Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/70MephGCVh9NmibKMSC-t8Fq9oU.roa
File: 70MephGCVh9NmibKMSC-t8Fq9oU.roa (raw, json)
Hash identifier: /MhAJVW0SVx8dHhKmajFFDzkZshzSVNQsXIx8VyXev8=
Subject key identifier: EF:43:1E:A6:11:82:56:1F:4D:9A:26:CA:31:20:BE:B7:C1:6A:F6:85
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018BED61F4593E0E316C2D9AEFEFA16DFE95
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/70MephGCVh9NmibKMSC-t8Fq9oU.roa
Signing time: Mon 20 Nov 2023 15:38:21 +0000
ROA not before: Mon 20 Nov 2023 15:38:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216063
IP address blocks: 45.147.7.0/24 maxlen: 24
2.56.244.0/24 maxlen: 24
45.84.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ed:61:f4:59:3e:0e:31:6c:2d:9a:ef:ef:a1:6d:fe:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Nov 20 15:38:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef431ea61182561f4d9a26ca3120beb7c16af685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1c:99:f7:61:e7:d9:46:4a:20:f2:72:5c:c6:
de:43:fd:52:e0:df:bd:90:c0:7e:b3:da:cd:1f:0a:
9a:66:e0:b4:b6:60:48:fa:dd:42:03:91:92:bd:9b:
45:e1:a8:65:e9:50:4f:44:a1:2f:76:17:35:21:2f:
fd:31:64:36:58:92:84:ef:03:6a:7a:98:47:ad:e9:
1e:ec:9f:40:c4:00:d6:99:f2:3a:f7:da:d1:d7:33:
1e:25:b4:d3:f4:7a:44:38:6b:68:3a:8b:50:bc:69:
ae:68:21:f9:77:55:3a:ad:0f:00:e7:9d:8c:6d:62:
b8:df:c5:50:34:cb:f3:d9:2b:b8:0a:29:73:60:41:
12:f5:f7:34:d9:bb:c4:2e:7b:17:86:8a:89:f7:47:
cf:37:0b:bf:f4:e0:51:76:f6:3a:43:c8:92:3c:d1:
a7:ea:7e:83:06:ad:2c:3c:e2:46:ad:59:e2:d8:c9:
24:63:a9:5e:bd:b4:d6:02:0d:8d:a4:da:88:4f:d3:
d9:2e:88:8f:06:86:22:8b:a0:28:48:fd:c9:75:58:
96:f9:5b:6b:45:a6:54:fd:75:f5:1c:84:e0:79:82:
ad:17:47:fb:90:87:b1:9e:e8:61:d2:9c:a2:55:61:
ba:02:c6:67:db:36:d0:a0:9e:88:a6:2b:42:53:f5:
cf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:43:1E:A6:11:82:56:1F:4D:9A:26:CA:31:20:BE:B7:C1:6A:F6:85
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/70MephGCVh9NmibKMSC-t8Fq9oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.244.0/24
45.84.196.0/24
45.147.7.0/24
Signature Algorithm: sha256WithRSAEncryption
00:82:52:8b:d0:53:6c:9d:34:e4:14:7d:c3:8b:5b:b5:51:06:
6f:f0:79:26:03:ce:8e:72:47:e6:8a:e5:87:5b:81:7e:48:e6:
d6:55:28:25:77:38:85:56:60:34:d7:45:50:98:17:36:5f:d3:
4c:b6:07:5e:c0:f9:ed:9d:54:12:f7:dd:96:b8:b4:74:a6:c9:
65:bc:08:bf:57:ce:e7:f8:29:a1:fa:82:21:8e:e9:82:d0:d4:
17:51:be:76:2f:cc:5d:51:45:1e:5b:ee:a8:cd:c0:d1:34:15:
f4:ca:32:55:38:9d:2d:09:13:7a:7c:d7:7e:6e:32:1a:f5:68:
59:bf:63:01:99:94:1e:63:7c:87:21:3d:65:bf:1c:1b:8c:a6:
14:4c:4e:19:28:ea:1e:a4:36:f3:1e:54:1d:e3:30:ec:58:fc:
b1:8d:cf:8b:81:da:40:6a:6b:c8:e6:6a:48:5f:9a:cb:c0:9e:
57:13:33:85:8c:c7:9d:36:c5:a4:ed:93:0d:a1:7b:f6:13:82:
9d:8e:f2:1d:40:ed:95:50:55:2d:87:db:d7:ea:6e:ac:04:80:
58:3c:00:f7:62:70:87:d9:4c:bc:22:80:ae:4c:c0:df:da:e5:
07:4a:38:38:b6:73:5f:35:34:df:7d:44:0d:d9:62:c8:f9:a0:
b5:10:4b:df
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYvtYfRZPg4xbC2a7++hbf6VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjMxMTIwMTUzODIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjQzMWVhNjExODI1NjFmNGQ5YTI2Y2EzMTIwYmViN2MxNmFmNjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRyZ92Hn2UZKIPJyXMbeQ/1S4N+9
kMB+s9rNHwqaZuC0tmBI+t1CA5GSvZtF4ahl6VBPRKEvdhc1IS/9MWQ2WJKE7wNq
ephHreke7J9AxADWmfI699rR1zMeJbTT9HpEOGtoOotQvGmuaCH5d1U6rQ8A552M
bWK438VQNMvz2Su4CilzYEES9fc02bvELnsXhoqJ90fPNwu/9OBRdvY6Q8iSPNGn
6n6DBq0sPOJGrVni2MkkY6levbTWAg2NpNqIT9PZLoiPBoYii6AoSP3JdViW+Vtr
RaZU/XX1HITgeYKtF0f7kIexnuhh0pyiVWG6AsZn2zbQoJ6IpitCU/XP3wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO9DHqYRglYfTZomyjEgvrfBavaFMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvNzBNZXBoR0NWaDlObWliS01TQy10OEZxOW9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAAjj0AwQA
LVTEAwQALZMHMA0GCSqGSIb3DQEBCwUAA4IBAQAAglKL0FNsnTTkFH3Di1u1UQZv
8HkmA86OckfmiuWHW4F+SObWVSgldziFVmA010VQmBc2X9NMtgdewPntnVQS992W
uLR0psllvAi/V87n+Cmh+oIhjumC0NQXUb52L8xdUUUeW+6ozcDRNBX0yjJVOJ0t
CRN6fNd+bjIa9WhZv2MBmZQeY3yHIT1lvxwbjKYUTE4ZKOoepDbzHlQd4zDsWPyx
jc+LgdpAamvI5mpIX5rLwJ5XEzOFjMedNsWk7ZMNoXv2E4KdjvIdQO2VUFUth9vX
6m6sBIBYPAD3YnCH2Uy8IoCuTMDf2uUHSjg4tnNfNTTffUQN2WLI+aC1EEvf
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:51:13 2024 by rpki-client on console-fra.rpki-client.org