Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/9-yRftApVQwkYrToKrRzKdxG1Y4.roa
File: 9-yRftApVQwkYrToKrRzKdxG1Y4.roa (raw, json)
Hash identifier: B4CKc2iCXauktmPjuHlpVQJtifBVTyGNezf+BKVzvtg=
Subject key identifier: F7:EC:91:7E:D0:29:55:0C:24:62:B4:E8:2A:B4:73:29:DC:46:D5:8E
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 018B75231713CC32574AE2388695AF483022
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/9-yRftApVQwkYrToKrRzKdxG1Y4.roa
Signing time: Sat 28 Oct 2023 07:15:15 +0000
ROA not before: Sat 28 Oct 2023 07:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48359
IP address blocks: 89.44.240.0/24 maxlen: 24
89.42.44.0/22 maxlen: 22
45.94.214.0/24 maxlen: 24
45.94.215.0/24 maxlen: 24
89.46.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:75:23:17:13:cc:32:57:4a:e2:38:86:95:af:48:30:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Oct 28 07:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f7ec917ed029550c2462b4e82ab47329dc46d58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:56:95:f0:19:51:15:7f:02:ea:43:01:3b:
2e:de:23:8b:81:c9:6e:37:98:6b:16:52:6f:70:82:
bc:fd:04:c4:25:3b:2f:11:3b:5f:8a:0e:17:c4:30:
6a:d2:92:8e:e5:75:4b:aa:26:4a:6f:ea:33:1d:56:
4e:3e:78:67:26:3b:64:25:71:37:79:89:dd:40:bb:
34:b6:48:fa:64:49:ed:ac:8f:a6:4f:78:cf:39:9d:
32:14:63:01:14:cb:75:97:43:f4:6d:26:ee:7b:43:
b4:72:7c:d0:2c:a9:32:51:4f:e7:cb:5c:14:03:c8:
94:c9:e2:b7:ab:31:65:d8:13:8d:17:45:48:a2:f5:
f5:2f:56:40:e1:3b:ca:67:ed:3a:53:84:51:22:b4:
3e:9f:19:dc:66:2a:68:d5:b8:ed:91:5f:ea:97:8d:
67:a5:fa:ea:f9:5d:f3:29:e9:37:f6:e2:68:f2:ca:
20:3c:21:ef:da:50:6a:51:91:91:a4:5f:3c:36:d2:
5a:3c:bf:f1:48:65:87:d7:19:49:66:36:fc:0f:13:
6b:08:46:76:34:00:4f:5a:57:bb:50:5a:e8:5d:50:
1b:d3:80:0c:3b:c4:64:45:8d:92:bf:4b:8a:94:81:
89:1a:44:62:0e:7a:fb:4f:58:bd:ae:5b:ae:ab:96:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:EC:91:7E:D0:29:55:0C:24:62:B4:E8:2A:B4:73:29:DC:46:D5:8E
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/9-yRftApVQwkYrToKrRzKdxG1Y4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.214.0/23
89.42.44.0/22
89.44.240.0/24
89.46.217.0/24
Signature Algorithm: sha256WithRSAEncryption
44:55:f4:47:5c:b7:5e:fb:a3:ba:bc:6d:a9:4f:02:00:3f:96:
cb:7e:40:28:81:02:68:81:bd:e0:70:bd:85:28:e9:30:2c:9c:
b1:9a:04:9e:bb:56:a9:f4:9b:bd:bc:67:28:45:1e:ea:1d:58:
f8:63:ee:b3:ac:4f:55:36:bc:63:8a:44:43:93:3e:7b:bc:b0:
87:69:45:df:47:0b:2e:dc:f0:fe:71:7e:26:21:eb:6b:89:93:
0c:85:93:36:e4:b4:28:31:aa:cf:ed:26:11:19:58:7b:d2:a0:
2e:bf:ad:f5:aa:45:69:1e:5c:f6:46:e4:71:a1:f5:20:44:d6:
8b:e6:e4:89:e3:64:0b:6a:83:ee:88:fb:30:f4:92:eb:8b:2c:
f5:08:c5:56:49:6b:b9:6e:9b:ec:45:2c:0b:d7:ea:b1:a5:78:
34:5a:e2:6b:2b:b5:43:15:ad:7c:ff:3c:c0:f7:ff:0e:c5:af:
6f:36:fa:9a:e5:ab:00:da:9a:c1:f2:ed:cc:b7:b1:89:59:63:
17:94:e4:e4:32:2b:ff:b8:f5:12:6f:7e:cc:0a:46:58:9b:cd:
42:26:b6:4e:09:3d:ee:84:e7:27:a1:ff:81:7d:a6:f2:a5:cc:
b4:d1:9e:d8:2b:39:b1:37:44:43:ca:4c:34:79:34:10:f4:d0:
ff:69:cf:01
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYt1IxcTzDJXSuI4hpWvSDAiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjMxMDI4MDcxNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2VjOTE3ZWQwMjk1NTBjMjQ2MmI0ZTgyYWI0NzMyOWRjNDZkNThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8xWlfAZURV/AupDATsu3iOLgclu
N5hrFlJvcIK8/QTEJTsvETtfig4XxDBq0pKO5XVLqiZKb+ozHVZOPnhnJjtkJXE3
eYndQLs0tkj6ZEntrI+mT3jPOZ0yFGMBFMt1l0P0bSbue0O0cnzQLKkyUU/ny1wU
A8iUyeK3qzFl2BONF0VIovX1L1ZA4TvKZ+06U4RRIrQ+nxncZipo1bjtkV/ql41n
pfrq+V3zKek39uJo8sogPCHv2lBqUZGRpF88NtJaPL/xSGWH1xlJZjb8DxNrCEZ2
NABPWle7UFroXVAb04AMO8RkRY2Sv0uKlIGJGkRiDnr7T1i9rluuq5aM7QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPfskX7QKVUMJGK06Cq0cyncRtWOMB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvOS15UmZ0QXBWUXdrWXJUb0tyUnpLZHhHMVk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLV7WAwQC
WSosAwQAWSzwAwQAWS7ZMA0GCSqGSIb3DQEBCwUAA4IBAQBEVfRHXLde+6O6vG2p
TwIAP5bLfkAogQJogb3gcL2FKOkwLJyxmgSeu1ap9Ju9vGcoRR7qHVj4Y+6zrE9V
NrxjikRDkz57vLCHaUXfRwsu3PD+cX4mIetriZMMhZM25LQoMarP7SYRGVh70qAu
v631qkVpHlz2RuRxofUgRNaL5uSJ42QLaoPuiPsw9JLriyz1CMVWSWu5bpvsRSwL
1+qxpXg0WuJrK7VDFa18/zzA9/8Oxa9vNvqa5asA2prB8u3Mt7GJWWMXlOTkMiv/
uPUSb37MCkZYm81CJrZOCT3uhOcnof+Bfabypcy00Z7YKzmxN0RDykw0eTQQ9ND/
ac8B
-----END CERTIFICATE-----
Generated at Tue Nov 28 10:46:27 2023 by rpki-client on console-fra.rpki-client.org