Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EQq9wcP4NLFFpnC_cbfdX-XLPNE.roa
File: EQq9wcP4NLFFpnC_cbfdX-XLPNE.roa (raw, json)
Hash identifier: Mh0XgYnRoooQjefAp6sMiZZ5WP8rf9RfHl8hL1VQ3+o=
Subject key identifier: 11:0A:BD:C1:C3:F8:34:B1:45:A6:70:BF:71:B7:DD:5F:E5:CB:3C:D1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CF74238192B7C9029AD1A197D66515C67
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EQq9wcP4NLFFpnC_cbfdX-XLPNE.roa
Signing time: Thu 11 Jan 2024 06:42:41 +0000
ROA not before: Thu 11 Jan 2024 06:42:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203217
IP address blocks: 81.161.228.0/24 maxlen: 24
45.8.72.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Apr 2024 13:03:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f7:42:38:19:2b:7c:90:29:ad:1a:19:7d:66:51:5c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 11 06:42:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=110abdc1c3f834b145a670bf71b7dd5fe5cb3cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f7:7e:07:df:c9:34:19:ab:d0:bd:71:14:08:
dc:df:59:21:b6:58:97:77:cf:63:5f:8d:41:57:be:
66:53:ad:d8:c6:a9:c1:31:b5:d6:30:8e:35:c4:ca:
72:10:56:ae:53:c7:8a:20:c3:c2:0b:81:c7:a7:c2:
77:fa:10:54:82:9b:42:41:05:09:ac:6d:83:3a:c6:
78:d1:36:32:30:d7:6d:39:46:a9:65:7f:9c:d5:4e:
c3:a2:af:d1:43:d4:ce:6d:e2:58:9a:72:f3:c3:69:
6e:32:79:ab:5e:e8:13:ce:3b:62:92:c4:28:42:17:
eb:85:e2:a4:f0:86:9a:ed:78:58:56:7a:15:33:aa:
77:8b:d4:a7:5e:ca:53:eb:9f:ed:d3:cb:ac:b8:fa:
a4:32:d3:74:95:f2:6c:85:3b:95:f0:a8:99:1c:9f:
38:80:36:0b:41:4f:09:23:71:46:76:b1:6e:36:96:
50:f2:7f:86:a4:81:77:dc:cd:0e:34:ce:ad:12:25:
d8:97:bd:a2:9a:e2:fc:ed:5b:0f:6d:96:41:76:80:
20:1c:82:16:d5:4b:0c:09:f5:cd:a1:b0:c3:14:b8:
cc:4f:dd:1b:b9:c8:a2:0d:46:ef:21:95:73:70:ab:
ad:cf:a4:cc:f9:0a:2d:fd:80:b6:77:55:bf:67:37:
29:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:0A:BD:C1:C3:F8:34:B1:45:A6:70:BF:71:B7:DD:5F:E5:CB:3C:D1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/EQq9wcP4NLFFpnC_cbfdX-XLPNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.72.0/23
81.161.228.0/24
Signature Algorithm: sha256WithRSAEncryption
07:41:5d:16:40:b0:cf:2f:56:03:e9:1a:9e:e7:46:09:24:a9:
b4:68:75:cd:3c:66:3b:41:c4:17:8f:3d:b9:70:a8:68:df:d2:
14:b0:52:c4:4f:97:82:a2:e7:7f:73:11:ab:1b:9d:fa:70:e9:
95:65:fa:44:ef:84:85:0e:6f:35:2f:3b:f9:5f:90:b7:24:f6:
ec:0a:c5:38:82:3f:e6:b0:53:b3:7c:35:0a:0d:65:54:c0:4c:
38:46:92:7a:04:8a:63:3c:7d:2e:36:30:78:b1:6c:cf:59:06:
04:b9:0d:83:63:94:bd:f5:6c:94:6b:aa:c8:b1:7c:ed:93:64:
44:e7:59:01:c0:58:aa:6e:b0:38:0d:35:d4:51:c8:52:62:95:
2e:c7:a5:1b:c2:36:a0:1f:97:53:a3:49:89:37:df:00:11:9b:
e5:d4:ee:3b:8a:d1:28:99:fd:c0:93:6d:de:88:c6:8c:44:ed:
0a:f8:e9:dc:27:56:2e:22:d1:fc:56:33:ac:59:0b:5d:7e:b0:
0b:4d:89:81:a1:46:ad:23:03:1f:c0:40:64:e0:d3:4c:b8:eb:
82:95:51:a6:33:7d:56:a6:aa:7b:ff:97:e5:b8:8a:64:ed:1a:
5e:1e:5c:46:75:e9:63:56:71:bd:32:e7:26:32:e5:c2:36:99:
f0:e1:52:48
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYz3QjgZK3yQKa0aGX1mUVxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTExMDY0MjQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTBhYmRjMWMzZjgzNGIxNDVhNjcwYmY3MWI3ZGQ1ZmU1Y2IzY2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvd+B9/JNBmr0L1xFAjc31khtliX
d89jX41BV75mU63YxqnBMbXWMI41xMpyEFauU8eKIMPCC4HHp8J3+hBUgptCQQUJ
rG2DOsZ40TYyMNdtOUapZX+c1U7Doq/RQ9TObeJYmnLzw2luMnmrXugTzjtiksQo
QhfrheKk8Iaa7XhYVnoVM6p3i9SnXspT65/t08usuPqkMtN0lfJshTuV8KiZHJ84
gDYLQU8JI3FGdrFuNpZQ8n+GpIF33M0ONM6tEiXYl72imuL87VsPbZZBdoAgHIIW
1UsMCfXNobDDFLjMT90buciiDUbvIZVzcKutz6TM+Qot/YC2d1W/ZzcpKQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBEKvcHD+DSxRaZwv3G33V/lyzzRMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRVFxOXdjUDROTEZGcG5DX2NiZmRYLVhMUE5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLQhIAwQA
UaHkMA0GCSqGSIb3DQEBCwUAA4IBAQAHQV0WQLDPL1YD6Rqe50YJJKm0aHXNPGY7
QcQXjz25cKho39IUsFLET5eCoud/cxGrG536cOmVZfpE74SFDm81Lzv5X5C3JPbs
CsU4gj/msFOzfDUKDWVUwEw4RpJ6BIpjPH0uNjB4sWzPWQYEuQ2DY5S99WyUa6rI
sXztk2RE51kBwFiqbrA4DTXUUchSYpUux6UbwjagH5dTo0mJN98AEZvl1O47itEo
mf3Ak23eiMaMRO0K+OncJ1YuItH8VjOsWQtdfrALTYmBoUatIwMfwEBk4NNMuOuC
lVGmM31Wpqp7/5fluIpk7RpeHlxGdeljVnG9MucmMuXCNpnw4VJI
-----END CERTIFICATE-----
Generated at Wed Apr 17 17:48:16 2024 by rpki-client on console-ams.rpki-client.org