Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/8_oer_blEClUZ7_W9ACqILGlxps.roa
File: 8_oer_blEClUZ7_W9ACqILGlxps.roa (raw, json)
Hash identifier: HrG2/uQFYDRWNOckJVjIlYK60BXuLE5XE1DPWsoxY48=
Subject key identifier: F3:FA:1E:AF:F6:E5:10:29:54:67:BF:D6:F4:00:AA:20:B1:A5:C6:9B
Certificate issuer: /CN=32010f70276e418d58f08c56a79a82b99aca1763
Certificate serial: 0188332D1CE0A0DAFD7C81C09A812601464F
Authority key identifier: 32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/8_oer_blEClUZ7_W9ACqILGlxps.roa
Signing time: Fri 19 May 2023 08:42:54 +0000
ROA not before: Fri 19 May 2023 08:42:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 45.88.248.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:33:2d:1c:e0:a0:da:fd:7c:81:c0:9a:81:26:01:46:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32010f70276e418d58f08c56a79a82b99aca1763
Validity
Not Before: May 19 08:42:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3fa1eaff6e510295467bfd6f400aa20b1a5c69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4a:55:9f:31:10:57:34:e7:fb:f8:13:e4:0a:
de:f0:df:18:29:00:90:9b:30:e5:78:0e:10:c3:c6:
5e:2d:e6:a6:de:59:dd:3e:36:68:71:19:5f:85:66:
1e:e4:fc:a5:84:27:dc:0a:9e:0d:4c:03:a9:b3:61:
01:5f:4b:ea:58:79:a5:0b:50:24:d9:14:13:a6:90:
47:ab:a7:dc:f5:6f:c7:67:fe:d9:54:b4:ed:da:18:
be:50:28:57:a4:a5:f1:33:40:06:5e:73:c1:24:2c:
d3:fa:51:95:ce:ff:f5:ca:ce:a7:8e:60:37:00:dd:
15:ea:a7:6f:f3:0b:04:b5:db:b6:3b:e9:80:30:2b:
5d:f3:64:6f:dc:6a:59:72:e9:e1:3b:ec:4e:e1:d9:
e5:2d:ef:78:ee:f2:7d:1e:85:cd:37:44:45:fc:a7:
27:e3:13:5a:0c:47:4a:04:a9:f5:3a:c3:0c:c3:2e:
53:79:08:a2:f1:6a:3d:b6:f9:5b:d9:4a:8e:5e:29:
96:6d:9e:40:1f:48:b0:ac:fc:6c:68:86:48:b6:eb:
17:42:2c:28:50:8a:04:ab:1b:09:55:f6:cb:e1:54:
4f:09:b5:8a:8f:d6:bc:10:19:55:7d:af:99:1f:68:
8c:41:69:7a:c5:df:77:8b:db:4e:e3:ef:9a:eb:63:
3e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:FA:1E:AF:F6:E5:10:29:54:67:BF:D6:F4:00:AA:20:B1:A5:C6:9B
X509v3 Authority Key Identifier:
keyid:32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/8_oer_blEClUZ7_W9ACqILGlxps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.248.0/22
Signature Algorithm: sha256WithRSAEncryption
88:b5:cb:c3:c1:6a:0a:27:ff:36:b5:8e:4b:6b:03:84:0f:8c:
89:88:e0:23:fa:c0:4c:0f:71:a6:7a:64:d3:d1:12:48:2f:da:
7b:b7:17:70:26:c7:48:c5:fb:8b:f8:09:c0:c3:14:5d:ef:69:
de:fc:e2:94:91:bc:e8:4c:c9:cb:79:1a:20:c2:22:1f:b3:66:
7d:cf:c2:3e:2f:c5:f8:c3:30:49:a5:c4:6d:0d:bf:e1:4e:08:
64:98:f0:0b:8d:4f:22:3d:39:45:ef:49:ee:96:57:c9:06:13:
52:6a:1b:d7:d1:bb:a4:94:0e:a5:c2:72:e0:49:5e:da:6b:2b:
4a:a2:65:16:16:77:37:2a:27:7a:02:65:ef:b2:24:a3:e8:86:
1e:e5:b8:f9:1a:b7:79:24:21:88:6f:71:ac:05:96:98:ad:7a:
4f:9d:21:89:78:11:26:da:dc:6e:9a:07:5e:6a:27:85:e7:e0:
55:50:85:90:e6:7f:0f:1e:f8:6f:24:b8:e3:86:2d:f4:ac:ef:
29:b5:40:72:e1:fb:22:05:ae:4c:fc:95:0d:63:e1:83:08:e8:
9e:db:f6:e8:65:85:ac:3a:92:d3:4f:1d:cb:04:0a:06:06:88:
5b:ed:43:d1:da:c5:62:28:ff:ce:65:c3:36:d6:c2:8f:9c:6b:
9b:50:b5:34
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgzLRzgoNr9fIHAmoEmAUZPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDEwZjcwMjc2ZTQxOGQ1OGYwOGM1NmE3OWE4MmI5OWFj
YTE3NjMwHhcNMjMwNTE5MDg0MjU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2ZhMWVhZmY2ZTUxMDI5NTQ2N2JmZDZmNDAwYWEyMGIxYTVjNjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkpVnzEQVzTn+/gT5Are8N8YKQCQ
mzDleA4Qw8ZeLeam3lndPjZocRlfhWYe5PylhCfcCp4NTAOps2EBX0vqWHmlC1Ak
2RQTppBHq6fc9W/HZ/7ZVLTt2hi+UChXpKXxM0AGXnPBJCzT+lGVzv/1ys6njmA3
AN0V6qdv8wsEtdu2O+mAMCtd82Rv3GpZcunhO+xO4dnlLe947vJ9HoXNN0RF/Kcn
4xNaDEdKBKn1OsMMwy5TeQii8Wo9tvlb2UqOXimWbZ5AH0iwrPxsaIZItusXQiwo
UIoEqxsJVfbL4VRPCbWKj9a8EBlVfa+ZH2iMQWl6xd93i9tO4++a62M+FQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPP6Hq/25RApVGe/1vQAqiCxpcabMB8GA1UdIwQY
MBaAFDIBD3AnbkGNWPCMVqeagrmayhdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdFUGNDZHVRWTFZOEl4V3A1cUN1WnJLRjJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNjQ4ZmItZjUwYi00Y2MyLWEyYjEt
MmY2ODIxNmI3NDI0LzEvOF9vZXJfYmxFQ2xVWjdfVzlBQ3FJTEdseHBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNjQ4ZmItZjUwYi00Y2MyLWEyYjEtMmY2ODIxNmI3NDI0
LzEvTWdFUGNDZHVRWTFZOEl4V3A1cUN1WnJLRjJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVj4MA0G
CSqGSIb3DQEBCwUAA4IBAQCItcvDwWoKJ/82tY5LawOED4yJiOAj+sBMD3GmemTT
0RJIL9p7txdwJsdIxfuL+AnAwxRd72ne/OKUkbzoTMnLeRogwiIfs2Z9z8I+L8X4
wzBJpcRtDb/hTghkmPALjU8iPTlF70nullfJBhNSahvX0buklA6lwnLgSV7aaytK
omUWFnc3Kid6AmXvsiSj6IYe5bj5Grd5JCGIb3GsBZaYrXpPnSGJeBEm2txumgde
aieF5+BVUIWQ5n8PHvhvJLjjhi30rO8ptUBy4fsiBa5M/JUNY+GDCOie2/boZYWs
OpLTTx3LBAoGBohb7UPR2sViKP/OZcM21sKPnGubULU0
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:07 2024 by rpki-client on console-ams.rpki-client.org