Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/ijbtRjVBUFAFCO7vPx16XBgMA_E.roa
File: ijbtRjVBUFAFCO7vPx16XBgMA_E.roa (raw, json)
Hash identifier: EDDoUXAhCsFiMC6b4RLG/MD9i8oy80yyYfpr1fwNsZc=
Subject key identifier: 8A:36:ED:46:35:41:50:50:05:08:EE:EF:3F:1D:7A:5C:18:0C:03:F1
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 0185809B5551A416B0BF85110F56D5C5D1AC
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/ijbtRjVBUFAFCO7vPx16XBgMA_E.roa
Signing time: Thu 05 Jan 2023 06:25:41 +0000
ROA not before: Thu 05 Jan 2023 06:25:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.24.0/21 maxlen: 24
217.113.22.0/23 maxlen: 23
217.113.18.0/23 maxlen: 23
45.133.104.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:80:9b:55:51:a4:16:b0:bf:85:11:0f:56:d5:c5:d1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: Jan 5 06:25:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8a36ed46354150500508eeef3f1d7a5c180c03f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:3c:ab:18:e4:0f:c7:bb:31:db:ee:7d:4e:b0:
9a:b7:cc:70:b2:0c:f5:10:18:35:99:c1:ea:b2:35:
28:23:e5:74:15:d2:58:ae:c5:19:4f:c3:77:77:ca:
b2:21:e9:13:f2:e9:5c:13:7c:57:18:48:be:b3:51:
e2:44:83:92:a7:2b:d6:85:05:fe:5f:21:47:f8:50:
2d:38:ed:fb:bd:42:5d:bf:29:23:07:c4:26:88:ee:
bc:c1:93:a2:63:77:c8:43:c8:f4:d4:5b:3a:6f:9d:
6b:a4:19:48:1c:cb:a8:6e:11:58:02:ae:fe:58:d5:
c8:48:18:5d:cb:03:a6:2f:61:c2:f3:c3:0e:4f:e2:
5b:e8:af:b0:cd:fc:47:c1:e3:05:74:0a:cd:a0:20:
86:30:4c:d0:a3:cb:e1:e4:25:19:80:a1:5f:31:e8:
c6:c8:dc:01:93:68:c1:97:c2:92:e2:63:c6:05:e0:
49:5e:d1:c5:f9:ef:09:16:12:d6:04:f0:f4:84:d7:
87:b7:73:63:a9:94:34:09:3e:b9:06:b7:b4:2e:a7:
23:f1:1c:f6:57:6d:89:93:eb:22:8a:57:72:6b:3f:
87:67:eb:d1:c7:94:7e:33:93:93:5b:8d:df:d8:5b:
69:b9:29:fb:d3:fc:e2:05:ad:f7:1f:b1:43:9c:40:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:36:ED:46:35:41:50:50:05:08:EE:EF:3F:1D:7A:5C:18:0C:03:F1
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/ijbtRjVBUFAFCO7vPx16XBgMA_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.104.0/22
217.113.18.0/23
217.113.22.0-217.113.31.255
Signature Algorithm: sha256WithRSAEncryption
20:b5:82:e8:6d:20:b1:ca:48:db:1c:b3:42:a5:50:d3:b2:f8:
3f:3b:e7:3c:c0:56:ba:bc:f3:4e:69:a5:40:8f:75:84:df:17:
86:c8:a5:8b:fa:18:e0:88:51:13:d3:22:c7:51:14:f9:5d:80:
91:69:55:46:32:61:6c:6c:d7:e3:46:32:c7:05:65:41:9b:49:
e7:77:9c:d6:60:6f:58:89:27:97:80:61:68:65:ee:c3:46:b7:
d2:51:e9:47:28:6c:41:ba:7a:6b:5f:8a:79:39:54:34:36:d8:
6e:c0:17:bd:2b:24:bc:30:12:3b:24:37:c8:a4:2f:2a:4f:32:
dd:de:97:dd:47:0a:e3:d4:ea:67:bf:17:f2:d9:ea:d4:35:51:
d9:15:79:30:bd:c3:b1:3f:f9:1e:a9:68:e4:a1:5b:17:2b:5f:
95:77:82:88:2b:67:f4:a5:6f:00:90:e2:cb:f0:e2:5e:25:37:
0a:1b:07:23:42:22:00:d0:25:0e:6c:ab:28:cc:b7:18:9f:b8:
f7:5b:9d:7d:37:dd:9e:5a:c6:37:56:cc:ba:b8:10:33:9d:bf:
ac:36:76:92:b5:32:9d:64:6b:f3:25:2c:53:12:c1:7c:5a:0e:
2f:26:5f:f8:69:b5:cd:30:19:93:5b:c2:c8:bc:ac:3d:4c:67:
d0:14:f9:1e
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYWAm1VRpBawv4URD1bVxdGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjMwMTA1MDYyNTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTM2ZWQ0NjM1NDE1MDUwMDUwOGVlZWYzZjFkN2E1YzE4MGMwM2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjyrGOQPx7sx2+59TrCat8xwsgz1
EBg1mcHqsjUoI+V0FdJYrsUZT8N3d8qyIekT8ulcE3xXGEi+s1HiRIOSpyvWhQX+
XyFH+FAtOO37vUJdvykjB8QmiO68wZOiY3fIQ8j01Fs6b51rpBlIHMuobhFYAq7+
WNXISBhdywOmL2HC88MOT+Jb6K+wzfxHweMFdArNoCCGMEzQo8vh5CUZgKFfMejG
yNwBk2jBl8KS4mPGBeBJXtHF+e8JFhLWBPD0hNeHt3NjqZQ0CT65Bre0Lqcj8Rz2
V22Jk+siildyaz+HZ+vRx5R+M5OTW43f2FtpuSn70/ziBa33H7FDnEBf7wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFIo27UY1QVBQBQju7z8delwYDAPxMB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvaWpidFJqVkJVRkFGQ083dlB4MTZYQmdNQV9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCLYVoAwQB
2XESMAwDBAHZcRYDBAXZcQAwDQYJKoZIhvcNAQELBQADggEBACC1guhtILHKSNsc
s0KlUNOy+D875zzAVrq8805ppUCPdYTfF4bIpYv6GOCIURPTIsdRFPldgJFpVUYy
YWxs1+NGMscFZUGbSed3nNZgb1iJJ5eAYWhl7sNGt9JR6UcobEG6emtfink5VDQ2
2G7AF70rJLwwEjskN8ikLypPMt3el91HCuPU6me/F/LZ6tQ1UdkVeTC9w7E/+R6p
aOShWxcrX5V3gogrZ/SlbwCQ4svw4l4lNwobByNCIgDQJQ5sqyjMtxifuPdbnX03
3Z5axjdWzLq4EDOdv6w2dpK1Mp1ka/MlLFMSwXxaDi8mX/hptc0wGZNbwsi8rD1M
Z9AU+R4=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:42 2023 by rpki-client on console-fra.rpki-client.org