Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8HXUXDoqG4lNsIFGgEpLD1NjeGs.roa
File: 8HXUXDoqG4lNsIFGgEpLD1NjeGs.roa (raw, json)
Hash identifier: McEvKdSN1YdiJ1/3IuDgA2e6xpTtdBNbYjzSKsMqVnc=
Subject key identifier: F0:75:D4:5C:3A:2A:1B:89:4D:B0:81:46:80:4A:4B:0F:53:63:78:6B
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B6100AD513B921BFE2548D64C61680090
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8HXUXDoqG4lNsIFGgEpLD1NjeGs.roa
Signing time: Tue 24 Oct 2023 09:25:16 +0000
ROA not before: Tue 24 Oct 2023 09:25:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49716
IP address blocks: 194.55.227.0/24 maxlen: 24
45.8.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:00:ad:51:3b:92:1b:fe:25:48:d6:4c:61:68:00:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 24 09:25:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f075d45c3a2a1b894db08146804a4b0f5363786b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:20:01:14:97:6d:92:53:16:fa:42:26:1f:f3:
b1:4a:fe:29:43:35:48:69:93:37:b0:3b:23:ad:ce:
ab:ae:ff:dc:04:f9:05:95:ba:8e:e7:ac:40:bb:83:
38:61:2a:73:23:41:d4:7d:b7:52:9b:c1:1c:bc:66:
8e:4b:5a:af:c3:4b:be:5f:11:d7:8d:23:45:3e:0d:
0b:04:fb:6d:e0:91:12:53:34:9b:f1:28:ed:df:a3:
3c:e5:90:2f:18:36:8c:f8:f5:65:86:9e:ac:12:ff:
c5:40:f5:71:f7:34:47:aa:81:d4:fe:9b:53:fe:71:
6e:2d:7e:9a:90:a3:9e:2a:51:6f:b5:01:bb:53:7c:
ab:d5:4f:36:7f:a9:39:bd:df:a4:17:2a:da:38:2b:
68:b7:c5:24:ef:56:a1:b3:7f:e4:77:fd:9e:fa:2c:
3b:ee:99:1c:6e:99:46:9f:82:13:08:22:d1:e2:99:
7d:97:25:6e:6a:ec:90:bf:0b:85:3d:f1:a4:04:d0:
54:ea:f2:f4:f7:7b:e3:ad:21:95:90:83:01:a8:57:
dc:cd:bb:37:06:88:18:fe:ba:7e:dd:b1:5c:b0:37:
79:7c:10:ae:f9:f4:ad:20:a2:e5:cd:c4:87:61:c5:
95:79:85:ac:03:df:35:8f:ca:e1:e5:99:4e:d9:f9:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:75:D4:5C:3A:2A:1B:89:4D:B0:81:46:80:4A:4B:0F:53:63:78:6B
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/8HXUXDoqG4lNsIFGgEpLD1NjeGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
194.55.227.0/24
Signature Algorithm: sha256WithRSAEncryption
58:7b:63:8b:d0:14:c7:96:14:c4:e2:5d:4b:fd:db:04:fd:43:
2d:65:d0:c1:ba:60:25:8b:4f:41:0f:10:b2:47:1c:dd:d1:4d:
14:d6:4a:a4:33:ca:38:67:bf:73:38:38:ea:b6:f2:6a:05:50:
38:44:76:a7:be:cb:77:1e:9b:85:e4:85:42:83:7b:97:34:c7:
a7:d0:17:d6:1b:65:f8:97:99:05:4e:3e:d5:d4:ef:1b:8b:cf:
10:82:d3:a8:b2:df:f2:1d:10:30:07:48:f0:4d:fb:e9:8f:6c:
72:6c:0e:ab:01:f9:6e:54:8d:01:b8:ec:2a:6d:9e:ca:f2:c8:
90:1c:03:e2:0b:5c:ea:a2:c8:5f:d7:a9:95:21:42:c5:dd:69:
4e:c7:81:29:50:52:1d:7e:bf:79:7f:55:87:6e:c4:3e:56:35:
bd:43:31:1f:f3:9e:ed:dc:cc:68:6e:5f:62:7e:da:ae:d2:59:
ec:19:31:fb:8d:1f:2f:21:b2:73:16:61:1b:d9:ea:df:25:d2:
c7:18:64:44:68:54:c6:97:ec:d4:36:77:ca:5f:46:9b:3a:33:
99:f1:49:66:b6:eb:cd:40:ff:47:ee:29:b9:43:51:dc:a8:af:
6b:e7:93:63:5f:68:df:9b:9a:4b:91:a0:c6:6f:a3:ee:1c:1a:
16:59:5e:4b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYthAK1RO5Ib/iVI1kxhaACQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMDI0MDkyNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDc1ZDQ1YzNhMmExYjg5NGRiMDgxNDY4MDRhNGIwZjUzNjM3ODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCABFJdtklMW+kImH/OxSv4pQzVI
aZM3sDsjrc6rrv/cBPkFlbqO56xAu4M4YSpzI0HUfbdSm8EcvGaOS1qvw0u+XxHX
jSNFPg0LBPtt4JESUzSb8Sjt36M85ZAvGDaM+PVlhp6sEv/FQPVx9zRHqoHU/ptT
/nFuLX6akKOeKlFvtQG7U3yr1U82f6k5vd+kFyraOCtot8Uk71ahs3/kd/2e+iw7
7pkcbplGn4ITCCLR4pl9lyVuauyQvwuFPfGkBNBU6vL093vjrSGVkIMBqFfczbs3
BogY/rp+3bFcsDd5fBCu+fStIKLlzcSHYcWVeYWsA981j8rh5ZlO2fm10wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPB11Fw6KhuJTbCBRoBKSw9TY3hrMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvOEhYVVhEb3FHNGxOc0lGR2dFcExEMU5qZUdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQhdAwQA
wjfjMA0GCSqGSIb3DQEBCwUAA4IBAQBYe2OL0BTHlhTE4l1L/dsE/UMtZdDBumAl
i09BDxCyRxzd0U0U1kqkM8o4Z79zODjqtvJqBVA4RHanvst3HpuF5IVCg3uXNMen
0BfWG2X4l5kFTj7V1O8bi88QgtOost/yHRAwB0jwTfvpj2xybA6rAfluVI0BuOwq
bZ7K8siQHAPiC1zqoshf16mVIULF3WlOx4EpUFIdfr95f1WHbsQ+VjW9QzEf857t
3Mxobl9iftqu0lnsGTH7jR8vIbJzFmEb2erfJdLHGGREaFTGl+zUNnfKX0abOjOZ
8UlmtuvNQP9H7im5Q1HcqK9r55NjX2jfm5pLkaDGb6PuHBoWWV5L
-----END CERTIFICATE-----
Generated at Thu Oct 26 09:06:20 2023 by rpki-client on console-ams.rpki-client.org