Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AHok4GaxPgmIwZpA9X1VZX8DNpQ.roa
File: AHok4GaxPgmIwZpA9X1VZX8DNpQ.roa (raw, json)
Hash identifier: 01J7bD0xjiNSFkcZJVcetBQXYVLZ6i4HRY6pYxEhb88=
Subject key identifier: 00:7A:24:E0:66:B1:3E:09:88:C1:9A:40:F5:7D:55:65:7F:03:36:94
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B157DEC34696E9303C2E6513CFCB4FEA6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AHok4GaxPgmIwZpA9X1VZX8DNpQ.roa
Signing time: Mon 09 Oct 2023 17:30:55 +0000
ROA not before: Mon 09 Oct 2023 17:30:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197450
IP address blocks: 87.120.166.0/24 maxlen: 24
87.121.44.0/24 maxlen: 24
87.121.46.0/24 maxlen: 24
85.31.47.0/24 maxlen: 24
45.128.233.0/24 maxlen: 24
94.156.79.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:15:7d:ec:34:69:6e:93:03:c2:e6:51:3c:fc:b4:fe:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 9 17:30:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=007a24e066b13e0988c19a40f57d55657f033694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6f:ab:7b:b5:54:ec:4c:b5:99:5a:58:e2:f7:
a6:c4:c3:73:cb:02:ad:cb:3c:47:87:6b:8a:45:1b:
56:59:b8:8f:82:22:f2:17:0f:52:ac:c3:6d:65:dc:
a2:ac:b7:6b:8a:d4:9a:c5:3d:0c:ec:93:46:c5:c5:
cc:be:6d:03:d0:71:86:b9:af:b6:2c:f0:5e:82:34:
64:08:b9:67:dc:96:92:b0:24:7c:35:2c:43:42:e6:
d1:a7:f3:d7:04:fa:06:35:18:75:51:1e:ee:26:fe:
19:69:cf:dd:f0:c6:7e:dc:0b:4f:70:31:6c:4e:38:
b5:12:65:e1:98:09:0e:a9:ad:e2:08:24:a8:8b:fc:
c4:ce:04:43:06:1c:c5:a2:16:6f:c2:d7:80:2a:31:
d7:b6:9b:04:78:cf:38:e0:1d:c3:d0:a7:11:70:33:
3c:cb:08:e1:87:7f:46:ad:54:ac:39:c3:1a:de:8c:
ea:7a:c5:28:72:48:1a:d2:23:bd:f9:9f:e3:0b:84:
74:3a:bb:d4:a8:5c:0a:2d:14:df:ac:05:c4:46:0e:
dc:45:8c:b9:12:75:ba:6d:90:a8:42:5d:77:18:95:
12:3a:4a:f3:55:d7:fb:11:e5:d0:af:f3:35:08:a8:
e2:34:b5:ba:d6:e4:af:34:1f:fa:b7:20:e7:df:3b:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7A:24:E0:66:B1:3E:09:88:C1:9A:40:F5:7D:55:65:7F:03:36:94
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/AHok4GaxPgmIwZpA9X1VZX8DNpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.233.0/24
85.31.47.0/24
87.120.166.0/24
87.121.44.0/24
87.121.46.0/24
94.156.79.0/24
Signature Algorithm: sha256WithRSAEncryption
28:ca:4a:76:8f:5e:dc:c2:da:7c:a5:5c:46:ab:48:53:c9:f5:
ff:fc:c9:26:42:ec:d2:fe:84:e7:db:8b:fe:fa:c8:b5:71:3e:
ec:e0:ae:4a:06:1e:fb:bc:eb:92:73:59:a0:1f:60:da:39:be:
e8:d0:c9:8e:14:d1:8e:7e:16:7c:be:0b:d2:a7:34:d5:6e:07:
d1:3d:75:f1:56:51:21:65:21:3a:07:dc:01:2d:8c:14:89:ea:
49:ad:7f:e6:52:37:88:22:1d:0b:00:4c:9a:f4:5f:52:56:3d:
8c:15:f7:de:df:f2:01:53:67:4a:eb:6c:a6:63:27:2b:46:c1:
c7:f1:95:fc:e2:78:ae:f7:91:d6:00:7d:72:e7:2e:07:d8:4e:
0f:d9:bf:50:19:b7:fc:cc:df:79:6a:5b:01:2f:51:2f:53:79:
76:43:ee:86:78:ec:a9:29:07:c8:22:7f:54:a9:5a:54:d5:77:
df:a5:52:4a:f2:8f:b1:03:db:d6:13:e5:ff:1a:88:f8:a4:ed:
fc:46:0c:8a:7f:f2:36:81:b9:48:88:09:ef:0e:14:87:6c:22:
d1:3b:60:82:d3:43:b1:c3:a4:a8:e2:1f:5a:54:a6:cb:d9:cd:
bd:3f:a2:f0:f2:57:68:95:33:1e:bf:61:50:d8:15:0f:ad:14:
f2:d6:fa:55
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYsVfew0aW6TA8LmUTz8tP6mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMDA5MTczMDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDdhMjRlMDY2YjEzZTA5ODhjMTlhNDBmNTdkNTU2NTdmMDMzNjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm+re7VU7Ey1mVpY4vemxMNzywKt
yzxHh2uKRRtWWbiPgiLyFw9SrMNtZdyirLdritSaxT0M7JNGxcXMvm0D0HGGua+2
LPBegjRkCLln3JaSsCR8NSxDQubRp/PXBPoGNRh1UR7uJv4Zac/d8MZ+3AtPcDFs
Tji1EmXhmAkOqa3iCCSoi/zEzgRDBhzFohZvwteAKjHXtpsEeM844B3D0KcRcDM8
ywjhh39GrVSsOcMa3ozqesUockga0iO9+Z/jC4R0OrvUqFwKLRTfrAXERg7cRYy5
EnW6bZCoQl13GJUSOkrzVdf7EeXQr/M1CKjiNLW61uSvNB/6tyDn3zvBxQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFAB6JOBmsT4JiMGaQPV9VWV/AzaUMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvQUhvazRHYXhQZ21Jd1pwQTlYMVZaWDhETnBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALYDpAwQA
VR8vAwQAV3imAwQAV3ksAwQAV3kuAwQAXpxPMA0GCSqGSIb3DQEBCwUAA4IBAQAo
ykp2j17cwtp8pVxGq0hTyfX//MkmQuzS/oTn24v++si1cT7s4K5KBh77vOuSc1mg
H2DaOb7o0MmOFNGOfhZ8vgvSpzTVbgfRPXXxVlEhZSE6B9wBLYwUiepJrX/mUjeI
Ih0LAEya9F9SVj2MFffe3/IBU2dK62ymYycrRsHH8ZX84niu95HWAH1y5y4H2E4P
2b9QGbf8zN95alsBL1EvU3l2Q+6GeOypKQfIIn9UqVpU1XffpVJK8o+xA9vWE+X/
Goj4pO38RgyKf/I2gblIiAnvDhSHbCLRO2CC00Oxw6So4h9aVKbL2c29P6Lw8ldo
lTMev2FQ2BUPrRTy1vpV
-----END CERTIFICATE-----
Generated at Wed Oct 18 15:04:30 2023 by rpki-client on console-ams.rpki-client.org