Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/CDxQdTnXnM4-nqkenowWjI5sFvM.roa
File: CDxQdTnXnM4-nqkenowWjI5sFvM.roa (raw, json)
Hash identifier: MgW6Uq5K6s8XnRfOtuCLs9Fm9r2vK3ET3oDoJrs/9bo=
Subject key identifier: 08:3C:50:75:39:D7:9C:CE:3E:9E:A9:1E:9E:8C:16:8C:8E:6C:16:F3
Certificate issuer: /CN=b0758e88c20702131b917a4dfdb2374bc3655587
Certificate serial: 0185711E5CFB81F04EF424FDC21AE5A37C54
Authority key identifier: B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/CDxQdTnXnM4-nqkenowWjI5sFvM.roa
Signing time: Mon 02 Jan 2023 06:14:53 +0000
ROA not before: Mon 02 Jan 2023 06:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200793
IP address blocks: 45.149.200.0/22 maxlen: 22
45.149.200.0/23 maxlen: 23
45.149.201.0/24 maxlen: 24
45.149.202.0/24 maxlen: 24
45.149.203.0/24 maxlen: 24
45.149.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:5c:fb:81:f0:4e:f4:24:fd:c2:1a:e5:a3:7c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0758e88c20702131b917a4dfdb2374bc3655587
Validity
Not Before: Jan 2 06:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=083c507539d79cce3e9ea91e9e8c168c8e6c16f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b7:d5:22:36:bf:7f:d1:34:b4:f4:0f:13:bd:
4f:76:db:04:fc:5c:1b:5c:22:c1:93:fb:3a:04:7e:
9b:66:cf:37:17:51:c7:19:8d:08:17:0d:af:46:35:
fe:57:e1:cf:d6:5b:64:05:7c:5a:06:91:77:cb:de:
dd:d8:0e:58:ef:09:a0:91:15:69:e1:93:ca:d6:95:
4a:03:3f:5d:ee:8c:02:ed:76:5b:bb:e8:21:4f:e3:
03:26:5d:c6:03:dc:50:20:cb:40:12:09:89:a4:23:
ac:54:a5:a1:c7:d4:50:4c:ce:ce:fb:49:c5:88:04:
fa:81:42:3e:66:6d:64:e0:0a:88:78:40:45:9a:ea:
31:9b:7f:a6:9f:03:41:68:40:0b:2b:92:51:4e:8f:
2c:cc:18:87:4e:3b:cf:bd:67:dd:96:4a:2c:d0:05:
db:48:f9:84:b1:fd:38:09:39:c3:55:2c:e8:14:93:
80:c8:0c:8f:43:b9:32:6c:44:e1:13:2b:6d:fe:7a:
ba:bc:99:a5:6b:93:53:9b:2d:29:37:42:47:da:9c:
b7:0d:df:27:20:db:68:b3:59:6c:b4:51:8e:38:36:
7d:24:87:cc:ff:4f:f2:b4:da:e1:a3:d2:a3:df:f1:
b9:17:c3:c9:31:a9:91:62:a2:e9:1c:e9:6b:1d:b7:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3C:50:75:39:D7:9C:CE:3E:9E:A9:1E:9E:8C:16:8C:8E:6C:16:F3
X509v3 Authority Key Identifier:
keyid:B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/CDxQdTnXnM4-nqkenowWjI5sFvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.200.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:13:c2:1a:ef:e1:38:de:dd:e9:d1:28:51:05:3b:37:75:cd:
11:2f:9b:25:ea:a8:46:19:1a:8e:ed:7b:00:6f:ba:dc:c7:dd:
e0:03:0a:3d:7e:3a:96:1d:48:c5:7c:dc:74:4a:f3:28:05:ee:
3b:4c:1f:66:2f:ca:8e:17:d6:b5:1b:8c:e3:0e:c4:08:a1:e9:
44:b0:bb:7d:62:5b:44:84:c1:a4:94:fc:27:0c:f0:cf:af:0b:
e3:43:01:73:56:11:87:21:0d:16:06:e6:b7:92:79:6a:0d:1f:
b2:c6:80:c1:a0:0e:36:1f:2e:33:8d:ec:be:f9:9c:55:d9:3d:
8a:dd:05:1a:b3:d0:11:53:5a:0e:68:6d:e6:12:77:d2:47:ef:
33:ab:69:04:a8:f1:35:f7:48:1b:ab:59:86:f5:19:89:7b:ae:
a9:84:a3:02:bb:4a:d2:7b:89:1c:da:bd:da:5a:f7:49:f0:78:
40:18:03:ce:84:aa:93:73:6d:7d:fe:ac:fd:bc:05:4e:1d:46:
a4:6a:f3:e0:73:45:45:8e:e0:46:bf:05:75:d8:ce:ff:dd:d7:
f5:4b:a6:6a:35:3d:2f:2b:56:bb:d2:17:f4:95:d1:84:62:79:
82:fc:eb:88:99:20:5f:e2:49:a5:b2:c5:19:95:4f:79:55:cb:
b3:7e:70:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxHlz7gfBO9CT9whrlo3xUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNzU4ZTg4YzIwNzAyMTMxYjkxN2E0ZGZkYjIzNzRiYzM2
NTU1ODcwHhcNMjMwMTAyMDYxNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODNjNTA3NTM5ZDc5Y2NlM2U5ZWE5MWU5ZThjMTY4YzhlNmMxNmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LfVIja/f9E0tPQPE71PdtsE/Fwb
XCLBk/s6BH6bZs83F1HHGY0IFw2vRjX+V+HP1ltkBXxaBpF3y97d2A5Y7wmgkRVp
4ZPK1pVKAz9d7owC7XZbu+ghT+MDJl3GA9xQIMtAEgmJpCOsVKWhx9RQTM7O+0nF
iAT6gUI+Zm1k4AqIeEBFmuoxm3+mnwNBaEALK5JRTo8szBiHTjvPvWfdlkos0AXb
SPmEsf04CTnDVSzoFJOAyAyPQ7kybEThEytt/nq6vJmla5NTmy0pN0JH2py3Dd8n
INtos1lstFGOODZ9JIfM/0/ytNrho9Kj3/G5F8PJMamRYqLpHOlrHbfiPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAg8UHU515zOPp6pHp6MFoyObBbzMB8GA1UdIwQY
MBaAFLB1jojCBwITG5F6Tf2yN0vDZVWHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0hXT2lNSUhBaE1ia1hwTl9iSTNTOE5sVlljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8wNzFlZWItMTU0YS00NWYwLThkN2It
NjM4NzNlODg0NDEzLzEvQ0R4UWRUblhuTTQtbnFrZW5vd1dqSTVzRnZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8wNzFlZWItMTU0YS00NWYwLThkN2ItNjM4NzNlODg0NDEz
LzEvc0hXT2lNSUhBaE1ia1hwTl9iSTNTOE5sVlljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZXIMA0G
CSqGSIb3DQEBCwUAA4IBAQAaE8Ia7+E43t3p0ShRBTs3dc0RL5sl6qhGGRqO7XsA
b7rcx93gAwo9fjqWHUjFfNx0SvMoBe47TB9mL8qOF9a1G4zjDsQIoelEsLt9YltE
hMGklPwnDPDPrwvjQwFzVhGHIQ0WBua3knlqDR+yxoDBoA42Hy4zjey++ZxV2T2K
3QUas9ARU1oOaG3mEnfSR+8zq2kEqPE190gbq1mG9RmJe66phKMCu0rSe4kc2r3a
WvdJ8HhAGAPOhKqTc219/qz9vAVOHUakavPgc0VFjuBGvwV12M7/3df1S6ZqNT0v
K1a70hf0ldGEYnmC/OuImSBf4kmlssUZlU95VcuzfnCs
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:56 2024 by rpki-client on console-fra.rpki-client.org