Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/viWcMvzByT2TNslaFMkpt9S8YFE.roa
File: viWcMvzByT2TNslaFMkpt9S8YFE.roa (raw, json)
Hash identifier: 50DLrlwKA21JU7rtUOedgDsYEpWFchMjz+81I+GhR0s=
Subject key identifier: BE:25:9C:32:FC:C1:C9:3D:93:36:C9:5A:14:C9:29:B7:D4:BC:60:51
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 018A119DBC31937AD20AA6C23BD9A9F6ABB2
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/viWcMvzByT2TNslaFMkpt9S8YFE.roa
Signing time: Sun 20 Aug 2023 06:24:24 +0000
ROA not before: Sun 20 Aug 2023 06:24:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 185.80.196.0/24 maxlen: 24
45.146.241.0/24 maxlen: 24
82.115.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:11:9d:bc:31:93:7a:d2:0a:a6:c2:3b:d9:a9:f6:ab:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Aug 20 06:24:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=be259c32fcc1c93d9336c95a14c929b7d4bc6051
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:af:a7:5f:ef:d0:78:cf:c8:dd:f5:5f:37:
06:10:3a:25:02:d2:c3:46:9f:e5:0f:28:c4:7b:eb:
c5:e1:37:a4:3d:c4:38:ab:69:62:99:f4:98:2d:c2:
8f:44:62:36:dd:4e:b0:8c:80:7b:20:71:12:62:c6:
dd:64:a6:da:60:f1:36:84:cb:a7:c4:76:52:ac:20:
89:46:68:fb:2d:ab:90:3c:f2:92:14:43:07:53:b8:
3b:55:ef:fb:c4:f4:46:eb:57:80:ea:98:fd:f4:c6:
bb:75:ca:30:d7:71:e3:07:a6:21:5a:10:1b:82:9f:
06:b1:e3:43:e2:fc:de:65:8a:b9:8d:ea:24:da:6b:
5c:a7:53:8f:72:d0:1b:6a:98:a0:8f:d6:dd:2a:8b:
89:c2:bd:91:62:08:ae:48:ea:20:a0:69:50:c9:52:
cc:eb:11:ca:48:dd:b5:a5:a7:ad:c2:b4:2f:2a:ac:
fc:02:9b:27:39:96:8f:d9:1c:c2:b2:af:18:ec:61:
47:3f:bf:59:64:53:e4:82:94:3a:4d:f7:18:c7:3e:
4d:78:86:60:56:d2:6c:36:4a:b8:70:a9:3e:7d:e0:
39:47:3c:ec:d4:80:fa:68:61:5a:da:bd:8d:eb:8d:
90:7e:37:21:8d:9e:61:67:a7:45:78:10:ed:c2:a3:
7a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:25:9C:32:FC:C1:C9:3D:93:36:C9:5A:14:C9:29:B7:D4:BC:60:51
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/viWcMvzByT2TNslaFMkpt9S8YFE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.241.0/24
82.115.13.0/24
185.80.196.0/24
Signature Algorithm: sha256WithRSAEncryption
61:83:eb:60:c4:a4:c2:bf:fd:77:90:66:7a:78:b9:85:6e:42:
a1:7a:4b:7c:aa:32:d3:14:a9:6f:d4:3c:b3:d6:fd:59:73:54:
1a:df:2b:6b:24:e0:c4:c7:6b:ac:25:3b:47:e6:dc:6c:3c:6f:
0f:5a:7e:24:6d:5e:5e:2e:fe:ca:cc:11:bf:c0:6b:8c:99:78:
17:28:81:32:4b:da:eb:ab:24:d6:ad:5b:4d:dc:2e:a0:3c:26:
de:10:ca:ef:01:9b:76:d8:ac:fb:53:f9:8a:96:64:24:48:d8:
fc:d6:3e:5e:3b:29:87:b6:3a:bf:e3:ae:a6:e9:7d:ab:92:b7:
d5:ae:8b:d4:b7:f8:6f:d7:ed:3f:d1:d4:60:1d:fb:8f:9a:3a:
43:f7:d0:45:59:f7:82:ef:5f:46:57:7f:36:5b:ad:a4:26:d5:
64:04:c2:9a:99:c1:77:2f:e8:fc:93:9f:43:07:0d:5b:05:e3:
af:59:e6:82:ca:d0:7f:8a:23:ec:54:8b:24:19:5f:b0:22:e6:
c8:2f:42:f1:7a:44:36:9f:d6:10:43:88:a3:66:cf:9c:f4:4e:
d1:68:2c:d4:1f:2f:27:76:c8:c6:d5:5d:5e:83:ea:b7:1e:be:
5d:53:8e:e0:be:b0:57:34:c7:e0:b1:c4:24:cc:4b:81:03:e6:
84:9f:01:fd
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYoRnbwxk3rSCqbCO9mp9quyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjMwODIwMDYyNDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTI1OWMzMmZjYzFjOTNkOTMzNmM5NWExNGM5MjliN2Q0YmM2MDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnb2vp1/v0HjPyN31XzcGEDolAtLD
Rp/lDyjEe+vF4TekPcQ4q2limfSYLcKPRGI23U6wjIB7IHESYsbdZKbaYPE2hMun
xHZSrCCJRmj7LauQPPKSFEMHU7g7Ve/7xPRG61eA6pj99Ma7dcow13HjB6YhWhAb
gp8GseND4vzeZYq5jeok2mtcp1OPctAbapigj9bdKouJwr2RYgiuSOogoGlQyVLM
6xHKSN21paetwrQvKqz8ApsnOZaP2RzCsq8Y7GFHP79ZZFPkgpQ6TfcYxz5NeIZg
VtJsNkq4cKk+feA5Rzzs1ID6aGFa2r2N642QfjchjZ5hZ6dFeBDtwqN6/QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFL4lnDL8wck9kzbJWhTJKbfUvGBRMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvdmlXY012ekJ5VDJUTnNsYUZNa3B0OVM4WUZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZLxAwQA
UnMNAwQAuVDEMA0GCSqGSIb3DQEBCwUAA4IBAQBhg+tgxKTCv/13kGZ6eLmFbkKh
ekt8qjLTFKlv1Dyz1v1Zc1Qa3ytrJODEx2usJTtH5txsPG8PWn4kbV5eLv7KzBG/
wGuMmXgXKIEyS9rrqyTWrVtN3C6gPCbeEMrvAZt22Kz7U/mKlmQkSNj81j5eOymH
tjq/466m6X2rkrfVrovUt/hv1+0/0dRgHfuPmjpD99BFWfeC719GV382W62kJtVk
BMKamcF3L+j8k59DBw1bBeOvWeaCytB/iiPsVIskGV+wIubIL0LxekQ2n9YQQ4ij
Zs+c9E7RaCzUHy8ndsjG1V1eg+q3Hr5dU47gvrBXNMfgscQkzEuBA+aEnwH9
-----END CERTIFICATE-----
Generated at Mon Oct 30 12:36:33 2023 by rpki-client on console-ams.rpki-client.org