Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/1-N9kicN2chFDE1tmCIsoDslC2t0.roa
File: 1-N9kicN2chFDE1tmCIsoDslC2t0.roa (raw, json)
Hash identifier: T9gzB3PSxWTtQTh3BLINMOryPJIr99ZEGnVgS3hIkBM=
Subject key identifier: F8:DF:64:89:C3:76:72:11:43:13:5B:66:08:8B:28:0E:C9:42:DA:DD
Certificate issuer: /CN=297c508d23b38315bbf45b726d22050a46127b8c
Certificate serial: 018A83669474CDABB3CA2C5C760EF702AE7E
Authority key identifier: 29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/1-N9kicN2chFDE1tmCIsoDslC2t0.roa
Signing time: Mon 11 Sep 2023 08:40:52 +0000
ROA not before: Mon 11 Sep 2023 08:40:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44494
IP address blocks: 185.81.52.0/22 maxlen: 22
80.245.16.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:66:94:74:cd:ab:b3:ca:2c:5c:76:0e:f7:02:ae:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297c508d23b38315bbf45b726d22050a46127b8c
Validity
Not Before: Sep 11 08:40:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8df6489c376721143135b66088b280ec942dadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:ea:49:a9:f1:d3:77:9d:62:b9:db:c3:8c:
cd:19:ea:a7:c5:d3:d4:a7:fd:39:1d:58:b2:46:77:
07:99:d9:fa:cb:12:1c:67:3a:89:3d:d5:10:ac:30:
78:9b:48:86:e0:1d:9d:8d:38:ee:e3:a2:4f:f7:f4:
91:a0:57:e3:e9:eb:ee:1c:fc:93:dc:64:86:40:58:
0e:e5:34:07:69:d4:8d:cb:3f:f8:a9:de:42:c5:cd:
aa:e3:6f:99:73:f3:d0:f3:8b:7e:fc:8b:59:7f:6b:
51:e3:61:5e:69:59:20:d3:21:31:2d:62:fd:3b:f6:
af:29:b7:9d:e8:6f:90:75:a6:03:83:a0:6b:4c:60:
ff:6e:32:60:45:69:1c:54:b7:e3:c9:38:ac:66:1b:
0a:90:1e:af:b7:5a:c5:2a:8f:48:2e:d9:8e:fd:af:
83:7f:1b:c2:20:bc:86:b5:ec:3b:b5:68:57:48:4f:
92:28:ba:d4:53:22:2a:17:75:c2:5e:7c:f7:f0:29:
a1:49:9e:21:e0:ce:2e:1e:e8:59:48:2f:10:36:bf:
ac:03:fe:2b:8a:a9:bc:a3:9c:bb:50:b4:50:56:f6:
5b:4f:78:3d:4f:80:d3:89:f0:d3:6d:86:a0:6b:d5:
b2:80:ff:20:07:39:75:9f:de:7e:e3:7f:0f:76:48:
fb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DF:64:89:C3:76:72:11:43:13:5B:66:08:8B:28:0E:C9:42:DA:DD
X509v3 Authority Key Identifier:
keyid:29:7C:50:8D:23:B3:83:15:BB:F4:5B:72:6D:22:05:0A:46:12:7B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXxQjSOzgxW79FtybSIFCkYSe4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/1-N9kicN2chFDE1tmCIsoDslC2t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8abeed-f53b-4776-a8e2-36e9a79bd950/1/KXxQjSOzgxW79FtybSIFCkYSe4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.245.16.0/20
185.81.52.0/22
Signature Algorithm: sha256WithRSAEncryption
66:71:e5:e7:67:45:dc:c8:67:4d:20:26:37:fd:33:fd:b7:2c:
24:db:43:8f:3b:e5:9e:9c:14:c4:44:af:1a:16:8c:a6:dc:af:
fa:01:eb:89:b9:94:3b:34:cf:ed:e3:e3:9b:33:ab:f0:eb:6f:
dc:25:8e:e9:66:ba:60:bf:e7:4e:a9:ca:15:58:cb:99:d3:1b:
1f:38:d8:65:2d:fd:dd:c2:39:d5:f6:64:41:1e:2d:dd:4a:3c:
ea:82:be:70:f6:0c:8c:dc:a4:c6:61:aa:5d:ce:90:42:81:48:
5f:4c:8c:85:07:6f:61:4b:dd:26:df:bc:c9:b0:16:b0:4e:39:
cf:70:a0:a0:c6:8a:9a:87:4c:6f:8c:f5:8f:24:00:62:cf:ac:
76:d1:5c:24:24:79:9e:b4:94:5a:e9:59:43:1d:00:de:23:46:
67:e3:f9:c4:02:5d:75:3a:11:4e:74:e7:5d:dd:66:0a:7f:4a:
a8:33:44:11:bb:2f:84:60:e0:25:fc:dd:e3:51:bd:7a:5a:e3:
a8:34:13:3e:a8:54:a9:3c:b1:ea:e7:5e:16:ca:a7:1a:bc:12:
69:f0:fa:0f:04:e8:2d:34:e6:9e:15:81:f7:1f:35:70:0c:78:
d4:cd:71:95:7f:99:63:dd:d1:d5:58:b9:ce:52:ef:0c:ef:37:
9e:4f:f4:91
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYqDZpR0zauzyixcdg73Aq5+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5N2M1MDhkMjNiMzgzMTViYmY0NWI3MjZkMjIwNTBhNDYx
MjdiOGMwHhcNMjMwOTExMDg0MDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGRmNjQ4OWMzNzY3MjExNDMxMzViNjYwODhiMjgwZWM5NDJkYWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswPqSanx03edYrnbw4zNGeqnxdPU
p/05HViyRncHmdn6yxIcZzqJPdUQrDB4m0iG4B2djTju46JP9/SRoFfj6evuHPyT
3GSGQFgO5TQHadSNyz/4qd5Cxc2q42+Zc/PQ84t+/ItZf2tR42FeaVkg0yExLWL9
O/avKbed6G+QdaYDg6BrTGD/bjJgRWkcVLfjyTisZhsKkB6vt1rFKo9ILtmO/a+D
fxvCILyGtew7tWhXSE+SKLrUUyIqF3XCXnz38CmhSZ4h4M4uHuhZSC8QNr+sA/4r
iqm8o5y7ULRQVvZbT3g9T4DTifDTbYaga9WygP8gBzl1n95+438Pdkj7kQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPjfZInDdnIRQxNbZgiLKA7JQtrdMB8GA1UdIwQY
MBaAFCl8UI0js4MVu/Rbcm0iBQpGEnuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1h4UWpTT3pneFc3OUZ0eWJTSUZDa1lTZTR3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84YWJlZWQtZjUzYi00Nzc2LWE4ZTIt
MzZlOWE3OWJkOTUwLzEvMS1OOWtpY04yY2hGREUxdG1DSXNvRHNsQzJ0MC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDAvOGFiZWVkLWY1M2ItNDc3Ni1hOGUyLTM2ZTlhNzliZDk1
MC8xL0tYeFFqU096Z3hXNzlGdHliU0lGQ2tZU2U0dy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBFD1EAME
ArlRNDANBgkqhkiG9w0BAQsFAAOCAQEAZnHl52dF3MhnTSAmN/0z/bcsJNtDjzvl
npwUxESvGhaMptyv+gHribmUOzTP7ePjmzOr8Otv3CWO6Wa6YL/nTqnKFVjLmdMb
HzjYZS393cI51fZkQR4t3Uo86oK+cPYMjNykxmGqXc6QQoFIX0yMhQdvYUvdJt+8
ybAWsE45z3CgoMaKmodMb4z1jyQAYs+sdtFcJCR5nrSUWulZQx0A3iNGZ+P5xAJd
dToRTnTnXd1mCn9KqDNEEbsvhGDgJfzd41G9elrjqDQTPqhUqTyx6udeFsqnGrwS
afD6DwToLTTmnhWB9x81cAx41M1xlX+ZY93R1Vi5zlLvDO83nk/0kQ==
-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:03 2024 by rpki-client on console-ams.rpki-client.org