Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/G8YsZT7uryLHsQ9lH5Gtp7kzk4I.roa
File: G8YsZT7uryLHsQ9lH5Gtp7kzk4I.roa (raw, json)
Hash identifier: H2kAG7VToYzdvyoqiwb3X/qxYZ5X8dzeRCUEeUBLJjs=
Subject key identifier: 1B:C6:2C:65:3E:EE:AF:22:C7:B1:0F:65:1F:91:AD:A7:B9:33:93:82
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 018B0935D2209A9788F70677B793192ADC1F
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/G8YsZT7uryLHsQ9lH5Gtp7kzk4I.roa
Signing time: Sat 07 Oct 2023 08:16:43 +0000
ROA not before: Sat 07 Oct 2023 08:16:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48359
IP address blocks: 89.44.240.0/24 maxlen: 24
89.42.44.0/22 maxlen: 22
45.94.214.0/24 maxlen: 24
45.94.215.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:09:35:d2:20:9a:97:88:f7:06:77:b7:93:19:2a:dc:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Oct 7 08:16:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1bc62c653eeeaf22c7b10f651f91ada7b9339382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:d8:49:64:9b:94:15:55:fd:3c:75:1f:6e:
36:8b:30:56:e6:89:e7:e0:a9:f3:ca:3d:05:62:39:
94:3f:e4:29:df:25:35:85:97:52:e2:dd:3a:0a:de:
80:21:ad:7e:ef:cb:6c:f1:a5:99:d5:e3:72:fb:e9:
f9:31:9c:cc:ef:6e:1d:67:6b:92:a1:03:82:78:6f:
d5:fe:8d:e4:ce:09:67:30:89:fe:2c:f1:c7:67:d9:
1e:b3:66:1b:59:24:ef:26:48:27:26:b7:06:c4:bf:
8b:02:3d:a2:0b:cc:9a:6f:db:34:c7:55:3d:4f:6d:
99:16:4a:5e:24:8a:6d:8c:d9:46:26:04:57:80:ee:
6d:63:38:c6:64:68:6c:93:ff:37:d1:9f:b7:5e:82:
07:44:a4:ae:fe:08:0b:70:fa:31:a0:09:97:28:ae:
a6:a3:e5:07:89:38:0e:af:04:8f:c7:66:c6:60:85:
f8:3f:da:0a:fc:c9:89:a1:fb:77:dd:42:68:dc:db:
fb:d5:43:f2:bd:1f:c2:1b:a5:d2:f8:3a:c5:66:fc:
a9:4c:92:25:73:83:86:0d:9e:f9:8f:67:36:91:f1:
06:48:39:64:44:5b:87:a2:d5:05:7b:93:99:14:39:
29:c4:20:11:f2:22:58:fe:f5:e4:87:02:a0:88:b9:
09:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C6:2C:65:3E:EE:AF:22:C7:B1:0F:65:1F:91:AD:A7:B9:33:93:82
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/G8YsZT7uryLHsQ9lH5Gtp7kzk4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.214.0/23
89.42.44.0/22
89.44.240.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:cb:7e:ba:73:02:51:e3:82:90:f1:b5:f9:eb:e4:0e:fd:1e:
fe:54:50:02:2a:0f:8b:eb:f5:0a:6c:5a:11:fe:32:cf:97:f2:
55:9b:00:8d:01:b2:82:97:ea:30:e4:58:03:3d:19:1d:1c:be:
a6:a2:56:84:db:45:33:bb:34:49:82:c5:29:24:22:92:c5:39:
fc:f2:75:43:b2:f5:a3:ad:4a:00:6c:af:2a:bb:c4:a2:99:bb:
30:ef:05:9a:25:00:60:a3:90:7b:35:24:f9:24:67:e2:ce:9c:
fb:3d:7d:3e:98:0f:4e:8d:c3:f7:a8:56:07:ab:11:f3:60:8f:
c1:df:2e:c2:4d:69:6b:2e:a5:76:58:b6:1c:a6:a7:c2:43:52:
09:eb:8a:d0:dd:b1:d7:cf:4b:bf:df:92:0d:a4:ba:cd:ed:44:
d9:da:26:dc:c4:3a:77:d3:0d:64:0b:71:57:3a:64:c3:a2:a5:
eb:dd:13:76:d9:c2:a2:87:7c:cf:3a:12:b5:b8:7e:4f:2f:2b:
90:67:6a:fe:f2:3f:59:b8:cc:8a:20:ae:a7:2c:83:e0:5b:1d:
d8:20:d8:cd:82:27:12:9c:c1:f7:3a:75:44:3d:ce:e0:69:4e:
ab:17:58:86:32:29:22:f3:6f:92:45:05:be:81:af:90:da:0d:
93:25:38:9d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYsJNdIgmpeI9wZ3t5MZKtwfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjMxMDA3MDgxNjQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmM2MmM2NTNlZWVhZjIyYzdiMTBmNjUxZjkxYWRhN2I5MzM5MzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzvYSWSblBVV/Tx1H242izBW5onn
4Knzyj0FYjmUP+Qp3yU1hZdS4t06Ct6AIa1+78ts8aWZ1eNy++n5MZzM724dZ2uS
oQOCeG/V/o3kzglnMIn+LPHHZ9kes2YbWSTvJkgnJrcGxL+LAj2iC8yab9s0x1U9
T22ZFkpeJIptjNlGJgRXgO5tYzjGZGhsk/830Z+3XoIHRKSu/ggLcPoxoAmXKK6m
o+UHiTgOrwSPx2bGYIX4P9oK/MmJoft33UJo3Nv71UPyvR/CG6XS+DrFZvypTJIl
c4OGDZ75j2c2kfEGSDlkRFuHotUFe5OZFDkpxCAR8iJY/vXkhwKgiLkJQQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBvGLGU+7q8ix7EPZR+Rrae5M5OCMB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvRzhZc1pUN3VyeUxIc1E5bEg1R3RwN2t6azRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLV7WAwQC
WSosAwQAWSzwMA0GCSqGSIb3DQEBCwUAA4IBAQB9y366cwJR44KQ8bX56+QO/R7+
VFACKg+L6/UKbFoR/jLPl/JVmwCNAbKCl+ow5FgDPRkdHL6molaE20UzuzRJgsUp
JCKSxTn88nVDsvWjrUoAbK8qu8Simbsw7wWaJQBgo5B7NST5JGfizpz7PX0+mA9O
jcP3qFYHqxHzYI/B3y7CTWlrLqV2WLYcpqfCQ1IJ64rQ3bHXz0u/35INpLrN7UTZ
2ibcxDp30w1kC3FXOmTDoqXr3RN22cKih3zPOhK1uH5PLyuQZ2r+8j9ZuMyKIK6n
LIPgWx3YINjNgicSnMH3OnVEPc7gaU6rF1iGMiki82+SRQW+ga+Q2g2TJTid
-----END CERTIFICATE-----
Generated at Tue Oct 10 12:03:21 2023 by rpki-client on console-ams.rpki-client.org