Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/hCcIedJWi5Yuks3ODv6s7n5PnWM.roa
File: hCcIedJWi5Yuks3ODv6s7n5PnWM.roa (raw, json)
Hash identifier: Dsqfv9oGmvdTdyazH99VOVZJM/5wltJmHLecB83ePMo=
Subject key identifier: 84:27:08:79:D2:56:8B:96:2E:92:CD:CE:0E:FE:AC:EE:7E:4F:9D:63
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0185867522B972925F5B7C8DEF18AD102038
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/hCcIedJWi5Yuks3ODv6s7n5PnWM.roa
Signing time: Fri 06 Jan 2023 09:41:41 +0000
ROA not before: Fri 06 Jan 2023 09:41:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57844
IP address blocks: 159.148.109.0/24 maxlen: 24
159.148.234.0/24 maxlen: 24
159.148.58.0/24 maxlen: 24
159.148.66.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:86:75:22:b9:72:92:5f:5b:7c:8d:ef:18:ad:10:20:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 6 09:41:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=84270879d2568b962e92cdce0efeacee7e4f9d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f1:ae:f4:06:b7:79:06:1c:e8:af:e2:80:49:
81:2e:69:63:93:a4:15:5d:4c:ce:7b:13:22:51:7b:
9d:b9:95:32:ac:56:06:09:85:3a:14:c9:b8:6a:1d:
95:2e:81:51:81:1f:b3:5d:7f:86:b9:ef:ee:b1:c6:
92:08:6e:20:fd:b7:f1:d3:38:82:f6:56:79:f6:42:
25:62:55:b2:c5:f0:6d:95:05:cc:01:b3:00:9f:0b:
ac:8c:f8:79:71:54:de:94:cc:9f:62:d1:a8:0c:58:
23:0d:f0:31:47:ed:59:92:5f:df:18:40:72:3c:87:
21:1e:9b:5b:88:98:53:73:24:6a:a6:fb:3a:74:af:
06:54:e0:34:e8:db:5f:86:93:b8:f6:40:f2:03:db:
94:c4:22:b7:b2:0c:b3:b8:48:d7:3d:fc:7a:f2:e8:
1d:b6:17:cc:ec:1b:6c:b0:2a:c9:1f:22:69:3f:a0:
e1:1e:ef:3a:ee:b0:aa:9b:32:af:54:df:1c:65:4d:
fa:ce:cd:04:02:cc:53:af:ae:b6:82:31:91:a6:02:
aa:92:5a:df:0f:35:d4:84:1b:42:4f:0d:8e:46:8c:
4e:5f:55:72:a8:8a:5b:02:ab:af:95:d8:72:99:1a:
62:45:72:a6:5b:8c:f4:8d:e8:d4:af:93:3c:70:68:
61:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:27:08:79:D2:56:8B:96:2E:92:CD:CE:0E:FE:AC:EE:7E:4F:9D:63
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/hCcIedJWi5Yuks3ODv6s7n5PnWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.58.0/24
159.148.66.0/24
159.148.109.0/24
159.148.234.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:c2:1d:03:3c:af:f7:af:be:8c:d3:9e:c9:70:0d:c6:e5:51:
ba:c6:cf:56:96:dc:a2:88:3a:a5:94:86:47:a3:44:cf:1e:b6:
1a:08:68:35:b8:5f:b5:e2:9e:78:bf:21:de:a4:0e:60:e1:f3:
7e:0e:7b:8c:8d:42:9a:f8:6b:aa:9e:62:74:5f:95:b3:98:63:
b8:82:25:1f:22:5b:dd:e1:12:54:14:62:a0:1e:35:04:b5:87:
7f:51:88:ba:61:7e:12:55:a2:c5:84:3d:33:19:c6:b9:27:62:
b6:c7:f8:fe:15:ee:29:07:b4:b3:82:16:ab:8b:f5:8d:ef:d3:
95:f2:50:38:97:c7:7b:29:bb:93:cd:91:eb:bb:00:22:78:19:
7a:eb:f6:9e:74:63:41:95:73:97:bc:33:b2:56:71:54:49:23:
93:91:c3:1c:fe:b8:1f:88:33:c2:ec:1e:82:2c:ae:aa:4b:bb:
b6:3a:88:c8:42:05:15:f8:b3:3f:b1:d1:0c:68:66:1c:e2:f4:
c7:a4:2b:14:34:dd:ba:83:db:fd:14:5c:f9:48:ad:67:38:ca:
74:d7:0c:05:14:08:77:31:9c:74:5f:d7:d5:58:0d:9f:28:91:
54:1d:fe:28:75:15:64:ef:a7:e2:00:79:37:41:f1:d9:11:16:
1d:89:f7:5b
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYWGdSK5cpJfW3yN7xitECA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjMwMTA2MDk0MTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDI3MDg3OWQyNTY4Yjk2MmU5MmNkY2UwZWZlYWNlZTdlNGY5ZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfGu9Aa3eQYc6K/igEmBLmljk6QV
XUzOexMiUXuduZUyrFYGCYU6FMm4ah2VLoFRgR+zXX+Gue/uscaSCG4g/bfx0ziC
9lZ59kIlYlWyxfBtlQXMAbMAnwusjPh5cVTelMyfYtGoDFgjDfAxR+1Zkl/fGEBy
PIchHptbiJhTcyRqpvs6dK8GVOA06NtfhpO49kDyA9uUxCK3sgyzuEjXPfx68ugd
thfM7BtssCrJHyJpP6DhHu867rCqmzKvVN8cZU36zs0EAsxTr662gjGRpgKqklrf
DzXUhBtCTw2ORoxOX1VyqIpbAquvldhymRpiRXKmW4z0jejUr5M8cGhhZwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIQnCHnSVouWLpLNzg7+rO5+T51jMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvaENjSWVkSldpNVl1a3MzT0R2NnM3bjVQbldNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAn5Q6AwQA
n5RCAwQAn5RtAwQAn5TqMA0GCSqGSIb3DQEBCwUAA4IBAQA8wh0DPK/3r76M057J
cA3G5VG6xs9WltyiiDqllIZHo0TPHrYaCGg1uF+14p54vyHepA5g4fN+DnuMjUKa
+GuqnmJ0X5WzmGO4giUfIlvd4RJUFGKgHjUEtYd/UYi6YX4SVaLFhD0zGca5J2K2
x/j+Fe4pB7Szghari/WN79OV8lA4l8d7KbuTzZHruwAieBl66/aedGNBlXOXvDOy
VnFUSSOTkcMc/rgfiDPC7B6CLK6qS7u2OojIQgUV+LM/sdEMaGYc4vTHpCsUNN26
g9v9FFz5SK1nOMp01wwFFAh3MZx0X9fVWA2fKJFUHf4odRVk76fiAHk3QfHZERYd
ifdb
-----END CERTIFICATE-----
Generated at Mon Aug 7 12:45:40 2023 by rpki-client on console-fra.rpki-client.org