Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/O0mHBKPRpATogbRWdpr5_GTelZI.roa
File: O0mHBKPRpATogbRWdpr5_GTelZI.roa (raw, json)
Hash identifier: pBXa8CoShhcSsG8aHy+svAmDaucfPIBf+fFL4cKIyt8=
Subject key identifier: 3B:49:87:04:A3:D1:A4:04:E8:81:B4:56:76:9A:F9:FC:64:DE:95:92
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 0185703966C662AF47DAFEB0C8A0A7AABA41
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/O0mHBKPRpATogbRWdpr5_GTelZI.roa
Signing time: Mon 02 Jan 2023 02:04:48 +0000
ROA not before: Mon 02 Jan 2023 02:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55002
IP address blocks: 45.82.106.0/24 maxlen: 24
45.82.107.0/24 maxlen: 24
185.16.89.0/24 maxlen: 24
185.16.88.0/24 maxlen: 24
185.16.90.0/24 maxlen: 24
185.16.91.0/24 maxlen: 24
86.104.226.0/24 maxlen: 24
91.235.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:66:c6:62:af:47:da:fe:b0:c8:a0:a7:aa:ba:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Jan 2 02:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b498704a3d1a404e881b456769af9fc64de9592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:df:0b:b7:26:39:6c:a0:e7:fb:87:ed:f2:39:
e1:b7:69:ab:75:d2:f3:6e:c4:bf:1c:ea:72:49:85:
b8:81:ad:e8:4a:b4:9d:00:c5:ef:aa:88:dc:a3:b9:
e2:38:cd:28:b3:48:fb:8e:3f:c4:f2:be:75:e7:a8:
cd:82:4b:e4:84:e1:1a:83:00:ee:f9:35:5c:56:67:
ce:69:6c:77:22:82:f6:f9:95:1e:cc:5b:c2:8e:4c:
63:85:05:7e:ba:c1:31:31:68:c4:50:be:de:fe:f4:
27:9c:3f:8f:52:df:0e:54:58:e9:06:90:be:a6:7a:
0d:b6:4c:49:9d:42:fb:34:c8:2a:ad:6f:6c:10:da:
6b:cf:ef:94:4d:d5:2a:df:d6:52:12:30:0b:62:66:
ee:27:cc:40:e2:2b:49:f5:bf:e7:ef:a5:cf:e3:37:
23:c0:cf:f2:6b:a5:3a:83:29:f0:6f:38:a3:a2:28:
89:2a:e7:65:9d:a7:c2:72:99:ac:d9:e9:ff:14:2d:
9f:a3:30:94:8f:16:a0:74:88:bc:cc:de:d3:b3:b0:
50:6b:b5:79:95:48:3e:47:0f:ba:4d:8a:8d:a4:7c:
ef:b1:32:9d:b0:ae:58:e5:d0:db:48:f2:14:d8:3f:
bf:93:ee:86:a0:68:01:2e:3f:39:c5:0b:6c:72:17:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:49:87:04:A3:D1:A4:04:E8:81:B4:56:76:9A:F9:FC:64:DE:95:92
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/O0mHBKPRpATogbRWdpr5_GTelZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.106.0/23
86.104.226.0/24
91.235.107.0/24
185.16.88.0/22
Signature Algorithm: sha256WithRSAEncryption
76:bf:33:46:68:50:19:c9:4c:96:e9:00:73:70:dd:28:7d:c2:
ad:e5:71:17:d7:6a:b2:50:d6:94:79:67:a2:ab:63:fc:bc:e1:
e3:80:bd:72:f4:64:a9:14:40:ef:4d:0e:98:44:10:3a:9b:b9:
70:38:52:fd:8a:0e:da:13:2a:33:a4:be:39:80:74:04:d5:f1:
c8:d0:54:10:09:ac:6a:c3:9a:7d:71:ab:f8:5e:7c:8a:05:56:
35:47:9f:18:a6:56:98:a6:ef:9c:6c:58:c8:98:73:c8:46:57:
48:8d:76:d2:04:bf:5c:dc:df:0e:1d:d9:3f:43:99:9d:ab:e7:
9e:f4:d9:b7:42:f5:11:4f:59:2d:c1:2c:71:0c:d4:78:f1:8e:
54:56:a9:65:ee:bd:c3:ca:92:c5:08:90:82:ad:09:2a:de:f3:
8c:a1:2b:73:8a:a9:d9:83:12:eb:59:bf:c0:14:1a:b2:f8:4b:
2f:e8:01:75:a4:de:25:e1:5c:d5:5b:55:68:27:5e:96:a8:b1:
04:a6:72:23:e1:49:3c:0d:47:07:91:be:94:a1:59:cf:d4:2a:
93:e1:c0:1a:4c:d3:f7:f1:15:39:10:52:b2:cd:99:2f:6c:44:
82:b5:6d:94:ab:ff:3f:7d:84:c6:be:c8:1f:81:00:2a:3e:4f:
6b:49:1f:05
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVwOWbGYq9H2v6wyKCnqrpBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZjQyMzYwYTM5NzBhODA4MDE2ZmRmOGQ4ZGJhMzk2YzVh
MWQwMzQwHhcNMjMwMTAyMDIwNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjQ5ODcwNGEzZDFhNDA0ZTg4MWI0NTY3NjlhZjlmYzY0ZGU5NTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjt8LtyY5bKDn+4ft8jnht2mrddLz
bsS/HOpySYW4ga3oSrSdAMXvqojco7niOM0os0j7jj/E8r5156jNgkvkhOEagwDu
+TVcVmfOaWx3IoL2+ZUezFvCjkxjhQV+usExMWjEUL7e/vQnnD+PUt8OVFjpBpC+
pnoNtkxJnUL7NMgqrW9sENprz++UTdUq39ZSEjALYmbuJ8xA4itJ9b/n76XP4zcj
wM/ya6U6gynwbzijoiiJKudlnafCcpms2en/FC2fozCUjxagdIi8zN7Ts7BQa7V5
lUg+Rw+6TYqNpHzvsTKdsK5Y5dDbSPIU2D+/k+6GoGgBLj85xQtscheqXwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDtJhwSj0aQE6IG0Vnaa+fxk3pWSMB8GA1UdIwQY
MBaAFPH0I2CjlwqAgBb9+Njbo5bFodA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMt
ZDRmMDhiZTA1MGQ1LzEvTzBtSEJLUFJwQVRvZ2JSV2RwcjVfR1RlbFpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMWRjYTQtMWNlOC00MzE4LTk1NmMtZDRmMDhiZTA1MGQ1
LzEvOGZRallLT1hDb0NBRnYzNDJOdWpsc1doMERRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLVJqAwQA
VmjiAwQAW+trAwQCuRBYMA0GCSqGSIb3DQEBCwUAA4IBAQB2vzNGaFAZyUyW6QBz
cN0ofcKt5XEX12qyUNaUeWeiq2P8vOHjgL1y9GSpFEDvTQ6YRBA6m7lwOFL9ig7a
EyozpL45gHQE1fHI0FQQCaxqw5p9cav4XnyKBVY1R58YplaYpu+cbFjImHPIRldI
jXbSBL9c3N8OHdk/Q5mdq+ee9Nm3QvURT1ktwSxxDNR48Y5UVqll7r3DypLFCJCC
rQkq3vOMoStziqnZgxLrWb/AFBqy+Esv6AF1pN4l4VzVW1VoJ16WqLEEpnIj4Uk8
DUcHkb6UoVnP1CqT4cAaTNP38RU5EFKyzZkvbESCtW2Uq/8/fYTGvsgfgQAqPk9r
SR8F
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:53 2024 by rpki-client on console-ams.rpki-client.org