Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PRD9YznJzVVw2Dgy_yHb38xFaeU.roa
File: PRD9YznJzVVw2Dgy_yHb38xFaeU.roa (raw, json)
Hash identifier: PW80kwKZJ3LHdZwRvQVe57bEDfpkAv/EpSeXM5DNRgE=
Subject key identifier: 3D:10:FD:63:39:C9:CD:55:70:D8:38:32:FF:21:DB:DF:CC:45:69:E5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0189B3A6718B30AF3130E4A652604BDD4833
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PRD9YznJzVVw2Dgy_yHb38xFaeU.roa
Signing time: Wed 02 Aug 2023 00:29:36 +0000
ROA not before: Wed 02 Aug 2023 00:29:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 87.120.68.0/23 maxlen: 24
45.14.167.0/24 maxlen: 24
93.123.75.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
83.219.99.0/24 maxlen: 24
45.129.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b3:a6:71:8b:30:af:31:30:e4:a6:52:60:4b:dd:48:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 2 00:29:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d10fd6339c9cd5570d83832ff21dbdfcc4569e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:e9:b7:f3:2c:3f:53:55:ac:e0:fd:c4:e7:
c0:99:da:d9:01:f1:10:6a:ce:92:13:60:ec:d6:0c:
a5:fb:df:06:fb:d7:4d:de:75:04:94:2e:e0:35:b4:
f1:ab:ec:cf:41:6a:27:03:ff:13:b7:ad:f5:58:80:
26:b8:b6:6e:5d:d1:7b:ad:9d:01:2e:87:c8:e4:62:
07:7c:1e:b8:a6:3c:f1:61:14:6b:75:53:c5:03:da:
df:0e:52:6a:10:b3:11:bf:c4:1b:70:fa:94:e2:29:
d9:22:c7:2e:01:95:dd:ec:24:59:16:a6:88:32:50:
bd:34:bd:23:dc:68:e0:94:d5:7b:1a:22:b8:46:4d:
28:72:a2:26:8d:b9:02:3e:f3:9c:cf:94:bb:ee:09:
fd:ca:44:ef:15:fd:29:b6:e0:fa:c3:09:db:00:93:
24:3a:96:30:38:32:07:6b:19:5d:8e:31:23:62:6b:
eb:25:bc:9b:cc:06:bd:68:6c:41:ca:34:1f:b9:9a:
b0:58:f5:88:b4:9b:f2:40:2d:4b:a5:9b:00:3c:ce:
e7:d3:74:9e:49:fb:52:47:fd:22:90:5c:28:9b:e2:
56:66:35:82:3e:27:ef:7a:dc:7f:4d:af:a4:75:5f:
59:7d:87:a4:da:13:ba:a1:5f:a6:8b:fa:de:a9:4e:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:10:FD:63:39:C9:CD:55:70:D8:38:32:FF:21:DB:DF:CC:45:69:E5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/PRD9YznJzVVw2Dgy_yHb38xFaeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.167.0/24
45.129.85.0/24
83.219.96.0/24
83.219.99.0/24
87.120.68.0/23
93.123.75.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1b:5a:9f:b6:8b:67:82:67:7b:f4:bf:b6:9f:bc:1b:3f:0a:
d1:5c:a2:10:4e:cb:f6:a6:ec:be:36:f6:51:ba:87:a5:6b:ab:
df:27:66:8c:b0:e9:2b:4f:10:df:b0:6d:a1:c1:47:ff:80:33:
dc:e1:f0:85:cc:ad:59:c6:7c:52:f7:40:fb:24:1d:ce:bc:89:
cf:9f:d8:c3:5a:55:da:44:0e:04:c4:a3:da:f6:01:5b:dc:4f:
a6:45:56:d8:a7:80:6f:b6:50:fd:36:a5:ac:df:1a:c9:0e:19:
90:5f:69:4a:40:c5:17:cd:b0:0a:d6:69:38:ef:e5:f3:90:17:
0f:70:dd:11:0f:69:48:68:1c:a3:12:aa:28:b3:9a:1e:22:09:
09:ed:e5:e1:d6:bd:56:a9:5d:ef:85:2c:77:e9:4a:0a:af:67:
f4:04:5b:4e:a2:d1:aa:8f:cf:8a:30:f5:49:da:5d:43:c3:53:
7e:83:59:de:e5:fa:51:15:ea:f8:26:a9:73:af:0d:a4:c1:e8:
1e:6f:48:a0:46:4b:20:f0:b3:2c:27:58:13:b4:d3:31:80:c9:
27:5f:61:9e:f3:9d:e6:1b:70:1e:f8:de:0d:2f:27:45:36:eb:
23:cd:9a:5c:ec:25:49:77:50:95:2c:6a:7c:98:73:e3:db:6d:
3e:53:23:9c
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYmzpnGLMK8xMOSmUmBL3UgzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwODAyMDAyOTM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDEwZmQ2MzM5YzljZDU1NzBkODM4MzJmZjIxZGJkZmNjNDU2OWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqnpt/MsP1NVrOD9xOfAmdrZAfEQ
as6SE2Ds1gyl+98G+9dN3nUElC7gNbTxq+zPQWonA/8Tt631WIAmuLZuXdF7rZ0B
LofI5GIHfB64pjzxYRRrdVPFA9rfDlJqELMRv8QbcPqU4inZIscuAZXd7CRZFqaI
MlC9NL0j3GjglNV7GiK4Rk0ocqImjbkCPvOcz5S77gn9ykTvFf0ptuD6wwnbAJMk
OpYwODIHaxldjjEjYmvrJbybzAa9aGxByjQfuZqwWPWItJvyQC1LpZsAPM7n03Se
SftSR/0ikFwom+JWZjWCPifvetx/Ta+kdV9ZfYek2hO6oV+mi/reqU5mKwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFD0Q/WM5yc1VcNg4Mv8h29/MRWnlMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUFJEOVl6bkp6VlZ3MkRneV95SGIzOHhGYWVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQALQ6nAwQA
LYFVAwQAU9tgAwQAU9tjAwQBV3hEAwQAXXtLMA0GCSqGSIb3DQEBCwUAA4IBAQCB
G1qftotngmd79L+2n7wbPwrRXKIQTsv2puy+NvZRuoela6vfJ2aMsOkrTxDfsG2h
wUf/gDPc4fCFzK1ZxnxS90D7JB3OvInPn9jDWlXaRA4ExKPa9gFb3E+mRVbYp4Bv
tlD9NqWs3xrJDhmQX2lKQMUXzbAK1mk47+XzkBcPcN0RD2lIaByjEqoos5oeIgkJ
7eXh1r1WqV3vhSx36UoKr2f0BFtOotGqj8+KMPVJ2l1Dw1N+g1ne5fpRFer4Jqlz
rw2kwegeb0igRksg8LMsJ1gTtNMxgMknX2Ge853mG3Ae+N4NLydFNusjzZpc7CVJ
d1CVLGp8mHPj220+UyOc
-----END CERTIFICATE-----
Generated at Thu Aug 3 00:30:51 2023 by rpki-client on console-ams.rpki-client.org