Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/1-hWB-8oTpDNZZwQGxLVXkgrbkCU.roa
File: 1-hWB-8oTpDNZZwQGxLVXkgrbkCU.roa (raw, json)
Hash identifier: eOzXA5Fr8w1jh6xL2UdDd1NL66LUxxR4mK25+S1AvoQ=
Subject key identifier: FA:15:81:FB:CA:13:A4:33:59:67:04:06:C4:B5:57:92:0A:DB:90:25
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 018B3E5CBB44F904DBE42DFC5ECF40CA8615
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/1-hWB-8oTpDNZZwQGxLVXkgrbkCU.roa
Signing time: Tue 17 Oct 2023 15:59:06 +0000
ROA not before: Tue 17 Oct 2023 15:59:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.213.174.0/24 maxlen: 24
91.213.186.0/24 maxlen: 24
45.150.197.0/24 maxlen: 24
45.83.238.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3e:5c:bb:44:f9:04:db:e4:2d:fc:5e:cf:40:ca:86:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Oct 17 15:59:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa1581fbca13a43359670406c4b557920adb9025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:48:14:a0:e2:47:d1:21:14:d5:7c:40:0e:ce:
e2:53:e6:d3:90:77:99:65:30:56:a1:86:89:85:2b:
be:51:28:71:ea:0e:25:6c:b9:1b:b3:5f:be:7d:2a:
7b:ed:0d:a9:89:26:bb:31:e5:a7:e8:5c:d4:83:8f:
bf:a0:88:e2:ef:ed:c8:66:5c:10:70:e1:ae:9a:29:
f0:d2:2c:44:d6:33:16:4c:95:bd:e5:87:08:83:1b:
7f:d7:81:44:33:4b:42:29:56:b3:8d:02:8e:98:ff:
28:b0:fd:e6:28:71:32:db:87:33:32:09:b2:f8:18:
3d:46:86:ce:8a:bd:89:3d:44:19:ab:ef:2e:ef:d3:
84:39:1f:0c:b1:54:5b:84:30:3b:54:af:f4:82:cd:
88:9f:52:f8:cf:a4:0a:7f:02:a1:ec:f9:f5:20:ed:
b3:11:a0:0f:61:5e:c1:c2:b0:ef:a8:3a:df:fc:f6:
2e:7c:35:29:c5:3f:58:9b:fb:f1:a4:cd:9a:8b:a0:
a3:1d:88:65:07:b4:ab:9d:66:15:38:d4:fe:e4:fe:
66:c7:c6:99:ac:75:23:8b:aa:84:70:8f:3e:bf:12:
b6:d6:a0:9f:2d:d6:de:ca:6d:e4:0a:96:e9:a3:e4:
46:bb:80:9d:4c:3e:8b:f3:5e:fb:46:0f:cf:91:68:
d1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:15:81:FB:CA:13:A4:33:59:67:04:06:C4:B5:57:92:0A:DB:90:25
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/1-hWB-8oTpDNZZwQGxLVXkgrbkCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.238.0/24
45.150.197.0/24
91.213.174.0/24
91.213.186.0/24
Signature Algorithm: sha256WithRSAEncryption
73:a1:d4:4b:74:a2:37:0d:29:60:08:50:de:82:f5:8f:5f:79:
ee:c5:09:4a:b3:71:4a:46:f1:0d:4d:99:d7:e2:34:d1:12:af:
0a:ef:1e:9d:f2:f6:b4:16:90:c1:1d:85:70:9d:b6:f6:65:b6:
10:a8:e5:ac:be:d4:df:b8:ac:33:e5:5c:5a:ff:4e:ef:80:07:
79:de:11:ea:78:18:52:3e:62:81:c6:51:22:a4:ef:60:26:b8:
7b:5f:86:50:c2:09:ff:f8:73:41:36:6b:77:f9:78:f9:29:c5:
16:86:e9:83:40:8e:db:09:94:88:ca:bd:1e:75:7d:12:d8:ab:
7a:05:ae:ed:55:8d:15:47:27:0d:5f:f4:2c:bd:81:8e:ad:ea:
6d:ef:4e:4b:6b:e1:13:da:7d:27:38:d8:42:d4:02:8b:cf:83:
dd:c3:25:cc:4d:6a:3d:82:d4:7a:2d:ca:6b:19:7a:ea:c8:14:
1f:9d:57:ca:d9:62:80:8a:62:1c:e9:7d:b2:c7:67:28:d0:d0:
48:00:7b:4e:e1:9e:ae:25:0a:40:cc:27:6a:1f:d4:1c:15:87:
6b:52:a4:48:5e:05:00:22:5b:d1:bf:d8:0b:3e:d4:9f:bb:f8:
f4:34:d7:7d:69:15:88:30:19:da:ab:c5:0b:1b:f9:a3:0e:bb:
7a:c7:9a:68
-----BEGIN CERTIFICATE-----
MIIFEDCCA/igAwIBAgISAYs+XLtE+QTb5C38Xs9AyoYVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjMxMDE3MTU1OTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTE1ODFmYmNhMTNhNDMzNTk2NzA0MDZjNGI1NTc5MjBhZGI5MDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEgUoOJH0SEU1XxADs7iU+bTkHeZ
ZTBWoYaJhSu+UShx6g4lbLkbs1++fSp77Q2piSa7MeWn6FzUg4+/oIji7+3IZlwQ
cOGuminw0ixE1jMWTJW95YcIgxt/14FEM0tCKVazjQKOmP8osP3mKHEy24czMgmy
+Bg9RobOir2JPUQZq+8u79OEOR8MsVRbhDA7VK/0gs2In1L4z6QKfwKh7Pn1IO2z
EaAPYV7BwrDvqDrf/PYufDUpxT9Ym/vxpM2ai6CjHYhlB7SrnWYVONT+5P5mx8aZ
rHUji6qEcI8+vxK21qCfLdbeym3kCpbpo+RGu4CdTD6L8177Rg/PkWjRDQIDAQAB
o4ICHDCCAhgwHQYDVR0OBBYEFPoVgfvKE6QzWWcEBsS1V5IK25AlMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvMS1oV0ItOG9UcEROWlp3UUd4TFZYa2dyYmtDVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzUvNTE3Njk0LWM4YTEtNDU4Yi05Y2YyLTZjN2U1Njg1ODkw
Yy8xL0gwYzRPSnl6dVpqc1Q2YlVKeS1OMTVuN3hLay5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAxBggrBgEFBQcBBwEB/wQiMCAwHgQCAAEwGAMEAC1T7gME
AC2WxQMEAFvVrgMEAFvVujANBgkqhkiG9w0BAQsFAAOCAQEAc6HUS3SiNw0pYAhQ
3oL1j1957sUJSrNxSkbxDU2Z1+I00RKvCu8enfL2tBaQwR2FcJ229mW2EKjlrL7U
37isM+VcWv9O74AHed4R6ngYUj5igcZRIqTvYCa4e1+GUMIJ//hzQTZrd/l4+SnF
Fobpg0CO2wmUiMq9HnV9EtiregWu7VWNFUcnDV/0LL2Bjq3qbe9OS2vhE9p9JzjY
QtQCi8+D3cMlzE1qPYLUei3Kaxl66sgUH51XytligIpiHOl9ssdnKNDQSAB7TuGe
riUKQMwnah/UHBWHa1KkSF4FACJb0b/YCz7Un7v49DTXfWkViDAZ2qvFCxv5ow67
eseaaA==
-----END CERTIFICATE-----
Generated at Mon Oct 23 18:07:01 2023 by rpki-client on console-ams.rpki-client.org