Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/53hMfgxFxikVoXZbs8CB3qIeek0.roa
File: 53hMfgxFxikVoXZbs8CB3qIeek0.roa (raw, json)
Hash identifier: MCK5kSgzPb9eaKhfzQUuZXGbUDGnlq1MUKfCdRnymd8=
Subject key identifier: E7:78:4C:7E:0C:45:C6:29:15:A1:76:5B:B3:C0:81:DE:A2:1E:7A:4D
Certificate issuer: /CN=f6af433974df373b70abd76b13e1c70c775f554b
Certificate serial: 0185714C117F331CA9035DCEE68FE26AE897
Authority key identifier: F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/53hMfgxFxikVoXZbs8CB3qIeek0.roa
Signing time: Mon 02 Jan 2023 07:04:48 +0000
ROA not before: Mon 02 Jan 2023 07:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44486
IP address blocks: 45.89.143.0/24 maxlen: 24
45.89.140.0/24 maxlen: 24
45.89.142.0/24 maxlen: 24
45.89.141.0/24 maxlen: 24
45.85.216.0/24 maxlen: 24
45.85.218.0/24 maxlen: 24
45.85.217.0/24 maxlen: 24
45.85.219.0/24 maxlen: 24
2a0e:cb80::/29 maxlen: 29
Validation: Failed, certificate revoked on Sat 09 Dec 2023 18:52:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:11:7f:33:1c:a9:03:5d:ce:e6:8f:e2:6a:e8:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6af433974df373b70abd76b13e1c70c775f554b
Validity
Not Before: Jan 2 07:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e7784c7e0c45c62915a1765bb3c081dea21e7a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ac:0d:95:37:1a:4c:88:b5:ec:35:23:97:32:
da:92:22:55:be:97:e5:a6:9f:7e:77:13:e3:78:40:
93:a3:d4:b1:95:c8:52:0f:67:99:65:23:41:d2:36:
53:11:47:a9:b5:82:52:fc:52:69:c3:52:60:12:59:
8f:24:90:d4:7a:86:17:df:cc:f7:46:5d:40:37:23:
b3:4a:b9:40:da:54:4a:70:51:2b:94:99:85:ce:e5:
5f:f6:5c:b7:f8:12:01:c8:15:f1:c9:c7:09:cd:a6:
ec:c8:4e:1e:ac:44:1f:b8:ed:e7:37:a3:a2:b9:c2:
1c:d1:7f:d4:f0:f2:75:e0:49:3b:ac:41:a8:46:df:
53:8b:05:4b:be:17:1d:43:19:b3:c6:4f:81:1d:63:
bb:b8:24:e7:b3:8a:94:a3:3f:d6:c7:a4:dd:c4:49:
14:39:1d:f2:f8:79:21:1d:1a:c5:49:a1:c2:73:c4:
92:dc:0c:38:16:48:52:ac:6b:e8:53:82:33:16:a1:
2a:35:b1:23:84:3a:25:44:80:3b:ce:98:69:dd:46:
0d:ce:11:bf:2b:21:d9:97:0a:d1:71:18:e1:ba:33:
d8:d0:f0:9f:e0:ca:8c:30:b2:d1:61:11:74:9c:e8:
50:5e:15:fa:ff:ae:e0:4d:66:d5:21:bb:0f:f5:d8:
b4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:78:4C:7E:0C:45:C6:29:15:A1:76:5B:B3:C0:81:DE:A2:1E:7A:4D
X509v3 Authority Key Identifier:
keyid:F6:AF:43:39:74:DF:37:3B:70:AB:D7:6B:13:E1:C7:0C:77:5F:55:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q9DOXTfNztwq9drE-HHDHdfVUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/53hMfgxFxikVoXZbs8CB3qIeek0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f9caf0-2c2e-4897-8a3b-a26bc653b06b/1/9q9DOXTfNztwq9drE-HHDHdfVUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.216.0/22
45.89.140.0/22
IPv6:
2a0e:cb80::/29
Signature Algorithm: sha256WithRSAEncryption
a1:e5:67:60:4a:80:28:70:f3:06:22:95:f2:9c:22:63:a7:6f:
ce:ee:5a:33:a7:24:0b:16:46:0e:eb:56:36:56:73:51:31:36:
27:4e:4a:1c:62:b8:4c:07:06:82:7e:50:16:4f:05:fd:11:10:
05:d5:89:cc:1c:91:6d:02:f3:a8:da:dc:20:bb:c7:94:da:52:
d7:c7:06:10:2d:f1:a1:b9:eb:06:b9:64:f0:f7:ac:bc:23:5b:
4f:63:14:db:17:6e:a1:b2:51:a9:36:5f:4c:5a:a1:f1:5b:b1:
18:6e:6c:e1:5a:bc:ac:fd:61:2f:bc:9f:f4:dc:9c:65:24:5c:
19:66:df:a5:0c:19:f1:a4:c8:4e:b9:54:2c:14:84:bb:9b:e7:
6e:46:d8:e0:27:ac:96:d4:10:7d:94:e8:0d:40:1d:0e:03:bd:
9f:c2:1b:8d:60:27:32:cd:2d:82:2b:99:ae:96:f2:67:af:29:
f3:11:9e:71:4c:e1:e7:10:03:9a:8a:9d:43:d4:48:47:60:4e:
aa:07:e1:70:83:de:14:ab:ac:22:98:d0:8e:eb:6f:fa:26:97:
00:ed:f1:f6:7a:4f:09:6d:28:ec:b3:53:ed:97:0a:aa:f2:87:
37:10:29:e9:79:22:ef:a1:3e:5f:97:c3:36:a2:db:23:9d:10:
89:49:84:6b
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVxTBF/MxypA13O5o/iauiXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YWY0MzM5NzRkZjM3M2I3MGFiZDc2YjEzZTFjNzBjNzc1
ZjU1NGIwHhcNMjMwMTAyMDcwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzc4NGM3ZTBjNDVjNjI5MTVhMTc2NWJiM2MwODFkZWEyMWU3YTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgawNlTcaTIi17DUjlzLakiJVvpfl
pp9+dxPjeECTo9SxlchSD2eZZSNB0jZTEUeptYJS/FJpw1JgElmPJJDUeoYX38z3
Rl1ANyOzSrlA2lRKcFErlJmFzuVf9ly3+BIByBXxyccJzabsyE4erEQfuO3nN6Oi
ucIc0X/U8PJ14Ek7rEGoRt9TiwVLvhcdQxmzxk+BHWO7uCTns4qUoz/Wx6TdxEkU
OR3y+HkhHRrFSaHCc8SS3Aw4FkhSrGvoU4IzFqEqNbEjhDolRIA7zphp3UYNzhG/
KyHZlwrRcRjhujPY0PCf4MqMMLLRYRF0nOhQXhX6/67gTWbVIbsP9di0RQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFOd4TH4MRcYpFaF2W7PAgd6iHnpNMB8GA1UdIwQY
MBaAFPavQzl03zc7cKvXaxPhxwx3X1VLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2It
YTI2YmM2NTNiMDZiLzEvNTNoTWZneEZ4aWtWb1haYnM4Q0IzcUllZWswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9mOWNhZjAtMmMyZS00ODk3LThhM2ItYTI2YmM2NTNiMDZi
LzEvOXE5RE9YVGZOenR3cTlkckUtSEhESGRmVlVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLVXYAwQC
LVmMMA0EAgACMAcDBQMqDsuAMA0GCSqGSIb3DQEBCwUAA4IBAQCh5WdgSoAocPMG
IpXynCJjp2/O7lozpyQLFkYO61Y2VnNRMTYnTkocYrhMBwaCflAWTwX9ERAF1YnM
HJFtAvOo2twgu8eU2lLXxwYQLfGhuesGuWTw96y8I1tPYxTbF26hslGpNl9MWqHx
W7EYbmzhWrys/WEvvJ/03JxlJFwZZt+lDBnxpMhOuVQsFIS7m+duRtjgJ6yW1BB9
lOgNQB0OA72fwhuNYCcyzS2CK5mulvJnrynzEZ5xTOHnEAOaip1D1EhHYE6qB+Fw
g94Uq6wimNCO62/6JpcA7fH2ek8JbSjss1Ptlwqq8oc3ECnpeSLvoT5fl8M2otsj
nRCJSYRr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:31 2024 by rpki-client on console-fra.rpki-client.org