Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TearmUjq6rVRyk2n8jZPLLM4RGs.roa
File: TearmUjq6rVRyk2n8jZPLLM4RGs.roa (raw, json)
Hash identifier: 7enOC+1MbgbxKlHQD8GM2Ce9qifROym2jMaP3MwUtg8=
Subject key identifier: 4D:E6:AB:99:48:EA:EA:B5:51:CA:4D:A7:F2:36:4F:2C:B3:38:44:6B
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01897432192F53603333E1BA6AFDC42A3A46
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TearmUjq6rVRyk2n8jZPLLM4RGs.roa
Signing time: Thu 20 Jul 2023 16:46:27 +0000
ROA not before: Thu 20 Jul 2023 16:46:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206085
IP address blocks: 45.89.44.0/22 maxlen: 24
45.83.12.0/22 maxlen: 22
45.95.88.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:74:32:19:2f:53:60:33:33:e1:ba:6a:fd:c4:2a:3a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jul 20 16:46:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4de6ab9948eaeab551ca4da7f2364f2cb338446b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:64:fd:c6:10:0e:9f:23:a5:2f:34:f6:2a:a5:
05:d9:8b:cd:5f:61:67:57:6b:16:fb:b1:6a:2f:2c:
dc:04:c3:7f:4b:8d:5c:ce:e8:79:e8:c7:4c:a7:48:
80:38:fe:10:8e:6a:cd:f3:e8:d7:ab:78:b8:f2:25:
be:2a:6b:db:b6:d1:56:ee:7e:f4:e3:b6:bb:58:23:
9c:1f:40:a0:47:a7:dd:3d:ee:be:20:bc:45:ce:5e:
7b:d4:f1:9c:45:ea:74:90:b7:18:ff:c7:00:bc:ab:
c4:1f:11:86:d8:bc:b7:84:f9:93:d5:20:e2:c4:a2:
05:3d:dd:7c:1f:2e:37:a0:0d:89:2c:99:e0:de:8f:
1d:ca:38:7b:b5:ab:9f:02:9f:10:62:da:bc:d6:36:
61:28:5d:b4:55:64:22:7b:74:f0:43:d3:a0:ab:1d:
b5:3d:93:a0:75:17:c4:60:31:b2:24:f3:44:93:43:
f9:1f:78:b6:8a:37:05:ef:bc:28:40:95:08:d0:6e:
3c:d0:80:74:37:32:e8:a4:6c:a7:9f:6e:a5:75:28:
27:16:4d:d7:80:90:14:8a:e5:94:7a:3d:68:0e:0b:
c0:a7:72:b5:dc:20:ee:26:eb:59:a3:97:a7:e2:37:
7d:fa:95:95:41:6b:2b:26:17:ca:ae:e5:a5:75:24:
c5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E6:AB:99:48:EA:EA:B5:51:CA:4D:A7:F2:36:4F:2C:B3:38:44:6B
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/TearmUjq6rVRyk2n8jZPLLM4RGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.12.0/22
45.89.44.0/22
45.95.88.0/22
Signature Algorithm: sha256WithRSAEncryption
21:00:99:0e:76:36:92:70:0a:1c:b4:02:f2:12:2b:4c:77:94:
97:70:52:d8:2a:72:03:bc:5e:50:fd:2b:e9:2f:b6:df:ff:9f:
c0:0d:4d:7f:d6:17:0d:c9:42:8a:27:bc:a6:e3:26:f4:52:39:
32:62:f2:11:02:66:07:8c:a4:db:13:80:2e:03:76:30:72:1b:
53:a1:cf:40:76:d5:7c:4f:89:d6:71:c0:34:df:45:de:51:e6:
78:46:35:aa:85:fd:05:51:ca:51:d6:ce:bf:66:e1:9f:13:d1:
ab:24:a2:63:22:d7:05:25:b1:5b:16:96:f0:16:8c:76:2a:74:
c3:30:60:3e:81:07:b7:4f:f8:21:01:8b:65:7a:4c:81:34:79:
72:ff:0d:33:c5:9e:aa:57:60:0d:a0:fe:bd:be:fe:65:f2:df:
dd:83:b7:ef:ce:ed:29:bd:6a:b1:ce:42:f6:0c:4c:e9:f2:69:
88:67:66:a9:ce:c1:64:37:02:5f:c9:1c:2b:1d:f6:53:74:b3:
ad:3f:31:e7:b0:be:41:a6:4c:5f:32:87:81:29:92:ab:b5:ad:
4b:ef:e8:10:0c:13:79:a9:04:dd:1b:5a:87:7f:0d:8b:94:0e:
c1:82:d9:ee:36:f1:a7:2e:f4:0c:b6:f2:35:5d:59:88:f4:61:
53:ec:27:8e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYl0MhkvU2AzM+G6av3EKjpGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjMwNzIwMTY0NjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGU2YWI5OTQ4ZWFlYWI1NTFjYTRkYTdmMjM2NGYyY2IzMzg0NDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mT9xhAOnyOlLzT2KqUF2YvNX2Fn
V2sW+7FqLyzcBMN/S41czuh56MdMp0iAOP4QjmrN8+jXq3i48iW+KmvbttFW7n70
47a7WCOcH0CgR6fdPe6+ILxFzl571PGcRep0kLcY/8cAvKvEHxGG2Ly3hPmT1SDi
xKIFPd18Hy43oA2JLJng3o8dyjh7taufAp8QYtq81jZhKF20VWQie3TwQ9Ogqx21
PZOgdRfEYDGyJPNEk0P5H3i2ijcF77woQJUI0G480IB0NzLopGynn26ldSgnFk3X
gJAUiuWUej1oDgvAp3K13CDuJutZo5en4jd9+pWVQWsrJhfKruWldSTF3QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFE3mq5lI6uq1UcpNp/I2TyyzOERrMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvVGVhcm1VanE2clZSeWsybjhqWlBMTE00UkdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLVMMAwQC
LVksAwQCLV9YMA0GCSqGSIb3DQEBCwUAA4IBAQAhAJkOdjaScAoctALyEitMd5SX
cFLYKnIDvF5Q/SvpL7bf/5/ADU1/1hcNyUKKJ7ym4yb0UjkyYvIRAmYHjKTbE4Au
A3YwchtToc9AdtV8T4nWccA030XeUeZ4RjWqhf0FUcpR1s6/ZuGfE9GrJKJjItcF
JbFbFpbwFox2KnTDMGA+gQe3T/ghAYtlekyBNHly/w0zxZ6qV2ANoP69vv5l8t/d
g7fvzu0pvWqxzkL2DEzp8mmIZ2apzsFkNwJfyRwrHfZTdLOtPzHnsL5BpkxfMoeB
KZKrta1L7+gQDBN5qQTdG1qHfw2LlA7BgtnuNvGnLvQMtvI1XVmI9GFT7CeO
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:21 2024 by rpki-client on console-fra.rpki-client.org