Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tecZwF-zk3oIXBIwsQzWduz3it8.roa
File: tecZwF-zk3oIXBIwsQzWduz3it8.roa (raw, json)
Hash identifier: MGsRiN5br3bikuhQepZmgwqwEG9vijVxVJUPNKUA4AQ=
Subject key identifier: B5:E7:19:C0:5F:B3:93:7A:08:5C:12:30:B1:0C:D6:76:EC:F7:8A:DF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01863B495EDDF8AA85A3B54725DEDD79D557
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tecZwF-zk3oIXBIwsQzWduz3it8.roa
Signing time: Fri 10 Feb 2023 12:25:09 +0000
ROA not before: Fri 10 Feb 2023 12:25:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202685
IP address blocks: 45.128.232.0/24 maxlen: 24
193.35.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3b:49:5e:dd:f8:aa:85:a3:b5:47:25:de:dd:79:d5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 10 12:25:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5e719c05fb3937a085c1230b10cd676ecf78adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:5b:78:8b:e7:b2:9f:37:cc:a7:5e:2c:6b:
64:9c:1f:ca:d6:ce:cc:a8:f1:e1:b5:c2:f3:ac:8a:
30:03:f8:66:94:0a:b7:c2:43:7a:db:14:8e:52:17:
f6:cb:5f:04:19:b9:23:14:33:01:90:5e:59:da:94:
fb:02:0c:d5:c5:d3:db:15:8c:a9:4d:ce:35:79:8e:
15:0a:a8:a3:f9:23:08:43:c8:bd:3b:1a:2f:d7:8b:
a7:89:e1:78:11:3a:c4:0e:66:d1:78:5d:bb:e8:0c:
25:a9:35:d2:36:8e:92:a0:12:dc:25:0b:05:93:4e:
62:c6:59:e4:aa:d6:b6:8c:ae:8d:d7:d8:cc:ca:e6:
92:01:2a:f4:3f:2a:3c:a4:24:2d:45:62:8f:65:e5:
b5:00:7d:63:d0:ce:96:07:52:54:87:ee:78:d7:1c:
6e:fb:14:d9:d4:dd:5c:61:8f:7f:52:54:03:e5:7b:
50:24:68:51:b1:7a:32:3e:da:62:92:31:84:1e:5f:
13:bb:f5:a4:99:61:9c:6f:98:96:9b:19:43:f8:ab:
bf:92:ee:1e:f0:d9:f9:a1:45:f9:bb:e7:51:8e:72:
7d:4f:d9:3e:aa:62:24:a3:68:16:72:02:54:c2:50:
a0:f8:01:98:03:79:01:79:48:d7:95:79:5c:68:92:
e4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E7:19:C0:5F:B3:93:7A:08:5C:12:30:B1:0C:D6:76:EC:F7:8A:DF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tecZwF-zk3oIXBIwsQzWduz3it8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.232.0/24
193.35.18.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ff:5e:13:03:4f:09:d7:b1:5a:f0:2c:10:28:01:6f:5a:a2:
7a:54:ee:5c:81:0e:b5:81:02:4a:e2:47:64:af:9b:f3:36:c5:
80:a1:a2:ec:5b:b1:23:4b:8d:fd:92:53:c9:85:8c:d6:52:6c:
0b:55:4e:d4:75:79:84:4e:a6:16:a1:0b:57:07:0f:6f:94:f8:
1a:18:24:ee:45:50:ff:63:a8:b9:a6:ff:1b:a5:c6:ae:04:7c:
72:2c:cf:00:56:59:b6:09:11:02:93:3a:d3:d6:9d:05:69:48:
a1:d1:d3:97:76:49:88:99:76:26:8c:7a:c6:ec:75:28:f2:6d:
f7:0f:4a:6b:a4:4b:e8:df:08:ca:7e:10:03:f3:c7:0f:d4:02:
77:23:5b:69:47:8d:25:ae:6d:00:f3:00:d4:b3:0f:77:e4:bf:
0a:c3:19:9f:d9:14:b9:74:90:97:df:0a:de:d3:0a:b1:06:d8:
ee:0d:a9:bd:c0:12:15:7a:43:d7:dd:82:d7:e9:ee:c9:33:d6:
fc:cf:88:45:52:72:fa:c8:cf:c3:0b:8b:d3:52:a4:a3:bd:76:
bd:6b:a7:8c:84:14:5f:2e:56:3c:f0:f3:d5:46:59:a7:7a:94:
6c:53:dd:a2:62:75:8e:59:55:10:c5:f9:46:bf:73:92:31:39:
a4:60:a2:49
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYY7SV7d+KqFo7VHJd7dedVXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMjEwMTIyNTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWU3MTljMDVmYjM5MzdhMDg1YzEyMzBiMTBjZDY3NmVjZjc4YWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvO5beIvnsp83zKdeLGtknB/K1s7M
qPHhtcLzrIowA/hmlAq3wkN62xSOUhf2y18EGbkjFDMBkF5Z2pT7AgzVxdPbFYyp
Tc41eY4VCqij+SMIQ8i9Oxov14unieF4ETrEDmbReF276AwlqTXSNo6SoBLcJQsF
k05ixlnkqta2jK6N19jMyuaSASr0Pyo8pCQtRWKPZeW1AH1j0M6WB1JUh+541xxu
+xTZ1N1cYY9/UlQD5XtQJGhRsXoyPtpikjGEHl8Tu/WkmWGcb5iWmxlD+Ku/ku4e
8Nn5oUX5u+dRjnJ9T9k+qmIko2gWcgJUwlCg+AGYA3kBeUjXlXlcaJLkswIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLXnGcBfs5N6CFwSMLEM1nbs94rfMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdGVjWndGLXprM29JWEJJd3NReldkdXozaXQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYDoAwQA
wSMSMA0GCSqGSIb3DQEBCwUAA4IBAQAU/14TA08J17Fa8CwQKAFvWqJ6VO5cgQ61
gQJK4kdkr5vzNsWAoaLsW7EjS439klPJhYzWUmwLVU7UdXmETqYWoQtXBw9vlPga
GCTuRVD/Y6i5pv8bpcauBHxyLM8AVlm2CRECkzrT1p0FaUih0dOXdkmImXYmjHrG
7HUo8m33D0prpEvo3wjKfhAD88cP1AJ3I1tpR40lrm0A8wDUsw935L8Kwxmf2RS5
dJCX3wre0wqxBtjuDam9wBIVekPX3YLX6e7JM9b8z4hFUnL6yM/DC4vTUqSjvXa9
a6eMhBRfLlY88PPVRlmnepRsU92iYnWOWVUQxflGv3OSMTmkYKJJ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-ams.rpki-client.org