Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/EzJmHWwj_OFDr_Y_hPAZor7gw_E.roa
File: EzJmHWwj_OFDr_Y_hPAZor7gw_E.roa (raw, json)
Hash identifier: MDjg2V8mYXG9LTAYVdv1nXXN+FlVqRXHrpmfQpkP1y8=
Subject key identifier: 13:32:66:1D:6C:23:FC:E1:43:AF:F6:3F:84:F0:19:A2:BE:E0:C3:F1
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018A33117F54A332A5BE936E2E99AD68DFA8
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/EzJmHWwj_OFDr_Y_hPAZor7gw_E.roa
Signing time: Sat 26 Aug 2023 18:18:19 +0000
ROA not before: Sat 26 Aug 2023 18:18:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 95.214.172.0/24 maxlen: 24
45.150.174.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:33:11:7f:54:a3:32:a5:be:93:6e:2e:99:ad:68:df:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Aug 26 18:18:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1332661d6c23fce143aff63f84f019a2bee0c3f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:49:82:28:81:5a:5c:b9:06:30:bb:a2:74:59:
0a:20:b0:2a:c0:15:5a:9a:19:b8:75:09:83:82:4c:
9a:93:90:ea:f4:f6:65:b2:8d:c8:0d:0b:aa:36:53:
f5:b2:c4:be:0b:4b:5d:af:e1:86:5e:68:26:ee:54:
22:31:4f:5d:be:ab:1a:c4:ef:2f:76:0a:96:b1:50:
41:9b:94:25:2d:82:aa:9d:98:17:be:22:70:5c:6f:
c5:37:57:e0:ee:e6:56:b5:c7:10:4a:9e:26:f0:ba:
57:8b:48:a4:1e:11:f2:a2:61:46:f6:09:d5:40:01:
65:27:1f:3c:d0:37:97:d2:4d:f4:67:7b:43:b4:3d:
a9:8a:06:4a:a0:a8:fb:ec:a7:04:49:b3:c0:29:35:
b2:f6:20:b3:79:6d:55:9e:6f:3b:8f:12:f0:cb:17:
6f:d5:d5:2d:c2:0b:7f:bc:85:b1:ce:53:6d:b0:97:
4d:05:28:25:44:f5:ae:e9:01:da:e1:32:50:81:14:
5e:1c:ed:b9:31:c3:f4:5d:88:3b:48:64:c7:b9:4e:
73:69:86:a5:ad:2f:48:5c:6f:39:be:f2:41:c9:2e:
a0:f8:52:ff:46:fb:37:8f:b1:9c:a9:7c:77:24:c3:
1f:7e:00:ba:9a:39:ea:f5:99:a0:91:25:b3:54:88:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:32:66:1D:6C:23:FC:E1:43:AF:F6:3F:84:F0:19:A2:BE:E0:C3:F1
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/EzJmHWwj_OFDr_Y_hPAZor7gw_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.174.0/24
95.214.172.0/24
Signature Algorithm: sha256WithRSAEncryption
63:a1:45:5a:08:4c:74:ac:5f:5c:56:bb:4b:79:25:84:48:2d:
9a:0a:b6:f4:ba:b4:45:c3:fe:54:86:9a:c9:a8:d6:bf:62:73:
36:16:07:93:85:14:69:db:ee:59:40:58:5e:ba:5b:73:40:4c:
09:1b:9e:15:e3:f4:97:48:9d:16:e5:e6:fe:0d:e0:6a:c8:66:
66:4e:56:5f:48:6e:e6:06:b4:c7:2b:b3:9b:ee:9e:a9:11:63:
57:d0:19:5b:fc:9c:46:40:21:b3:4c:47:87:ac:59:b7:90:6b:
74:98:d6:a4:c0:11:f8:7c:19:16:7e:98:b9:d1:d5:dd:09:43:
ef:89:3d:17:79:17:1e:a1:57:06:ac:9a:32:7f:40:f2:e5:2b:
41:ae:fa:04:08:e0:15:e5:a7:5d:f3:86:8e:fd:79:77:f3:76:
5a:be:08:8f:5a:f7:71:20:96:60:c2:25:8f:cd:f3:af:4c:75:
5f:24:84:7a:c9:64:fb:25:f4:b5:ee:8b:70:47:f5:bc:8f:30:
b3:8c:6d:4e:6f:2d:68:88:de:be:35:77:6d:eb:3b:c0:e9:1a:
8b:af:ec:bc:e2:90:46:25:6b:16:a9:18:2c:58:32:42:db:4b:
30:c3:99:db:87:e6:b8:a6:1b:df:ca:9e:53:73:a0:90:17:74:
30:1d:ac:55
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYozEX9UozKlvpNuLpmtaN+oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjMwODI2MTgxODE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzMyNjYxZDZjMjNmY2UxNDNhZmY2M2Y4NGYwMTlhMmJlZTBjM2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEmCKIFaXLkGMLuidFkKILAqwBVa
mhm4dQmDgkyak5Dq9PZlso3IDQuqNlP1ssS+C0tdr+GGXmgm7lQiMU9dvqsaxO8v
dgqWsVBBm5QlLYKqnZgXviJwXG/FN1fg7uZWtccQSp4m8LpXi0ikHhHyomFG9gnV
QAFlJx880DeX0k30Z3tDtD2pigZKoKj77KcESbPAKTWy9iCzeW1Vnm87jxLwyxdv
1dUtwgt/vIWxzlNtsJdNBSglRPWu6QHa4TJQgRReHO25McP0XYg7SGTHuU5zaYal
rS9IXG85vvJByS6g+FL/Rvs3j7GcqXx3JMMffgC6mjnq9ZmgkSWzVIjQ4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBMyZh1sI/zhQ6/2P4TwGaK+4MPxMB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvRXpKbUhXd2pfT0ZEcl9ZX2hQQVpvcjdnd19FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZauAwQA
X9asMA0GCSqGSIb3DQEBCwUAA4IBAQBjoUVaCEx0rF9cVrtLeSWESC2aCrb0urRF
w/5UhprJqNa/YnM2FgeThRRp2+5ZQFheultzQEwJG54V4/SXSJ0W5eb+DeBqyGZm
TlZfSG7mBrTHK7Ob7p6pEWNX0Blb/JxGQCGzTEeHrFm3kGt0mNakwBH4fBkWfpi5
0dXdCUPviT0XeRceoVcGrJoyf0Dy5StBrvoECOAV5add84aO/Xl383ZavgiPWvdx
IJZgwiWPzfOvTHVfJIR6yWT7JfS17otwR/W8jzCzjG1Oby1oiN6+NXdt6zvA6RqL
r+y84pBGJWsWqRgsWDJC20sww5nbh+a4phvfyp5Tc6CQF3QwHaxV
-----END CERTIFICATE-----
Generated at Tue Sep 5 02:56:59 2023 by rpki-client on console-fra.rpki-client.org