Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/Hw4BN2nEpoeUCDbDeRYPxX9r91A.roa
File: Hw4BN2nEpoeUCDbDeRYPxX9r91A.roa (raw, json)
Hash identifier: JqeQInmRLIQf84LbmU90pfeIJ/3MVcfJNYxPTsDbIEU=
Subject key identifier: 1F:0E:01:37:69:C4:A6:87:94:08:36:C3:79:16:0F:C5:7F:6B:F7:50
Certificate issuer: /CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Certificate serial: 018570B078CD9EA0E8373C5718F32176B805
Authority key identifier: F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/Hw4BN2nEpoeUCDbDeRYPxX9r91A.roa
Signing time: Mon 02 Jan 2023 04:14:51 +0000
ROA not before: Mon 02 Jan 2023 04:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43012
IP address blocks: 194.59.52.0/22 maxlen: 22
77.91.216.0/21 maxlen: 21
2a02:2538::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:78:cd:9e:a0:e8:37:3c:57:18:f3:21:76:b8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Validity
Not Before: Jan 2 04:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f0e013769c4a687940836c379160fc57f6bf750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6c:19:fd:f4:74:a7:4e:19:08:12:02:f2:3b:
51:58:50:ab:6f:82:cd:ba:40:46:f5:22:c1:9a:fa:
54:98:47:1e:49:e8:f4:3a:b1:b1:0b:34:db:30:c7:
16:2e:38:a6:46:16:62:b1:02:29:bd:b1:7d:36:69:
7d:1b:34:bf:1b:b3:94:27:03:b2:84:65:80:4c:d9:
ee:c9:bf:8d:cc:f5:cb:d7:e3:fe:99:3f:af:e0:c2:
1b:12:48:30:1b:e1:7e:df:61:f3:3b:90:0e:86:1d:
69:2f:83:23:93:96:91:d9:7c:77:ed:f2:5e:cc:8f:
62:cd:17:60:86:77:e2:b4:01:e6:da:0e:d6:f2:39:
88:1a:c0:28:e8:07:be:c9:08:41:b9:ac:5d:92:b3:
6f:10:c0:2e:d7:28:cd:09:5b:06:44:76:fd:47:88:
e7:8e:24:96:00:9a:b3:69:1c:3d:49:3f:ec:b9:52:
ea:b8:67:68:cf:22:06:cf:2f:5c:e4:a5:8e:3a:9a:
ab:3e:9a:a4:85:4e:98:7a:b5:50:e6:7e:d2:2a:ca:
82:7d:77:68:84:d2:46:43:4b:ed:57:4b:55:7e:71:
0d:b8:ac:33:49:14:c9:b0:00:03:72:b3:29:c8:d2:
64:a7:3e:30:d2:b9:16:38:d3:57:6e:69:0a:79:20:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0E:01:37:69:C4:A6:87:94:08:36:C3:79:16:0F:C5:7F:6B:F7:50
X509v3 Authority Key Identifier:
keyid:F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/Hw4BN2nEpoeUCDbDeRYPxX9r91A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.216.0/21
194.59.52.0/22
IPv6:
2a02:2538::/32
Signature Algorithm: sha256WithRSAEncryption
87:c5:63:0c:e6:a3:82:55:a2:98:86:5a:11:7f:07:b8:0a:77:
43:f0:da:07:c4:09:d8:61:3b:c2:49:51:b3:ea:d1:4e:32:76:
eb:78:2c:68:78:26:c4:77:2d:0a:52:5e:19:76:8b:b3:95:f1:
7c:8d:3c:38:78:7b:70:02:65:13:b9:d8:74:39:55:f9:22:f2:
c7:cd:25:89:28:18:64:0c:f5:54:91:40:f8:66:d0:de:ae:41:
ce:29:35:05:b1:ad:6b:e3:d9:0d:c9:3b:2d:66:98:1e:27:b9:
37:ea:22:5f:70:28:dc:a2:5f:b1:e6:c1:97:2e:4a:da:23:ab:
12:50:70:59:bb:d2:57:e4:72:29:96:59:b1:b1:0f:d9:58:c6:
14:69:d5:ac:ff:3b:b1:75:ca:01:bd:2a:2c:e4:e2:44:3b:68:
27:6c:f4:ff:f9:4e:60:a8:cc:5f:5f:f5:b5:4d:60:3d:84:15:
3a:bb:d5:ec:98:ba:82:8d:bd:38:e9:56:33:16:51:0b:e8:49:
db:24:69:f6:16:a9:82:e0:bc:5a:14:5c:15:b1:76:6e:d1:2a:
78:c3:82:0d:0f:50:26:5a:60:5b:fe:ab:a6:88:a5:cc:23:34:
ab:76:49:95:ea:38:42:a7:d1:19:0b:c2:e7:4d:d6:c4:10:cb:
7e:09:50:04
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVwsHjNnqDoNzxXGPMhdrgFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYzg5OTBiZDZlOTMwNzExM2U4MzgzMmM2OTE1ZmRhNWNh
Y2ZjMmYwHhcNMjMwMTAyMDQxNDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjBlMDEzNzY5YzRhNjg3OTQwODM2YzM3OTE2MGZjNTdmNmJmNzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWwZ/fR0p04ZCBIC8jtRWFCrb4LN
ukBG9SLBmvpUmEceSej0OrGxCzTbMMcWLjimRhZisQIpvbF9Nml9GzS/G7OUJwOy
hGWATNnuyb+NzPXL1+P+mT+v4MIbEkgwG+F+32HzO5AOhh1pL4Mjk5aR2Xx37fJe
zI9izRdghnfitAHm2g7W8jmIGsAo6Ae+yQhBuaxdkrNvEMAu1yjNCVsGRHb9R4jn
jiSWAJqzaRw9ST/suVLquGdozyIGzy9c5KWOOpqrPpqkhU6YerVQ5n7SKsqCfXdo
hNJGQ0vtV0tVfnENuKwzSRTJsAADcrMpyNJkpz4w0rkWONNXbmkKeSC54wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFB8OATdpxKaHlAg2w3kWD8V/a/dQMB8GA1UdIwQY
MBaAFPPImQvW6TBxE+g4MsaRX9pcrPwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mZDczZDgtMTU0YS00MGNlLWFlYmMt
ZTg4OWE2ZTZiZWFjLzEvSHc0Qk4ybkVwb2VVQ0RiRGVSWVB4WDlyOTFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mZDczZDgtMTU0YS00MGNlLWFlYmMtZTg4OWE2ZTZiZWFj
LzEvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDTVvYAwQC
wjs0MA0EAgACMAcDBQAqAiU4MA0GCSqGSIb3DQEBCwUAA4IBAQCHxWMM5qOCVaKY
hloRfwe4CndD8NoHxAnYYTvCSVGz6tFOMnbreCxoeCbEdy0KUl4ZdouzlfF8jTw4
eHtwAmUTudh0OVX5IvLHzSWJKBhkDPVUkUD4ZtDerkHOKTUFsa1r49kNyTstZpge
J7k36iJfcCjcol+x5sGXLkraI6sSUHBZu9JX5HIpllmxsQ/ZWMYUadWs/zuxdcoB
vSos5OJEO2gnbPT/+U5gqMxfX/W1TWA9hBU6u9XsmLqCjb046VYzFlEL6EnbJGn2
FqmC4LxaFFwVsXZu0Sp4w4IND1AmWmBb/qumiKXMIzSrdkmV6jhCp9EZC8LnTdbE
EMt+CVAE
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:04 2024 by rpki-client on console-fra.rpki-client.org