Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/iOOSRqjF-6r__a0wlMMNSuNXdB0.roa
File: iOOSRqjF-6r__a0wlMMNSuNXdB0.roa (raw, json)
Hash identifier: M0Rrta+6euKe6aLld3z+finUJ9UQeLXWGVsC1R1oZOQ=
Subject key identifier: 88:E3:92:46:A8:C5:FB:AA:FF:FD:AD:30:94:C3:0D:4A:E3:57:74:1D
Certificate issuer: /CN=15e0c079ebbee9453adf40783340016497710e08
Certificate serial: 0185719576AFE2B3B0806A0B003539DE0A03
Authority key identifier: 15:E0:C0:79:EB:BE:E9:45:3A:DF:40:78:33:40:01:64:97:71:0E:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FeDAeeu-6UU630B4M0ABZJdxDgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/iOOSRqjF-6r__a0wlMMNSuNXdB0.roa
Signing time: Mon 02 Jan 2023 08:24:58 +0000
ROA not before: Mon 02 Jan 2023 08:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208805
IP address blocks: 45.84.164.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:95:76:af:e2:b3:b0:80:6a:0b:00:35:39:de:0a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15e0c079ebbee9453adf40783340016497710e08
Validity
Not Before: Jan 2 08:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=88e39246a8c5fbaafffdad3094c30d4ae357741d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:51:47:6c:68:55:33:e2:18:0f:3e:b9:be:9e:
41:ec:28:65:b4:1e:df:70:ba:30:dc:9d:3c:c0:e1:
bc:94:6c:47:fe:b9:94:c6:9d:00:92:9f:78:ea:dd:
df:cf:ba:bb:a9:a4:5c:8c:ed:a1:54:d3:7d:75:f7:
7e:f3:b9:d7:a7:e7:d2:91:1f:da:a7:38:92:f5:b6:
e8:48:75:a4:bf:18:dc:bd:90:ab:c7:c4:22:a9:ca:
81:07:f0:5d:68:ea:1e:71:c7:7c:04:9d:06:03:c4:
ba:6c:4e:8f:4b:13:58:8b:ac:dc:cf:1b:f0:98:42:
21:d6:df:a5:cd:e3:de:61:9b:15:cc:17:67:66:ba:
92:89:56:0a:0b:95:89:34:8c:0c:f2:5b:f1:b7:0e:
23:25:19:da:8f:c8:eb:0c:b1:91:5a:cf:d6:19:21:
2b:f9:0f:61:db:93:be:97:71:28:d7:51:2f:eb:d6:
57:74:fe:b5:86:7d:63:4c:27:b1:50:8a:67:19:07:
43:ad:fe:fc:8a:ad:ec:54:17:79:c6:d5:71:09:6d:
b0:fd:25:a5:f1:27:cd:fc:c8:f2:75:81:6e:b0:4e:
eb:2d:ea:46:2c:71:ed:0e:0d:03:01:dd:0e:01:06:
cb:7f:0c:58:3d:84:0f:90:ea:ea:9d:cc:32:57:54:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E3:92:46:A8:C5:FB:AA:FF:FD:AD:30:94:C3:0D:4A:E3:57:74:1D
X509v3 Authority Key Identifier:
keyid:15:E0:C0:79:EB:BE:E9:45:3A:DF:40:78:33:40:01:64:97:71:0E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FeDAeeu-6UU630B4M0ABZJdxDgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/iOOSRqjF-6r__a0wlMMNSuNXdB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27db7c-64b6-4361-a030-9b88abed6264/1/FeDAeeu-6UU630B4M0ABZJdxDgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.164.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:58:68:09:56:cf:92:52:a9:a3:20:10:c1:6f:0e:b2:8b:0f:
97:67:1c:64:1e:9b:a2:ed:72:1b:b4:27:1f:16:67:4d:03:5f:
ce:4b:38:70:90:a0:c7:9a:7f:3f:c1:a4:36:d8:34:b6:a9:3b:
84:b6:53:e9:50:09:53:e3:bf:e0:ea:7d:3a:83:44:ae:e6:83:
d0:92:56:44:d7:b1:b2:36:68:9a:9c:2e:26:8e:2e:64:3c:82:
36:db:b8:f3:8e:15:37:b4:fc:53:66:09:34:f5:f6:51:05:50:
f0:1d:f2:af:70:6f:66:33:9b:39:b1:ff:62:ec:f0:80:35:0c:
87:27:85:c9:7b:0d:59:b5:a3:1c:e0:9d:13:08:84:c0:f1:2a:
2b:c8:ae:5a:cc:1a:d8:07:5c:a2:bf:4c:28:f4:e0:0f:60:46:
00:f8:03:28:31:3d:44:b8:36:db:b6:3b:4f:75:ec:46:ea:6c:
a0:1e:2c:09:5f:0f:c9:23:91:76:cd:5e:89:a5:df:e1:04:6c:
2f:6c:4b:11:6a:65:47:9a:05:59:0c:1c:5a:3c:b6:23:0b:b8:
6c:04:81:ac:26:99:1f:0d:30:d3:e5:6c:2d:85:65:00:5a:b3:
4d:e0:6b:81:c0:40:07:ad:1e:c2:2e:06:6f:5d:94:d3:73:c8:
22:75:58:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxlXav4rOwgGoLADU53goDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZTBjMDc5ZWJiZWU5NDUzYWRmNDA3ODMzNDAwMTY0OTc3
MTBlMDgwHhcNMjMwMTAyMDgyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGUzOTI0NmE4YzVmYmFhZmZmZGFkMzA5NGMzMGQ0YWUzNTc3NDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVFHbGhVM+IYDz65vp5B7ChltB7f
cLow3J08wOG8lGxH/rmUxp0Akp946t3fz7q7qaRcjO2hVNN9dfd+87nXp+fSkR/a
pziS9bboSHWkvxjcvZCrx8QiqcqBB/BdaOoeccd8BJ0GA8S6bE6PSxNYi6zczxvw
mEIh1t+lzePeYZsVzBdnZrqSiVYKC5WJNIwM8lvxtw4jJRnaj8jrDLGRWs/WGSEr
+Q9h25O+l3Eo11Ev69ZXdP61hn1jTCexUIpnGQdDrf78iq3sVBd5xtVxCW2w/SWl
8SfN/MjydYFusE7rLepGLHHtDg0DAd0OAQbLfwxYPYQPkOrqncwyV1TZ1wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIjjkkaoxfuq//2tMJTDDUrjV3QdMB8GA1UdIwQY
MBaAFBXgwHnrvulFOt9AeDNAAWSXcQ4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmVEQWVldS02VVU2MzBCNE0wQUJaSmR4RGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8yN2RiN2MtNjRiNi00MzYxLWEwMzAt
OWI4OGFiZWQ2MjY0LzEvaU9PU1JxakYtNnJfX2Ewd2xNTU5TdU5YZEIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8yN2RiN2MtNjRiNi00MzYxLWEwMzAtOWI4OGFiZWQ2MjY0
LzEvRmVEQWVldS02VVU2MzBCNE0wQUJaSmR4RGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVSkMA0G
CSqGSIb3DQEBCwUAA4IBAQB6WGgJVs+SUqmjIBDBbw6yiw+XZxxkHpui7XIbtCcf
FmdNA1/OSzhwkKDHmn8/waQ22DS2qTuEtlPpUAlT47/g6n06g0Su5oPQklZE17Gy
NmianC4mji5kPII227jzjhU3tPxTZgk09fZRBVDwHfKvcG9mM5s5sf9i7PCANQyH
J4XJew1ZtaMc4J0TCITA8SoryK5azBrYB1yiv0wo9OAPYEYA+AMoMT1EuDbbtjtP
dexG6mygHiwJXw/JI5F2zV6Jpd/hBGwvbEsRamVHmgVZDBxaPLYjC7hsBIGsJpkf
DTDT5WwthWUAWrNN4GuBwEAHrR7CLgZvXZTTc8gidVgl
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:43 2024 by rpki-client on console-fra.rpki-client.org