Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/nhiPkGwXaWJOUGNjhkC6zWJpu28.roa
File: nhiPkGwXaWJOUGNjhkC6zWJpu28.roa (raw, json)
Hash identifier: hqClTs4FapQvIAU1z7av1ye2ljfE1WoM6yyeWCkAzUM=
Subject key identifier: 9E:18:8F:90:6C:17:69:62:4E:50:63:63:86:40:BA:CD:62:69:BB:6F
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 018572CC9E3ABD4C879406DAC86CDD9F0E30
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/nhiPkGwXaWJOUGNjhkC6zWJpu28.roa
Signing time: Mon 02 Jan 2023 14:04:50 +0000
ROA not before: Mon 02 Jan 2023 14:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42708
IP address blocks: 85.203.44.0/24 maxlen: 24
85.203.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:9e:3a:bd:4c:87:94:06:da:c8:6c:dd:9f:0e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 14:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e188f906c1769624e5063638640bacd6269bb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e5:85:35:9e:61:a1:f4:d0:0f:c5:dd:e7:86:
ec:96:91:18:51:2f:27:cb:d0:9c:1f:a7:51:39:63:
24:ae:07:cc:57:5c:d6:68:14:e6:8c:8e:3d:e1:d0:
ee:31:f5:c8:07:6b:87:be:d2:bc:ca:06:10:b8:c4:
bb:b7:38:01:98:4d:67:95:14:75:1d:39:9d:b0:39:
f5:53:08:f9:21:d2:e8:3d:51:c1:69:ea:81:cb:43:
a7:03:3d:3e:28:c1:27:03:f0:e0:67:5e:9b:ed:82:
e7:49:65:58:1e:cd:f3:d6:33:5e:01:28:b5:20:13:
0b:cf:e5:94:62:81:83:f4:2f:cc:88:60:fb:fc:61:
8e:f9:6d:82:3a:3f:6c:69:ef:3a:2f:18:cb:1a:b6:
67:f1:1a:8d:7d:ed:44:14:72:14:88:c7:71:09:20:
03:c4:ef:1b:fa:d1:a7:af:e9:d7:da:10:86:27:f0:
ed:81:80:fb:0d:06:1b:09:93:c6:3a:c8:9b:fc:ac:
5a:36:93:6d:44:fc:18:3c:ea:ab:a0:70:4c:b5:2e:
dd:45:72:52:7d:ec:cf:a4:65:dc:16:70:23:86:10:
55:1c:66:f0:7d:6d:55:82:49:1e:ac:ad:9c:96:64:
d7:b0:41:60:c0:9c:3d:68:01:6b:57:6d:67:44:ab:
f1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:18:8F:90:6C:17:69:62:4E:50:63:63:86:40:BA:CD:62:69:BB:6F
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/nhiPkGwXaWJOUGNjhkC6zWJpu28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.44.0/24
85.203.47.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:6f:15:1b:fe:89:96:5c:8c:98:38:47:dd:f4:75:bf:bd:d3:
56:a3:04:02:36:d4:0d:83:57:6e:ac:a9:82:2a:ba:3c:40:24:
1d:75:f5:07:96:17:84:88:63:35:81:fd:8d:d1:37:d6:88:6f:
b5:10:7f:96:42:89:85:d8:d1:87:61:8a:b6:f0:aa:ec:68:27:
dc:f6:5b:a3:e5:f7:b0:11:ad:60:ae:a0:86:b1:dc:be:6f:ec:
e8:3d:b5:a1:12:df:50:4b:34:fe:2a:7f:ab:dc:91:f1:8f:9e:
58:70:0c:6e:d2:2c:c5:99:c1:dc:9b:cc:7f:cb:5b:63:77:2f:
e6:d0:95:db:f3:f7:54:eb:f5:0e:ae:2f:eb:21:70:ec:15:9d:
fb:ce:8b:35:c6:a6:5e:4f:d2:e8:01:09:60:1c:68:66:13:fe:
14:dc:c5:90:de:bd:6d:f2:c1:9e:77:c1:7c:65:34:d1:8b:77:
b6:cb:d4:c6:27:3e:3b:d2:5c:a0:84:d1:36:8f:be:a7:85:ed:
77:b6:53:44:fc:0e:7d:ef:cc:06:73:90:a8:b4:27:e3:1e:77:
b0:b4:62:d2:62:82:b2:66:d1:23:41:af:36:41:fe:a3:92:73:
31:d3:57:05:fc:02:fa:67:29:2b:89:12:a3:c1:e8:0c:f7:98:
e5:54:5c:a2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVyzJ46vUyHlAbayGzdnw4wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NWJkZjZlZWMwODM3MGFlMWY2N2U4M2Y5OWI1YWMxZmUy
Njg3MmMwHhcNMjMwMTAyMTQwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTE4OGY5MDZjMTc2OTYyNGU1MDYzNjM4NjQwYmFjZDYyNjliYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluWFNZ5hofTQD8Xd54bslpEYUS8n
y9CcH6dROWMkrgfMV1zWaBTmjI494dDuMfXIB2uHvtK8ygYQuMS7tzgBmE1nlRR1
HTmdsDn1Uwj5IdLoPVHBaeqBy0OnAz0+KMEnA/DgZ16b7YLnSWVYHs3z1jNeASi1
IBMLz+WUYoGD9C/MiGD7/GGO+W2COj9sae86LxjLGrZn8RqNfe1EFHIUiMdxCSAD
xO8b+tGnr+nX2hCGJ/DtgYD7DQYbCZPGOsib/KxaNpNtRPwYPOqroHBMtS7dRXJS
fezPpGXcFnAjhhBVHGbwfW1VgkkerK2clmTXsEFgwJw9aAFrV21nRKvxPQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJ4Yj5BsF2liTlBjY4ZAus1iabtvMB8GA1UdIwQY
MBaAFNRb327sCDcK4fZ+g/mbWsH+JocsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZ2ZmJ1d0lOd3JoOW42RC1adGF3ZjRtaHl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lMmRmZmYtOGJhOC00YmNmLWFjMzEt
OTg0NjM4NTllY2MxLzEvbmhpUGtHd1hhV0pPVUdOamhrQzZ6V0pwdTI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9lMmRmZmYtOGJhOC00YmNmLWFjMzEtOTg0NjM4NTllY2Mx
LzEvMUZ2ZmJ1d0lOd3JoOW42RC1adGF3ZjRtaHl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVcssAwQA
VcsvMA0GCSqGSIb3DQEBCwUAA4IBAQB7bxUb/omWXIyYOEfd9HW/vdNWowQCNtQN
g1durKmCKro8QCQddfUHlheEiGM1gf2N0TfWiG+1EH+WQomF2NGHYYq28KrsaCfc
9luj5fewEa1grqCGsdy+b+zoPbWhEt9QSzT+Kn+r3JHxj55YcAxu0izFmcHcm8x/
y1tjdy/m0JXb8/dU6/UOri/rIXDsFZ37zos1xqZeT9LoAQlgHGhmE/4U3MWQ3r1t
8sGed8F8ZTTRi3e2y9TGJz470lyghNE2j76nhe13tlNE/A5978wGc5CotCfjHnew
tGLSYoKyZtEjQa82Qf6jknMx01cF/AL6ZykriRKjwegM95jlVFyi
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:15 2024 by rpki-client on console-fra.rpki-client.org