Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/plOGeuDe_DscGuiZWoxyUb2tKNA.roa
File: plOGeuDe_DscGuiZWoxyUb2tKNA.roa (raw, json)
Hash identifier: 4HYxOfAT3Qq52123eWCSssIfB2UlqH2wX51N4VL1cbk=
Subject key identifier: A6:53:86:7A:E0:DE:FC:3B:1C:1A:E8:99:5A:8C:72:51:BD:AD:28:D0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018C19BD3E1A1788C3063D4C4EB2BE196861
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/plOGeuDe_DscGuiZWoxyUb2tKNA.roa
Signing time: Wed 29 Nov 2023 06:21:21 +0000
ROA not before: Wed 29 Nov 2023 06:21:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49716
IP address blocks: 84.54.50.0/24 maxlen: 24
194.55.227.0/24 maxlen: 24
45.88.88.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:bd:3e:1a:17:88:c3:06:3d:4c:4e:b2:be:19:68:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Nov 29 06:21:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a653867ae0defc3b1c1ae8995a8c7251bdad28d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fc:66:f1:4d:4f:40:50:95:33:8a:28:e3:fe:
f1:f1:ed:d3:1d:08:1b:45:18:42:e3:1a:ad:77:e0:
e6:06:23:25:5a:7b:78:ab:fe:0d:4c:31:80:20:e0:
c7:31:85:ba:8a:2e:f1:95:b1:5f:08:6f:73:ec:67:
15:9a:49:03:a5:ce:ff:c6:58:61:6a:fc:61:57:19:
10:c1:68:66:78:e2:d2:66:db:36:7f:76:8a:16:69:
27:c6:01:5f:3f:ab:2a:ac:4d:b5:da:d8:0a:f2:1c:
c5:07:58:bc:d4:05:f8:3e:61:1d:c1:62:59:73:1b:
e8:bb:e6:f3:33:81:b9:6c:1c:e0:51:bb:55:9b:21:
fb:3f:eb:87:ee:25:67:5a:3f:49:2f:1c:45:fc:d0:
91:52:cc:60:b8:c8:eb:04:17:69:3c:ee:99:59:dc:
cc:d6:04:b2:d6:24:ca:d2:a4:3f:7e:50:ba:f9:b9:
aa:e4:4c:18:ad:2a:46:08:f4:96:e7:0c:b6:44:03:
84:ff:b2:94:0e:80:28:12:bf:b8:c0:a0:62:ee:f5:
22:21:a5:f7:10:9a:52:5c:82:be:e5:fe:5c:0b:ed:
ce:1d:aa:a4:ca:36:30:15:23:a1:be:a8:7b:e8:27:
12:f5:9c:8f:14:a8:02:44:fd:18:57:b6:52:48:39:
14:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:53:86:7A:E0:DE:FC:3B:1C:1A:E8:99:5A:8C:72:51:BD:AD:28:D0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/plOGeuDe_DscGuiZWoxyUb2tKNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.88.0/24
84.54.50.0/24
194.55.227.0/24
Signature Algorithm: sha256WithRSAEncryption
21:32:cd:f3:32:c1:c5:13:28:ff:50:c9:e7:5d:a6:a0:ee:20:
bb:c6:d9:0a:6f:31:10:a0:bf:ee:b9:da:5d:7a:12:0a:32:87:
ca:63:51:38:70:7b:5f:6b:1d:22:1c:fb:27:3f:85:48:67:22:
69:09:1f:c0:c6:3f:9d:06:74:02:be:07:35:d6:d8:13:b6:3b:
21:5c:eb:0a:5c:e1:b2:1f:ad:f1:38:f1:34:42:e3:72:c9:2f:
2c:77:f7:93:b1:b9:d7:b9:97:c8:94:c7:b3:88:cb:9a:c2:c3:
70:1a:5e:7f:ff:e7:64:66:5d:fe:9c:79:fe:21:fe:5e:b0:74:
fc:ee:0c:31:b8:52:5b:89:d9:f3:f5:4d:54:c8:43:de:db:0d:
d7:bc:ad:41:28:84:0e:15:6e:0a:e7:e6:df:92:36:78:ec:27:
92:dc:51:09:f1:ae:08:18:38:ec:c7:3c:87:1f:c4:33:d0:dc:
33:e2:e9:de:bb:91:a7:b9:d7:6b:e9:53:6b:f4:b0:74:d8:97:
f7:06:62:69:8b:a0:06:45:b6:24:d9:e2:7a:01:86:87:cd:32:
7e:57:54:a1:79:20:e6:4e:8d:b5:73:17:fd:96:82:7d:fe:a0:
ee:a5:62:ef:ef:44:2f:34:7b:82:0a:91:0c:4c:21:98:1a:4c:
8a:48:f6:89
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYwZvT4aF4jDBj1MTrK+GWhhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMTI5MDYyMTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjUzODY3YWUwZGVmYzNiMWMxYWU4OTk1YThjNzI1MWJkYWQyOGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPxm8U1PQFCVM4oo4/7x8e3THQgb
RRhC4xqtd+DmBiMlWnt4q/4NTDGAIODHMYW6ii7xlbFfCG9z7GcVmkkDpc7/xlhh
avxhVxkQwWhmeOLSZts2f3aKFmknxgFfP6sqrE212tgK8hzFB1i81AX4PmEdwWJZ
cxvou+bzM4G5bBzgUbtVmyH7P+uH7iVnWj9JLxxF/NCRUsxguMjrBBdpPO6ZWdzM
1gSy1iTK0qQ/flC6+bmq5EwYrSpGCPSW5wy2RAOE/7KUDoAoEr+4wKBi7vUiIaX3
EJpSXIK+5f5cC+3OHaqkyjYwFSOhvqh76CcS9ZyPFKgCRP0YV7ZSSDkUiQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKZThnrg3vw7HBromVqMclG9rSjQMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcGxPR2V1RGVfRHNjR3VpWldveHlVYjJ0S05BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVhYAwQA
VDYyAwQAwjfjMA0GCSqGSIb3DQEBCwUAA4IBAQAhMs3zMsHFEyj/UMnnXaag7iC7
xtkKbzEQoL/uudpdehIKMofKY1E4cHtfax0iHPsnP4VIZyJpCR/Axj+dBnQCvgc1
1tgTtjshXOsKXOGyH63xOPE0QuNyyS8sd/eTsbnXuZfIlMeziMuawsNwGl5//+dk
Zl3+nHn+If5esHT87gwxuFJbidnz9U1UyEPe2w3XvK1BKIQOFW4K5+bfkjZ47CeS
3FEJ8a4IGDjsxzyHH8Qz0Nwz4uneu5Gnuddr6VNr9LB02Jf3BmJpi6AGRbYk2eJ6
AYaHzTJ+V1SheSDmTo21cxf9loJ9/qDupWLv70QvNHuCCpEMTCGYGkyKSPaJ
-----END CERTIFICATE-----
Generated at Fri Dec 1 08:26:27 2023 by rpki-client on console-ams.rpki-client.org