Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/5MDrnrvzb6pfJiN3FltX7QNX0C4.roa
File: 5MDrnrvzb6pfJiN3FltX7QNX0C4.roa (raw, json)
Hash identifier: QDWOugEAFzWoPhgSx0sZ7aWsdx67zvY/KGD1+KrKOfU=
Subject key identifier: E4:C0:EB:9E:BB:F3:6F:AA:5F:26:23:77:16:5B:57:ED:03:57:D0:2E
Certificate issuer: /CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Certificate serial: 01856D4AD58CFBC25BB886DB768CBF086D61
Authority key identifier: 18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/5MDrnrvzb6pfJiN3FltX7QNX0C4.roa
Signing time: Sun 01 Jan 2023 12:24:58 +0000
ROA not before: Sun 01 Jan 2023 12:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41230
IP address blocks: 78.109.176.0/20 maxlen: 20
31.205.192.0/18 maxlen: 18
31.205.0.0/18 maxlen: 18
31.205.0.0/16 maxlen: 16
31.205.128.0/18 maxlen: 18
45.154.248.0/22 maxlen: 22
185.198.228.0/22 maxlen: 23
185.134.138.0/24 maxlen: 24
185.134.136.0/23 maxlen: 23
45.81.120.0/22 maxlen: 22
185.134.139.0/24 maxlen: 24
31.205.64.0/18 maxlen: 18
185.134.144.0/22 maxlen: 22
213.143.0.0/19 maxlen: 19
176.119.145.0/24 maxlen: 24
81.23.48.0/20 maxlen: 20
185.134.128.0/22 maxlen: 22
2a00:1a10::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:d5:8c:fb:c2:5b:b8:86:db:76:8c:bf:08:6d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18e2aed9af3a4be560aa19b92846c5fbe11c9b19
Validity
Not Before: Jan 1 12:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4c0eb9ebbf36faa5f262377165b57ed0357d02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:aa:0d:af:4d:ae:16:c0:12:52:14:09:aa:
7c:7c:12:b0:49:cf:41:75:e8:d6:9e:1f:3d:d1:74:
24:3c:52:d6:87:d9:31:04:b0:a2:12:c9:9d:f7:21:
66:17:f2:80:e0:2f:3c:ab:26:f0:85:d1:58:4e:82:
6d:9e:2a:77:4a:a1:67:2b:78:e7:e8:a5:73:62:81:
84:7e:3f:14:4a:39:dd:5e:87:cd:d3:d4:77:4f:ce:
69:77:f6:80:8b:a8:29:45:5e:1c:86:7e:4a:da:27:
6c:f7:a4:29:0f:be:e6:4f:6e:c5:ad:d2:6d:ed:fe:
34:83:af:e0:73:5f:9b:1e:fd:3f:8e:9d:92:a0:31:
db:39:c7:40:3b:cd:93:45:0b:31:4e:c2:4f:57:e7:
0e:88:ed:b3:cf:c8:13:21:d4:c3:89:a1:d7:51:5c:
75:a7:56:fc:7c:f0:af:33:97:01:63:5e:9a:37:d4:
c7:6e:d5:28:11:81:2b:75:d7:5c:4a:7b:ef:0a:1b:
13:a4:53:ca:ad:8e:3a:7a:82:14:15:dd:af:a1:85:
9e:d7:0b:47:71:71:c7:85:2f:54:e3:9e:58:fa:e3:
e4:35:90:a7:37:4c:1d:57:28:32:0d:b5:6e:5f:14:
3b:15:0a:5d:a3:78:40:67:7d:44:71:2a:3c:0b:22:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C0:EB:9E:BB:F3:6F:AA:5F:26:23:77:16:5B:57:ED:03:57:D0:2E
X509v3 Authority Key Identifier:
keyid:18:E2:AE:D9:AF:3A:4B:E5:60:AA:19:B9:28:46:C5:FB:E1:1C:9B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GOKu2a86S-Vgqhm5KEbF--Ecmxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/5MDrnrvzb6pfJiN3FltX7QNX0C4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2391ed-f285-4286-af2f-d2551cdde4af/1/GOKu2a86S-Vgqhm5KEbF--Ecmxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.205.0.0/16
45.81.120.0/22
45.154.248.0/22
78.109.176.0/20
81.23.48.0/20
176.119.145.0/24
185.134.128.0/22
185.134.136.0/22
185.134.144.0/22
185.198.228.0/22
213.143.0.0/19
IPv6:
2a00:1a10::/29
Signature Algorithm: sha256WithRSAEncryption
2f:cb:9e:86:e7:a6:84:bb:d9:2e:21:58:0f:e7:49:e8:22:fa:
af:d7:60:6b:a9:06:4f:6b:d8:67:b7:bb:bf:99:df:9b:81:d1:
3d:90:c6:e2:f6:1a:1b:e3:3f:43:fa:40:ea:35:34:9f:60:b3:
8a:3e:d1:bd:ba:a0:c3:aa:10:f2:c2:8c:a5:5a:49:7c:3d:b2:
32:d2:b1:56:52:be:6f:99:0b:34:c7:d0:76:18:79:c6:91:3c:
29:9f:9f:cd:8b:02:c3:41:17:99:79:20:1f:5c:76:4b:88:50:
ee:e0:a6:cf:62:a0:12:ec:00:0a:f9:ba:52:a4:10:81:e7:4c:
67:27:ef:d5:51:a4:12:ef:cb:01:b0:ab:20:f5:3b:12:2b:c6:
ce:de:a9:95:8f:a7:f6:c9:ad:d4:a3:53:be:8d:d3:f3:81:ab:
f8:16:d1:14:a2:1a:0a:d2:f4:da:0a:55:16:ad:3a:33:1b:59:
69:5c:17:93:2a:c7:70:44:70:d1:93:99:1a:df:1c:f9:5b:99:
dd:69:d6:de:c9:81:18:01:b0:82:b3:09:88:e3:d6:12:bd:ab:
d7:4c:6d:38:2b:cd:0a:e3:88:2d:27:1f:db:53:72:68:da:37:
ba:df:a2:2f:f9:da:a2:4f:cf:68:06:92:22:cc:02:08:41:11:
d2:2c:f2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:34 2023 by rpki-client on console.sobornost.net