Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/i_4OVH8ECtGPy1MscIyjJBE0ttY.roa
File: i_4OVH8ECtGPy1MscIyjJBE0ttY.roa (raw, json)
Hash identifier: gk5LMQ4Mrb1K7aclNHOBJTMymSYfeARXJ/psEAuq3nw=
Subject key identifier: 8B:FE:0E:54:7F:04:0A:D1:8F:CB:53:2C:70:8C:A3:24:11:34:B6:D6
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01877AFF440BEC5EA72C56A9811CB7C02730
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/i_4OVH8ECtGPy1MscIyjJBE0ttY.roa
Signing time: Thu 13 Apr 2023 14:22:42 +0000
ROA not before: Thu 13 Apr 2023 14:22:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.168.196.0/22 maxlen: 24
45.91.193.0/24 maxlen: 24
88.218.76.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 13 Jul 2023 13:36:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:ff:44:0b:ec:5e:a7:2c:56:a9:81:1c:b7:c0:27:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 13 14:22:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bfe0e547f040ad18fcb532c708ca3241134b6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d6:93:35:18:02:59:dd:46:bf:15:b7:e1:24:
fe:dc:97:6f:8c:0c:7e:78:d0:08:53:e2:a3:96:bc:
92:73:e6:f7:e6:71:63:ca:9c:63:84:5e:cb:2c:cd:
d3:44:09:49:11:78:7e:d0:5c:6f:61:44:0e:98:70:
21:96:8f:99:6b:44:cb:be:aa:78:d5:d3:a9:5b:c4:
98:87:40:3e:26:de:2c:55:bf:a6:1d:58:7d:8e:18:
80:b4:6c:30:0a:a4:72:82:cd:40:55:65:29:37:2d:
7c:ee:d5:03:04:bc:02:0f:39:20:1c:ca:77:eb:26:
32:8e:1d:3d:e2:13:c3:63:de:10:cc:27:c0:0c:67:
f4:bb:0a:7e:2a:74:2e:cd:fa:d5:42:94:48:9e:33:
71:c3:3d:13:82:73:33:9a:ca:c9:19:8d:c3:89:89:
16:7c:bc:4d:15:f3:5b:fa:fc:c7:1a:e4:f9:0e:34:
ce:0e:5f:94:e3:fe:9b:52:34:48:a0:86:91:79:8b:
c3:18:64:a2:ba:91:46:83:e4:b8:2f:0c:b4:d3:38:
94:2f:38:b5:a0:35:14:8b:77:12:ea:fa:76:c0:68:
71:d1:f7:b4:fb:08:f6:2c:66:0c:a3:66:42:89:4b:
4b:05:e4:75:ed:60:8d:94:b1:4c:fd:40:e6:72:97:
23:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:FE:0E:54:7F:04:0A:D1:8F:CB:53:2C:70:8C:A3:24:11:34:B6:D6
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/i_4OVH8ECtGPy1MscIyjJBE0ttY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.193.0/24
88.218.76.0/22
193.168.196.0/22
Signature Algorithm: sha256WithRSAEncryption
05:b7:cf:8b:ac:1f:5f:0a:27:d4:e7:75:f4:e1:ee:f5:a1:a7:
a9:9b:5c:c0:c8:3f:92:46:ea:36:ee:a3:36:85:91:90:be:c1:
7b:4c:07:bf:60:58:16:eb:43:bf:0b:d4:5b:e2:ab:af:cd:13:
57:6c:55:a7:b7:6d:1d:7c:20:d5:87:4b:19:a1:40:ec:80:c7:
9a:5d:a5:20:8b:91:a1:5b:53:23:60:57:24:53:42:96:29:e4:
b6:a8:0d:5f:30:64:a4:10:fa:89:89:e9:0d:a7:23:85:99:09:
4e:80:04:dc:4b:bf:c6:f8:6e:bf:d4:ff:27:0d:eb:c0:ab:e3:
00:f4:76:13:52:77:c4:a7:38:68:7f:ba:57:63:8e:b1:d4:2e:
56:2b:b8:65:9c:70:ee:24:81:57:66:1a:da:e6:7f:51:b4:53:
95:30:bc:c4:65:80:98:8e:88:40:cb:0a:bc:41:db:fa:e1:56:
c9:2e:52:9b:b0:19:4b:d6:50:47:10:90:d6:5f:5c:0f:61:e7:
94:bc:27:61:e2:7d:a5:7e:a2:78:8b:ba:0b:f4:c4:05:2d:19:
ab:5a:86:17:26:e2:8e:83:5f:99:44:d1:e0:4c:d8:ea:d5:00:
d1:cc:53:6a:f5:fd:26:fd:8c:ad:95:78:6b:0d:c9:35:76:b6:
fc:3a:1a:17
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYd6/0QL7F6nLFapgRy3wCcwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNDEzMTQyMjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmZlMGU1NDdmMDQwYWQxOGZjYjUzMmM3MDhjYTMyNDExMzRiNmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09aTNRgCWd1GvxW34ST+3JdvjAx+
eNAIU+KjlrySc+b35nFjypxjhF7LLM3TRAlJEXh+0FxvYUQOmHAhlo+Za0TLvqp4
1dOpW8SYh0A+Jt4sVb+mHVh9jhiAtGwwCqRygs1AVWUpNy187tUDBLwCDzkgHMp3
6yYyjh094hPDY94QzCfADGf0uwp+KnQuzfrVQpRInjNxwz0TgnMzmsrJGY3DiYkW
fLxNFfNb+vzHGuT5DjTODl+U4/6bUjRIoIaReYvDGGSiupFGg+S4Lwy00ziULzi1
oDUUi3cS6vp2wGhx0fe0+wj2LGYMo2ZCiUtLBeR17WCNlLFM/UDmcpcjkQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIv+DlR/BArRj8tTLHCMoyQRNLbWMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvaV80T1ZIOEVDdEdQeTFNc2NJeWpKQkUwdHRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVvBAwQC
WNpMAwQCwajEMA0GCSqGSIb3DQEBCwUAA4IBAQAFt8+LrB9fCifU53X04e71oaep
m1zAyD+SRuo27qM2hZGQvsF7TAe/YFgW60O/C9Rb4quvzRNXbFWnt20dfCDVh0sZ
oUDsgMeaXaUgi5GhW1MjYFckU0KWKeS2qA1fMGSkEPqJiekNpyOFmQlOgATcS7/G
+G6/1P8nDevAq+MA9HYTUnfEpzhof7pXY46x1C5WK7hlnHDuJIFXZhra5n9RtFOV
MLzEZYCYjohAywq8Qdv64VbJLlKbsBlL1lBHEJDWX1wPYeeUvCdh4n2lfqJ4i7oL
9MQFLRmrWoYXJuKOg1+ZRNHgTNjq1QDRzFNq9f0m/YytlXhrDck1drb8OhoX
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:17 2024 by rpki-client on console-fra.rpki-client.org