Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/aXAh_1ifh_PoRaH8wVp61BsHawU.roa
File: aXAh_1ifh_PoRaH8wVp61BsHawU.roa (raw, json)
Hash identifier: 9PtwQ9ISP1WycQNbaoHEDIVY6rGnPlae3mjyx4cyiaM=
Subject key identifier: 69:70:21:FF:58:9F:87:F3:E8:45:A1:FC:C1:5A:7A:D4:1B:07:6B:05
Certificate issuer: /CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Certificate serial: 0188236349F7481E75627C54E91298D1A5EA
Authority key identifier: 13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/aXAh_1ifh_PoRaH8wVp61BsHawU.roa
Signing time: Tue 16 May 2023 07:08:09 +0000
ROA not before: Tue 16 May 2023 07:08:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9009
IP address blocks: 92.118.44.0/24 maxlen: 24
92.118.47.0/24 maxlen: 24
45.146.120.0/24 maxlen: 24
45.146.121.0/24 maxlen: 24
45.85.1.0/24 maxlen: 24
45.85.3.0/24 maxlen: 24
45.90.143.0/24 maxlen: 24
45.90.141.0/24 maxlen: 24
5.252.197.0/24 maxlen: 24
2.56.151.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:23:63:49:f7:48:1e:75:62:7c:54:e9:12:98:d1:a5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1372e0c2b83dd5109013c7f1c0bb9716d3618dd2
Validity
Not Before: May 16 07:08:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=697021ff589f87f3e845a1fcc15a7ad41b076b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cc:d0:2d:09:fc:40:98:74:60:0d:d8:19:f4:
35:53:fd:44:57:0a:1b:0c:59:77:20:88:47:07:8f:
cc:10:66:62:02:6a:88:ae:92:c6:41:4c:c6:92:fb:
54:9a:fb:5f:80:d0:57:46:80:87:b9:b3:25:bd:7a:
40:f0:e7:c0:20:ca:29:ff:85:c0:04:63:4a:7d:6f:
a4:b3:8f:0b:59:f0:b7:a3:2c:71:9b:68:9f:f9:fe:
99:84:4d:2a:a3:37:2f:8d:82:d8:bc:4f:b5:4b:78:
c8:fb:76:c2:8f:b8:76:84:bc:89:cd:d8:69:73:c8:
18:84:49:49:9b:0b:1e:68:bd:42:41:6c:ba:81:a3:
4a:25:c6:8f:92:1e:3d:70:85:7f:e9:a1:be:42:9f:
35:91:98:3e:e0:61:70:e5:fd:98:e1:6a:3d:95:5e:
7f:19:df:9a:ac:e2:2a:c6:da:f0:74:59:09:ba:9b:
d5:1f:4c:a7:af:85:95:c4:a9:16:68:f8:45:e8:a1:
ae:f4:c4:ab:ff:b1:d0:0c:e0:2f:6d:d7:a1:61:09:
7b:8c:e7:e1:bc:8d:ba:4a:a3:d8:19:60:8f:76:46:
99:76:d0:ea:d2:00:fe:b6:5d:82:27:69:0b:a7:89:
d1:d8:b7:7c:b4:fa:54:3f:df:1a:bf:19:56:33:3b:
6b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:70:21:FF:58:9F:87:F3:E8:45:A1:FC:C1:5A:7A:D4:1B:07:6B:05
X509v3 Authority Key Identifier:
keyid:13:72:E0:C2:B8:3D:D5:10:90:13:C7:F1:C0:BB:97:16:D3:61:8D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3Lgwrg91RCQE8fxwLuXFtNhjdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/aXAh_1ifh_PoRaH8wVp61BsHawU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/221fd6-e4f6-43e3-946d-dd1ec57d7e74/1/E3Lgwrg91RCQE8fxwLuXFtNhjdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.151.0/24
5.252.197.0/24
45.85.1.0/24
45.85.3.0/24
45.90.141.0/24
45.90.143.0/24
45.146.120.0/23
92.118.44.0/24
92.118.47.0/24
Signature Algorithm: sha256WithRSAEncryption
51:95:3d:a8:42:b8:b2:04:ce:8c:a6:b8:43:cb:05:74:b7:19:
5b:0f:07:16:12:23:92:bb:94:62:fd:61:68:d8:57:c5:66:b4:
55:c6:e9:7a:0d:b2:ef:0d:1f:0d:ca:77:86:82:f5:b6:27:91:
71:04:27:12:5d:41:ea:03:d7:03:7a:bb:fd:db:2e:54:1a:05:
96:1e:f6:1b:98:12:1b:0a:2f:69:2c:97:18:61:87:1c:3c:0d:
43:9e:28:51:b2:63:10:34:17:2d:a8:ea:3b:ee:73:7c:30:00:
38:c1:74:12:0d:0d:39:c0:b2:0c:c0:89:1f:9a:56:b9:af:69:
c1:c5:87:c4:65:84:81:e3:d4:76:cc:d8:b4:d4:f5:03:e7:35:
56:dc:7b:38:5e:73:5b:e7:fc:49:76:35:a4:ab:f3:a5:07:47:
48:3a:4b:d6:61:8f:55:99:df:2e:57:8a:f2:98:7f:94:a2:bb:
d5:82:90:da:ab:5a:1f:29:06:95:3a:b0:ab:92:be:73:6e:04:
e3:34:fd:39:41:eb:d3:2c:ea:00:55:1f:03:5a:ae:a9:da:2d:
93:6a:97:7b:a2:0c:64:e4:50:ad:c7:8c:34:35:47:1f:56:57:
0d:32:fa:c8:c2:d8:6e:db:0c:b8:49:d1:04:cc:73:09:99:80:
00:b8:b8:3d
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAYgjY0n3SB51YnxU6RKY0aXqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNzJlMGMyYjgzZGQ1MTA5MDEzYzdmMWMwYmI5NzE2ZDM2
MThkZDIwHhcNMjMwNTE2MDcwODA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTcwMjFmZjU4OWY4N2YzZTg0NWExZmNjMTVhN2FkNDFiMDc2YjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8zQLQn8QJh0YA3YGfQ1U/1EVwob
DFl3IIhHB4/MEGZiAmqIrpLGQUzGkvtUmvtfgNBXRoCHubMlvXpA8OfAIMop/4XA
BGNKfW+ks48LWfC3oyxxm2if+f6ZhE0qozcvjYLYvE+1S3jI+3bCj7h2hLyJzdhp
c8gYhElJmwseaL1CQWy6gaNKJcaPkh49cIV/6aG+Qp81kZg+4GFw5f2Y4Wo9lV5/
Gd+arOIqxtrwdFkJupvVH0ynr4WVxKkWaPhF6KGu9MSr/7HQDOAvbdehYQl7jOfh
vI26SqPYGWCPdkaZdtDq0gD+tl2CJ2kLp4nR2Ld8tPpUP98avxlWMztriQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFGlwIf9Yn4fz6EWh/MFaetQbB2sFMB8GA1UdIwQY
MBaAFBNy4MK4PdUQkBPH8cC7lxbTYY3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQt
ZGQxZWM1N2Q3ZTc0LzEvYVhBaF8xaWZoX1BvUmFIOHdWcDYxQnNIYXdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8yMjFmZDYtZTRmNi00M2UzLTk0NmQtZGQxZWM1N2Q3ZTc0
LzEvRTNMZ3dyZzkxUkNRRThmeHdMdVhGdE5oamRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAAjiXAwQA
BfzFAwQALVUBAwQALVUDAwQALVqNAwQALVqPAwQBLZJ4AwQAXHYsAwQAXHYvMA0G
CSqGSIb3DQEBCwUAA4IBAQBRlT2oQriyBM6MprhDywV0txlbDwcWEiOSu5Ri/WFo
2FfFZrRVxul6DbLvDR8NyneGgvW2J5FxBCcSXUHqA9cDerv92y5UGgWWHvYbmBIb
Ci9pLJcYYYccPA1DnihRsmMQNBctqOo77nN8MAA4wXQSDQ05wLIMwIkfmla5r2nB
xYfEZYSB49R2zNi01PUD5zVW3Hs4XnNb5/xJdjWkq/OlB0dIOkvWYY9Vmd8uV4ry
mH+UorvVgpDaq1ofKQaVOrCrkr5zbgTjNP05QevTLOoAVR8DWq6p2i2Tapd7ogxk
5FCtx4w0NUcfVlcNMvrIwthu2wy4SdEEzHMJmYAAuLg9
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:51 2023 by rpki-client on console-fra.rpki-client.org