Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/8Fsh6Z7rHXzzyaoRST7VzGIAERM.roa
File: 8Fsh6Z7rHXzzyaoRST7VzGIAERM.roa (raw, json)
Hash identifier: zYGogSXVXf1RdvTZAlKXdGXkx+M6Ci87RCoukIC48x8=
Subject key identifier: F0:5B:21:E9:9E:EB:1D:7C:F3:C9:AA:11:49:3E:D5:CC:62:00:11:13
Certificate issuer: /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial: 01856F42CF71497751386D5E05305F8FBA22
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/8Fsh6Z7rHXzzyaoRST7VzGIAERM.roa
Signing time: Sun 01 Jan 2023 21:35:27 +0000
ROA not before: Sun 01 Jan 2023 21:35:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 45.91.116.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:cf:71:49:77:51:38:6d:5e:05:30:5f:8f:ba:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Validity
Not Before: Jan 1 21:35:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f05b21e99eeb1d7cf3c9aa11493ed5cc62001113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c2:eb:dc:cd:94:33:be:f3:34:d4:a2:c8:86:
f4:d3:bb:8d:32:a5:e0:03:14:5c:8b:e4:0d:20:36:
f0:c6:d2:d6:81:94:34:e6:aa:3e:e8:17:38:8d:5e:
c9:be:32:79:13:63:71:23:66:71:12:05:f1:51:4f:
b8:ea:b4:08:65:cf:8b:c2:45:f0:09:d9:b7:4e:be:
e9:62:fe:f9:de:55:79:b7:1b:ca:7b:94:90:33:3f:
50:77:7c:3f:85:d9:13:f2:7c:81:07:0a:b3:5c:75:
d0:ff:b0:4f:8b:34:c3:d1:0e:08:e7:22:de:04:52:
61:17:b5:d0:0f:59:5f:00:b5:12:d3:3b:5a:d8:54:
a8:41:90:24:8e:39:76:98:cf:9f:d8:4b:99:cf:f5:
6c:ac:b2:64:90:7a:28:a9:a1:f5:a1:d8:25:aa:86:
97:42:76:41:8d:39:0d:b1:f0:5c:4a:2c:9f:ea:e9:
1d:d2:f3:85:83:82:07:69:1e:e3:08:b7:4a:19:af:
6b:be:48:24:ce:03:03:08:23:5d:3a:14:31:15:5b:
d6:d6:50:46:f3:90:e6:bd:c8:a6:90:96:ae:4a:a7:
ae:f2:56:d8:5e:18:d5:52:19:73:c9:8b:2a:54:35:
21:63:72:0f:ef:55:88:a8:ca:7e:b3:47:89:22:ba:
63:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5B:21:E9:9E:EB:1D:7C:F3:C9:AA:11:49:3E:D5:CC:62:00:11:13
X509v3 Authority Key Identifier:
keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/8Fsh6Z7rHXzzyaoRST7VzGIAERM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.116.0/24
Signature Algorithm: sha256WithRSAEncryption
29:2f:32:96:89:e1:4b:a6:60:47:f1:b0:9c:9d:d0:bf:d5:88:
fd:cd:ce:dc:b1:cf:cf:c7:96:24:f1:b9:a4:2d:bd:77:f2:c8:
71:8e:87:79:df:cc:b4:81:50:6d:ff:21:92:a2:9e:7a:cf:e0:
7f:fe:3e:2b:3f:b7:43:f3:ce:37:9f:fa:f1:0e:5d:ea:10:85:
7e:e8:0d:78:a7:94:28:dc:49:c4:49:39:d0:ce:47:18:02:76:
b1:cc:a5:e5:3e:81:36:f1:e9:91:af:b9:4f:6e:d7:88:70:4c:
85:8c:94:85:32:09:1b:34:db:0d:07:35:b7:04:c7:a4:15:89:
ac:86:05:11:4d:e5:0e:ad:d6:81:47:8c:09:c4:8d:61:e6:40:
cc:11:c4:08:7f:81:5a:e8:09:39:17:7a:ec:40:99:08:da:54:
39:d7:e8:e3:0a:18:7a:3e:22:6d:46:86:b0:e8:b7:de:17:cf:
0a:b1:24:d2:16:36:ca:55:08:a0:24:75:83:66:c8:df:41:1b:
ab:40:34:bf:ad:20:8e:cd:9a:6f:86:40:f1:f1:32:b5:cb:b8:
e7:c2:5f:1e:5f:57:fa:9a:1d:cb:29:de:d0:99:b2:a4:f1:c6:
60:96:51:ac:29:06:c8:78:72:d2:0a:64:b0:16:71:b9:5f:a1:
c6:59:4e:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvQs9xSXdROG1eBTBfj7oiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMWMxMTY1OGQyMDQxZWFmMjUwMmZlNTQwOGVkNDkzYmJk
NGYzMTgwHhcNMjMwMTAxMjEzNTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDViMjFlOTllZWIxZDdjZjNjOWFhMTE0OTNlZDVjYzYyMDAxMTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8Lr3M2UM77zNNSiyIb007uNMqXg
AxRci+QNIDbwxtLWgZQ05qo+6Bc4jV7JvjJ5E2NxI2ZxEgXxUU+46rQIZc+LwkXw
Cdm3Tr7pYv753lV5txvKe5SQMz9Qd3w/hdkT8nyBBwqzXHXQ/7BPizTD0Q4I5yLe
BFJhF7XQD1lfALUS0zta2FSoQZAkjjl2mM+f2EuZz/VsrLJkkHooqaH1odglqoaX
QnZBjTkNsfBcSiyf6ukd0vOFg4IHaR7jCLdKGa9rvkgkzgMDCCNdOhQxFVvW1lBG
85DmvcimkJauSqeu8lbYXhjVUhlzyYsqVDUhY3IP71WIqMp+s0eJIrpjnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPBbIeme6x1888mqEUk+1cxiABETMB8GA1UdIwQY
MBaAFI4cEWWNIEHq8lAv5UCO1JO71PMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjIt
NjMzNDhjZGJmMDI0LzEvOEZzaDZaN3JIWHp6eWFvUlNUN1Z6R0lBRVJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83MGJmOGItZDhjNC00MGMzLTkwMjItNjMzNDhjZGJmMDI0
LzEvamh3UlpZMGdRZXJ5VUNfbFFJN1VrN3ZVOHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVt0MA0G
CSqGSIb3DQEBCwUAA4IBAQApLzKWieFLpmBH8bCcndC/1Yj9zc7csc/Px5Yk8bmk
Lb138shxjod538y0gVBt/yGSop56z+B//j4rP7dD8843n/rxDl3qEIV+6A14p5Qo
3EnESTnQzkcYAnaxzKXlPoE28emRr7lPbteIcEyFjJSFMgkbNNsNBzW3BMekFYms
hgURTeUOrdaBR4wJxI1h5kDMEcQIf4Fa6Ak5F3rsQJkI2lQ51+jjChh6PiJtRoaw
6LfeF88KsSTSFjbKVQigJHWDZsjfQRurQDS/rSCOzZpvhkDx8TK1y7jnwl8eX1f6
mh3LKd7QmbKk8cZgllGsKQbIeHLSCmSwFnG5X6HGWU4d
-----END CERTIFICATE-----
Generated at Wed Dec 6 14:00:21 2023 by rpki-client on console-fra.rpki-client.org