Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/niqZPbUK3FVkYXzyymkYgN3vZ44.roa
File: niqZPbUK3FVkYXzyymkYgN3vZ44.roa (raw, json)
Hash identifier: fIlptG4ZrTreILipZrwB27cbl4lMCPfDeeeAr2z7rdA=
Subject key identifier: 9E:2A:99:3D:B5:0A:DC:55:64:61:7C:F2:CA:69:18:80:DD:EF:67:8E
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 01898C951384ECF8DCD5B94724188C9ED5B8
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/niqZPbUK3FVkYXzyymkYgN3vZ44.roa
Signing time: Tue 25 Jul 2023 10:25:27 +0000
ROA not before: Tue 25 Jul 2023 10:25:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.85.78.0/24 maxlen: 24
185.85.79.0/24 maxlen: 24
5.63.24.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:95:13:84:ec:f8:dc:d5:b9:47:24:18:8c:9e:d5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Jul 25 10:25:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e2a993db50adc5564617cf2ca691880ddef678e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:87:13:15:b3:dd:d3:87:b7:6f:ba:4a:69:
cc:4c:53:b4:9d:68:b8:34:70:6e:ad:f4:f5:36:e7:
f5:b9:4b:a2:bc:b7:b1:0a:c4:33:d8:5e:73:8a:ac:
c2:28:d8:9c:8d:22:51:78:8e:e5:58:4c:67:e7:ad:
20:38:70:cb:3c:cd:29:b0:fc:0e:08:3a:3a:f6:56:
75:1e:b4:5a:81:02:7d:d7:a0:77:d2:5a:84:39:13:
aa:07:4e:cb:91:c3:e7:1d:43:5b:8d:2f:1d:3c:42:
fe:38:c2:55:c6:af:cc:af:50:34:aa:7d:16:3f:12:
54:fe:f7:e0:90:e3:99:74:47:0f:dd:10:3b:06:a5:
6c:aa:77:d3:ee:de:36:e3:d6:ed:91:45:45:04:91:
bc:0d:9c:ad:af:fa:58:15:0b:eb:3c:f1:0b:98:81:
db:03:98:86:68:82:6f:fc:60:a6:0f:bb:f6:0c:da:
8b:37:97:0d:fd:71:d7:6a:57:7b:97:ef:3c:c0:c1:
2a:b2:62:e2:a7:e6:c2:71:5f:61:70:bf:39:f1:bf:
dd:ae:ef:7b:9a:7e:2e:1a:45:fd:5f:dd:31:b6:b2:
2e:3e:b8:5c:38:d2:2a:a6:81:84:8c:37:b9:3b:62:
f7:71:a6:9c:46:d0:55:2e:5a:ae:cb:47:97:99:67:
c0:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2A:99:3D:B5:0A:DC:55:64:61:7C:F2:CA:69:18:80:DD:EF:67:8E
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/niqZPbUK3FVkYXzyymkYgN3vZ44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.24.0/21
185.85.78.0/23
Signature Algorithm: sha256WithRSAEncryption
06:85:9a:1e:d0:34:34:c7:7c:c4:a8:21:90:81:14:fc:0e:0b:
bd:21:f9:4d:47:60:ac:c5:b7:28:f7:c3:b6:ff:ea:05:40:a2:
aa:63:5a:46:d3:ae:9e:b8:a3:60:58:6b:3b:8c:bf:65:20:6b:
b8:47:e5:a1:d8:69:53:bc:3a:4e:7c:d5:9b:cf:10:bd:66:53:
c1:74:53:7e:8d:b1:20:d6:6a:48:ee:e1:bd:44:14:7b:80:49:
51:a0:b2:d3:50:2d:97:ba:60:e7:09:5f:1c:04:9a:9e:ea:dd:
ec:68:5a:90:b4:02:c0:d4:bf:84:9f:83:7d:29:17:7f:08:7a:
6a:87:df:b8:96:40:97:3a:f1:af:f5:f2:01:c5:db:71:c6:8e:
2f:d3:c3:28:77:6d:ee:46:8a:d5:34:8b:61:79:6c:4b:d6:b1:
b8:a0:bc:14:cd:c2:7b:45:55:a2:5e:ea:c6:3f:8d:b1:0b:07:
c6:32:f1:85:5c:74:f3:a8:c9:4f:7e:90:84:84:19:8c:e8:e2:
8f:91:d9:8b:ae:74:5a:02:85:30:61:16:cf:a2:10:9e:13:73:
8c:08:d9:44:24:4c:bd:aa:9a:02:bf:ca:b3:bf:88:1a:73:86:
4d:ef:86:02:41:e5:1e:7a:b6:81:78:59:b4:70:12:df:07:14:
75:68:b6:d8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYmMlROE7Pjc1blHJBiMntW4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMTQxYzUwOTA4MjRkMGExN2MyOWVjNDA1MGUyMTAwNzEx
M2ZiZGEwHhcNMjMwNzI1MTAyNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTJhOTkzZGI1MGFkYzU1NjQ2MTdjZjJjYTY5MTg4MGRkZWY2NzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWWHExWz3dOHt2+6SmnMTFO0nWi4
NHBurfT1Nuf1uUuivLexCsQz2F5ziqzCKNicjSJReI7lWExn560gOHDLPM0psPwO
CDo69lZ1HrRagQJ916B30lqEOROqB07LkcPnHUNbjS8dPEL+OMJVxq/Mr1A0qn0W
PxJU/vfgkOOZdEcP3RA7BqVsqnfT7t4249btkUVFBJG8DZytr/pYFQvrPPELmIHb
A5iGaIJv/GCmD7v2DNqLN5cN/XHXald7l+88wMEqsmLip+bCcV9hcL858b/dru97
mn4uGkX9X90xtrIuPrhcONIqpoGEjDe5O2L3caacRtBVLlquy0eXmWfAOwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ4qmT21CtxVZGF88sppGIDd72eOMB8GA1UdIwQY
MBaAFFoUHFCQgk0KF8KexAUOIQBxE/vaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUt
ZWNlZWZmOGU4NGUwLzEvbmlxWlBiVUszRlZrWVh6eXlta1lnTjN2WjQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9iMjBlOTAtYmY2ZS00ZTI1LTg3ZDUtZWNlZWZmOGU4NGUw
LzEvV2hRY1VKQ0NUUW9Yd3A3RUJRNGhBSEVULTlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDBT8YAwQB
uVVOMA0GCSqGSIb3DQEBCwUAA4IBAQAGhZoe0DQ0x3zEqCGQgRT8Dgu9IflNR2Cs
xbco98O2/+oFQKKqY1pG066euKNgWGs7jL9lIGu4R+Wh2GlTvDpOfNWbzxC9ZlPB
dFN+jbEg1mpI7uG9RBR7gElRoLLTUC2XumDnCV8cBJqe6t3saFqQtALA1L+En4N9
KRd/CHpqh9+4lkCXOvGv9fIBxdtxxo4v08Mod23uRorVNItheWxL1rG4oLwUzcJ7
RVWiXurGP42xCwfGMvGFXHTzqMlPfpCEhBmM6OKPkdmLrnRaAoUwYRbPohCeE3OM
CNlEJEy9qpoCv8qzv4gac4ZN74YCQeUeeraBeFm0cBLfBxR1aLbY
-----END CERTIFICATE-----
Generated at Wed Jul 26 11:54:53 2023 by rpki-client on console-ams.rpki-client.org