Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/5orm6WDaOcA7IPuCU30uhZ_orw0.roa
File: 5orm6WDaOcA7IPuCU30uhZ_orw0.roa (raw, json)
Hash identifier: DKaohckIi5veSQmlYgr0gmn0Jq4M6D2h4j08SXXGWsw=
Subject key identifier: E6:8A:E6:E9:60:DA:39:C0:3B:20:FB:82:53:7D:2E:85:9F:E8:AF:0D
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0185ED5C6485437BCD13D01152EBFAE50537
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/5orm6WDaOcA7IPuCU30uhZ_orw0.roa
Signing time: Thu 26 Jan 2023 09:15:33 +0000
ROA not before: Thu 26 Jan 2023 09:15:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205352
IP address blocks: 87.246.51.0/24 maxlen: 24
87.246.50.0/24 maxlen: 24
87.246.52.0/23 maxlen: 23
87.246.56.0/22 maxlen: 22
109.160.92.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ed:5c:64:85:43:7b:cd:13:d0:11:52:eb:fa:e5:05:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Jan 26 09:15:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e68ae6e960da39c03b20fb82537d2e859fe8af0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:16:e4:a9:14:49:35:3f:dc:8f:a2:3d:c5:62:
92:27:a1:fd:fe:3b:7c:ea:56:ab:4e:d1:8c:3b:b1:
8c:b7:ba:7f:2a:7d:bb:87:4c:d5:e8:14:d5:07:01:
5d:1f:71:27:16:31:4a:5d:bc:d3:f4:00:29:25:fa:
47:d2:6c:3c:22:35:bd:c2:24:99:c2:bc:40:1d:91:
5b:8e:96:04:e6:90:00:a9:a6:7f:0c:df:8c:66:ce:
f6:1e:33:e0:94:1d:47:e4:c9:35:da:8f:5d:fd:f6:
1a:e8:28:5f:dc:af:d8:c6:db:8b:9b:9b:96:34:70:
98:d4:d1:9b:2e:58:db:49:f9:33:c1:e9:8d:da:e4:
0e:a3:8d:4e:6b:59:8f:f0:92:c0:49:33:97:39:f2:
94:cc:7e:be:91:0d:fb:1c:0e:30:79:e3:5b:02:c1:
49:d5:8c:db:00:7a:0a:70:f4:b6:6d:2d:c6:41:5d:
d1:fe:9f:1b:bb:14:d5:a3:54:72:f6:fb:21:dd:90:
03:f2:44:e0:d3:4a:24:3e:f4:d3:77:90:59:2d:dc:
9b:87:a4:30:5b:aa:b9:61:e3:22:52:05:fa:fc:62:
c1:a1:cb:df:89:3f:fd:18:e0:4c:6e:01:e9:b4:66:
2c:e6:39:71:c7:db:aa:69:46:0a:5c:e4:ad:64:7d:
8b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8A:E6:E9:60:DA:39:C0:3B:20:FB:82:53:7D:2E:85:9F:E8:AF:0D
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/5orm6WDaOcA7IPuCU30uhZ_orw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.50.0-87.246.53.255
87.246.56.0/22
109.160.92.0/22
Signature Algorithm: sha256WithRSAEncryption
05:11:53:1f:62:5b:f1:54:ca:75:c9:a4:94:60:5c:7f:6f:88:
4a:d0:d0:f3:02:ea:35:ea:9c:a1:08:f5:db:5d:7f:a2:57:af:
36:f8:e4:4e:d6:4d:5d:4c:70:22:bd:2d:72:d1:99:09:0f:37:
60:3f:ea:0c:62:9c:a6:8e:d8:f0:66:42:ae:54:63:51:a0:90:
93:6e:66:27:76:a7:a6:e3:d8:96:b5:9a:9c:c4:9d:b0:1e:52:
d1:11:74:57:4e:55:0d:c9:dd:ec:07:44:6d:69:8f:5a:a6:7f:
82:06:0c:b2:f5:af:7c:4e:52:8d:77:db:66:f6:a5:84:17:e7:
71:c6:95:93:a7:81:61:f0:a4:16:e7:27:86:62:57:2b:39:7a:
44:a0:7e:e0:35:f6:0f:00:5a:29:07:e8:bd:fd:6d:b8:2b:c2:
c7:32:ac:a8:66:87:21:39:97:76:aa:a8:35:58:16:aa:c6:f0:
e5:da:40:31:96:8e:6e:d3:8f:34:ad:fb:ae:d8:8c:e3:f6:6c:
84:d3:d1:ed:88:0f:35:10:0d:08:c2:82:2c:65:4a:a4:86:c7:
96:ee:a4:ce:c0:b1:61:30:fe:2a:ff:99:21:59:83:d6:71:ff:
50:4d:b4:18:60:c2:bc:fa:44:10:d7:9c:e9:7a:5f:ac:c7:e1:
4f:11:50:3b
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYXtXGSFQ3vNE9ARUuv65QU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjMwMTI2MDkxNTMzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjhhZTZlOTYwZGEzOWMwM2IyMGZiODI1MzdkMmU4NTlmZThhZjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7xbkqRRJNT/cj6I9xWKSJ6H9/jt8
6larTtGMO7GMt7p/Kn27h0zV6BTVBwFdH3EnFjFKXbzT9AApJfpH0mw8IjW9wiSZ
wrxAHZFbjpYE5pAAqaZ/DN+MZs72HjPglB1H5Mk12o9d/fYa6Chf3K/YxtuLm5uW
NHCY1NGbLljbSfkzwemN2uQOo41Oa1mP8JLASTOXOfKUzH6+kQ37HA4weeNbAsFJ
1YzbAHoKcPS2bS3GQV3R/p8buxTVo1Ry9vsh3ZAD8kTg00okPvTTd5BZLdybh6Qw
W6q5YeMiUgX6/GLBocvfiT/9GOBMbgHptGYs5jlxx9uqaUYKXOStZH2LfwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFOaK5ulg2jnAOyD7glN9LoWf6K8NMB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvNW9ybTZXRGFPY0E3SVB1Q1UzMHVoWl9vcncwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAFX9jID
BAFX9jQDBAJX9jgDBAJtoFwwDQYJKoZIhvcNAQELBQADggEBAAURUx9iW/FUynXJ
pJRgXH9viErQ0PMC6jXqnKEI9dtdf6JXrzb45E7WTV1McCK9LXLRmQkPN2A/6gxi
nKaO2PBmQq5UY1GgkJNuZid2p6bj2Ja1mpzEnbAeUtERdFdOVQ3J3ewHRG1pj1qm
f4IGDLL1r3xOUo1322b2pYQX53HGlZOngWHwpBbnJ4ZiVys5ekSgfuA19g8AWikH
6L39bbgrwscyrKhmhyE5l3aqqDVYFqrG8OXaQDGWjm7TjzSt+67YjOP2bITT0e2I
DzUQDQjCgixlSqSGx5bupM7AsWEw/ir/mSFZg9Zx/1BNtBhgwrz6RBDXnOl6X6zH
4U8RUDs=
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:15:02 2024 by rpki-client on console-ams.rpki-client.org