Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Edbvq8FtmasRjMnYBuvyG9jhLnk.roa
File: Edbvq8FtmasRjMnYBuvyG9jhLnk.roa (raw, json)
Hash identifier: Pn7TNJSrSJmcZgjMb4P/1q5OxuYqGPZ76+XElGGBnk0=
Subject key identifier: 11:D6:EF:AB:C1:6D:99:AB:11:8C:C9:D8:06:EB:F2:1B:D8:E1:2E:79
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189BA0AF672801CB8EF0DA56349BC4E5B51
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Edbvq8FtmasRjMnYBuvyG9jhLnk.roa
Signing time: Thu 03 Aug 2023 06:17:07 +0000
ROA not before: Thu 03 Aug 2023 06:17:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 94.156.14.0/24 maxlen: 24
185.218.136.0/24 maxlen: 24
45.149.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ba:0a:f6:72:80:1c:b8:ef:0d:a5:63:49:bc:4e:5b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 3 06:17:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11d6efabc16d99ab118cc9d806ebf21bd8e12e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c0:72:9c:f8:31:e7:53:b2:f5:2e:4b:bf:8e:
3e:63:0c:ec:6e:3e:a8:0a:fc:04:fb:f8:c7:bb:36:
48:24:4f:d9:21:67:40:be:d3:dd:9c:af:d0:a2:e2:
bb:03:f1:32:6c:f6:b8:f3:b9:e8:16:bf:20:77:5e:
52:29:d2:61:8e:7d:f6:e4:ee:97:cd:53:1e:52:47:
1c:24:eb:5e:4a:09:73:87:42:15:e2:89:59:9a:00:
0b:01:cb:84:a6:4f:e3:9d:1d:e6:14:8e:94:ee:8f:
ba:9c:15:f9:31:33:c0:e3:ad:27:64:d7:bb:ff:01:
36:65:a3:07:da:e7:5a:a0:98:e3:ec:32:33:dd:e7:
08:28:50:aa:4a:4a:b6:0e:03:28:49:de:1a:b7:fc:
a8:80:b6:8f:e4:3e:5a:54:e6:1c:ff:d2:a3:7c:78:
91:8f:17:92:69:ec:e9:a3:b7:1f:6b:4e:77:bb:61:
82:7d:2e:93:94:05:65:8f:e6:67:20:2d:68:64:9b:
7a:d1:63:24:7f:30:f7:7a:92:85:80:85:0e:6c:6f:
84:c0:44:73:1d:32:c4:fa:a6:7c:df:8a:a1:9c:94:
e7:b3:a6:90:28:ec:2b:28:fb:69:b6:87:3d:cf:a1:
3f:25:9f:33:e5:0f:7a:4d:7d:5e:16:e5:88:25:2c:
58:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D6:EF:AB:C1:6D:99:AB:11:8C:C9:D8:06:EB:F2:1B:D8:E1:2E:79
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Edbvq8FtmasRjMnYBuvyG9jhLnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.240.0/24
94.156.14.0/24
185.218.136.0/24
Signature Algorithm: sha256WithRSAEncryption
31:b1:4f:c7:38:9f:e1:0f:f0:ea:a7:c6:f3:12:d9:c2:69:be:
9e:07:ef:89:ee:79:0b:e6:b3:c7:16:e4:d3:32:1d:d8:84:bf:
aa:17:3c:c4:a0:4c:e4:0f:88:cf:bd:c1:ae:86:bb:b7:91:13:
e8:0f:22:2d:e1:2a:14:4b:20:7f:81:21:f7:3b:41:38:4a:61:
94:39:ef:3b:b4:13:30:56:1b:7e:3c:02:61:52:60:89:bf:49:
fa:80:65:c7:2d:a2:1d:54:bc:4d:37:b6:2b:6f:9b:7c:23:4c:
ea:89:0c:a0:be:49:28:b6:2a:91:91:40:df:c4:ae:5f:0e:55:
05:66:28:41:7c:d8:4a:b1:ac:aa:7c:7e:a9:6b:20:5e:34:c9:
63:27:a7:32:ba:da:f5:f6:52:b4:d6:d9:86:07:42:13:9d:5d:
7b:9b:e4:3f:71:58:b8:87:ea:1f:ce:f5:54:68:72:74:fe:6b:
de:78:8b:01:4e:74:00:3a:0a:9d:ad:34:43:5d:5a:68:75:57:
7d:ea:37:0f:1e:9a:f1:27:b2:d9:e2:c1:6c:cb:95:c1:24:41:
d6:05:f5:89:74:0a:6e:e2:af:67:3f:5a:74:c6:06:d4:b5:62:
b5:43:38:e8:89:17:51:7d:55:64:32:89:57:dc:12:b6:19:05:
66:58:c6:eb
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYm6CvZygBy47w2lY0m8TltRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwODAzMDYxNzA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWQ2ZWZhYmMxNmQ5OWFiMTE4Y2M5ZDgwNmViZjIxYmQ4ZTEyZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18BynPgx51Oy9S5Lv44+Ywzsbj6o
CvwE+/jHuzZIJE/ZIWdAvtPdnK/QouK7A/EybPa487noFr8gd15SKdJhjn325O6X
zVMeUkccJOteSglzh0IV4olZmgALAcuEpk/jnR3mFI6U7o+6nBX5MTPA460nZNe7
/wE2ZaMH2udaoJjj7DIz3ecIKFCqSkq2DgMoSd4at/yogLaP5D5aVOYc/9KjfHiR
jxeSaezpo7cfa053u2GCfS6TlAVlj+ZnIC1oZJt60WMkfzD3epKFgIUObG+EwERz
HTLE+qZ834qhnJTns6aQKOwrKPtptoc9z6E/JZ8z5Q96TX1eFuWIJSxY+QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBHW76vBbZmrEYzJ2Abr8hvY4S55MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvRWRidnE4RnRtYXNSak1uWUJ1dnlHOWpoTG5rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZXwAwQA
XpwOAwQAudqIMA0GCSqGSIb3DQEBCwUAA4IBAQAxsU/HOJ/hD/Dqp8bzEtnCab6e
B++J7nkL5rPHFuTTMh3YhL+qFzzEoEzkD4jPvcGuhru3kRPoDyIt4SoUSyB/gSH3
O0E4SmGUOe87tBMwVht+PAJhUmCJv0n6gGXHLaIdVLxNN7Yrb5t8I0zqiQygvkko
tiqRkUDfxK5fDlUFZihBfNhKsayqfH6payBeNMljJ6cyutr19lK01tmGB0ITnV17
m+Q/cVi4h+ofzvVUaHJ0/mveeIsBTnQAOgqdrTRDXVpodVd96jcPHprxJ7LZ4sFs
y5XBJEHWBfWJdApu4q9nP1p0xgbUtWK1QzjoiRdRfVVkMolX3BK2GQVmWMbr
-----END CERTIFICATE-----
Generated at Mon Oct 23 09:26:49 2023 by rpki-client on console-fra.rpki-client.org