Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/H930VDHay6hOftP8B3MeDH_8ajI.roa
File: H930VDHay6hOftP8B3MeDH_8ajI.roa (raw, json)
Hash identifier: lBVevFKkghryarcLaAWVda6slKMm6GbLehsMsghXkh0=
Subject key identifier: 1F:DD:F4:54:31:DA:CB:A8:4E:7E:D3:FC:07:73:1E:0C:7F:FC:6A:32
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 0188FC2B9CD5EE7B02ED2C6439382F2DACDA
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/H930VDHay6hOftP8B3MeDH_8ajI.roa
Signing time: Tue 27 Jun 2023 09:24:56 +0000
ROA not before: Tue 27 Jun 2023 09:24:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25198
IP address blocks: 85.204.107.0/24 maxlen: 24
195.74.93.0/24 maxlen: 24
46.229.243.0/24 maxlen: 24
46.229.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:2b:9c:d5:ee:7b:02:ed:2c:64:39:38:2f:2d:ac:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Jun 27 09:24:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fddf45431dacba84e7ed3fc07731e0c7ffc6a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:d2:a6:20:e7:f4:5a:60:34:cf:6a:92:72:
a6:93:b3:da:2f:ee:2b:69:e7:2a:0d:73:9f:e3:c6:
6c:43:09:16:af:f3:0c:ef:80:f3:85:d2:2a:3e:08:
83:50:3e:00:d0:07:51:69:b8:db:a6:c5:60:c2:97:
1b:c1:28:5e:a9:0c:22:ec:d5:9e:20:62:e9:63:32:
eb:60:ca:5a:83:ab:6d:3d:88:08:dc:f9:0c:8e:26:
5f:cb:e4:2e:02:30:a5:51:06:0c:63:84:64:00:32:
a7:58:af:1a:ed:11:95:0d:db:eb:c4:09:c0:79:6e:
9d:9b:7a:51:78:dd:2f:e1:c8:8d:16:eb:cd:42:9f:
88:fd:b0:94:8b:89:ad:cb:a3:71:b7:c7:bf:90:8a:
6f:08:58:66:a3:ae:7f:42:36:bf:d9:46:ad:02:b7:
cf:fc:2f:c8:bc:28:7f:9b:63:dc:ea:8a:00:8b:75:
c6:97:4e:92:58:6e:17:0a:92:d9:01:32:78:5c:6f:
dc:24:36:94:2b:dd:f8:3a:b7:98:71:3c:25:48:e0:
21:26:7f:2c:5a:a2:ad:78:7d:4a:31:23:76:10:28:
07:cb:92:59:39:1c:57:42:24:9d:de:9d:21:49:54:
c7:d5:aa:84:39:64:b7:82:e3:b6:3a:88:2a:5a:30:
56:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DD:F4:54:31:DA:CB:A8:4E:7E:D3:FC:07:73:1E:0C:7F:FC:6A:32
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/H930VDHay6hOftP8B3MeDH_8ajI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.243.0/24
46.229.253.0/24
85.204.107.0/24
195.74.93.0/24
Signature Algorithm: sha256WithRSAEncryption
27:57:91:18:21:e4:90:bb:92:0a:35:9a:53:c9:b3:9f:79:44:
aa:b9:63:9b:eb:95:a7:e6:a3:eb:fe:1b:82:94:ab:28:e9:84:
b5:93:7f:b5:a2:67:54:90:7b:59:65:77:df:96:64:06:65:f2:
8a:3a:03:97:a2:aa:d9:f0:c4:ba:92:7d:6b:28:0b:0e:a0:f0:
20:b2:fe:2c:33:a9:5a:fb:6c:92:58:ae:c0:12:4a:63:e3:ee:
15:e1:76:20:ea:d9:81:dc:06:d6:af:bb:d1:56:fd:a2:fc:f5:
a8:fb:5c:55:ba:b8:6f:b9:5d:83:e1:a8:a5:3e:fc:11:11:d9:
ac:34:10:f1:cd:cc:43:7a:4e:7c:c9:e1:e3:dd:5a:19:da:01:
29:1e:7e:a8:fa:7b:9e:71:73:b0:21:30:8d:ba:be:1e:42:77:
9f:c8:48:46:d1:36:b5:54:78:ca:d3:37:ff:8d:91:be:3d:2f:
eb:e8:19:0a:37:58:db:49:65:08:6b:b0:a9:01:3f:c6:e9:c2:
7a:55:bf:31:cb:7d:c6:10:dd:34:06:82:52:e7:3f:5e:e7:3a:
c7:b5:46:c3:9a:0d:5f:c2:81:ff:0d:8b:1f:a7:d1:95:cb:86:
ab:16:29:c7:57:04:19:f0:08:c4:ba:48:06:73:cd:65:6a:ed:
97:3b:35:16
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYj8K5zV7nsC7SxkOTgvLazaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjUwZTUzODZjODA5YTBmYWU2NTMwYWE1ZThkOTgyNTI1
MWRlZDAwHhcNMjMwNjI3MDkyNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmRkZjQ1NDMxZGFjYmE4NGU3ZWQzZmMwNzczMWUwYzdmZmM2YTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvTSpiDn9FpgNM9qknKmk7PaL+4r
aecqDXOf48ZsQwkWr/MM74DzhdIqPgiDUD4A0AdRabjbpsVgwpcbwSheqQwi7NWe
IGLpYzLrYMpag6ttPYgI3PkMjiZfy+QuAjClUQYMY4RkADKnWK8a7RGVDdvrxAnA
eW6dm3pReN0v4ciNFuvNQp+I/bCUi4mty6Nxt8e/kIpvCFhmo65/Qja/2UatArfP
/C/IvCh/m2Pc6ooAi3XGl06SWG4XCpLZATJ4XG/cJDaUK934OreYcTwlSOAhJn8s
WqKteH1KMSN2ECgHy5JZORxXQiSd3p0hSVTH1aqEOWS3guO2OogqWjBWuwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFB/d9FQx2suoTn7T/AdzHgx//GoyMB8GA1UdIwQY
MBaAFJ61DlOGyAmg+uZTCqXo2YJSUd7QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUt
MWNhZGE2ZThiMWE5LzEvSDkzMFZESGF5NmhPZnRQOEIzTWVESF84YWpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iNTQ2NDEtYTk1YS00YWRkLWE0NWUtMWNhZGE2ZThiMWE5
LzEvbnJVT1U0YklDYUQ2NWxNS3BlalpnbEpSM3RBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALuXzAwQA
LuX9AwQAVcxrAwQAw0pdMA0GCSqGSIb3DQEBCwUAA4IBAQAnV5EYIeSQu5IKNZpT
ybOfeUSquWOb65Wn5qPr/huClKso6YS1k3+1omdUkHtZZXfflmQGZfKKOgOXoqrZ
8MS6kn1rKAsOoPAgsv4sM6la+2ySWK7AEkpj4+4V4XYg6tmB3AbWr7vRVv2i/PWo
+1xVurhvuV2D4ailPvwREdmsNBDxzcxDek58yeHj3VoZ2gEpHn6o+nuecXOwITCN
ur4eQnefyEhG0Ta1VHjK0zf/jZG+PS/r6BkKN1jbSWUIa7CpAT/G6cJ6Vb8xy33G
EN00BoJS5z9e5zrHtUbDmg1fwoH/DYsfp9GVy4arFinHVwQZ8AjEukgGc81lau2X
OzUW
Generated at Thu Jul 20 19:01:06 2023 by rpki-client on console-fra.rpki-client.org