a3:1b:f4:27:ad:50:6f:da:ce:11:1f:fb:
79:37:1a:b8
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYVy1b0XuaXv15n1SxF+kbP1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx
M2ZiZGEwHhcNMjMwMTAyMTQxNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjA3NGMxZjVkOGQ4YzJhMjlmNzhmMjlkZWZhODlkN2IyMGEwYjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCKIrTAOZeD72eFN8kTxPXElyUOb
O31QVPKFCvUxrlKUDGvibjP28f4XKCNop6YliDdn3aopIuh3CSW7DsFUeUqaGYtz
31MbCWyziN9vwmZseOorAZjOwzUQRPWtkCf4gCJRx1bdb8qfmRoYJarSSUlCrPlD
gGK1PClKD7CQWCK4yf838re4YPyxNH0r0x96bk3N75vVum03dKD8kSPQNwAhDQEd
bpaEWUQCTiqkOdS225GVeWCROSZyvowcjzGfdQ8VZ9PD2JLoXlAilE/xHNWpCtUK
ZlsSou2J0UdfzJiKcqINzcUDwvxY0KdSQ6+99SdHy4sKR7g+c+/NX9RMYwIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFHYHTB9djYwqKfePKd76ideyCguKMB8GA1UdIwQY
MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt
ZWNlZWZmOGU4NGUwLzEvZGdkTUgxMk5qQ29wOTQ4cDN2cUoxN0lLQzRvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw
LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBT8YAwQD
W76oAwQCuVVMMA0EAgACMAcDBQAqAgeYMA0GCSqGSIb3DQEBCwUAA4IBAQCJufQ1
tP+hn3I6GoypZyGBnp+/RvMTYj2gTeO6ppATjpDxwgoW+wgCtouoJ+fvPwMss0Qf
K8A9kKNLxfQ3WUq6xVeAAyeUI4ldVxMlqASD3dHAuMlWqIVqYNOX2HeekDPg8c0p
0/OyVTGrJL/C9aponUOe0eGtO74lHmBcOno26pzVI0eKPG4kTfjOWqWKJoU3Ophp
AsP3w5+iv1jn/uIbms+KAIyhFVZeDita1irNwSX+aviLj+uzec17+Lw/bCPlYJVk
ovoYQy8E4aZspmfbmSbFIleUfXqTQcW0HBFPB8xREj/aaOB+p4zKTERkfZejG/Qn
rVBv2s4RH/t5Nxq4
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:53 2024 by rpki-client on console-ams.rpki-client.org