Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/tKsNQE3cH3FcUWdVQ2AOr4bkHSI.roa
File: tKsNQE3cH3FcUWdVQ2AOr4bkHSI.roa (raw, json)
Hash identifier: 6H9AxlfX3ed/bSyhVKJae1q891j9cP3WMUuhRonxPyU=
Subject key identifier: B4:AB:0D:40:4D:DC:1F:71:5C:51:67:55:43:60:0E:AF:86:E4:1D:22
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0189816BB47FC9BE7BE6AB9B1971428B9494
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/tKsNQE3cH3FcUWdVQ2AOr4bkHSI.roa
Signing time: Sun 23 Jul 2023 06:24:26 +0000
ROA not before: Sun 23 Jul 2023 06:24:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60528
IP address blocks: 45.84.217.0/24 maxlen: 24
45.84.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:81:6b:b4:7f:c9:be:7b:e6:ab:9b:19:71:42:8b:94:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 23 06:24:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b4ab0d404ddc1f715c51675543600eaf86e41d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:96:81:07:e3:d8:0b:48:65:cc:9a:13:1c:
3b:ae:f9:f3:d8:0a:de:1a:7b:8a:b0:ef:44:3e:3a:
30:8f:48:6e:57:d4:a4:d0:1d:20:0d:15:fb:e5:f8:
84:ea:df:5e:c7:63:bb:fe:68:86:f0:96:90:14:92:
2f:e2:8b:07:0f:a4:99:67:b7:da:83:f5:64:f7:55:
ca:51:fe:99:36:5b:33:7b:dc:37:20:f2:8e:dd:c3:
f0:f9:84:13:b2:c7:1b:e1:c3:c3:c2:99:bd:8b:44:
68:3a:b4:a3:cf:b1:d5:f6:11:56:a2:ec:03:a6:ae:
f9:39:b6:2d:6e:c2:0a:81:12:92:1c:e2:62:2a:ee:
56:2f:00:9b:cd:77:36:56:ac:3d:88:e9:91:26:f6:
fc:f2:8d:a2:0c:1d:6f:1c:42:c6:f9:d9:8c:75:e2:
18:53:ff:d2:bc:81:41:68:8f:a3:59:1b:ab:3b:fa:
6b:be:e0:55:58:9c:ce:cd:0f:90:e4:a2:74:d8:29:
c0:d9:1c:61:7d:a3:83:d0:2c:56:2a:64:64:82:a4:
b1:53:e7:87:f9:56:c8:22:8b:5d:df:87:d2:8f:d3:
0f:5c:9e:5c:91:f0:a8:58:a1:27:6a:22:bf:23:bb:
20:b6:21:61:81:f3:74:ce:d0:2b:4b:8b:7e:ff:7e:
d8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AB:0D:40:4D:DC:1F:71:5C:51:67:55:43:60:0E:AF:86:E4:1D:22
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/tKsNQE3cH3FcUWdVQ2AOr4bkHSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.214.0/24
45.84.217.0/24
Signature Algorithm: sha256WithRSAEncryption
33:cc:33:1b:e4:8e:4c:8f:70:09:6f:91:0e:ec:48:5a:71:1f:
c5:10:f5:39:06:83:66:9a:ed:f4:21:ac:18:d7:f9:57:0c:f3:
82:d8:fa:89:23:7e:6c:1d:5e:52:6c:e2:7f:a1:86:ac:87:e8:
86:48:79:d8:e7:b4:c1:a8:84:d1:38:27:cf:7c:01:65:a7:17:
10:93:fd:a9:91:4a:6e:73:42:bf:b9:90:30:16:79:9d:bd:83:
dc:dc:b4:c5:ef:43:c0:c2:bd:ad:7d:37:7b:91:72:4a:54:21:
12:c0:36:62:31:c3:ab:86:17:ab:5f:98:a1:80:8f:99:55:50:
91:7f:20:6b:bb:1c:d1:c9:2e:ae:ed:26:57:b0:62:ce:6f:4b:
70:13:4f:01:be:ae:7f:e9:dc:f3:94:67:f0:aa:53:eb:16:47:
c4:a4:ae:1d:8c:69:05:58:71:3d:68:bf:01:16:8a:6e:b4:59:
75:91:83:8a:1e:da:f9:ee:16:d2:c6:a4:36:17:4b:7c:0e:ad:
08:82:97:57:93:27:0c:04:43:3d:61:85:d4:75:d5:48:ea:3e:
33:e2:b9:51:0c:42:6e:ca:29:60:0a:ba:3a:4f:46:e8:e1:7d:
19:17:9d:c9:99:50:07:a6:75:4d:99:d4:0e:3f:c7:cb:cb:f5:
04:69:4e:a5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYmBa7R/yb575qubGXFCi5SUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwNzIzMDYyNDI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGFiMGQ0MDRkZGMxZjcxNWM1MTY3NTU0MzYwMGVhZjg2ZTQxZDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVyWgQfj2AtIZcyaExw7rvnz2Are
GnuKsO9EPjowj0huV9Sk0B0gDRX75fiE6t9ex2O7/miG8JaQFJIv4osHD6SZZ7fa
g/Vk91XKUf6ZNlsze9w3IPKO3cPw+YQTsscb4cPDwpm9i0RoOrSjz7HV9hFWouwD
pq75ObYtbsIKgRKSHOJiKu5WLwCbzXc2Vqw9iOmRJvb88o2iDB1vHELG+dmMdeIY
U//SvIFBaI+jWRurO/prvuBVWJzOzQ+Q5KJ02CnA2RxhfaOD0CxWKmRkgqSxU+eH
+VbIIotd34fSj9MPXJ5ckfCoWKEnaiK/I7sgtiFhgfN0ztArS4t+/37YYwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLSrDUBN3B9xXFFnVUNgDq+G5B0iMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvdEtzTlFFM2NIM0ZjVVdkVlEyQU9yNGJrSFNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVTWAwQA
LVTZMA0GCSqGSIb3DQEBCwUAA4IBAQAzzDMb5I5Mj3AJb5EO7EhacR/FEPU5BoNm
mu30IawY1/lXDPOC2PqJI35sHV5SbOJ/oYash+iGSHnY57TBqITROCfPfAFlpxcQ
k/2pkUpuc0K/uZAwFnmdvYPc3LTF70PAwr2tfTd7kXJKVCESwDZiMcOrhherX5ih
gI+ZVVCRfyBruxzRyS6u7SZXsGLOb0twE08Bvq5/6dzzlGfwqlPrFkfEpK4djGkF
WHE9aL8BFoputFl1kYOKHtr57hbSxqQ2F0t8Dq0IgpdXkycMBEM9YYXUddVI6j4z
4rlRDEJuyilgCro6T0bo4X0ZF53JmVAHpnVNmdQOP8fLy/UEaU6l
-----END CERTIFICATE-----
Generated at Thu Sep 28 08:51:09 2023 by rpki-client on console-ams.rpki-client.org