Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4XJeTkI196jP4F9SQwERyXF0Ej4.roa
File: 4XJeTkI196jP4F9SQwERyXF0Ej4.roa (raw, json)
Hash identifier: IIeE0SAmR7dj/ln2GwctpvHCJgeT3FRnWxEMFnh0YJ4=
Subject key identifier: E1:72:5E:4E:42:35:F7:A8:CF:E0:5F:52:43:01:11:C9:71:74:12:3E
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01888B6A30626FB81C66F0D307239A9C5921
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4XJeTkI196jP4F9SQwERyXF0Ej4.roa
Signing time: Mon 05 Jun 2023 11:56:12 +0000
ROA not before: Mon 05 Jun 2023 11:56:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206776
IP address blocks: 45.89.244.0/24 maxlen: 24
87.120.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8b:6a:30:62:6f:b8:1c:66:f0:d3:07:23:9a:9c:59:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 5 11:56:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1725e4e4235f7a8cfe05f52430111c97174123e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bb:5d:f6:da:b6:3b:10:46:d8:2e:a8:22:3c:
92:3a:b6:93:69:a9:48:92:23:c9:c6:b3:b1:16:ae:
00:35:d6:a5:6b:e1:b0:38:e4:e9:cd:63:ac:fa:03:
6f:e7:f6:a4:21:de:84:8b:97:59:40:08:d3:84:4d:
db:e9:da:b5:35:8c:9f:a0:97:31:5f:98:01:26:c7:
56:b1:c7:d8:13:2f:41:47:9a:57:3b:80:6b:69:ad:
d7:7a:41:56:b5:99:f8:1d:84:70:47:59:f1:a9:b4:
0e:69:b5:61:f2:aa:24:cf:21:67:c0:d8:85:5a:66:
d8:e9:bb:e5:0f:2c:fd:3b:0e:66:c2:4b:a8:ce:c9:
e6:f9:0f:0f:bb:09:08:97:a0:58:f4:d9:30:4e:77:
f6:ca:b7:7c:66:a7:84:57:23:23:64:31:22:ff:b2:
14:8a:35:6e:35:a3:c9:46:37:f6:26:54:62:75:a6:
20:ad:59:fa:6e:2e:23:f6:db:ae:02:b3:f0:8f:ba:
8b:b6:31:10:6c:f2:11:70:73:f3:d2:bc:f0:68:a9:
e8:65:79:13:ee:fa:6e:2d:cc:e3:12:82:66:aa:10:
66:cc:19:e7:4b:99:74:58:0d:fe:e1:9d:77:a2:c3:
10:04:31:da:92:14:23:c4:60:89:e9:70:dc:8c:a7:
13:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:72:5E:4E:42:35:F7:A8:CF:E0:5F:52:43:01:11:C9:71:74:12:3E
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/4XJeTkI196jP4F9SQwERyXF0Ej4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.244.0/24
87.120.36.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:1a:31:e9:20:66:7f:c0:2f:f5:41:66:52:c0:0c:0c:5f:e2:
67:6f:70:d9:33:3c:22:8a:9c:1f:59:e4:22:cd:af:d6:1f:89:
06:df:fc:82:a2:fb:ae:1d:ae:fd:0a:39:a1:44:16:b6:14:11:
81:64:81:16:d9:bd:6d:fc:5c:a3:18:77:a5:d1:38:8b:d1:b7:
8f:26:50:a1:89:88:36:cd:39:f1:1f:4a:9e:52:75:3c:68:19:
aa:bb:8d:cd:b8:a2:18:56:0b:00:1a:c4:74:05:e3:29:4b:93:
97:f9:31:ff:26:45:c4:8b:e6:cf:05:14:e5:05:0e:71:0c:9d:
11:81:06:ed:68:cf:19:84:98:06:a0:68:fa:ac:0c:c0:ee:39:
50:f2:6b:36:98:95:f3:37:a1:48:41:b4:39:8c:97:13:63:af:
4e:71:b0:f7:8f:4f:ab:fa:e5:91:7d:04:63:db:e2:cb:62:dd:
f5:3c:8e:9b:ec:f5:06:bd:54:c1:c4:ed:6c:43:2b:05:ad:fc:
89:64:ca:16:29:5d:0c:f8:4e:d1:98:14:a2:0e:b4:55:48:69:
8d:85:67:6e:14:1a:35:9d:bb:45:05:78:05:e3:f6:7e:d3:ef:
2f:97:e5:69:a4:2a:b6:7d:a0:d6:17:73:c1:38:21:a1:79:ba:
2c:0d:50:c8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYiLajBib7gcZvDTByOanFkhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNjA1MTE1NjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTcyNWU0ZTQyMzVmN2E4Y2ZlMDVmNTI0MzAxMTFjOTcxNzQxMjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7td9tq2OxBG2C6oIjySOraTaalI
kiPJxrOxFq4ANdala+GwOOTpzWOs+gNv5/akId6Ei5dZQAjThE3b6dq1NYyfoJcx
X5gBJsdWscfYEy9BR5pXO4Braa3XekFWtZn4HYRwR1nxqbQOabVh8qokzyFnwNiF
WmbY6bvlDyz9Ow5mwkuozsnm+Q8PuwkIl6BY9NkwTnf2yrd8ZqeEVyMjZDEi/7IU
ijVuNaPJRjf2JlRidaYgrVn6bi4j9tuuArPwj7qLtjEQbPIRcHPz0rzwaKnoZXkT
7vpuLczjEoJmqhBmzBnnS5l0WA3+4Z13osMQBDHakhQjxGCJ6XDcjKcTYQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOFyXk5CNfeoz+BfUkMBEclxdBI+MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNFhKZVRrSTE5NmpQNEY5U1F3RVJ5WEYwRWo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVn0AwQA
V3gkMA0GCSqGSIb3DQEBCwUAA4IBAQBKGjHpIGZ/wC/1QWZSwAwMX+Jnb3DZMzwi
ipwfWeQiza/WH4kG3/yCovuuHa79CjmhRBa2FBGBZIEW2b1t/FyjGHel0TiL0beP
JlChiYg2zTnxH0qeUnU8aBmqu43NuKIYVgsAGsR0BeMpS5OX+TH/JkXEi+bPBRTl
BQ5xDJ0RgQbtaM8ZhJgGoGj6rAzA7jlQ8ms2mJXzN6FIQbQ5jJcTY69OcbD3j0+r
+uWRfQRj2+LLYt31PI6b7PUGvVTBxO1sQysFrfyJZMoWKV0M+E7RmBSiDrRVSGmN
hWduFBo1nbtFBXgF4/Z+0+8vl+VppCq2faDWF3PBOCGhebosDVDI
-----END CERTIFICATE-----
Generated at Thu Jul 20 12:23:25 2023 by rpki-client on console-ams.rpki-client.org