Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/B_9MGOaO6isuDlKbQXL4jaKR-6M.roa
File: B_9MGOaO6isuDlKbQXL4jaKR-6M.roa (raw, json)
Hash identifier: gyOXrK5D6aO3SgcUDUP6m/23sBiU2pma/Qdybr6FaLA=
Subject key identifier: 07:FF:4C:18:E6:8E:EA:2B:2E:0E:52:9B:41:72:F8:8D:A2:91:FB:A3
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 018992ED382D4E562AC0DBF04FB22D981C42
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/B_9MGOaO6isuDlKbQXL4jaKR-6M.roa
Signing time: Wed 26 Jul 2023 15:59:27 +0000
ROA not before: Wed 26 Jul 2023 15:59:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48359
IP address blocks: 185.3.200.0/24 maxlen: 24
89.42.44.0/22 maxlen: 22
45.94.214.0/24 maxlen: 24
89.46.217.0/24 maxlen: 24
188.212.96.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:92:ed:38:2d:4e:56:2a:c0:db:f0:4f:b2:2d:98:1c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Jul 26 15:59:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=07ff4c18e68eea2b2e0e529b4172f88da291fba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e0:d1:da:73:de:58:09:c7:86:a4:2e:cb:7b:
27:58:bc:db:91:c3:9f:35:74:64:d9:b5:20:e0:63:
6c:d7:ca:fc:06:1b:29:18:4b:72:b6:12:a2:57:eb:
ee:9b:ff:a5:4c:b7:ac:fb:d0:72:18:34:ef:f0:58:
1c:c1:ec:82:d3:7b:81:ba:b5:71:4a:f5:3a:e6:8e:
a6:9a:50:19:a0:b3:75:0b:46:0d:d5:94:a2:8f:63:
f6:60:ad:26:75:01:4b:89:0d:d9:f8:4c:5d:84:41:
06:ca:a7:22:34:f1:bb:9c:f3:39:f7:59:b9:98:db:
78:b3:83:62:06:31:04:e4:80:3e:44:30:71:d4:4d:
b3:3c:22:7d:6f:3b:00:e0:aa:e3:58:a0:c8:24:04:
09:c5:7b:40:fa:23:f6:70:7d:14:0e:65:3a:7a:5a:
2f:90:ba:fd:37:d0:51:58:89:1b:83:7f:22:fa:5e:
e1:5f:01:73:8e:dd:7a:70:ff:d2:be:04:30:4b:cf:
15:b6:4e:64:d0:9d:82:4e:0f:bf:0b:ee:fe:71:7a:
00:8b:6d:63:88:e9:3b:b2:b3:53:38:14:72:a6:b6:
da:f4:2a:eb:13:8d:8a:74:61:49:09:88:65:a6:e4:
14:0a:03:ef:f0:7a:56:93:6d:da:0b:67:22:9e:8d:
11:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:FF:4C:18:E6:8E:EA:2B:2E:0E:52:9B:41:72:F8:8D:A2:91:FB:A3
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/B_9MGOaO6isuDlKbQXL4jaKR-6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.214.0/24
89.42.44.0/22
89.46.217.0/24
185.3.200.0/24
188.212.96.0/24
Signature Algorithm: sha256WithRSAEncryption
71:39:11:71:05:d3:3a:02:64:5d:0c:9c:5a:57:ec:f9:62:44:
2f:06:c4:28:53:24:22:3a:19:6a:cb:5d:e5:97:5d:64:bb:37:
9d:b0:5f:b4:10:dc:83:98:9b:0d:80:fa:32:23:41:a6:6e:e6:
7f:1f:54:fa:30:5c:1b:8f:7d:84:4a:5a:28:7e:be:d1:9b:f5:
05:8d:12:bd:49:e1:7e:6f:1c:18:28:af:5a:1f:80:97:96:82:
06:ba:70:2a:aa:c1:c1:f6:30:bb:bf:e1:b9:c8:b9:7c:66:1e:
b4:1a:7d:22:08:3c:6d:34:82:2a:71:1e:0b:07:8a:45:ce:1e:
a9:90:3f:99:6c:13:c7:f5:7e:5b:fd:3a:38:65:05:81:74:aa:
69:cb:c0:b7:35:0d:7b:45:e1:60:8e:e8:a6:76:b6:e2:7f:76:
ac:1d:9b:a2:93:ff:fc:91:0a:06:c7:ef:c8:84:16:87:18:6d:
5e:f8:03:ee:9f:c9:76:60:1a:71:f9:cc:19:1e:37:88:50:fd:
5b:ce:94:07:90:10:37:be:9c:31:90:68:a1:d4:7f:1b:62:dc:
e8:ee:1e:e6:d8:2c:34:ac:00:59:c9:d9:1c:66:f9:62:1d:f7:
60:2d:49:6e:00:38:8f:39:70:86:17:63:46:d6:37:06:1c:97:
8e:c4:48:bd
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYmS7TgtTlYqwNvwT7ItmBxCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjMwNzI2MTU1OTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwN2ZmNGMxOGU2OGVlYTJiMmUwZTUyOWI0MTcyZjg4ZGEyOTFmYmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouDR2nPeWAnHhqQuy3snWLzbkcOf
NXRk2bUg4GNs18r8BhspGEtythKiV+vum/+lTLes+9ByGDTv8FgcweyC03uBurVx
SvU65o6mmlAZoLN1C0YN1ZSij2P2YK0mdQFLiQ3Z+ExdhEEGyqciNPG7nPM591m5
mNt4s4NiBjEE5IA+RDBx1E2zPCJ9bzsA4KrjWKDIJAQJxXtA+iP2cH0UDmU6elov
kLr9N9BRWIkbg38i+l7hXwFzjt16cP/SvgQwS88Vtk5k0J2CTg+/C+7+cXoAi21j
iOk7srNTOBRyprba9CrrE42KdGFJCYhlpuQUCgPv8HpWk23aC2cino0RCQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFAf/TBjmjuorLg5Sm0Fy+I2ikfujMB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvQl85TUdPYU82aXN1RGxLYlFYTDRqYUtSLTZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALV7WAwQC
WSosAwQAWS7ZAwQAuQPIAwQAvNRgMA0GCSqGSIb3DQEBCwUAA4IBAQBxORFxBdM6
AmRdDJxaV+z5YkQvBsQoUyQiOhlqy13ll11kuzedsF+0ENyDmJsNgPoyI0GmbuZ/
H1T6MFwbj32ESloofr7Rm/UFjRK9SeF+bxwYKK9aH4CXloIGunAqqsHB9jC7v+G5
yLl8Zh60Gn0iCDxtNIIqcR4LB4pFzh6pkD+ZbBPH9X5b/To4ZQWBdKppy8C3NQ17
ReFgjuimdrbif3asHZuik//8kQoGx+/IhBaHGG1e+APun8l2YBpx+cwZHjeIUP1b
zpQHkBA3vpwxkGih1H8bYtzo7h7m2Cw0rABZydkcZvliHfdgLUluADiPOXCGF2NG
1jcGHJeOxEi9
-----END CERTIFICATE-----
Generated at Sat Aug 5 08:27:24 2023 by rpki-client on console-ams.rpki-client.org