Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7EQ8XRg5Hh3mDMWt8Bdlb9CCj_4.roa
File: 7EQ8XRg5Hh3mDMWt8Bdlb9CCj_4.roa (raw, json)
Hash identifier: YeTA6IPwZPfpJqgSbZKm39bW+kQ7p1RHnPkOGWNpH4E=
Subject key identifier: EC:44:3C:5D:18:39:1E:1D:E6:0C:C5:AD:F0:17:65:6F:D0:82:8F:FE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018639FD05824F9952B5D6DF00890B607916
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7EQ8XRg5Hh3mDMWt8Bdlb9CCj_4.roa
Signing time: Fri 10 Feb 2023 06:22:08 +0000
ROA not before: Fri 10 Feb 2023 06:22:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399587
IP address blocks: 193.8.186.0/24 maxlen: 24
193.8.184.0/24 maxlen: 24
193.8.185.0/24 maxlen: 24
185.207.14.0/23 maxlen: 24
193.8.187.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:39:fd:05:82:4f:99:52:b5:d6:df:00:89:0b:60:79:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 10 06:22:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec443c5d18391e1de60cc5adf017656fd0828ffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9b:51:8c:d7:92:0b:82:4c:0b:a0:f2:74:6e:
32:82:8c:ee:eb:a8:43:08:ca:74:b2:6f:c4:18:4b:
f6:dd:f7:5c:52:a7:85:f9:5e:1f:34:4f:36:e9:9c:
ef:04:35:43:c0:0f:56:23:88:c4:c2:06:76:1a:84:
bb:1c:50:a7:ff:1e:e9:6f:63:94:58:88:ce:d3:7d:
84:a8:2c:4e:d6:55:00:00:be:cd:ca:9f:ae:4a:52:
c6:6d:a6:4b:08:0c:22:84:30:10:7f:0b:f6:ab:56:
64:2d:31:b7:98:0b:16:40:48:0c:b5:54:1b:da:b1:
dd:33:2e:67:ed:67:ac:9f:99:48:58:b0:07:eb:b9:
e8:7a:a3:51:94:10:e1:85:e3:a5:a3:87:38:7e:9f:
08:6f:5d:90:dc:f3:b2:7c:5c:b9:c4:56:29:ac:73:
56:09:1a:e8:ab:e4:7d:83:d3:ee:1c:4f:4c:d5:27:
37:03:3a:b0:7c:43:77:87:52:93:54:2b:59:7c:f8:
ad:13:1d:a5:46:69:77:ec:d4:d2:7a:62:60:84:d8:
93:70:98:a9:ea:d6:a4:bd:80:f9:e5:8a:aa:38:ee:
06:7a:88:8b:9e:b7:23:72:15:ff:61:8c:55:2e:a0:
bf:38:d2:48:74:9d:f9:a2:ec:12:0d:43:36:04:4c:
7e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:44:3C:5D:18:39:1E:1D:E6:0C:C5:AD:F0:17:65:6F:D0:82:8F:FE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/7EQ8XRg5Hh3mDMWt8Bdlb9CCj_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/24
185.207.14.0/23
193.8.184.0/22
Signature Algorithm: sha256WithRSAEncryption
29:3d:ea:c0:87:26:71:86:1c:d2:fb:4c:9c:8b:2d:20:e6:da:
ff:e1:13:77:1c:9f:57:41:a1:7e:03:bc:4e:29:b6:62:ea:c9:
ad:42:d3:ea:51:3b:9d:41:7e:c0:5d:71:5e:d7:15:07:f2:b2:
ee:f4:26:0f:20:40:15:27:d0:60:90:12:91:90:20:36:d6:08:
c1:79:f0:11:6a:d7:fb:70:46:7f:11:9b:e8:fa:b5:53:6f:11:
36:16:9d:f9:1f:95:47:96:16:ee:1d:11:ee:19:91:e2:f0:7e:
29:9d:31:4a:9f:19:4d:02:1e:0d:e5:84:b0:75:25:b7:10:2b:
09:44:13:5d:7d:35:20:fe:8c:39:40:99:dd:cd:99:50:f8:67:
04:07:31:43:17:e5:93:1a:fb:90:ce:7e:53:5e:c7:1e:57:0f:
02:ee:d4:3f:1c:1c:ed:df:60:cb:36:eb:c2:33:a1:f1:c1:6d:
47:b9:ed:6f:64:8a:bc:f0:2b:23:a4:9b:48:23:af:8f:04:54:
3e:d2:f8:a9:1e:07:fe:01:f4:e6:96:66:77:34:99:72:25:24:
31:c8:3c:59:ee:0d:29:5f:97:8e:67:f2:1c:79:8b:7d:3e:5e:
91:c0:eb:68:7c:09:77:7d:b0:86:46:47:5b:8e:04:31:a3:02:
64:3b:c7:a7
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYY5/QWCT5lStdbfAIkLYHkWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMjEwMDYyMjA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzQ0M2M1ZDE4MzkxZTFkZTYwY2M1YWRmMDE3NjU2ZmQwODI4ZmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5tRjNeSC4JMC6DydG4ygozu66hD
CMp0sm/EGEv23fdcUqeF+V4fNE826ZzvBDVDwA9WI4jEwgZ2GoS7HFCn/x7pb2OU
WIjO032EqCxO1lUAAL7Nyp+uSlLGbaZLCAwihDAQfwv2q1ZkLTG3mAsWQEgMtVQb
2rHdMy5n7Wesn5lIWLAH67noeqNRlBDhheOlo4c4fp8Ib12Q3POyfFy5xFYprHNW
CRroq+R9g9PuHE9M1Sc3AzqwfEN3h1KTVCtZfPitEx2lRml37NTSemJghNiTcJip
6takvYD55YqqOO4GeoiLnrcjchX/YYxVLqC/ONJIdJ35ouwSDUM2BEx+NwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFOxEPF0YOR4d5gzFrfAXZW/Qgo/+MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvN0VROFhSZzVIaDNtRE1XdDhCZGxiOUNDal80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVhYAwQB
uc8OAwQCwQi4MA0GCSqGSIb3DQEBCwUAA4IBAQApPerAhyZxhhzS+0yciy0g5tr/
4RN3HJ9XQaF+A7xOKbZi6smtQtPqUTudQX7AXXFe1xUH8rLu9CYPIEAVJ9BgkBKR
kCA21gjBefARatf7cEZ/EZvo+rVTbxE2Fp35H5VHlhbuHRHuGZHi8H4pnTFKnxlN
Ah4N5YSwdSW3ECsJRBNdfTUg/ow5QJndzZlQ+GcEBzFDF+WTGvuQzn5TXsceVw8C
7tQ/HBzt32DLNuvCM6HxwW1Hue1vZIq88CsjpJtII6+PBFQ+0vipHgf+AfTmlmZ3
NJlyJSQxyDxZ7g0pX5eOZ/IceYt9Pl6RwOtofAl3fbCGRkdbjgQxowJkO8en
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:32 2023 by rpki-client on console-ams.rpki-client.org