Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/8aD9wr9-tfxxplVuARpLqvxa1k0.roa
File: 8aD9wr9-tfxxplVuARpLqvxa1k0.roa (raw, json)
Hash identifier: iNh+yQoDV8g5a3tl6MhxE+9uHZAGg5FfX27S5FcgqnQ=
Subject key identifier: F1:A0:FD:C2:BF:7E:B5:FC:71:A6:55:6E:01:1A:4B:AA:FC:5A:D6:4D
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0186A852C16A127FD34C077356A9447FE6CC
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/8aD9wr9-tfxxplVuARpLqvxa1k0.roa
Signing time: Fri 03 Mar 2023 16:34:01 +0000
ROA not before: Fri 03 Mar 2023 16:34:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50809
IP address blocks: 45.158.46.0/24 maxlen: 24
77.83.73.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a8:52:c1:6a:12:7f:d3:4c:07:73:56:a9:44:7f:e6:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 3 16:34:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f1a0fdc2bf7eb5fc71a6556e011a4baafc5ad64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d6:45:65:f8:21:5c:3f:4c:2e:01:8f:f1:d4:
a9:f9:b1:88:0b:21:43:19:07:33:69:d1:02:1d:53:
82:a2:1b:bb:34:34:9e:03:34:59:60:bd:5e:7b:98:
26:04:af:30:f0:d3:51:9f:aa:75:16:86:d6:9d:b7:
95:20:0e:f4:18:8b:63:1f:ad:fd:c3:1b:a1:ce:fe:
f9:e4:2d:21:8e:f6:8d:4b:a8:ec:9d:32:95:14:53:
3e:d1:53:2c:39:9b:38:46:39:ef:73:63:94:aa:b6:
13:4e:d2:0b:20:4e:bf:6b:b2:47:3b:e1:d7:2a:3c:
e7:41:aa:d6:11:a3:14:b7:1d:7b:eb:d6:5e:77:2a:
7c:02:9f:8e:78:b9:86:9f:b4:a9:a8:10:a0:72:6d:
a9:36:9c:47:f7:43:17:ef:ee:16:4c:89:de:0a:d3:
a4:b6:38:b8:bb:53:14:82:c5:bf:44:20:24:9a:b4:
6e:85:8f:64:82:e8:f1:f9:00:56:1b:cf:ae:64:6a:
fc:e9:b8:64:a3:1d:66:50:f2:93:95:7e:38:2d:be:
18:db:d7:c1:ba:31:2b:c8:de:10:b9:9f:9f:81:6b:
cf:bf:8d:19:97:df:d4:ce:c6:19:4c:18:d5:05:a6:
a0:b7:a8:e5:15:97:07:dc:4b:51:d3:5d:e6:d3:6a:
86:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A0:FD:C2:BF:7E:B5:FC:71:A6:55:6E:01:1A:4B:AA:FC:5A:D6:4D
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/8aD9wr9-tfxxplVuARpLqvxa1k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.46.0/24
77.83.73.0/24
Signature Algorithm: sha256WithRSAEncryption
71:ca:f5:c1:78:94:ca:b2:29:0d:1b:10:b0:6b:de:63:a4:17:
1f:35:fd:4e:85:cb:31:7c:5e:65:69:e1:da:40:20:22:19:14:
05:77:1e:95:bc:ce:94:9e:6f:97:30:34:73:49:96:4c:09:4b:
3f:48:b8:96:a6:84:14:20:54:70:75:b1:eb:3c:9b:86:5a:2a:
85:cd:4c:59:ff:17:63:52:0d:c9:b9:63:e7:03:6b:8b:af:4d:
1f:28:7d:a0:e2:0c:c5:c5:3f:2d:2b:ed:73:cd:10:a7:3a:6c:
06:65:df:50:bf:6d:51:49:11:a0:b2:1c:10:0a:98:f1:be:e3:
f2:8e:2d:f5:f6:2d:e0:09:a4:56:5a:ad:ba:f0:46:1b:49:96:
80:4c:4a:a5:d2:de:8f:47:56:11:54:9f:87:28:7a:3d:51:c1:
77:12:92:f1:77:d6:d6:b0:ca:e0:7a:4d:e7:78:84:88:5f:02:
b2:2e:9b:4d:16:c4:56:5c:5d:b9:f0:81:e5:33:c5:56:7b:2d:
9a:18:8b:ef:1e:9e:2a:43:0e:3f:c4:94:1a:e0:19:a1:2b:26:
0a:91:88:f5:c1:8c:c9:73:d9:51:ef:b2:d1:30:1b:71:55:8a:
d8:e2:23:09:87:67:23:2f:32:30:d8:51:29:f6:98:62:8e:ac:
2e:f7:07:91
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYaoUsFqEn/TTAdzVqlEf+bMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjMwMzAzMTYzNDAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWEwZmRjMmJmN2ViNWZjNzFhNjU1NmUwMTFhNGJhYWZjNWFkNjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9ZFZfghXD9MLgGP8dSp+bGICyFD
GQczadECHVOCohu7NDSeAzRZYL1ee5gmBK8w8NNRn6p1FobWnbeVIA70GItjH639
wxuhzv755C0hjvaNS6jsnTKVFFM+0VMsOZs4Rjnvc2OUqrYTTtILIE6/a7JHO+HX
KjznQarWEaMUtx1769Zedyp8Ap+OeLmGn7SpqBCgcm2pNpxH90MX7+4WTIneCtOk
tji4u1MUgsW/RCAkmrRuhY9kgujx+QBWG8+uZGr86bhkox1mUPKTlX44Lb4Y29fB
ujEryN4QuZ+fgWvPv40Zl9/UzsYZTBjVBaagt6jlFZcH3EtR013m02qGyQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPGg/cK/frX8caZVbgEaS6r8WtZNMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvOGFEOXdyOS10Znh4cGxWdUFScExxdnhhMWswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZ4uAwQA
TVNJMA0GCSqGSIb3DQEBCwUAA4IBAQBxyvXBeJTKsikNGxCwa95jpBcfNf1Ohcsx
fF5laeHaQCAiGRQFdx6VvM6Unm+XMDRzSZZMCUs/SLiWpoQUIFRwdbHrPJuGWiqF
zUxZ/xdjUg3JuWPnA2uLr00fKH2g4gzFxT8tK+1zzRCnOmwGZd9Qv21RSRGgshwQ
CpjxvuPyji319i3gCaRWWq268EYbSZaATEql0t6PR1YRVJ+HKHo9UcF3EpLxd9bW
sMrgek3neISIXwKyLptNFsRWXF258IHlM8VWey2aGIvvHp4qQw4/xJQa4BmhKyYK
kYj1wYzJc9lR77LRMBtxVYrY4iMJh2cjLzIw2FEp9phijqwu9weR
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:51 2024 by rpki-client on console-fra.rpki-client.org