Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HVffmRR3LNRUEcC46PeMs-QQqrk.roa
File: HVffmRR3LNRUEcC46PeMs-QQqrk.roa (raw, json)
Hash identifier: axVe64wJmbYU7VLn1iPR7k27nCz2DLHJCw/IhLvAajY=
Subject key identifier: 1D:57:DF:99:14:77:2C:D4:54:11:C0:B8:E8:F7:8C:B3:E4:10:AA:B9
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0187A4237CCB0882F50F084AEEEE4EEB263D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HVffmRR3LNRUEcC46PeMs-QQqrk.roa
Signing time: Fri 21 Apr 2023 14:06:41 +0000
ROA not before: Fri 21 Apr 2023 14:06:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
45.94.171.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Apr 2023 16:44:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a4:23:7c:cb:08:82:f5:0f:08:4a:ee:ee:4e:eb:26:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 21 14:06:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1d57df9914772cd45411c0b8e8f78cb3e410aab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:cf:f5:e0:70:3a:78:0f:ca:f7:7d:36:97:
3a:a4:0c:db:4b:1b:68:cd:0f:f1:15:f5:19:f2:d3:
08:b9:69:d5:2b:5e:a6:17:b7:6d:bf:5f:4a:27:88:
6c:8e:cf:7d:b3:b2:90:73:b5:4d:b9:1c:01:12:8b:
32:82:5b:6b:8f:5e:20:23:2f:4c:1f:b7:45:06:f9:
c8:41:20:04:02:70:f1:4e:56:fa:c3:ed:bc:d7:de:
56:56:fc:e9:c4:f4:bb:58:e7:eb:06:51:2d:92:8d:
89:1e:ab:30:eb:df:42:d3:cc:a1:90:cc:a6:84:9b:
ea:9b:15:3c:82:3d:65:5b:f4:55:13:a4:43:56:d5:
d2:00:66:2b:4b:49:27:cb:ca:54:bb:4f:3a:4f:98:
08:d6:31:09:4e:9b:c8:9b:32:b8:5c:b3:54:39:22:
c9:d6:d8:00:52:db:95:96:81:bb:e1:da:d3:49:b5:
5b:15:46:ba:c6:7c:d4:98:65:1a:1b:ff:b2:df:44:
71:3e:c7:31:4c:b3:d2:07:b3:09:e6:9e:64:32:a3:
4e:e5:cf:84:42:41:77:70:ba:25:18:27:15:cf:ff:
70:e4:d7:d7:5b:13:ac:e3:9e:8e:b0:a4:bf:60:9f:
11:ec:ea:95:6c:9e:37:1e:a4:da:cd:99:91:c1:d9:
b5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:57:DF:99:14:77:2C:D4:54:11:C0:B8:E8:F7:8C:B3:E4:10:AA:B9
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HVffmRR3LNRUEcC46PeMs-QQqrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.138.0/24
45.94.171.0/24
77.83.38.0/23
85.209.120.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:6a:6a:2e:c1:fc:90:af:f2:d4:a7:86:ce:3c:96:d0:69:e2:
5f:5b:65:a5:77:2d:13:4b:ed:c2:c7:2c:2e:a1:11:69:f2:e9:
d4:a5:f2:80:b6:1b:60:a0:f9:bc:0c:ae:bc:f2:fa:d5:78:c9:
cc:5d:3c:94:ab:1b:e2:a7:ce:f5:5f:4b:3f:e2:a1:d2:f1:5c:
19:2a:ac:e9:c3:98:23:28:8f:c7:f6:4f:b5:33:e8:38:8e:f4:
1f:ae:08:e5:aa:78:ff:04:26:c6:01:c2:7f:a3:18:98:25:51:
c0:f3:85:4c:44:d2:ef:4f:a3:aa:91:3f:98:45:56:7c:4e:44:
a5:2b:9e:7f:c1:1d:94:2d:19:a5:0f:6e:68:65:07:c9:22:fa:
93:6b:a7:42:60:99:d5:d6:04:28:10:c0:e3:e5:56:70:9f:ea:
a8:86:7b:26:f4:b3:96:68:3d:81:91:14:d1:c0:73:30:69:02:
99:a1:e5:6f:15:b2:cd:8d:6f:18:19:8e:8c:f8:34:23:1d:0c:
e6:01:17:62:15:27:f5:65:af:64:9c:31:6d:86:63:33:b8:33:
2d:68:4a:18:13:5c:4b:41:ff:7e:28:12:4d:51:18:3d:07:7d:
6a:2b:2f:52:c3:f3:cb:7d:7a:f2:0c:2b:02:61:0a:9a:71:f9:
69:ed:e7:e7
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYekI3zLCIL1DwhK7u5O6yY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMwNDIxMTQwNjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDU3ZGY5OTE0NzcyY2Q0NTQxMWMwYjhlOGY3OGNiM2U0MTBhYWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFTP9eBwOngPyvd9Npc6pAzbSxto
zQ/xFfUZ8tMIuWnVK16mF7dtv19KJ4hsjs99s7KQc7VNuRwBEosygltrj14gIy9M
H7dFBvnIQSAEAnDxTlb6w+28195WVvzpxPS7WOfrBlEtko2JHqsw699C08yhkMym
hJvqmxU8gj1lW/RVE6RDVtXSAGYrS0kny8pUu086T5gI1jEJTpvImzK4XLNUOSLJ
1tgAUtuVloG74drTSbVbFUa6xnzUmGUaG/+y30RxPscxTLPSB7MJ5p5kMqNO5c+E
QkF3cLolGCcVz/9w5NfXWxOs456OsKS/YJ8R7OqVbJ43HqTazZmRwdm12QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFB1X35kUdyzUVBHAuOj3jLPkEKq5MB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvSFZmZm1SUjNMTlJVRWNDNDZQZU1zLVFRcXJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALViKAwQA
LV6rAwQBTVMmAwQBVdF4MA0GCSqGSIb3DQEBCwUAA4IBAQANamouwfyQr/LUp4bO
PJbQaeJfW2Wldy0TS+3CxywuoRFp8unUpfKAthtgoPm8DK688vrVeMnMXTyUqxvi
p871X0s/4qHS8VwZKqzpw5gjKI/H9k+1M+g4jvQfrgjlqnj/BCbGAcJ/oxiYJVHA
84VMRNLvT6OqkT+YRVZ8TkSlK55/wR2ULRmlD25oZQfJIvqTa6dCYJnV1gQoEMDj
5VZwn+qohnsm9LOWaD2BkRTRwHMwaQKZoeVvFbLNjW8YGY6M+DQjHQzmARdiFSf1
Za9knDFthmMzuDMtaEoYE1xLQf9+KBJNURg9B31qKy9Sw/PLfXryDCsCYQqacflp
7efn
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org