Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/_KFYjvpJ1zwPi0W5SIJnPQbCC5Y.roa
File: _KFYjvpJ1zwPi0W5SIJnPQbCC5Y.roa (raw, json)
Hash identifier: yDc+wCbNCcysKGQDGhT6c+p5NnkfPd2gi0LcK0v0XyY=
Subject key identifier: FC:A1:58:8E:FA:49:D7:3C:0F:8B:45:B9:48:82:67:3D:06:C2:0B:96
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 0188BDA58E0E4C6F5B12653FB1416E107111
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/_KFYjvpJ1zwPi0W5SIJnPQbCC5Y.roa
Signing time: Thu 15 Jun 2023 06:02:03 +0000
ROA not before: Thu 15 Jun 2023 06:02:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210732
IP address blocks: 45.95.114.0/24 maxlen: 24
45.158.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Jul 2023 06:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:a5:8e:0e:4c:6f:5b:12:65:3f:b1:41:6e:10:71:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Jun 15 06:02:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fca1588efa49d73c0f8b45b94882673d06c20b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a5:57:c9:a9:04:e5:dd:7a:44:b7:5d:c4:28:
8f:90:59:fb:4a:72:6d:5b:35:f0:ce:01:f7:08:3a:
d0:e6:30:6a:4d:3f:51:1c:66:c3:da:0c:f4:20:8f:
8b:c8:66:a5:c9:28:3b:3f:93:fc:51:eb:99:b4:1c:
26:4f:d1:cc:34:a9:45:40:80:05:0a:2d:25:12:ef:
62:75:b5:db:99:42:e7:cc:e9:49:85:d2:3d:7f:a0:
38:e7:8a:31:8e:e8:ca:74:4c:d4:f4:73:72:7d:76:
aa:a6:c4:b8:6d:2e:8c:5c:0c:22:01:a3:ac:98:ff:
34:ec:10:11:e4:f5:bc:c4:8f:ad:d0:66:b8:a2:6d:
aa:e7:48:69:ac:99:7e:81:12:2a:ae:c4:85:cd:a7:
13:35:6e:11:43:b8:93:78:34:46:6c:45:05:c9:46:
f5:9b:7d:04:fd:2f:00:fa:35:db:11:d1:7c:36:38:
0a:a5:7b:74:fa:a7:a9:13:a4:39:e9:a2:36:dd:15:
d5:c4:5b:df:87:33:07:bc:76:a5:fd:be:2d:fb:07:
d2:11:10:b9:1a:91:5f:f9:fb:45:bf:7e:ad:3b:96:
37:d9:9a:2d:5e:b9:85:5f:3a:f0:47:b4:e4:fd:6a:
7e:87:15:83:9b:95:15:9d:94:27:82:7f:bc:a4:64:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A1:58:8E:FA:49:D7:3C:0F:8B:45:B9:48:82:67:3D:06:C2:0B:96
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/_KFYjvpJ1zwPi0W5SIJnPQbCC5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.114.0/24
45.158.76.0/24
Signature Algorithm: sha256WithRSAEncryption
50:06:90:bc:35:94:73:74:93:9d:ce:09:89:01:41:92:0a:cb:
43:4a:36:72:a9:ce:ee:da:19:76:58:68:72:17:c4:1f:1d:5a:
99:b9:48:1a:df:ed:35:3f:8e:af:7b:61:44:81:9c:b8:b5:f8:
bb:77:1b:c9:f7:4e:4d:e8:fb:57:5b:48:af:ef:95:79:97:90:
eb:38:c9:4a:a5:df:73:18:ab:8e:b4:f7:32:90:8f:13:3e:7b:
1a:4b:06:51:30:a6:68:1b:ea:9e:28:b1:55:55:11:c9:0c:9d:
1d:58:fd:4d:13:fb:c9:f3:b3:bf:7c:2b:9c:66:52:8e:0c:8d:
ba:b9:7a:d7:f8:91:85:41:bf:78:19:85:cf:50:a8:27:bf:04:
c1:e2:33:04:d3:ec:bf:1b:cb:80:ec:e2:b4:de:be:bd:55:99:
cf:73:87:c1:d5:37:3a:ce:2a:9c:45:10:69:c0:be:3e:37:8d:
6c:76:e6:42:f9:16:a3:dc:a0:48:ef:15:1c:24:dd:01:6b:a5:
80:08:4f:fa:fe:28:c3:89:49:4d:5a:fd:5e:61:6c:d4:08:78:
ca:ee:24:09:59:1a:15:c8:33:6a:22:92:84:2e:98:a4:b1:ef:
33:e9:3b:15:23:1d:16:bb:7f:a3:e5:b8:22:1e:30:c9:87:df:
e3:40:29:87
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYi9pY4OTG9bEmU/sUFuEHERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmVlN2NiZDhlNzhkMWYxNGE0NTNhMDRiOTE2ZjdjMTU4
MWQyMDQwHhcNMjMwNjE1MDYwMjAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmY2ExNTg4ZWZhNDlkNzNjMGY4YjQ1Yjk0ODgyNjczZDA2YzIwYjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6VXyakE5d16RLddxCiPkFn7SnJt
WzXwzgH3CDrQ5jBqTT9RHGbD2gz0II+LyGalySg7P5P8UeuZtBwmT9HMNKlFQIAF
Ci0lEu9idbXbmULnzOlJhdI9f6A454oxjujKdEzU9HNyfXaqpsS4bS6MXAwiAaOs
mP807BAR5PW8xI+t0Ga4om2q50hprJl+gRIqrsSFzacTNW4RQ7iTeDRGbEUFyUb1
m30E/S8A+jXbEdF8NjgKpXt0+qepE6Q56aI23RXVxFvfhzMHvHal/b4t+wfSERC5
GpFf+ftFv36tO5Y32ZotXrmFXzrwR7Tk/Wp+hxWDm5UVnZQngn+8pGQWoQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPyhWI76Sdc8D4tFuUiCZz0GwguWMB8GA1UdIwQY
MBaAFJn+58vY540fFKRToEuRb3wVgdIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTct
MWMyMmVmZjcyODE4LzEvX0tGWWp2cEoxendQaTBXNVNJSm5QUWJDQzVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8wZGQ0Y2ItMWY3Mi00MGVkLWE2NTctMWMyMmVmZjcyODE4
LzEvbWY3bnk5am5qUjhVcEZPZ1M1RnZmQldCMGdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALV9yAwQA
LZ5MMA0GCSqGSIb3DQEBCwUAA4IBAQBQBpC8NZRzdJOdzgmJAUGSCstDSjZyqc7u
2hl2WGhyF8QfHVqZuUga3+01P46ve2FEgZy4tfi7dxvJ905N6PtXW0iv75V5l5Dr
OMlKpd9zGKuOtPcykI8TPnsaSwZRMKZoG+qeKLFVVRHJDJ0dWP1NE/vJ87O/fCuc
ZlKODI26uXrX+JGFQb94GYXPUKgnvwTB4jME0+y/G8uA7OK03r69VZnPc4fB1Tc6
ziqcRRBpwL4+N41sduZC+Raj3KBI7xUcJN0Ba6WACE/6/ijDiUlNWv1eYWzUCHjK
7iQJWRoVyDNqIpKELpikse8z6TsVIx0Wu3+j5bgiHjDJh9/jQCmH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:15 2024 by rpki-client on console-fra.rpki-client.org