Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/RLebxHUZSGBFoGnz3N7WCFn7FVw.roa
File: RLebxHUZSGBFoGnz3N7WCFn7FVw.roa (raw, json)
Hash identifier: 1zpypTWAWvcSuPwcxC8US22GfHNvK3v0IRKc7bO1Oz0=
Subject key identifier: 44:B7:9B:C4:75:19:48:60:45:A0:69:F3:DC:DE:D6:08:59:FB:15:5C
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018A1FB833E30172789FC70E0D76DB930FD2
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/RLebxHUZSGBFoGnz3N7WCFn7FVw.roa
Signing time: Wed 23 Aug 2023 00:08:00 +0000
ROA not before: Wed 23 Aug 2023 00:08:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 95.214.173.0/24 maxlen: 24
45.150.174.0/24 maxlen: 24
193.239.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1f:b8:33:e3:01:72:78:9f:c7:0e:0d:76:db:93:0f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Aug 23 00:08:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44b79bc47519486045a069f3dcded60859fb155c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f3:d5:10:4b:f5:05:43:91:77:4e:10:9c:2f:
60:2f:59:13:92:d2:68:bc:da:98:5a:29:49:cc:69:
ea:27:1c:f2:d2:3e:ec:ac:1b:f2:dc:d3:1d:13:72:
7f:f9:99:cd:76:bf:3a:70:30:3c:f6:fb:3e:5b:e8:
8a:88:fe:ea:99:60:fd:6d:85:37:9f:3c:cb:33:0f:
51:c5:ad:4e:38:60:7f:5b:2f:ce:c4:3e:94:a0:f8:
32:9d:59:13:85:6e:89:e6:fd:f7:b3:6d:40:a5:c4:
2a:d3:65:66:07:57:2d:ad:62:c2:7c:90:5f:dd:86:
12:bf:d8:e4:82:df:9e:a6:dd:f5:fe:77:be:4f:c3:
75:ce:a3:0c:89:9a:f7:00:90:ad:e8:63:1c:bf:6a:
63:9f:06:b8:f6:8e:39:26:ea:7b:92:42:5d:0b:99:
7e:2e:08:44:8c:05:fe:4a:86:de:60:92:c5:49:b5:
ba:2e:59:fb:d4:d9:69:57:8e:2a:f2:21:72:75:d6:
5b:08:83:c0:ce:87:d8:cc:72:36:40:4c:e7:bd:4f:
d8:f6:dc:ab:d5:bd:07:f1:49:66:09:2e:1a:f3:4a:
39:ad:c9:07:53:9e:9a:d6:75:a6:aa:c8:cf:04:c2:
77:92:ca:72:a7:c5:a6:06:f5:8c:6d:c2:4c:3d:54:
a9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:B7:9B:C4:75:19:48:60:45:A0:69:F3:DC:DE:D6:08:59:FB:15:5C
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/RLebxHUZSGBFoGnz3N7WCFn7FVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.174.0/24
95.214.173.0/24
193.239.196.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ba:9b:48:1e:80:71:b8:34:eb:98:f1:9e:86:80:5c:77:4d:
ad:ee:63:ac:31:08:06:58:80:06:c2:28:fe:25:7a:a8:67:6e:
e7:b9:08:47:ca:d0:08:9c:cd:11:ad:a3:ae:6c:09:74:bd:dc:
3c:cf:07:ae:f7:92:ee:e9:b6:89:e7:5d:f9:39:98:69:cc:5e:
3d:de:2e:1c:52:a8:ab:82:5c:01:0a:bc:94:85:49:2c:9d:6c:
04:6e:34:f0:21:7c:a9:74:8c:0c:90:5d:7b:5a:de:a6:5c:f4:
d9:f4:d5:4f:fb:14:56:db:62:8a:5e:15:ff:f0:f9:c1:87:5c:
14:b8:1c:d1:65:ec:a4:9c:06:d5:a1:02:74:ca:5d:4c:68:e0:
47:63:1a:3b:b3:3d:08:95:5e:f3:c4:8a:6c:da:63:ff:ed:a5:
cc:43:d1:36:f4:9c:d8:a6:f5:44:1d:34:49:dd:8f:54:ae:22:
e6:5f:d2:2c:5f:3b:9d:75:cf:79:5e:44:a1:f5:5c:6d:0b:86:
58:1d:38:49:45:07:5d:c3:f3:04:7f:df:e7:5e:92:61:dc:de:
54:2e:ff:17:52:38:2e:85:cd:7f:1c:94:d2:20:ce:a5:e2:70:
9b:57:d9:c7:d5:fb:11:f3:6d:62:fb:b8:2b:88:0e:f4:4b:a1:
b2:05:85:e4
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYofuDPjAXJ4n8cODXbbkw/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjMwODIzMDAwODAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGI3OWJjNDc1MTk0ODYwNDVhMDY5ZjNkY2RlZDYwODU5ZmIxNTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvPVEEv1BUORd04QnC9gL1kTktJo
vNqYWilJzGnqJxzy0j7srBvy3NMdE3J/+ZnNdr86cDA89vs+W+iKiP7qmWD9bYU3
nzzLMw9Rxa1OOGB/Wy/OxD6UoPgynVkThW6J5v33s21ApcQq02VmB1ctrWLCfJBf
3YYSv9jkgt+ept31/ne+T8N1zqMMiZr3AJCt6GMcv2pjnwa49o45Jup7kkJdC5l+
LghEjAX+SobeYJLFSbW6Lln71NlpV44q8iFyddZbCIPAzofYzHI2QEznvU/Y9tyr
1b0H8UlmCS4a80o5rckHU56a1nWmqsjPBMJ3kspyp8WmBvWMbcJMPVSpCQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFES3m8R1GUhgRaBp89ze1ghZ+xVcMB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvUkxlYnhIVVpTR0JGb0duejNON1dDRm43RlZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZauAwQA
X9atAwQAwe/EMA0GCSqGSIb3DQEBCwUAA4IBAQAKuptIHoBxuDTrmPGehoBcd02t
7mOsMQgGWIAGwij+JXqoZ27nuQhHytAInM0RraOubAl0vdw8zweu95Lu6baJ5135
OZhpzF493i4cUqirglwBCryUhUksnWwEbjTwIXypdIwMkF17Wt6mXPTZ9NVP+xRW
22KKXhX/8PnBh1wUuBzRZeyknAbVoQJ0yl1MaOBHYxo7sz0IlV7zxIps2mP/7aXM
Q9E29JzYpvVEHTRJ3Y9UriLmX9IsXzuddc95XkSh9VxtC4ZYHThJRQddw/MEf9/n
XpJh3N5ULv8XUjguhc1/HJTSIM6l4nCbV9nH1fsR821i+7griA70S6GyBYXk
-----END CERTIFICATE-----
Generated at Sat Aug 26 18:43:32 2023 by rpki-client on console-ams.rpki-client.org