Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/5dVyXAXkSjN9xUrwM7kgsZIhOAY.roa
File: 5dVyXAXkSjN9xUrwM7kgsZIhOAY.roa (raw, json)
Hash identifier: HZgZ+InOiNH63cf5dMMlC8n4X2C69/l5rI7Dd4hpFq4=
Subject key identifier: E5:D5:72:5C:05:E4:4A:33:7D:C5:4A:F0:33:B9:20:B1:92:21:38:06
Certificate issuer: /CN=e0b9c65dc95053e437e32c99acf3bdc5e95cb1ee
Certificate serial: 01856CCAEB2BB6CDD188649A412561567F5C
Authority key identifier: E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4LnGXclQU-Q34yyZrPO9xelcse4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/5dVyXAXkSjN9xUrwM7kgsZIhOAY.roa
Signing time: Sun 01 Jan 2023 10:05:15 +0000
ROA not before: Sun 01 Jan 2023 10:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49931
IP address blocks: 109.164.0.0/17 maxlen: 25
109.164.116.0/22 maxlen: 24
109.164.121.0/24 maxlen: 25
109.164.120.0/24 maxlen: 25
2a03:3a01::/32 maxlen: 56
2a03:3a00::/32 maxlen: 56
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:eb:2b:b6:cd:d1:88:64:9a:41:25:61:56:7f:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0b9c65dc95053e437e32c99acf3bdc5e95cb1ee
Validity
Not Before: Jan 1 10:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5d5725c05e44a337dc54af033b920b192213806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:9a:60:7f:63:d1:48:9d:14:67:58:7c:f4:
9f:14:22:e7:75:00:31:ab:77:71:9e:72:9b:87:03:
8b:cc:d4:b9:06:f7:be:ad:b7:78:33:7e:77:4f:c6:
19:6e:f4:bb:9d:59:f0:b5:83:7e:7c:92:57:b6:ec:
2f:f0:bf:b9:07:81:2f:fe:d6:53:69:c7:29:f9:d8:
15:19:67:9c:48:07:d4:07:c4:92:5b:d9:b4:d3:0d:
6e:0a:f3:65:1f:da:6c:25:c8:35:a1:6c:8a:61:69:
e1:bf:fe:cf:ba:5a:0f:56:f5:fd:a0:59:35:76:ba:
71:72:12:49:22:90:2c:85:ba:5e:94:a0:4a:38:3a:
d9:98:8c:bb:ea:04:0d:cf:5d:f9:da:e5:61:9a:5e:
78:3a:74:99:32:c0:26:ec:2e:bc:43:98:b9:ef:cc:
61:d3:ab:d2:bb:77:e4:02:cd:e8:7d:4d:d6:be:3b:
fe:73:c0:34:82:e0:69:d1:8c:99:0f:f3:a9:a1:9d:
6a:75:3c:65:7d:16:ca:5f:83:cc:b3:ef:82:44:78:
e7:76:f7:47:c9:2b:6d:2e:3b:6e:09:ec:d5:42:71:
3c:f7:e5:29:c8:c4:2a:e0:4b:3e:74:3f:65:89:da:
e6:55:c5:58:48:f0:ed:d7:83:85:95:ed:03:58:09:
04:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D5:72:5C:05:E4:4A:33:7D:C5:4A:F0:33:B9:20:B1:92:21:38:06
X509v3 Authority Key Identifier:
keyid:E0:B9:C6:5D:C9:50:53:E4:37:E3:2C:99:AC:F3:BD:C5:E9:5C:B1:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4LnGXclQU-Q34yyZrPO9xelcse4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/5dVyXAXkSjN9xUrwM7kgsZIhOAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/d019bb-8768-4478-a39a-b94f7654a8c7/1/4LnGXclQU-Q34yyZrPO9xelcse4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.164.0.0/17
IPv6:
2a03:3a00::/31
Signature Algorithm: sha256WithRSAEncryption
66:20:c8:7a:6c:1d:3a:3f:3d:e8:c5:d5:22:58:db:77:f4:41:
1d:bd:41:86:eb:aa:dd:b3:5f:7d:a1:53:c3:6e:9c:cb:bf:f7:
8f:00:eb:1d:d4:e6:ce:b3:e5:c0:24:c4:8a:3f:26:e8:57:d1:
02:70:af:0f:88:c9:03:c2:fa:1c:bd:5c:94:1f:5b:5d:8b:e7:
a3:5e:d3:b4:9c:13:66:d6:a3:c0:5f:5b:12:3d:25:03:d0:f6:
56:49:41:fa:6d:f4:4a:2c:75:19:e5:64:ae:e3:ea:c7:19:71:
50:13:54:d6:37:14:92:d6:79:21:5c:ac:99:ea:22:d9:36:b5:
fd:d9:75:4e:b0:c3:a8:10:d6:39:47:74:ea:35:c0:ad:a1:1d:
98:c4:eb:fd:da:b1:46:0d:81:3c:4e:69:c2:94:c7:ce:2e:58:
96:99:74:7a:59:0f:b6:4e:4a:7e:af:7a:b8:88:3c:34:d3:dc:
8c:50:13:b0:58:ed:75:ab:2c:60:77:2f:fd:a7:21:51:cd:25:
fb:ca:0c:25:8c:4d:a1:36:f2:63:1e:60:07:94:37:f8:81:60:
0a:41:dd:28:aa:e4:a4:63:97:e7:fd:db:ab:f7:12:18:24:7f:
55:89:32:5e:ac:8e:fe:44:46:e0:b1:50:da:f4:0b:9d:58:78:
d1:33:27:04
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVsyusrts3RiGSaQSVhVn9cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYjljNjVkYzk1MDUzZTQzN2UzMmM5OWFjZjNiZGM1ZTk1
Y2IxZWUwHhcNMjMwMTAxMTAwNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNWQ1NzI1YzA1ZTQ0YTMzN2RjNTRhZjAzM2I5MjBiMTkyMjEzODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw66aYH9j0UidFGdYfPSfFCLndQAx
q3dxnnKbhwOLzNS5Bve+rbd4M353T8YZbvS7nVnwtYN+fJJXtuwv8L+5B4Ev/tZT
accp+dgVGWecSAfUB8SSW9m00w1uCvNlH9psJcg1oWyKYWnhv/7PuloPVvX9oFk1
drpxchJJIpAshbpelKBKODrZmIy76gQNz1352uVhml54OnSZMsAm7C68Q5i578xh
06vSu3fkAs3ofU3Wvjv+c8A0guBp0YyZD/OpoZ1qdTxlfRbKX4PMs++CRHjndvdH
ySttLjtuCezVQnE89+UpyMQq4Es+dD9lidrmVcVYSPDt14OFle0DWAkEpwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOXVclwF5EozfcVK8DO5ILGSITgGMB8GA1UdIwQY
MBaAFOC5xl3JUFPkN+MsmazzvcXpXLHuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNExuR1hjbFFVLVEzNHl5WnJQTzl4ZWxjc2U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9kMDE5YmItODc2OC00NDc4LWEzOWEt
Yjk0Zjc2NTRhOGM3LzEvNWRWeVhBWGtTak45eFVyd003a2dzWkloT0FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9kMDE5YmItODc2OC00NDc4LWEzOWEtYjk0Zjc2NTRhOGM3
LzEvNExuR1hjbFFVLVEzNHl5WnJQTzl4ZWxjc2U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQHbaQAMA0E
AgACMAcDBQEqAzoAMA0GCSqGSIb3DQEBCwUAA4IBAQBmIMh6bB06Pz3oxdUiWNt3
9EEdvUGG66rds199oVPDbpzLv/ePAOsd1ObOs+XAJMSKPyboV9ECcK8PiMkDwvoc
vVyUH1tdi+ejXtO0nBNm1qPAX1sSPSUD0PZWSUH6bfRKLHUZ5WSu4+rHGXFQE1TW
NxSS1nkhXKyZ6iLZNrX92XVOsMOoENY5R3TqNcCtoR2YxOv92rFGDYE8TmnClMfO
LliWmXR6WQ+2Tkp+r3q4iDw009yMUBOwWO11qyxgdy/9pyFRzSX7ygwljE2hNvJj
HmAHlDf4gWAKQd0oquSkY5fn/dur9xIYJH9ViTJerI7+REbgsVDa9AudWHjRMycE
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:33 2023 by rpki-client on console.sobornost.net