Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ijNYQY3E6VIFzdVK2Tpt4fuwY_Q.roa
File: ijNYQY3E6VIFzdVK2Tpt4fuwY_Q.roa (raw, json)
Hash identifier: 2RbNPVO0msUfPiETs9J0ZFm56F8fqDjHv6oNQkbsnAE=
Subject key identifier: 8A:33:58:41:8D:C4:E9:52:05:CD:D5:4A:D9:3A:6D:E1:FB:B0:63:F4
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F7981534A6F1BA6A8858E477E944E3D
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ijNYQY3E6VIFzdVK2Tpt4fuwY_Q.roa
Signing time: Sun 01 Jan 2023 22:35:11 +0000
ROA not before: Sun 01 Jan 2023 22:35:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 45929
IP address blocks: 45.92.4.0/22 maxlen: 22
45.149.192.0/22 maxlen: 22
45.92.88.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:81:53:4a:6f:1b:a6:a8:85:8e:47:7e:94:4e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a3358418dc4e95205cdd54ad93a6de1fbb063f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a3:a2:58:7b:c8:02:80:29:e8:17:5b:a5:37:
e3:b9:dd:48:d0:69:26:ec:f5:51:d0:48:37:09:1a:
57:fd:5c:d5:f6:16:8c:61:46:96:15:9e:ed:58:f4:
cf:f3:d3:a5:95:75:9c:30:11:2b:ef:d4:8b:bf:4e:
0b:58:79:84:cf:49:02:48:95:58:f4:c7:da:2b:62:
14:0e:ee:0b:06:a8:b6:72:65:2a:10:5c:02:d1:45:
1b:71:d2:94:d9:1b:c3:e2:c4:d7:ed:ec:49:b5:8e:
16:01:4d:04:3c:47:12:a9:a6:1c:d0:cc:c8:76:bb:
fd:5c:21:f9:a7:e0:3f:83:f1:1a:b2:c4:89:de:74:
2f:3a:c8:37:81:64:d7:2b:fd:31:1e:30:80:ad:fe:
56:f2:de:4a:de:c3:e8:46:f3:1c:6d:db:4d:a9:da:
3a:6a:b5:f0:c4:56:53:6a:75:77:a0:fe:83:44:45:
4a:ed:3c:98:00:75:b9:a8:31:ff:c4:20:55:5a:90:
4c:ea:a5:15:9d:84:6b:12:7a:3b:c6:b6:2e:fa:88:
1e:8d:eb:c9:af:fe:97:81:21:33:9b:44:be:82:cf:
c7:2b:4c:a6:5c:1f:b9:53:45:7f:b8:bb:4d:7b:f9:
ee:cd:fb:8e:1f:28:c2:82:86:e5:5a:a8:9a:52:29:
f0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:33:58:41:8D:C4:E9:52:05:CD:D5:4A:D9:3A:6D:E1:FB:B0:63:F4
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ijNYQY3E6VIFzdVK2Tpt4fuwY_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.4.0/22
45.92.88.0/22
45.149.192.0/22
Signature Algorithm: sha256WithRSAEncryption
56:30:37:c1:26:12:dd:8b:b2:4c:3a:d1:6d:d0:72:00:39:92:
d3:1e:5e:39:a6:ae:19:fb:ca:74:35:d5:45:04:ef:5e:de:bc:
b3:26:3a:a0:29:c9:bf:f6:66:15:b0:b6:09:1d:ab:07:e6:cf:
1b:c6:4d:8a:5c:ff:87:55:54:a4:14:3d:76:0a:9f:11:04:e0:
3e:21:75:24:bb:41:cc:82:ec:09:39:4a:a1:b3:ba:dd:7c:5c:
c4:11:4a:ed:fb:74:34:91:8c:22:a1:a4:46:79:b2:9e:17:27:
0f:e9:9f:47:33:5f:27:fd:e5:fe:34:f1:16:1f:8d:39:11:7d:
3f:96:89:87:96:26:7c:39:6f:2c:e8:17:97:c3:a9:a3:38:bc:
58:04:17:d1:a0:b7:75:e3:a7:65:71:e8:8c:fc:17:6c:0a:c5:
a2:45:a6:5d:7e:4b:76:47:c5:58:e5:b3:1a:67:93:4e:91:86:
28:0f:0e:7c:eb:a6:f3:ea:15:4e:d7:7e:84:65:f9:d8:54:09:
60:b0:fb:f1:49:7a:8e:46:c5:0b:f7:f3:d6:67:25:64:8a:03:
80:d2:48:c6:e7:60:88:9a:56:0e:f1:4f:b7:65:0d:53:41:90:
a9:31:4b:26:e0:ca:37:b2:e1:08:2f:bb:51:cd:81:d8:f6:b5:
a7:a7:03:cf
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVveYFTSm8bpqiFjkd+lE49MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwMTAxMjIzNTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTMzNTg0MThkYzRlOTUyMDVjZGQ1NGFkOTNhNmRlMWZiYjA2M2Y0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KOiWHvIAoAp6BdbpTfjud1I0Gkm
7PVR0Eg3CRpX/VzV9haMYUaWFZ7tWPTP89OllXWcMBEr79SLv04LWHmEz0kCSJVY
9MfaK2IUDu4LBqi2cmUqEFwC0UUbcdKU2RvD4sTX7exJtY4WAU0EPEcSqaYc0MzI
drv9XCH5p+A/g/EassSJ3nQvOsg3gWTXK/0xHjCArf5W8t5K3sPoRvMcbdtNqdo6
arXwxFZTanV3oP6DREVK7TyYAHW5qDH/xCBVWpBM6qUVnYRrEno7xrYu+ogejevJ
r/6XgSEzm0S+gs/HK0ymXB+5U0V/uLtNe/nuzfuOHyjCgoblWqiaUinwTQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIozWEGNxOlSBc3VStk6beH7sGP0MB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvaWpOWVFZM0U2VklGemRWSzJUcHQ0ZnV3WV9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLVwEAwQC
LVxYAwQCLZXAMA0GCSqGSIb3DQEBCwUAA4IBAQBWMDfBJhLdi7JMOtFt0HIAOZLT
Hl45pq4Z+8p0NdVFBO9e3ryzJjqgKcm/9mYVsLYJHasH5s8bxk2KXP+HVVSkFD12
Cp8RBOA+IXUku0HMguwJOUqhs7rdfFzEEUrt+3Q0kYwioaRGebKeFycP6Z9HM18n
/eX+NPEWH405EX0/lomHliZ8OW8s6BeXw6mjOLxYBBfRoLd146dlceiM/BdsCsWi
RaZdfkt2R8VY5bMaZ5NOkYYoDw5866bz6hVO136EZfnYVAlgsPvxSXqORsUL9/PW
ZyVkigOA0kjG52CImlYO8U+3ZQ1TQZCpMUsm4Mo3suEIL7tRzYHY9rWnpwPP
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org