Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1sDhxw_jnh4VthkZRyy246vmq2M.roa
File: 1sDhxw_jnh4VthkZRyy246vmq2M.roa (raw, json)
Hash identifier: BUknivHaURn20OkGZR1yVa9Tk4rxJlveCiAMpNBvheU=
Subject key identifier: D6:C0:E1:C7:0F:E3:9E:1E:15:B6:19:19:47:2C:B6:E3:AB:E6:AB:63
Certificate issuer: /CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Certificate serial: 01857CBAE65B74C5D5136FC420CA21CA3770
Authority key identifier: D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1sDhxw_jnh4VthkZRyy246vmq2M.roa
Signing time: Wed 04 Jan 2023 12:21:41 +0000
ROA not before: Wed 04 Jan 2023 12:21:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60423
IP address blocks: 5.145.119.0/24 maxlen: 24
185.24.253.0/24 maxlen: 24
185.24.252.0/24 maxlen: 24
5.145.117.0/24 maxlen: 24
5.145.118.0/24 maxlen: 24
5.145.113.0/24 maxlen: 24
2a04:2f00::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7c:ba:e6:5b:74:c5:d5:13:6f:c4:20:ca:21:ca:37:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e2694652aa298511edafbe18d2b1cdbc792638
Validity
Not Before: Jan 4 12:21:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6c0e1c70fe39e1e15b61919472cb6e3abe6ab63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:03:ee:e6:dc:e6:f7:93:48:e8:83:d1:71:5d:
70:93:8f:dc:24:6d:e9:d3:04:e7:b5:8d:c1:38:c4:
57:d0:cf:29:74:61:67:27:01:1b:3d:eb:71:81:3f:
fe:46:89:d7:d1:a6:de:cd:a1:74:19:79:a4:9e:36:
0c:8d:08:30:fd:d4:a0:3d:0e:43:36:22:69:2e:85:
c9:78:53:02:d6:d1:44:fa:2a:fe:c3:ae:55:76:91:
26:7f:15:f4:01:d1:10:1f:3a:29:2a:f0:4a:18:7d:
32:10:4d:e8:3b:dc:af:d5:a4:77:fc:95:a9:3e:7a:
38:00:1b:73:30:cd:70:60:66:82:4f:a1:43:c0:79:
bc:a0:f9:22:bc:69:ad:8e:15:d9:73:3f:3a:70:49:
26:8f:44:c6:9f:b0:6b:f0:4a:cd:55:62:3e:3e:d6:
44:25:00:6e:65:52:ff:5b:78:21:36:ee:d4:21:4a:
a3:0b:22:3b:3a:27:3b:08:51:fb:e0:47:e6:b4:e3:
c3:f7:2f:e5:d6:84:3d:c5:1b:64:d9:ae:1b:53:bd:
90:7b:4b:38:99:b5:f8:13:9b:82:e7:af:1c:ed:1c:
4f:da:9e:dc:29:c7:cf:6f:cb:c7:2e:9d:d0:b1:5c:
7f:b9:53:8a:b6:a5:d9:29:3f:7d:06:60:dd:8a:76:
ad:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C0:E1:C7:0F:E3:9E:1E:15:B6:19:19:47:2C:B6:E3:AB:E6:AB:63
X509v3 Authority Key Identifier:
keyid:D6:E2:69:46:52:AA:29:85:11:ED:AF:BE:18:D2:B1:CD:BC:79:26:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uJpRlKqKYUR7a--GNKxzbx5Jjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1sDhxw_jnh4VthkZRyy246vmq2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8cc506-7e71-4705-a289-b42364895083/1/1uJpRlKqKYUR7a--GNKxzbx5Jjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.113.0/24
5.145.117.0-5.145.119.255
185.24.252.0/23
IPv6:
2a04:2f00::/48
Signature Algorithm: sha256WithRSAEncryption
3e:d1:f1:6a:82:19:61:66:3f:25:11:67:54:9f:d5:94:d7:77:
e3:07:57:57:3e:94:56:52:57:9c:23:22:29:30:d5:8e:d9:a3:
b7:e7:20:63:e5:6a:d4:5b:d5:62:59:f5:41:76:c4:36:ea:ee:
e4:22:98:2f:63:1b:2a:9b:b3:32:82:8b:ec:f4:1a:c8:d5:5b:
23:83:5e:74:82:17:7a:20:b6:2a:de:96:4d:85:fd:3d:d0:fa:
02:04:a0:06:c7:60:83:28:9e:38:3a:c2:38:a0:e5:ba:00:db:
c0:25:74:40:c3:cd:2a:e7:c1:72:04:f9:80:c3:78:a9:0c:71:
e4:bd:9e:d6:5c:6f:96:7e:49:ae:bc:a7:59:97:94:01:3c:48:
24:3d:8f:da:4a:95:4b:f0:62:83:6b:2a:9f:02:c2:57:30:3b:
0c:09:d6:66:3b:b8:fc:8a:15:7e:2a:d8:ef:39:ca:5b:32:1b:
24:80:e2:50:41:46:6c:e8:d2:69:66:52:84:fd:86:e9:13:a8:
55:91:26:21:45:5a:a7:fd:d9:fb:b0:47:23:15:14:e2:2c:ce:
ff:80:e5:3a:d5:f9:cf:a6:a4:cd:25:cb:2c:4f:29:f7:c4:2e:
56:46:f0:04:23:0a:f0:6e:40:fb:f6:39:d1:58:de:00:ee:9a:
75:84:14:92
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgISAYV8uuZbdMXVE2/EIMohyjdwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZTI2OTQ2NTJhYTI5ODUxMWVkYWZiZTE4ZDJiMWNkYmM3
OTI2MzgwHhcNMjMwMTA0MTIyMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmMwZTFjNzBmZTM5ZTFlMTViNjE5MTk0NzJjYjZlM2FiZTZhYjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQPu5tzm95NI6IPRcV1wk4/cJG3p
0wTntY3BOMRX0M8pdGFnJwEbPetxgT/+RonX0abezaF0GXmknjYMjQgw/dSgPQ5D
NiJpLoXJeFMC1tFE+ir+w65VdpEmfxX0AdEQHzopKvBKGH0yEE3oO9yv1aR3/JWp
Pno4ABtzMM1wYGaCT6FDwHm8oPkivGmtjhXZcz86cEkmj0TGn7Br8ErNVWI+PtZE
JQBuZVL/W3ghNu7UIUqjCyI7Oic7CFH74EfmtOPD9y/l1oQ9xRtk2a4bU72Qe0s4
mbX4E5uC568c7RxP2p7cKcfPb8vHLp3QsVx/uVOKtqXZKT99BmDdinatWQIDAQAB
o4ICLjCCAiowHQYDVR0OBBYEFNbA4ccP454eFbYZGUcstuOr5qtjMB8GA1UdIwQY
MBaAFNbiaUZSqimFEe2vvhjSsc28eSY4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODkt
YjQyMzY0ODk1MDgzLzEvMXNEaHh3X2puaDRWdGhrWlJ5eTI0NnZtcTJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC84Y2M1MDYtN2U3MS00NzA1LWEyODktYjQyMzY0ODk1MDgz
LzEvMXVKcFJsS3FLWVVSN2EtLUdOS3h6Yng1SmpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEQGCCsGAQUFBwEHAQH/BDUwMzAgBAIAATAaAwQABZFxMAwD
BAAFkXUDBAMFkXADBAG5GPwwDwQCAAIwCQMHACoELwAAADANBgkqhkiG9w0BAQsF
AAOCAQEAPtHxaoIZYWY/JRFnVJ/VlNd34wdXVz6UVlJXnCMiKTDVjtmjt+cgY+Vq
1FvVYln1QXbENuru5CKYL2MbKpuzMoKL7PQayNVbI4NedIIXeiC2Kt6WTYX9PdD6
AgSgBsdggyieODrCOKDlugDbwCV0QMPNKufBcgT5gMN4qQxx5L2e1lxvln5Jrryn
WZeUATxIJD2P2kqVS/Big2sqnwLCVzA7DAnWZju4/IoVfirY7znKWzIbJIDiUEFG
bOjSaWZShP2G6ROoVZEmIUVap/3Z+7BHIxUU4izO/4DlOtX5z6akzSXLLE8p98Qu
VkbwBCMK8G5A+/Y50VjeAO6adYQUkg==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:18 2023 by rpki-client on console.sobornost.net