Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/4S19xPuU-c1GdhXLe6BIXBY0xWg.roa
File: 4S19xPuU-c1GdhXLe6BIXBY0xWg.roa (raw, json)
Hash identifier: q3DjTkvgbeD9Xy6kOtid9MY5WiLxzMDZyTbinotMXD0=
Subject key identifier: E1:2D:7D:C4:FB:94:F9:CD:46:76:15:CB:7B:A0:48:5C:16:34:C5:68
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 018A6574CCB3CEB0CE29F9EF31CFB8F587E2
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/4S19xPuU-c1GdhXLe6BIXBY0xWg.roa
Signing time: Tue 05 Sep 2023 13:07:47 +0000
ROA not before: Tue 05 Sep 2023 13:07:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.213.174.0/24 maxlen: 24
91.213.186.0/24 maxlen: 24
91.208.73.0/24 maxlen: 24
194.156.151.0/24 maxlen: 24
91.208.104.0/24 maxlen: 24
45.150.197.0/24 maxlen: 24
45.150.198.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:65:74:cc:b3:ce:b0:ce:29:f9:ef:31:cf:b8:f5:87:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Sep 5 13:07:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e12d7dc4fb94f9cd467615cb7ba0485c1634c568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:56:1c:3d:56:b3:5e:9a:eb:82:13:47:a4:b6:
2c:b2:71:2b:8e:bb:81:ad:94:00:3c:a6:e7:6f:77:
30:e2:97:a5:87:ee:b1:24:74:81:52:5f:f8:b6:bd:
ca:af:a7:e1:36:8a:0b:b9:d4:ec:c0:7d:ac:28:bd:
a6:f9:51:06:0c:9e:0a:44:a2:08:b8:05:a7:0c:df:
05:26:ca:77:dc:0b:c0:e9:9c:8e:8f:ca:7c:47:09:
6c:71:44:6b:b4:8f:dc:a2:8b:62:09:82:fc:e2:65:
e2:f5:c5:6b:b6:32:63:0f:96:ec:b5:c5:5b:7a:ff:
03:a3:4e:53:8e:d1:be:f9:cc:89:de:bb:4e:ee:14:
f4:a7:6a:f4:81:ef:c2:3c:28:88:fd:f0:1e:e4:91:
c7:6a:4a:c2:d6:e2:a5:8e:61:dc:10:b7:a9:65:2a:
6d:7e:5f:7c:08:4b:63:1b:42:f3:ee:cb:0e:74:d3:
05:65:59:9f:42:2d:5f:3a:bd:b1:53:f3:f4:0d:d6:
ff:8a:d1:a3:6f:83:a2:3b:81:68:e6:43:3b:07:a0:
16:b9:38:a7:c9:f1:c2:b2:4b:0e:09:df:b0:97:61:
ca:92:43:7d:4a:80:75:3d:8e:61:68:3d:a9:e7:22:
03:fc:4f:75:6a:0e:d8:5a:67:5a:50:35:29:bb:ad:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2D:7D:C4:FB:94:F9:CD:46:76:15:CB:7B:A0:48:5C:16:34:C5:68
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/4S19xPuU-c1GdhXLe6BIXBY0xWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.197.0-45.150.199.255
91.208.73.0/24
91.208.104.0/24
91.213.174.0/24
91.213.186.0/24
194.156.151.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:42:4a:e6:99:12:50:b9:c1:5f:b3:b5:1c:4b:cd:02:fb:12:
2e:0f:28:a9:ad:09:9b:3b:01:7b:db:5c:ad:92:cc:4b:e1:4a:
31:e6:05:a8:eb:63:3d:2d:64:0a:28:0d:8b:78:32:9d:d3:fa:
5b:e9:68:2c:a0:fe:66:48:f9:06:c7:89:13:0d:14:a9:ae:01:
21:bb:0d:e8:93:8a:27:3e:d6:f0:a1:0a:5c:8b:0d:3d:54:7f:
97:7f:e0:da:bb:ed:28:40:a7:4a:0c:08:00:08:ad:27:2f:71:
f7:2b:7d:7f:8f:43:59:b8:a6:5f:48:49:89:1d:46:5e:7b:eb:
6a:b8:92:6c:81:bd:bb:78:f4:50:c0:74:6f:12:a0:15:7a:c9:
27:ab:3b:53:2a:50:c8:30:a6:89:96:24:c0:0b:b9:89:5d:78:
57:c8:0a:11:ad:fc:b8:55:ee:e3:7c:39:9c:2c:57:29:22:d4:
06:5c:17:44:2a:25:34:ec:22:5c:ee:36:82:ab:6e:0b:60:30:
c0:1e:32:de:46:cd:53:a2:36:31:0b:1d:9f:bd:d9:bb:dc:97:
59:66:18:fa:1c:a6:be:38:cf:f9:54:c3:a0:a2:78:ae:7a:c5:
2a:ff:63:7f:f6:35:1f:48:7b:f2:2b:9b:03:98:1c:bd:b7:c1:
73:82:58:ba
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYpldMyzzrDOKfnvMc+49YfiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjMwOTA1MTMwNzQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMTJkN2RjNGZiOTRmOWNkNDY3NjE1Y2I3YmEwNDg1YzE2MzRjNTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FYcPVazXprrghNHpLYssnErjruB
rZQAPKbnb3cw4pelh+6xJHSBUl/4tr3Kr6fhNooLudTswH2sKL2m+VEGDJ4KRKII
uAWnDN8FJsp33AvA6ZyOj8p8RwlscURrtI/cootiCYL84mXi9cVrtjJjD5bstcVb
ev8Do05TjtG++cyJ3rtO7hT0p2r0ge/CPCiI/fAe5JHHakrC1uKljmHcELepZSpt
fl98CEtjG0Lz7ssOdNMFZVmfQi1fOr2xU/P0Ddb/itGjb4OiO4Fo5kM7B6AWuTin
yfHCsksOCd+wl2HKkkN9SoB1PY5haD2p5yID/E91ag7YWmdaUDUpu635+QIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFOEtfcT7lPnNRnYVy3ugSFwWNMVoMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvNFMxOXhQdVUtYzFHZGhYTGU2QklYQlkweFdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBAAtlsUD
BAMtlsADBABb0EkDBABb0GgDBABb1a4DBABb1boDBADCnJcwDQYJKoZIhvcNAQEL
BQADggEBAJ5CSuaZElC5wV+ztRxLzQL7Ei4PKKmtCZs7AXvbXK2SzEvhSjHmBajr
Yz0tZAooDYt4Mp3T+lvpaCyg/mZI+QbHiRMNFKmuASG7DeiTiic+1vChClyLDT1U
f5d/4Nq77ShAp0oMCAAIrScvcfcrfX+PQ1m4pl9ISYkdRl5762q4kmyBvbt49FDA
dG8SoBV6ySerO1MqUMgwpomWJMALuYldeFfIChGt/LhV7uN8OZwsVyki1AZcF0Qq
JTTsIlzuNoKrbgtgMMAeMt5GzVOiNjELHZ+92bvcl1lmGPocpr44z/lUw6CieK56
xSr/Y3/2NR9Ie/IrmwOYHL23wXOCWLo=
-----END CERTIFICATE-----
Generated at Thu Sep 7 14:26:28 2023 by rpki-client on console-fra.rpki-client.org