Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/6Edmfv_1MElGOyq1y8ESjQKlvT8.roa
File: 6Edmfv_1MElGOyq1y8ESjQKlvT8.roa (raw, json)
Hash identifier: q65QWFeU5Ej0tI1YvPg+Bh6+zbdqQdycH1g1Zi/g+XI=
Subject key identifier: E8:47:66:7E:FF:F5:30:49:46:3B:2A:B5:CB:C1:12:8D:02:A5:BD:3F
Certificate issuer: /CN=a2893a4b284acb5d8a4164289045492109511688
Certificate serial: 01856CE63129B22BB07A0A97985CADAAF649
Authority key identifier: A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/6Edmfv_1MElGOyq1y8ESjQKlvT8.roa
Signing time: Sun 01 Jan 2023 10:35:03 +0000
ROA not before: Sun 01 Jan 2023 10:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 95.214.136.0/22 maxlen: 24
185.25.158.0/24 maxlen: 24
185.25.159.0/24 maxlen: 24
185.25.156.0/22 maxlen: 24
185.25.157.0/24 maxlen: 24
45.67.100.0/22 maxlen: 24
185.175.160.0/22 maxlen: 24
45.87.168.0/22 maxlen: 24
185.182.240.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:31:29:b2:2b:b0:7a:0a:97:98:5c:ad:aa:f6:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2893a4b284acb5d8a4164289045492109511688
Validity
Not Before: Jan 1 10:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e847667efff53049463b2ab5cbc1128d02a5bd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:63:cf:17:d2:a2:9e:c4:8a:4c:03:21:6a:bb:
33:bd:1a:d2:20:54:05:15:c5:07:6c:15:31:cb:2b:
dd:e9:c2:81:e0:46:18:ab:23:84:c3:2c:70:63:46:
60:83:a4:12:65:8c:c3:6b:b3:11:a4:dc:ff:a5:0b:
bb:e7:fc:07:e7:37:2a:86:e7:d3:dc:1d:d6:48:a8:
8e:c6:20:aa:a2:7a:f0:75:93:97:35:53:4b:77:65:
56:c6:cd:75:66:2b:81:54:cf:d8:21:87:d6:2f:6c:
71:43:22:0f:bd:24:7b:0e:38:36:92:a7:f1:6a:eb:
32:bc:9c:6e:22:bc:b7:42:df:de:3b:6c:92:33:0a:
d8:c7:6a:31:8a:86:84:a3:f6:19:38:b9:fc:6e:1a:
e5:9e:84:e1:f9:2b:f5:48:39:e1:bc:c2:d3:eb:da:
56:58:2e:d5:80:19:d6:bc:e8:99:2f:1a:7b:55:e8:
4d:09:dd:18:dd:bb:49:de:23:f7:93:b6:47:21:36:
1f:a0:4c:de:ea:2d:3d:31:17:5c:b5:94:f7:cf:de:
37:73:d3:1f:fc:73:40:d7:f7:d5:38:50:a5:db:87:
70:b1:5d:c1:f0:74:e7:f4:4a:b6:b8:aa:b8:49:31:
8e:b5:5d:04:bb:c0:6e:79:5b:16:23:4d:46:9a:b8:
8a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:47:66:7E:FF:F5:30:49:46:3B:2A:B5:CB:C1:12:8D:02:A5:BD:3F
X509v3 Authority Key Identifier:
keyid:A2:89:3A:4B:28:4A:CB:5D:8A:41:64:28:90:45:49:21:09:51:16:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ook6SyhKy12KQWQokEVJIQlRFog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/6Edmfv_1MElGOyq1y8ESjQKlvT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b487ab-5e31-4117-ada8-a5d3cb918206/1/ook6SyhKy12KQWQokEVJIQlRFog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.100.0/22
45.87.168.0/22
95.214.136.0/22
185.25.156.0/22
185.175.160.0/22
185.182.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:42:81:7e:bf:9e:f2:24:a0:18:45:54:1b:56:da:cf:a3:d8:
4c:54:17:64:ea:3f:57:2c:01:7d:95:a5:cc:c6:77:fb:cd:06:
26:f6:02:b6:f3:a9:21:11:16:64:d2:fc:98:3f:d4:39:60:d8:
d9:99:55:a6:57:55:b9:56:99:b0:1d:34:81:7b:b5:1f:b1:59:
e4:ef:40:ed:3a:7f:4f:d8:4b:00:4e:b0:28:01:ef:98:0c:50:
31:09:0f:92:bd:45:17:aa:13:29:a4:a9:e1:3d:37:62:98:68:
a4:46:72:9e:65:4c:a3:2f:ce:98:c1:4f:31:bf:9e:a0:45:86:
7b:59:69:a0:f1:f9:a8:09:b7:26:d9:7d:64:18:6b:80:1d:e1:
10:72:be:e1:09:97:e9:b0:61:51:be:0a:2f:d0:fe:9a:ed:cd:
bc:ac:c3:d7:ee:b4:09:de:7b:e4:e9:fb:be:d7:b3:c1:76:be:
e7:d5:bc:50:fe:97:05:07:08:94:a0:66:e7:f6:7b:1c:ad:f8:
a9:47:e8:ea:83:c3:3e:c2:29:bc:8e:96:05:ea:81:60:60:80:
b3:d9:fb:a6:b2:70:cd:25:54:97:4a:d9:e9:f8:d5:f5:d2:49:
52:1a:24:41:c9:19:17:49:21:3f:be:d9:47:4c:5e:db:dc:23:
e9:dc:1c:03
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYVs5jEpsiuwegqXmFytqvZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyODkzYTRiMjg0YWNiNWQ4YTQxNjQyODkwNDU0OTIxMDk1
MTE2ODgwHhcNMjMwMTAxMTAzNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODQ3NjY3ZWZmZjUzMDQ5NDYzYjJhYjVjYmMxMTI4ZDAyYTViZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGPPF9KinsSKTAMharszvRrSIFQF
FcUHbBUxyyvd6cKB4EYYqyOEwyxwY0Zgg6QSZYzDa7MRpNz/pQu75/wH5zcqhufT
3B3WSKiOxiCqonrwdZOXNVNLd2VWxs11ZiuBVM/YIYfWL2xxQyIPvSR7Djg2kqfx
ausyvJxuIry3Qt/eO2ySMwrYx2oxioaEo/YZOLn8bhrlnoTh+Sv1SDnhvMLT69pW
WC7VgBnWvOiZLxp7VehNCd0Y3btJ3iP3k7ZHITYfoEze6i09MRdctZT3z943c9Mf
/HNA1/fVOFCl24dwsV3B8HTn9Eq2uKq4STGOtV0Eu8BueVsWI01GmriK1wIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFOhHZn7/9TBJRjsqtcvBEo0Cpb0/MB8GA1UdIwQY
MBaAFKKJOksoSstdikFkKJBFSSEJURaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgt
YTVkM2NiOTE4MjA2LzEvNkVkbWZ2XzFNRWxHT3lxMXk4RVNqUUtsdlQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9iNDg3YWItNWUzMS00MTE3LWFkYTgtYTVkM2NiOTE4MjA2
LzEvb29rNlN5aEt5MTJLUVdRb2tFVkpJUWxSRm9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQCLUNkAwQC
LVeoAwQCX9aIAwQCuRmcAwQCua+gAwQCubbwMA0GCSqGSIb3DQEBCwUAA4IBAQCo
QoF+v57yJKAYRVQbVtrPo9hMVBdk6j9XLAF9laXMxnf7zQYm9gK286khERZk0vyY
P9Q5YNjZmVWmV1W5VpmwHTSBe7UfsVnk70DtOn9P2EsATrAoAe+YDFAxCQ+SvUUX
qhMppKnhPTdimGikRnKeZUyjL86YwU8xv56gRYZ7WWmg8fmoCbcm2X1kGGuAHeEQ
cr7hCZfpsGFRvgov0P6a7c28rMPX7rQJ3nvk6fu+17PBdr7n1bxQ/pcFBwiUoGbn
9nscrfipR+jqg8M+wim8jpYF6oFgYICz2fumsnDNJVSXStnp+NX10klSGiRByRkX
SSE/vtlHTF7b3CPp3BwD
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:23 2024 by rpki-client on console-fra.rpki-client.org