Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/ktqEo0Hrek8hSwaoKOJ8o9AQluA.roa
File: ktqEo0Hrek8hSwaoKOJ8o9AQluA.roa (raw, json)
Hash identifier: +kqwlTwqoCxykWinCio/dI/TEGC9JMqW8jwHG+vCm3Y=
Subject key identifier: 92:DA:84:A3:41:EB:7A:4F:21:4B:06:A8:28:E2:7C:A3:D0:10:96:E0
Certificate issuer: /CN=f73cdc6751d7c59073e4b706402d3691af09086f
Certificate serial: 01856E82069515D45DB2F55F291809F74DEF
Authority key identifier: F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/ktqEo0Hrek8hSwaoKOJ8o9AQluA.roa
Signing time: Sun 01 Jan 2023 18:04:53 +0000
ROA not before: Sun 01 Jan 2023 18:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52056
IP address blocks: 45.82.16.0/22 maxlen: 22
46.23.160.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:82:06:95:15:d4:5d:b2:f5:5f:29:18:09:f7:4d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f73cdc6751d7c59073e4b706402d3691af09086f
Validity
Not Before: Jan 1 18:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92da84a341eb7a4f214b06a828e27ca3d01096e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:62:f0:e4:8e:e2:be:cf:bc:b4:4e:10:bb:
9a:09:9e:23:58:6a:94:9d:79:c9:ef:c4:01:89:e4:
12:17:d9:70:21:28:d9:ea:bb:11:61:c1:1f:56:97:
6e:3e:75:01:02:15:21:44:95:09:33:df:b3:90:86:
16:bf:42:d8:b2:11:56:a2:6c:fe:52:0e:83:bb:c4:
ed:83:b0:83:00:ac:9e:6b:e1:ea:c3:ab:0e:98:7d:
10:1c:8d:41:bb:03:ca:90:e4:9a:e7:3f:0c:82:d6:
92:5d:7a:d3:e2:bb:a4:46:63:04:af:3a:e3:e8:a4:
53:84:1b:0a:d2:ec:63:9e:60:04:d5:7e:ba:ff:86:
24:f3:7f:3e:08:be:63:f7:8e:75:4a:07:8b:57:a8:
55:8c:e1:b3:7d:93:29:49:d1:ed:46:23:1b:92:29:
88:f4:6e:b3:1c:8e:a5:92:8d:04:a1:f0:39:2f:d6:
c1:da:18:de:98:48:16:fd:c5:42:4c:da:e3:9e:16:
d8:05:f8:5d:2a:04:b7:60:c9:3b:23:60:45:df:54:
ab:11:e3:1c:b9:15:6e:ba:b9:1d:f2:c1:e1:0d:c5:
a4:f1:1c:65:b2:b6:ef:ac:25:b0:82:e6:fc:ea:f2:
58:f1:63:97:35:73:3d:19:48:15:79:36:a4:11:7e:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DA:84:A3:41:EB:7A:4F:21:4B:06:A8:28:E2:7C:A3:D0:10:96:E0
X509v3 Authority Key Identifier:
keyid:F7:3C:DC:67:51:D7:C5:90:73:E4:B7:06:40:2D:36:91:AF:09:08:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zzcZ1HXxZBz5LcGQC02ka8JCG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/ktqEo0Hrek8hSwaoKOJ8o9AQluA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/855002-d823-41fe-8f9a-718fd195c5eb/1/9zzcZ1HXxZBz5LcGQC02ka8JCG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.16.0/22
46.23.160.0/20
Signature Algorithm: sha256WithRSAEncryption
00:7d:39:94:9f:67:ea:dd:7a:bf:9a:ef:e2:af:b8:b7:59:7f:
b3:27:9b:b6:11:c8:cb:9b:d9:0a:c5:3f:b2:0f:9b:e1:a7:53:
42:cd:b4:d1:40:11:a3:d9:21:6b:66:f3:1e:cb:31:03:c5:30:
6d:1c:08:4d:94:2b:7c:04:b6:fd:76:5e:1b:d4:12:3a:c7:19:
45:a5:44:80:86:18:4a:b8:44:10:6a:a1:f4:cd:46:af:c4:3e:
9d:6c:fa:2e:18:47:0a:87:16:2d:77:a0:2b:10:ad:b8:d3:2a:
40:3e:79:b3:2a:33:f0:08:8c:ec:10:0c:32:68:4e:6c:e7:c7:
f8:a6:70:71:23:07:5c:f8:74:24:9d:a1:b3:9a:98:86:43:93:
c3:d9:55:61:57:32:0d:1b:88:75:1b:e7:59:ce:48:3a:ec:d2:
b9:16:bd:31:c7:69:15:b2:9c:e6:e8:34:96:a8:34:82:1f:f3:
e8:0a:51:10:c8:53:ce:26:a6:83:fa:62:8c:e2:ef:84:50:d8:
8c:90:40:2a:17:05:e8:c1:c3:45:52:03:4b:9e:a9:f2:8c:47:
58:1c:8c:b7:b1:d4:da:f7:e9:2f:da:15:1e:db:bb:c7:ca:df:
f0:99:3a:19:f6:9a:b3:b8:65:65:a6:b3:77:f8:ee:05:78:57:
b8:fd:58:f6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVuggaVFdRdsvVfKRgJ903vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3M2NkYzY3NTFkN2M1OTA3M2U0YjcwNjQwMmQzNjkxYWYw
OTA4NmYwHhcNMjMwMTAxMTgwNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmRhODRhMzQxZWI3YTRmMjE0YjA2YTgyOGUyN2NhM2QwMTA5NmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz1i8OSO4r7PvLROELuaCZ4jWGqU
nXnJ78QBieQSF9lwISjZ6rsRYcEfVpduPnUBAhUhRJUJM9+zkIYWv0LYshFWomz+
Ug6Du8Ttg7CDAKyea+Hqw6sOmH0QHI1BuwPKkOSa5z8MgtaSXXrT4rukRmMErzrj
6KRThBsK0uxjnmAE1X66/4Yk838+CL5j9451SgeLV6hVjOGzfZMpSdHtRiMbkimI
9G6zHI6lko0EofA5L9bB2hjemEgW/cVCTNrjnhbYBfhdKgS3YMk7I2BF31SrEeMc
uRVuurkd8sHhDcWk8RxlsrbvrCWwgub86vJY8WOXNXM9GUgVeTakEX75EwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJLahKNB63pPIUsGqCjifKPQEJbgMB8GA1UdIwQY
MBaAFPc83GdR18WQc+S3BkAtNpGvCQhvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXp6Y1oxSFh4WkJ6NUxjR1FDMDJrYThKQ0c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS84NTUwMDItZDgyMy00MWZlLThmOWEt
NzE4ZmQxOTVjNWViLzEva3RxRW8wSHJlazhoU3dhb0tPSjhvOUFRbHVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS84NTUwMDItZDgyMy00MWZlLThmOWEtNzE4ZmQxOTVjNWVi
LzEvOXp6Y1oxSFh4WkJ6NUxjR1FDMDJrYThKQ0c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVIQAwQE
LhegMA0GCSqGSIb3DQEBCwUAA4IBAQAAfTmUn2fq3Xq/mu/ir7i3WX+zJ5u2EcjL
m9kKxT+yD5vhp1NCzbTRQBGj2SFrZvMeyzEDxTBtHAhNlCt8BLb9dl4b1BI6xxlF
pUSAhhhKuEQQaqH0zUavxD6dbPouGEcKhxYtd6ArEK240ypAPnmzKjPwCIzsEAwy
aE5s58f4pnBxIwdc+HQknaGzmpiGQ5PD2VVhVzING4h1G+dZzkg67NK5Fr0xx2kV
spzm6DSWqDSCH/PoClEQyFPOJqaD+mKM4u+EUNiMkEAqFwXowcNFUgNLnqnyjEdY
HIy3sdTa9+kv2hUe27vHyt/wmToZ9pqzuGVlprN3+O4FeFe4/Vj2
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:29 2024 by rpki-client on console-ams.rpki-client.org