Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/9qYd4wP1jVXhxis68ID7pLY8mtw.roa
File: 9qYd4wP1jVXhxis68ID7pLY8mtw.roa (raw, json)
Hash identifier: ZgJk8dHeZJ8t/Kudk5HHz6dTIqtZc+sNcWmukbD+Ig8=
Subject key identifier: F6:A6:1D:E3:03:F5:8D:55:E1:C6:2B:3A:F0:80:FB:A4:B6:3C:9A:DC
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018ADAD417423E2DD3196D26B7FA7C8123C6
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/9qYd4wP1jVXhxis68ID7pLY8mtw.roa
Signing time: Thu 28 Sep 2023 08:07:27 +0000
ROA not before: Thu 28 Sep 2023 08:07:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60528
IP address blocks: 45.84.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:da:d4:17:42:3e:2d:d3:19:6d:26:b7:fa:7c:81:23:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Sep 28 08:07:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6a61de303f58d55e1c62b3af080fba4b63c9adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9b:32:9c:f3:2c:41:bf:36:bd:7e:89:f6:28:
d0:82:06:af:6c:da:6c:2f:4e:c5:b9:88:9c:b1:e5:
d8:83:a3:16:45:5b:d3:46:fd:16:c5:81:98:49:d4:
f0:45:e8:a2:d9:31:e0:a6:51:14:74:14:16:c4:5e:
20:6e:fa:7e:23:d7:f9:a5:78:0c:91:9f:40:3e:44:
95:70:15:75:d9:e7:67:38:df:61:ac:41:97:60:71:
02:61:df:1a:69:46:d5:a2:99:58:ee:07:76:77:b5:
f2:37:ab:bc:af:09:2d:7f:b3:59:f6:21:27:2d:9a:
99:5d:c3:8f:36:41:d8:21:20:f1:3d:7e:06:0c:22:
4c:b3:09:8b:29:c7:05:c9:20:67:10:17:06:21:ff:
e2:75:b7:ac:2c:d7:86:ea:9f:40:1e:76:4b:f4:f2:
5a:a6:73:f2:2c:f1:ab:c7:01:fd:a1:d9:77:71:f8:
a3:bb:95:a8:57:5d:9e:d1:12:8f:58:75:a2:6e:07:
0e:f6:a2:65:9e:f3:0e:c6:a2:99:d1:a1:b0:24:47:
ea:5b:b7:a7:aa:78:6d:42:11:1d:2f:95:42:24:e6:
a1:57:f4:2d:f2:10:54:d3:ee:7e:ee:8a:38:d4:43:
b3:4e:ed:49:25:4f:bf:dc:c9:23:b9:97:ae:b6:61:
34:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A6:1D:E3:03:F5:8D:55:E1:C6:2B:3A:F0:80:FB:A4:B6:3C:9A:DC
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/9qYd4wP1jVXhxis68ID7pLY8mtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.214.0/24
Signature Algorithm: sha256WithRSAEncryption
99:96:e0:6a:44:5d:11:2d:28:51:01:ff:89:fe:cd:14:ba:e0:
fe:f9:36:7c:f1:49:82:86:7b:61:3a:97:c9:35:c2:22:05:7b:
dc:65:1f:94:47:20:e4:93:66:6d:b8:ae:8c:6b:fc:75:38:67:
ab:d1:b6:a4:75:7f:89:d1:76:9a:49:b3:e0:3e:86:eb:0c:93:
4b:18:bb:24:62:3a:63:d6:20:b9:0f:bc:30:08:31:e0:da:e2:
b3:49:dd:e2:d3:7f:9a:4a:0c:ed:7a:07:7b:b7:d0:b1:5d:6d:
7f:d3:ac:95:1a:8e:3f:97:2f:3e:e6:e9:6b:8e:47:c4:c8:f1:
07:30:f9:7c:bf:fb:ae:b1:e6:ef:a9:5d:8e:f7:16:0d:83:02:
38:77:21:bb:5f:f6:cf:a6:75:e3:5b:d2:82:a0:85:1c:25:43:
2b:7b:3b:ae:17:df:fb:bb:ac:e0:d2:5e:78:33:be:7b:bf:8d:
09:63:7a:e5:4c:f0:68:b3:9c:62:6b:b6:a5:bf:a1:59:c4:0b:
d4:fe:1a:60:78:d6:f3:b6:b5:ff:df:18:9d:0b:79:67:33:26:
0e:df:d4:96:c5:a1:db:76:93:4c:39:28:63:5e:07:dc:9c:15:
d0:a1:f5:0a:69:73:df:c3:ec:88:f6:05:ce:98:76:39:91:e3:
d8:d6:c7:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYra1BdCPi3TGW0mt/p8gSPGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwOTI4MDgwNzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmE2MWRlMzAzZjU4ZDU1ZTFjNjJiM2FmMDgwZmJhNGI2M2M5YWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZsynPMsQb82vX6J9ijQggavbNps
L07FuYicseXYg6MWRVvTRv0WxYGYSdTwReii2THgplEUdBQWxF4gbvp+I9f5pXgM
kZ9APkSVcBV12ednON9hrEGXYHECYd8aaUbVoplY7gd2d7XyN6u8rwktf7NZ9iEn
LZqZXcOPNkHYISDxPX4GDCJMswmLKccFySBnEBcGIf/idbesLNeG6p9AHnZL9PJa
pnPyLPGrxwH9odl3cfiju5WoV12e0RKPWHWibgcO9qJlnvMOxqKZ0aGwJEfqW7en
qnhtQhEdL5VCJOahV/Qt8hBU0+5+7oo41EOzTu1JJU+/3MkjuZeutmE0nwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPamHeMD9Y1V4cYrOvCA+6S2PJrcMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvOXFZZDR3UDFqVlhoeGlzNjhJRDdwTFk4bXR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVTWMA0G
CSqGSIb3DQEBCwUAA4IBAQCZluBqRF0RLShRAf+J/s0UuuD++TZ88UmChnthOpfJ
NcIiBXvcZR+URyDkk2ZtuK6Ma/x1OGer0bakdX+J0XaaSbPgPobrDJNLGLskYjpj
1iC5D7wwCDHg2uKzSd3i03+aSgztegd7t9CxXW1/06yVGo4/ly8+5ulrjkfEyPEH
MPl8v/uusebvqV2O9xYNgwI4dyG7X/bPpnXjW9KCoIUcJUMrezuuF9/7u6zg0l54
M757v40JY3rlTPBos5xia7alv6FZxAvU/hpgeNbztrX/3xidC3lnMyYO39SWxaHb
dpNMOShjXgfcnBXQofUKaXPfw+yI9gXOmHY5kePY1sfY
-----END CERTIFICATE-----
Generated at Wed Oct 4 08:44:47 2023 by rpki-client on console-fra.rpki-client.org