Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/DDNhabhSBurMiv45ztXQzIRCrE4.roa
File: DDNhabhSBurMiv45ztXQzIRCrE4.roa (raw, json)
Hash identifier: b5F4IQYnxQA4Fan+VNL2rMoeCubiGct53ckCFOMpM00=
Subject key identifier: 0C:33:61:69:B8:52:06:EA:CC:8A:FE:39:CE:D5:D0:CC:84:42:AC:4E
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018700AE2C0744082197BA01C5D79E1C540D
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/DDNhabhSBurMiv45ztXQzIRCrE4.roa
Signing time: Mon 20 Mar 2023 20:20:27 +0000
ROA not before: Mon 20 Mar 2023 20:20:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208226
IP address blocks: 45.140.164.0/24 maxlen: 24
45.140.165.0/24 maxlen: 24
185.248.33.0/24 maxlen: 24
2a0e:4007:fffe::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:00:ae:2c:07:44:08:21:97:ba:01:c5:d7:9e:1c:54:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Mar 20 20:20:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c336169b85206eacc8afe39ced5d0cc8442ac4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:62:de:0c:dc:cb:b0:00:92:f9:14:7d:6b:
44:39:5c:eb:b5:c1:64:07:05:8d:69:61:30:20:7f:
b7:ed:02:c8:d5:cd:09:ec:a5:cc:bc:4c:6e:71:4a:
31:ec:55:ac:da:22:f6:9b:ad:ec:2c:ab:19:82:5e:
67:91:91:06:00:5b:47:d6:6c:f5:a9:7f:7a:01:6a:
bc:06:4b:bf:b2:cb:85:4a:ae:c9:12:64:fb:6a:db:
04:39:7a:43:92:42:c8:e6:af:79:9a:d3:bf:61:52:
f8:31:5c:4d:8e:92:f3:69:c3:1a:f3:d5:cc:eb:3e:
24:69:7c:96:4b:c7:01:6c:dd:05:07:c8:33:26:6a:
c2:ce:79:b7:9a:44:d2:f4:fa:fe:9f:bb:79:1f:8e:
cd:d4:0b:ab:3c:fb:94:86:25:5f:d4:8c:5c:d8:c2:
26:22:ce:a4:93:b8:0c:c0:0f:bd:1f:72:a3:4e:68:
ac:d6:58:f2:d7:74:ec:25:88:47:c4:ae:92:63:5b:
63:81:2c:a9:66:80:27:a1:c7:a4:42:1d:2c:ff:b4:
24:f7:b6:60:cb:65:94:8d:4a:4c:6b:69:c7:d4:fa:
c1:39:d7:15:a8:a2:f5:05:53:f2:c5:f0:f2:57:6b:
da:e8:0c:05:39:33:50:1e:1e:8b:93:52:13:63:4a:
ac:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:33:61:69:B8:52:06:EA:CC:8A:FE:39:CE:D5:D0:CC:84:42:AC:4E
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/DDNhabhSBurMiv45ztXQzIRCrE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.164.0/23
185.248.33.0/24
IPv6:
2a0e:4007:fffe::/48
Signature Algorithm: sha256WithRSAEncryption
67:a0:2c:e9:6b:70:ee:3d:88:38:d1:fb:08:15:b9:cc:6e:0f:
8d:0b:96:ef:32:67:1b:24:55:8f:31:57:c0:70:f5:7c:2a:41:
ca:88:61:64:e9:3f:bb:f5:98:77:d8:03:ce:eb:a7:b8:11:d9:
34:44:61:88:2b:2c:ca:3e:ca:f4:50:35:5e:2d:67:ff:10:3d:
80:d7:bd:c2:a2:5c:55:de:f5:47:94:f3:45:6e:c1:0b:43:26:
0b:ec:b2:38:b0:3e:8a:ae:ac:4a:3b:84:c7:71:63:4e:06:a3:
3d:c2:d1:c1:4a:26:5d:e7:41:a5:8c:e6:da:d9:d9:7d:5d:68:
e9:4d:07:e8:58:04:f6:45:d1:f7:6a:ab:60:ec:7e:dc:a4:3c:
46:fd:28:58:d9:73:97:a2:6a:5c:04:92:69:c4:e7:d7:25:b5:
71:21:0c:c6:7b:8c:e8:23:93:03:96:53:56:1e:fd:16:54:05:
73:fc:f8:00:c5:a1:fe:2d:12:31:89:02:ab:05:c2:65:f1:75:
39:37:0e:72:e0:b5:a7:74:fd:c5:90:60:be:55:ef:92:40:4f:
21:cb:4c:bc:87:78:ae:17:3c:28:fe:8c:83:db:b3:7f:4c:0c:
93:d3:50:95:c4:57:a2:69:1c:52:f7:c0:55:2d:00:c1:1b:35:
b1:54:13:ef
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYcAriwHRAghl7oBxdeeHFQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjMwMzIwMjAyMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzMzNjE2OWI4NTIwNmVhY2M4YWZlMzljZWQ1ZDBjYzg0NDJhYzRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqm5i3gzcy7AAkvkUfWtEOVzrtcFk
BwWNaWEwIH+37QLI1c0J7KXMvExucUox7FWs2iL2m63sLKsZgl5nkZEGAFtH1mz1
qX96AWq8Bku/ssuFSq7JEmT7atsEOXpDkkLI5q95mtO/YVL4MVxNjpLzacMa89XM
6z4kaXyWS8cBbN0FB8gzJmrCznm3mkTS9Pr+n7t5H47N1AurPPuUhiVf1Ixc2MIm
Is6kk7gMwA+9H3KjTmis1ljy13TsJYhHxK6SY1tjgSypZoAnocekQh0s/7Qk97Zg
y2WUjUpMa2nH1PrBOdcVqKL1BVPyxfDyV2va6AwFOTNQHh6Lk1ITY0qs7wIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFAwzYWm4UgbqzIr+Oc7V0MyEQqxOMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvREROaGFiaFNCdXJNaXY0NXp0WFF6SVJDckU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQBLYykAwQA
ufghMA8EAgACMAkDBwAqDkAH//4wDQYJKoZIhvcNAQELBQADggEBAGegLOlrcO49
iDjR+wgVucxuD40Llu8yZxskVY8xV8Bw9XwqQcqIYWTpP7v1mHfYA87rp7gR2TRE
YYgrLMo+yvRQNV4tZ/8QPYDXvcKiXFXe9UeU80VuwQtDJgvssjiwPoqurEo7hMdx
Y04Goz3C0cFKJl3nQaWM5trZ2X1daOlNB+hYBPZF0fdqq2DsftykPEb9KFjZc5ei
alwEkmnE59cltXEhDMZ7jOgjkwOWU1Ye/RZUBXP8+ADFof4tEjGJAqsFwmXxdTk3
DnLgtad0/cWQYL5V75JATyHLTLyHeK4XPCj+jIPbs39MDJPTUJXEV6JpHFL3wFUt
AMEbNbFUE+8=
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:29 2024 by rpki-client on console-ams.rpki-client.org