Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/RkxJs2e01QZ17A_EHubF3lieSAw.roa
File: RkxJs2e01QZ17A_EHubF3lieSAw.roa (raw, json)
Hash identifier: RZP0234j5vEdAlUtII8ug72p0z5nAew3YFNExVPLjQs=
Subject key identifier: 46:4C:49:B3:67:B4:D5:06:75:EC:0F:C4:1E:E6:C5:DE:58:9E:48:0C
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01884C765A6F650183A414FB4A636DEB2E1A
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/RkxJs2e01QZ17A_EHubF3lieSAw.roa
Signing time: Wed 24 May 2023 06:33:24 +0000
ROA not before: Wed 24 May 2023 06:33:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201814
IP address blocks: 91.206.169.0/24 maxlen: 24
45.138.16.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4c:76:5a:6f:65:01:83:a4:14:fb:4a:63:6d:eb:2e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: May 24 06:33:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=464c49b367b4d50675ec0fc41ee6c5de589e480c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:15:c9:b3:88:a4:c6:57:24:64:60:48:e0:65:
fd:e7:e2:bc:a6:f8:55:39:0c:e2:36:a3:ed:65:34:
22:c2:c5:20:e3:47:df:0f:f4:ef:54:10:30:bc:fd:
6d:2e:32:ad:75:4d:18:da:5f:10:5d:bd:34:cd:f1:
19:ee:e5:f3:ca:95:29:e4:60:b3:a6:e5:7f:86:fe:
9c:16:84:87:c5:3f:b4:4e:c8:13:a2:83:da:5d:86:
4e:71:c9:cb:1b:58:fd:16:7d:33:db:2d:f7:bf:56:
ec:f6:61:83:ea:93:7a:07:33:38:c6:01:a0:6c:fa:
7a:f3:44:f7:f8:20:51:10:f0:96:0f:4c:74:33:6f:
62:85:c8:b3:98:a5:a5:b4:d0:5f:cf:c6:ce:de:2e:
79:db:bb:f2:f8:d1:e1:f5:1c:e2:8b:b7:2b:1d:08:
5f:9d:d2:55:bc:ad:d0:16:c9:a4:44:22:b1:6a:67:
66:9f:30:cb:6c:0a:4a:bd:06:6f:1d:35:33:7d:72:
96:b8:02:b8:59:3f:e3:de:4e:ea:dd:f1:a6:4b:28:
14:a5:3c:68:89:d5:96:7a:2d:1b:df:d5:bc:84:8e:
e4:53:04:66:cf:fd:f9:0b:fe:17:d8:13:82:69:df:
dc:6c:78:87:91:51:36:cb:bf:c6:b8:3a:28:75:53:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4C:49:B3:67:B4:D5:06:75:EC:0F:C4:1E:E6:C5:DE:58:9E:48:0C
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/RkxJs2e01QZ17A_EHubF3lieSAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.16.0/24
91.206.169.0/24
Signature Algorithm: sha256WithRSAEncryption
07:f6:40:75:57:d1:2b:5e:1f:bb:1e:ce:23:7f:3e:3a:31:cf:
16:a1:b3:da:a4:06:a9:32:a8:d0:fe:75:1c:70:22:91:f8:2e:
1a:b9:95:1c:0f:36:10:e6:7e:6d:1d:d4:3b:a3:12:d1:cc:09:
d5:70:c0:20:a4:1c:80:52:81:e5:56:fc:c5:ca:34:53:62:4d:
3d:27:31:e9:a6:3c:0c:4d:9b:2d:ea:b1:0a:66:d1:42:3e:3f:
2e:4e:e9:d1:04:05:a8:06:3a:75:0f:82:d3:73:93:0c:c5:a2:
0b:c0:67:a2:b4:18:8c:c0:72:80:30:ad:5d:a0:e1:de:81:7a:
30:d4:82:86:aa:f1:b4:07:cd:1b:30:84:11:2b:84:5c:16:db:
fa:79:26:2e:ed:fa:c6:c2:5a:63:4b:18:e0:fe:ab:46:7e:d5:
32:50:24:b4:14:10:a0:d8:5a:b0:c2:b6:6c:e7:0d:2d:da:b1:
e3:e7:33:f0:6b:16:dc:7d:a7:b3:73:20:63:87:ac:dd:b8:08:
76:9e:6f:7e:6b:18:45:b9:ca:ce:7f:8c:98:21:68:41:9d:d4:
3c:10:35:65:d5:f5:a8:45:29:d4:b6:62:68:9c:c9:29:02:1c:
e7:e5:24:82:98:02:a2:79:4d:c7:c8:12:fe:d0:2b:f7:cb:1e:
e0:8c:a3:9f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYhMdlpvZQGDpBT7SmNt6y4aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwNTI0MDYzMzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjRjNDliMzY3YjRkNTA2NzVlYzBmYzQxZWU2YzVkZTU4OWU0ODBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BXJs4ikxlckZGBI4GX95+K8pvhV
OQziNqPtZTQiwsUg40ffD/TvVBAwvP1tLjKtdU0Y2l8QXb00zfEZ7uXzypUp5GCz
puV/hv6cFoSHxT+0TsgTooPaXYZOccnLG1j9Fn0z2y33v1bs9mGD6pN6BzM4xgGg
bPp680T3+CBREPCWD0x0M29ihcizmKWltNBfz8bO3i5527vy+NHh9Rzii7crHQhf
ndJVvK3QFsmkRCKxamdmnzDLbApKvQZvHTUzfXKWuAK4WT/j3k7q3fGmSygUpTxo
idWWei0b39W8hI7kUwRmz/35C/4X2BOCad/cbHiHkVE2y7/GuDoodVMc+QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEZMSbNntNUGdewPxB7mxd5YnkgMMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvUmt4SnMyZTAxUVoxN0FfRUh1YkYzbGllU0F3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYoQAwQA
W86pMA0GCSqGSIb3DQEBCwUAA4IBAQAH9kB1V9ErXh+7Hs4jfz46Mc8WobPapAap
MqjQ/nUccCKR+C4auZUcDzYQ5n5tHdQ7oxLRzAnVcMAgpByAUoHlVvzFyjRTYk09
JzHppjwMTZst6rEKZtFCPj8uTunRBAWoBjp1D4LTc5MMxaILwGeitBiMwHKAMK1d
oOHegXow1IKGqvG0B80bMIQRK4RcFtv6eSYu7frGwlpjSxjg/qtGftUyUCS0FBCg
2FqwwrZs5w0t2rHj5zPwaxbcfaezcyBjh6zduAh2nm9+axhFucrOf4yYIWhBndQ8
EDVl1fWoRSnUtmJonMkpAhzn5SSCmAKieU3HyBL+0Cv3yx7gjKOf
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org