Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/EPmzclW5x_y2_oCayGw8ctzbe9E.roa
File: EPmzclW5x_y2_oCayGw8ctzbe9E.roa (raw, json)
Hash identifier: AUBSF6kvUsRIvvcE7TSjc2s47a86K5SJpzb9jd7tJJs=
Subject key identifier: 10:F9:B3:72:55:B9:C7:FC:B6:FE:80:9A:C8:6C:3C:72:DC:DB:7B:D1
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 018570F0A31181A210DFDFA82BFFE3885D58
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/EPmzclW5x_y2_oCayGw8ctzbe9E.roa
Signing time: Mon 02 Jan 2023 05:24:56 +0000
ROA not before: Mon 02 Jan 2023 05:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35758
IP address blocks: 45.84.46.0/24 maxlen: 24
45.14.73.0/24 maxlen: 24
85.209.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:a3:11:81:a2:10:df:df:a8:2b:ff:e3:88:5d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jan 2 05:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10f9b37255b9c7fcb6fe809ac86c3c72dcdb7bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4b:dc:de:39:51:77:2e:e1:26:68:aa:9d:b4:
10:0b:f3:24:41:4e:f8:03:52:9c:ad:10:ca:b8:92:
0a:9e:39:ab:3e:34:89:77:55:1b:9f:38:23:f2:ce:
72:70:c7:79:4f:32:b8:42:ba:43:29:e9:9e:91:63:
5f:f5:c7:b1:85:1e:01:a0:29:62:be:d0:3d:05:6e:
3a:03:80:c0:4c:28:58:44:46:f2:e6:71:67:30:17:
94:da:4f:15:9d:6e:ff:61:39:5b:68:7d:e0:21:31:
95:fc:10:6a:f5:cb:cb:1c:8e:31:83:ac:22:88:2f:
1e:70:49:bb:f5:50:2c:98:8f:54:d6:e6:ef:ef:73:
77:13:31:a8:12:51:70:75:8b:84:50:99:55:9e:09:
02:b4:06:59:d8:3a:d4:72:72:46:2c:31:a1:5f:43:
31:56:82:87:49:5e:54:ba:be:6f:dc:7a:e3:84:33:
2c:83:08:3d:7e:62:3e:e8:26:61:3f:a6:a4:7a:6c:
59:f6:2c:a8:d6:a4:9a:8a:24:16:17:4c:0a:ae:16:
73:e1:8b:d6:03:52:da:62:70:64:e6:07:51:7c:85:
8e:1b:dd:4d:24:56:50:ac:8c:28:f4:f6:11:9b:9e:
67:93:39:4e:59:c1:79:39:98:1f:7f:32:a3:5f:bd:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:F9:B3:72:55:B9:C7:FC:B6:FE:80:9A:C8:6C:3C:72:DC:DB:7B:D1
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/EPmzclW5x_y2_oCayGw8ctzbe9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.73.0/24
45.84.46.0/24
85.209.217.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:dd:e7:cd:4e:62:2c:6f:0b:71:4d:84:9b:68:66:cd:28:ee:
80:e9:4a:e6:43:27:50:a8:dd:d2:35:78:d5:c9:c8:a0:68:2c:
2e:23:77:4b:3e:f9:8a:a7:39:67:ff:41:b1:19:ad:a7:0e:a2:
21:39:54:12:e4:f2:35:4c:1b:07:ea:18:2f:8c:47:35:6d:e7:
34:22:9b:bf:45:2d:0b:83:f1:f3:24:10:6f:cf:63:78:8a:e3:
6a:b0:93:e4:c1:e4:dc:69:46:88:4c:dc:12:07:96:16:45:2e:
bb:82:d0:da:9b:39:c2:c1:6c:5e:06:31:35:4d:0b:c0:60:62:
69:be:a7:3c:df:f2:d0:d0:56:3e:a2:66:48:2a:f1:77:00:e6:
a3:3a:eb:47:cc:3d:c9:e7:21:d4:cf:6f:01:ca:68:cc:25:c6:
40:5d:df:98:a2:9a:b7:5e:e3:f1:88:de:ed:78:19:e5:b2:1b:
97:15:23:77:69:e3:e1:d7:32:af:ee:d5:da:9f:f2:30:b3:43:
d5:48:4c:c3:17:48:26:03:39:a6:c4:7b:c1:43:34:57:47:e6:
98:b7:89:05:d8:b0:db:76:9d:f0:1e:df:46:5e:01:48:be:23:
41:2b:b6:cc:b6:cb:84:c2:82:71:9c:f9:07:b7:5d:d6:30:93:
65:d5:68:1d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVw8KMRgaIQ39+oK//jiF1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyMWEzZjIxZmIwYzI5NGQ2ZDRhNTI5YjJmMWRiZDRiZDEx
MTliZDcwHhcNMjMwMTAyMDUyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGY5YjM3MjU1YjljN2ZjYjZmZTgwOWFjODZjM2M3MmRjZGI3YmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Evc3jlRdy7hJmiqnbQQC/MkQU74
A1KcrRDKuJIKnjmrPjSJd1Ubnzgj8s5ycMd5TzK4QrpDKemekWNf9cexhR4BoCli
vtA9BW46A4DATChYREby5nFnMBeU2k8VnW7/YTlbaH3gITGV/BBq9cvLHI4xg6wi
iC8ecEm79VAsmI9U1ubv73N3EzGoElFwdYuEUJlVngkCtAZZ2DrUcnJGLDGhX0Mx
VoKHSV5Uur5v3HrjhDMsgwg9fmI+6CZhP6akemxZ9iyo1qSaiiQWF0wKrhZz4YvW
A1LaYnBk5gdRfIWOG91NJFZQrIwo9PYRm55nkzlOWcF5OZgffzKjX716NQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBD5s3JVucf8tv6AmshsPHLc23vRMB8GA1UdIwQY
MBaAFIIaPyH7DClNbUpSmy8dvUvREZvXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMt
YjZmMmFjODZlZjI3LzEvRVBtemNsVzV4X3kyX29DYXlHdzhjdHpiZTlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9lZGM4NTUtZjJiYy00ZTljLThjMGMtYjZmMmFjODZlZjI3
LzEvZ2hvX0lmc01LVTF0U2xLYkx4MjlTOUVSbTljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQ5JAwQA
LVQuAwQAVdHZMA0GCSqGSIb3DQEBCwUAA4IBAQBP3efNTmIsbwtxTYSbaGbNKO6A
6UrmQydQqN3SNXjVycigaCwuI3dLPvmKpzln/0GxGa2nDqIhOVQS5PI1TBsH6hgv
jEc1bec0Ipu/RS0Lg/HzJBBvz2N4iuNqsJPkweTcaUaITNwSB5YWRS67gtDamznC
wWxeBjE1TQvAYGJpvqc83/LQ0FY+omZIKvF3AOajOutHzD3J5yHUz28BymjMJcZA
Xd+Yopq3XuPxiN7teBnlshuXFSN3aePh1zKv7tXan/Iws0PVSEzDF0gmAzmmxHvB
QzRXR+aYt4kF2LDbdp3wHt9GXgFIviNBK7bMtsuEwoJxnPkHt13WMJNl1Wgd
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:04 2024 by rpki-client on console-fra.rpki-client.org