Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/1nPZd3yN9Phbh4m-cs378e1aBDk.roa
File: 1nPZd3yN9Phbh4m-cs378e1aBDk.roa (raw, json)
Hash identifier: iurGw+JzNoUNU/lt0d+0PkhUA+2WgpcJ6nyp4NvuMFo=
Subject key identifier: D6:73:D9:77:7C:8D:F4:F8:5B:87:89:BE:72:CD:FB:F1:ED:5A:04:39
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 018A886BF1E3C012580B942E6718590F8E79
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/1nPZd3yN9Phbh4m-cs378e1aBDk.roa
Signing time: Tue 12 Sep 2023 08:04:50 +0000
ROA not before: Tue 12 Sep 2023 08:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 82.115.217.0/24 maxlen: 24
45.140.211.0/24 maxlen: 24
45.140.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:88:6b:f1:e3:c0:12:58:0b:94:2e:67:18:59:0f:8e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Sep 12 08:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d673d9777c8df4f85b8789be72cdfbf1ed5a0439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:51:ca:9c:5d:87:fe:db:5c:f2:80:a3:db:e5:
fd:10:03:58:e3:70:27:ec:77:0c:71:c3:70:3b:9b:
f2:d6:b6:91:70:8f:49:9a:a2:11:7a:fa:21:5b:6b:
a1:8b:15:5c:bd:0d:27:e9:b5:09:55:cb:4e:9c:eb:
24:f5:6e:6c:bd:89:cb:2e:94:20:a2:9d:4f:15:3b:
66:04:7a:dc:d2:98:ef:06:a1:21:e4:24:d5:b3:6e:
c4:54:0d:26:73:9e:74:c4:3b:2e:71:8f:4b:1e:0c:
f2:ab:6c:81:5d:85:81:ed:4b:d6:99:a7:a7:80:c8:
68:7d:28:9b:c9:33:60:da:53:14:3f:2c:ca:52:6e:
53:e5:e2:3c:f0:a9:1d:37:d9:71:23:c9:2b:82:2c:
21:f2:b3:be:55:1b:07:7b:34:20:6c:c8:99:1b:83:
12:e2:c2:af:05:77:b6:e3:d5:c3:15:a1:e5:52:84:
e9:2a:e5:19:47:c6:fd:49:24:26:82:27:35:1e:94:
f3:d4:60:f3:98:85:0d:f5:26:b0:72:a5:a9:db:bc:
6e:67:1c:dc:44:0e:d4:64:41:29:e0:89:a9:c4:a9:
7b:dc:69:d0:52:9e:af:0a:2f:7e:17:b1:67:5a:24:
e9:7a:fc:2a:b2:b0:7a:43:4a:7e:3c:c0:5f:3e:33:
fd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:73:D9:77:7C:8D:F4:F8:5B:87:89:BE:72:CD:FB:F1:ED:5A:04:39
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/1nPZd3yN9Phbh4m-cs378e1aBDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.208.0/24
45.140.211.0/24
82.115.217.0/24
Signature Algorithm: sha256WithRSAEncryption
58:e8:c3:cc:77:01:ea:e0:d0:fc:4a:ef:ab:5b:ed:f0:1f:bd:
97:6c:30:0a:b5:ba:84:08:96:0b:0a:00:5f:d0:a6:38:1b:9e:
09:06:16:2f:71:da:43:4f:88:e9:b8:49:47:05:21:99:6f:22:
ad:3e:c6:71:f5:1e:83:d4:da:40:28:cf:7b:25:13:51:23:a6:
2f:a2:24:1d:ea:0f:ec:2c:16:f7:cc:fa:61:9d:3a:89:ad:21:
34:df:27:a2:1d:95:fa:1f:78:68:62:00:ed:ac:49:9d:42:10:
e4:4f:14:c2:e2:0e:d8:fb:6f:6e:7e:fd:0c:41:e2:67:74:94:
f5:70:f4:40:69:af:aa:76:bb:eb:dc:9a:4e:f7:91:29:dd:f6:
97:c7:55:e3:7c:2f:8e:da:8a:7e:81:bf:23:a0:9d:fd:84:43:
6e:d3:d4:24:72:dd:8f:69:ca:6c:5e:00:8b:4d:88:60:a7:b5:
8b:f2:c6:08:d2:4c:50:f0:db:21:58:a7:d7:dc:33:4f:9e:d6:
0e:39:99:68:84:2b:24:19:a5:ce:10:20:0f:0f:23:15:8d:0b:
75:8c:26:10:40:6b:06:57:ff:32:bd:10:80:42:2d:69:33:a9:
82:8f:24:ed:f9:bf:a8:2e:bc:fc:2f:50:32:24:db:a1:2b:f8:
19:d3:98:8b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYqIa/HjwBJYC5QuZxhZD455MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2
Y2MyNjAwHhcNMjMwOTEyMDgwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjczZDk3NzdjOGRmNGY4NWI4Nzg5YmU3MmNkZmJmMWVkNWEwNDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1HKnF2H/ttc8oCj2+X9EANY43An
7HcMccNwO5vy1raRcI9JmqIRevohW2uhixVcvQ0n6bUJVctOnOsk9W5svYnLLpQg
op1PFTtmBHrc0pjvBqEh5CTVs27EVA0mc550xDsucY9LHgzyq2yBXYWB7UvWmaen
gMhofSibyTNg2lMUPyzKUm5T5eI88KkdN9lxI8krgiwh8rO+VRsHezQgbMiZG4MS
4sKvBXe249XDFaHlUoTpKuUZR8b9SSQmgic1HpTz1GDzmIUN9SawcqWp27xuZxzc
RA7UZEEp4ImpxKl73GnQUp6vCi9+F7FnWiTpevwqsrB6Q0p+PMBfPjP9YQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNZz2Xd8jfT4W4eJvnLN+/HtWgQ5MB8GA1UdIwQY
MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt
NjA3ZDRmMzdmNTlmLzEvMW5QWmQzeU45UGhiaDRtLWNzMzc4ZTFhQkRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm
LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYzQAwQA
LYzTAwQAUnPZMA0GCSqGSIb3DQEBCwUAA4IBAQBY6MPMdwHq4ND8Su+rW+3wH72X
bDAKtbqECJYLCgBf0KY4G54JBhYvcdpDT4jpuElHBSGZbyKtPsZx9R6D1NpAKM97
JRNRI6YvoiQd6g/sLBb3zPphnTqJrSE03yeiHZX6H3hoYgDtrEmdQhDkTxTC4g7Y
+29ufv0MQeJndJT1cPRAaa+qdrvr3JpO95Ep3faXx1XjfC+O2op+gb8joJ39hENu
09Qkct2PacpsXgCLTYhgp7WL8sYI0kxQ8NshWKfX3DNPntYOOZlohCskGaXOECAP
DyMVjQt1jCYQQGsGV/8yvRCAQi1pM6mCjyTt+b+oLrz8L1AyJNuhK/gZ05iL
-----END CERTIFICATE-----
Generated at Sat Sep 23 19:39:23 2023 by rpki-client on console-ams.rpki-client.org