Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/NvQqD9evXzUQNx3q1RIdP4nYhIE.roa
File: NvQqD9evXzUQNx3q1RIdP4nYhIE.roa (raw, json)
Hash identifier: WAa5o4AN3CdsC8GSOG+KDwmMmgDecYCX00JnVVviI9E=
Subject key identifier: 36:F4:2A:0F:D7:AF:5F:35:10:37:1D:EA:D5:12:1D:3F:89:D8:84:81
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 018832B8D555959AE4CB4823AE62C87028DF
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/NvQqD9evXzUQNx3q1RIdP4nYhIE.roa
Signing time: Fri 19 May 2023 06:35:53 +0000
ROA not before: Fri 19 May 2023 06:35:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.22.0/23 maxlen: 23
217.113.18.0/23 maxlen: 23
45.133.104.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:32:b8:d5:55:95:9a:e4:cb:48:23:ae:62:c8:70:28:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: May 19 06:35:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=36f42a0fd7af5f3510371dead5121d3f89d88481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e1:ab:f3:3e:ef:20:7f:c6:ab:86:19:d7:0c:
08:b6:fd:e7:76:33:54:5d:f5:c5:06:e3:27:b6:7c:
63:54:71:26:72:0d:b2:a7:8e:8e:a9:b6:d6:6e:02:
56:a0:42:7f:cf:30:4d:ba:d1:bc:05:a1:a1:a8:64:
fc:13:24:a8:1e:00:91:fb:e7:97:83:50:c4:6c:da:
af:7b:6b:69:7e:2a:15:23:a8:9a:6c:00:9c:c0:f0:
d4:7b:f6:00:98:5b:a8:90:ca:c6:c2:9a:86:bb:f3:
42:35:2a:b6:88:8f:38:98:c3:8a:d6:17:81:44:33:
2f:f7:33:f8:d3:08:3f:67:a1:cc:78:26:23:1d:8b:
aa:b6:62:3e:cc:e9:d4:98:08:9e:fc:9a:b4:70:e8:
64:1c:e5:c6:5d:cf:bd:ac:af:42:8e:fa:62:4b:2e:
74:eb:ab:30:7a:ed:34:1d:31:dc:e2:60:41:4f:68:
fc:ba:8e:10:d3:5b:70:89:93:82:8f:a0:fc:52:52:
46:11:f8:f9:8f:bf:f2:1f:39:a9:d0:e2:1d:1c:c3:
02:52:08:c2:92:f7:38:1b:3c:d3:a2:70:a0:7f:9e:
83:3e:1f:b4:57:a5:95:95:51:c3:d6:4e:48:46:8f:
73:6a:3a:20:cc:e2:2f:42:35:9f:30:eb:79:36:21:
22:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F4:2A:0F:D7:AF:5F:35:10:37:1D:EA:D5:12:1D:3F:89:D8:84:81
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/NvQqD9evXzUQNx3q1RIdP4nYhIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.104.0/23
217.113.18.0/23
217.113.22.0/23
Signature Algorithm: sha256WithRSAEncryption
68:41:1d:28:e3:1c:7e:a1:22:d1:ab:3d:a6:0f:1d:d0:31:d7:
5d:00:2f:fb:5a:b1:8a:5f:2b:51:50:6e:e9:75:fa:07:94:df:
05:55:f6:cb:b0:e5:94:83:10:8e:ea:fb:e9:c1:11:f3:75:7e:
59:04:19:f9:2e:ae:5e:87:43:bc:da:f6:f5:10:f8:f1:0e:d3:
8f:6c:4a:e4:c7:ef:38:58:e6:06:be:c1:3b:79:90:f5:ae:50:
7f:9a:13:cd:3d:90:10:7e:00:0a:5d:17:e8:5a:b6:60:a1:98:
aa:e3:db:ba:be:0d:03:76:e3:b2:74:99:98:d3:e1:07:e2:a1:
e9:fc:8e:f0:22:57:f8:d4:4e:2f:46:f6:be:58:4e:74:cc:f6:
d2:68:86:1c:09:8c:b3:1b:59:41:5f:be:8b:34:84:f9:99:57:
18:08:73:f2:4a:4d:37:22:67:22:07:bc:40:03:d4:a4:60:cd:
78:6b:56:5a:50:cc:83:d5:28:a5:68:b2:81:71:1d:ea:a5:97:
f1:da:51:32:05:82:4b:da:e8:01:5b:88:3b:63:c8:cc:5e:ec:
79:ce:df:6e:15:9e:2f:b2:17:9c:3a:a4:c6:7e:7a:fb:38:89:
90:4e:53:e6:4a:a4:24:3e:27:7d:4c:8d:f7:03:3b:f6:7f:65:
28:fb:42:aa
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYgyuNVVlZrky0gjrmLIcCjfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjMwNTE5MDYzNTUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNmY0MmEwZmQ3YWY1ZjM1MTAzNzFkZWFkNTEyMWQzZjg5ZDg4NDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uGr8z7vIH/Gq4YZ1wwItv3ndjNU
XfXFBuMntnxjVHEmcg2yp46OqbbWbgJWoEJ/zzBNutG8BaGhqGT8EySoHgCR++eX
g1DEbNqve2tpfioVI6iabACcwPDUe/YAmFuokMrGwpqGu/NCNSq2iI84mMOK1heB
RDMv9zP40wg/Z6HMeCYjHYuqtmI+zOnUmAie/Jq0cOhkHOXGXc+9rK9CjvpiSy50
66sweu00HTHc4mBBT2j8uo4Q01twiZOCj6D8UlJGEfj5j7/yHzmp0OIdHMMCUgjC
kvc4GzzTonCgf56DPh+0V6WVlVHD1k5IRo9zajogzOIvQjWfMOt5NiEiBwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFDb0Kg/Xr181EDcd6tUSHT+J2ISBMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvTnZRcUQ5ZXZYelVRTngzcTFSSWRQNG5ZaElFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLYVoAwQB
2XESAwQB2XEWMA0GCSqGSIb3DQEBCwUAA4IBAQBoQR0o4xx+oSLRqz2mDx3QMddd
AC/7WrGKXytRUG7pdfoHlN8FVfbLsOWUgxCO6vvpwRHzdX5ZBBn5Lq5eh0O82vb1
EPjxDtOPbErkx+84WOYGvsE7eZD1rlB/mhPNPZAQfgAKXRfoWrZgoZiq49u6vg0D
duOydJmY0+EH4qHp/I7wIlf41E4vRva+WE50zPbSaIYcCYyzG1lBX76LNIT5mVcY
CHPySk03ImciB7xAA9SkYM14a1ZaUMyD1SilaLKBcR3qpZfx2lEyBYJL2ugBW4g7
Y8jMXux5zt9uFZ4vshecOqTGfnr7OImQTlPmSqQkPid9TI33Azv2f2Uo+0Kq
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:23 2023 by rpki-client on console-ams.rpki-client.org