Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6jPsIWGdhR2UkuxvfDtdQVwlCOE.roa
File: 6jPsIWGdhR2UkuxvfDtdQVwlCOE.roa (raw, json)
Hash identifier: o2Nim/l9d8ZKPRQ+WONZ1dygb6UuLHMYL5PMDIrZzbA=
Subject key identifier: EA:33:EC:21:61:9D:85:1D:94:92:EC:6F:7C:3B:5D:41:5C:25:08:E1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189A94BD9EC9FF5F91DAD4E8ADFF7A440AE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6jPsIWGdhR2UkuxvfDtdQVwlCOE.roa
Signing time: Mon 31 Jul 2023 00:14:27 +0000
ROA not before: Mon 31 Jul 2023 00:14:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.14.167.0/24 maxlen: 24
93.123.74.0/24 maxlen: 24
93.123.75.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
83.219.99.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a9:4b:d9:ec:9f:f5:f9:1d:ad:4e:8a:df:f7:a4:40:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 31 00:14:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea33ec21619d851d9492ec6f7c3b5d415c2508e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ca:55:ec:a5:c5:74:36:82:6d:dc:d6:02:c5:
0e:02:2d:e4:3e:f0:8e:af:60:cd:41:55:a5:55:66:
31:48:89:7d:bb:15:fc:26:1f:68:89:d5:15:3a:bf:
7c:55:7b:8b:98:78:51:39:4a:11:1b:e2:c6:ba:a6:
fc:04:50:c2:1c:de:25:57:0d:6c:14:dd:45:e2:52:
60:a6:82:c1:b9:1f:38:ad:91:a8:60:61:71:22:f1:
5a:eb:2e:80:55:c4:40:18:f1:ce:e6:f0:56:3a:b0:
fd:b7:39:48:02:9e:7c:b4:83:15:c9:e3:b3:4e:8c:
a9:1a:c4:9f:2e:58:3e:c3:c3:34:ab:cb:38:c3:4d:
c9:9b:91:a5:2f:db:8d:9e:c3:f3:01:ff:fb:5e:f7:
5d:68:9d:6f:59:f3:ed:03:a0:5d:88:da:41:f7:6e:
c8:5c:82:68:2b:84:39:fb:a4:95:ec:4d:f8:fd:70:
d6:f1:10:5f:91:40:20:86:3d:4a:e8:48:2b:9a:cf:
29:22:52:ed:69:cd:ff:b0:2c:5a:c1:b9:46:79:d4:
c5:0c:00:e8:7f:ff:e0:cb:82:ed:44:ad:15:a8:2d:
5f:95:5c:da:46:15:95:a9:ac:c4:de:eb:d0:39:f7:
63:c4:19:bf:2b:7e:8b:b5:5d:20:94:b3:4e:cf:5e:
17:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:33:EC:21:61:9D:85:1D:94:92:EC:6F:7C:3B:5D:41:5C:25:08:E1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/6jPsIWGdhR2UkuxvfDtdQVwlCOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.167.0/24
45.129.85.0/24
83.219.96.0/24
83.219.99.0/24
93.123.74.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:dc:64:c9:96:21:70:c1:1e:91:cd:de:fc:fb:d7:10:75:10:
9e:8f:fc:e0:fe:00:9c:3b:cd:80:80:44:0e:06:d8:95:6e:66:
3b:7e:20:24:da:c9:af:b5:e4:92:97:84:d0:f1:94:e5:e6:98:
1f:ce:a1:f6:6a:22:fa:17:8b:b1:aa:28:eb:54:24:44:38:e9:
bd:ad:af:cc:e6:e6:a6:93:fa:92:d4:7c:8c:90:ff:32:e4:76:
28:92:cf:b2:4a:74:88:dc:c9:7c:2c:07:74:63:c6:63:79:fb:
d0:ae:46:ce:35:82:4b:e4:0e:cd:93:ee:00:18:fb:16:b7:28:
3c:7e:75:db:95:ac:1d:7d:75:4c:4d:04:f1:89:ad:e2:a9:c9:
8b:a1:22:c0:4c:01:b2:25:ee:d1:1f:76:c6:3d:35:04:6c:fd:
b1:d7:62:a6:00:9f:15:4d:56:24:d3:9c:c4:41:05:64:b4:40:
21:c4:74:c1:97:26:3b:b7:8c:1b:88:da:84:32:28:ad:5c:51:
45:5c:8c:65:90:fa:f3:06:0a:35:d1:c1:e0:3f:d3:c4:16:f1:
f2:c2:ee:77:3f:65:61:1c:66:73:74:82:b3:f6:c5:c7:11:9c:
52:6c:6b:63:7d:58:98:9f:62:31:8b:45:c0:f9:14:ef:af:7b:
b2:60:ef:81
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYmpS9nsn/X5Ha1Oit/3pECuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNzMxMDAxNDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTMzZWMyMTYxOWQ4NTFkOTQ5MmVjNmY3YzNiNWQ0MTVjMjUwOGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMpV7KXFdDaCbdzWAsUOAi3kPvCO
r2DNQVWlVWYxSIl9uxX8Jh9oidUVOr98VXuLmHhROUoRG+LGuqb8BFDCHN4lVw1s
FN1F4lJgpoLBuR84rZGoYGFxIvFa6y6AVcRAGPHO5vBWOrD9tzlIAp58tIMVyeOz
ToypGsSfLlg+w8M0q8s4w03Jm5GlL9uNnsPzAf/7XvddaJ1vWfPtA6BdiNpB927I
XIJoK4Q5+6SV7E34/XDW8RBfkUAghj1K6Egrms8pIlLtac3/sCxawblGedTFDADo
f//gy4LtRK0VqC1flVzaRhWVqazE3uvQOfdjxBm/K36LtV0glLNOz14XKQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFOoz7CFhnYUdlJLsb3w7XUFcJQjhMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvNmpQc0lXR2RoUjJVa3V4dmZEdGRRVndsQ09FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALQ6nAwQA
LYFVAwQAU9tgAwQAU9tjAwQBXXtKMA0GCSqGSIb3DQEBCwUAA4IBAQCg3GTJliFw
wR6Rzd78+9cQdRCej/zg/gCcO82AgEQOBtiVbmY7fiAk2smvteSSl4TQ8ZTl5pgf
zqH2aiL6F4uxqijrVCREOOm9ra/M5uamk/qS1HyMkP8y5HYoks+ySnSI3Ml8LAd0
Y8ZjefvQrkbONYJL5A7Nk+4AGPsWtyg8fnXblawdfXVMTQTxia3iqcmLoSLATAGy
Je7RH3bGPTUEbP2x12KmAJ8VTVYk05zEQQVktEAhxHTBlyY7t4wbiNqEMiitXFFF
XIxlkPrzBgo10cHgP9PEFvHywu53P2VhHGZzdIKz9sXHEZxSbGtjfViYn2Ixi0XA
+RTvr3uyYO+B
-----END CERTIFICATE-----
Generated at Mon Jul 31 14:29:36 2023 by rpki-client on console-ams.rpki-client.org