Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/lg5x_fZs8Uv66DmYW_SL_Mc6uuA.roa
File: lg5x_fZs8Uv66DmYW_SL_Mc6uuA.roa (raw, json)
Hash identifier: 5mdEA4ljgcXlY8y39nlAwQ1yQeszTnR2izylZl+Y+Vk=
Subject key identifier: 96:0E:71:FD:F6:6C:F1:4B:FA:E8:39:98:5B:F4:8B:FC:C7:3A:BA:E0
Certificate issuer: /CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Certificate serial: 0185703981872FBCCA8265AC5D82EAC2E3C1
Authority key identifier: E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/lg5x_fZs8Uv66DmYW_SL_Mc6uuA.roa
Signing time: Mon 02 Jan 2023 02:04:54 +0000
ROA not before: Mon 02 Jan 2023 02:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61239
IP address blocks: 185.12.101.0/24 maxlen: 24
185.12.100.0/22 maxlen: 22
185.12.100.0/24 maxlen: 24
185.12.103.0/24 maxlen: 24
185.12.102.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:81:87:2f:bc:ca:82:65:ac:5d:82:ea:c2:e3:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6006f1abb75727e7bc30c179e6974d2d18f8f38
Validity
Not Before: Jan 2 02:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=960e71fdf66cf14bfae839985bf48bfcc73abae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:32:c6:9d:c2:2c:78:a9:f7:f4:c1:c8:84:
bf:42:92:4e:bb:aa:e0:6e:7a:99:df:4b:07:b2:6a:
43:aa:8b:de:af:c1:5f:85:95:b0:34:56:9a:b3:cb:
7a:5e:62:35:dd:9c:d5:d8:6f:e7:21:8b:5b:57:2e:
fa:57:86:91:a2:ac:d4:73:76:71:ba:b4:27:66:1b:
de:82:2f:a1:51:08:7a:78:12:72:8c:e1:38:4e:de:
0a:72:9d:b4:7c:07:a7:f3:3a:2b:e6:7f:33:ba:06:
d3:26:2d:e0:aa:8b:eb:a2:70:18:be:17:78:42:69:
86:90:98:bc:0b:19:96:bb:40:f3:ef:5b:6f:ef:65:
19:48:db:50:07:c9:c8:3d:ef:a1:2b:45:ab:f0:ca:
a6:a2:f7:af:0a:c1:1d:65:1c:b1:33:01:a2:82:56:
f6:5e:4e:67:55:c1:c7:ab:d3:6e:47:85:ef:fa:9f:
17:27:18:ed:96:37:ec:c9:c1:54:45:36:4b:21:19:
10:e5:0e:d1:87:ed:5a:1d:fc:6a:fa:a1:a7:74:d8:
39:f8:b7:6e:17:a4:f6:33:60:bc:fd:7c:05:71:d6:
b6:b1:01:c4:b3:44:4a:aa:85:f5:14:9a:cc:d1:c7:
82:32:a1:e9:94:f9:fd:62:8f:b1:98:2b:f4:be:0e:
db:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0E:71:FD:F6:6C:F1:4B:FA:E8:39:98:5B:F4:8B:FC:C7:3A:BA:E0
X509v3 Authority Key Identifier:
keyid:E6:00:6F:1A:BB:75:72:7E:7B:C3:0C:17:9E:69:74:D2:D1:8F:8F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gBvGrt1cn57wwwXnml00tGPjzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/lg5x_fZs8Uv66DmYW_SL_Mc6uuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a27a19-90b5-4671-bbc1-472d882e9d72/1/5gBvGrt1cn57wwwXnml00tGPjzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.100.0/22
Signature Algorithm: sha256WithRSAEncryption
09:67:c1:97:16:e5:7e:b3:fe:59:0a:24:ab:e3:c0:e2:72:d8:
ce:a5:83:44:d5:6e:6e:d0:46:c5:65:59:22:fa:18:bf:cc:f0:
8f:c1:f2:0c:98:ff:3b:69:00:20:0e:c4:98:4b:a9:4b:e8:5a:
d5:9f:a3:96:79:de:1c:e8:0c:68:d2:9e:98:ac:7d:17:19:e7:
bc:ff:26:47:d1:93:90:37:32:d9:99:af:a2:d9:69:11:96:c7:
74:68:61:38:c4:19:81:2e:13:df:26:23:c4:68:25:28:ba:fa:
15:5f:cf:fc:ec:bf:22:4c:96:b1:01:8a:cd:82:f7:6f:e4:ef:
b2:47:9b:19:24:1e:3f:5e:17:51:23:8d:7b:fd:8a:c6:e4:ad:
d3:f3:64:77:7a:bb:fb:4c:11:75:dd:0e:b8:4a:79:27:08:bb:
88:f3:f0:3b:e5:e1:de:ae:a6:6b:43:89:f3:99:6e:cd:23:2d:
c8:60:b6:6b:4f:af:3b:48:84:2f:30:5d:3b:f3:d7:42:a7:9c:
7f:02:38:f1:04:1b:a5:3d:a3:cc:af:c4:bc:8f:2c:a1:04:97:
4b:72:f6:31:f7:7a:38:a1:ef:b1:0e:de:44:da:59:e1:de:a1:
2e:ef:c6:8c:ba:fb:94:60:ae:9d:ef:35:b7:d6:51:f0:92:76:
62:f0:7b:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwOYGHL7zKgmWsXYLqwuPBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2MDA2ZjFhYmI3NTcyN2U3YmMzMGMxNzllNjk3NGQyZDE4
ZjhmMzgwHhcNMjMwMTAyMDIwNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NjBlNzFmZGY2NmNmMTRiZmFlODM5OTg1YmY0OGJmY2M3M2FiYWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkQyxp3CLHip9/TByIS/QpJOu6rg
bnqZ30sHsmpDqover8FfhZWwNFaas8t6XmI13ZzV2G/nIYtbVy76V4aRoqzUc3Zx
urQnZhvegi+hUQh6eBJyjOE4Tt4Kcp20fAen8zor5n8zugbTJi3gqovronAYvhd4
QmmGkJi8CxmWu0Dz71tv72UZSNtQB8nIPe+hK0Wr8MqmovevCsEdZRyxMwGiglb2
Xk5nVcHHq9NuR4Xv+p8XJxjtljfsycFURTZLIRkQ5Q7Rh+1aHfxq+qGndNg5+Ldu
F6T2M2C8/XwFcda2sQHEs0RKqoX1FJrM0ceCMqHplPn9Yo+xmCv0vg7b3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJYOcf32bPFL+ug5mFv0i/zHOrrgMB8GA1UdIwQY
MBaAFOYAbxq7dXJ+e8MMF55pdNLRj484MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEt
NDcyZDg4MmU5ZDcyLzEvbGc1eF9mWnM4VXY2NkRtWVdfU0xfTWM2dXVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9hMjdhMTktOTBiNS00NjcxLWJiYzEtNDcyZDg4MmU5ZDcy
LzEvNWdCdkdydDFjbjU3d3d3WG5tbDAwdEdQanpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuQxkMA0G
CSqGSIb3DQEBCwUAA4IBAQAJZ8GXFuV+s/5ZCiSr48DictjOpYNE1W5u0EbFZVki
+hi/zPCPwfIMmP87aQAgDsSYS6lL6FrVn6OWed4c6Axo0p6YrH0XGee8/yZH0ZOQ
NzLZma+i2WkRlsd0aGE4xBmBLhPfJiPEaCUouvoVX8/87L8iTJaxAYrNgvdv5O+y
R5sZJB4/XhdRI417/YrG5K3T82R3erv7TBF13Q64SnknCLuI8/A75eHerqZrQ4nz
mW7NIy3IYLZrT687SIQvMF0789dCp5x/AjjxBBulPaPMr8S8jyyhBJdLcvYx93o4
oe+xDt5E2lnh3qEu78aMuvuUYK6d7zW31lHwknZi8HuG
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:17 2024 by rpki-client on console-fra.rpki-client.org