Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/d9dp8nCs09gfaS5flWzE1IF1ETM.roa
File: d9dp8nCs09gfaS5flWzE1IF1ETM.roa (raw, json)
Hash identifier: rigpKuyU49ukOjyDZu5EmYnqjpZCIqARaBSmlLbkTGg=
Subject key identifier: 77:D7:69:F2:70:AC:D3:D8:1F:69:2E:5F:95:6C:C4:D4:81:75:11:33
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 018570B07D25C34E6FCB603652ACAEA7C5C1
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/d9dp8nCs09gfaS5flWzE1IF1ETM.roa
Signing time: Mon 02 Jan 2023 04:14:52 +0000
ROA not before: Mon 02 Jan 2023 04:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35913
IP address blocks: 87.236.165.0/24 maxlen: 32
45.150.225.0/24 maxlen: 32
45.150.224.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b0:7d:25:c3:4e:6f:cb:60:36:52:ac:ae:a7:c5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Jan 2 04:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77d769f270acd3d81f692e5f956cc4d481751133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d5:c5:e8:b0:99:92:cd:5a:99:e9:31:e6:59:
35:9f:3b:ad:e0:af:84:de:8d:f6:dc:b9:c6:72:47:
07:d4:df:3e:9b:e9:a2:06:31:1c:91:84:be:b7:ef:
60:1c:52:52:cf:0e:b3:50:b3:18:bc:d0:2e:30:c4:
99:f0:63:3a:d3:f6:9d:7d:e1:24:91:3b:cd:e1:fa:
71:20:94:b6:f1:eb:8b:7b:c0:b9:79:21:40:78:9c:
9a:14:43:69:e7:d6:4b:7e:e6:8e:4a:b0:c6:be:c8:
4c:ef:df:e6:a6:45:be:2f:7f:bd:4e:c1:dc:b2:66:
a4:4f:0f:95:61:6a:90:68:1a:e0:4c:b9:48:9a:52:
56:07:42:3e:d2:71:e2:6d:1e:6f:07:00:03:66:8d:
ac:19:2b:ed:83:db:c8:4f:4b:95:08:3c:5e:9a:62:
53:f9:7a:65:b6:11:b2:52:36:f4:0f:1b:74:c9:56:
88:2f:e2:80:7f:f8:eb:f7:c7:0a:f9:c6:a2:ed:a2:
c0:ea:c9:78:b9:56:f4:d4:21:c1:a2:52:2a:54:db:
9b:eb:32:60:32:16:43:1a:82:93:88:81:b4:48:82:
eb:8d:a2:6a:10:fe:39:b5:a9:cf:de:91:f2:fc:55:
6b:c8:53:f7:ec:3b:0e:8c:95:6b:3f:96:e1:11:fa:
8a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D7:69:F2:70:AC:D3:D8:1F:69:2E:5F:95:6C:C4:D4:81:75:11:33
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/d9dp8nCs09gfaS5flWzE1IF1ETM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.224.0/23
87.236.165.0/24
Signature Algorithm: sha256WithRSAEncryption
19:94:f2:29:8d:06:05:b2:94:44:76:f2:82:7a:bb:fc:e3:42:
f2:01:8e:d1:79:64:cd:b8:12:6b:de:5e:aa:6e:a3:8c:a6:92:
e3:d6:23:67:57:ea:5d:f8:6c:b6:66:6f:93:dd:fe:9a:cb:fb:
6d:b8:3d:57:99:e8:36:21:f1:de:0e:5a:11:08:a7:80:c8:af:
e1:79:19:82:0b:7c:e9:e6:0d:a3:3a:96:4f:d3:e2:a7:0f:28:
fd:b2:9a:7b:34:6b:59:61:36:1c:6c:51:13:4e:42:bd:42:cf:
a6:f5:70:23:4a:a3:2d:e1:24:53:e4:89:36:9d:e5:b9:ed:c3:
18:44:b4:fa:19:dc:e9:aa:90:5a:cd:db:87:18:83:3d:06:2b:
5a:d4:f9:f7:7f:51:6f:76:34:f3:5d:21:df:53:a3:77:75:85:
b1:b5:6d:d6:6d:b8:7e:b4:50:71:27:f0:a3:45:84:15:7a:5f:
2d:e4:73:1d:ce:df:ad:fc:ad:3c:24:31:8f:7f:0c:3c:30:ec:
36:df:67:d2:32:90:06:70:93:8e:36:41:41:71:fc:37:3e:6a:
10:df:36:13:b9:3b:ed:1c:6b:55:1f:c3:ab:9e:a8:8c:24:74:
fe:66:2e:2b:97:74:08:a3:92:ef:c2:15:ba:de:b5:6a:23:a6:
de:5c:e5:cb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwsH0lw05vy2A2Uqyup8XBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk
NDI1YjAwHhcNMjMwMTAyMDQxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2Q3NjlmMjcwYWNkM2Q4MWY2OTJlNWY5NTZjYzRkNDgxNzUxMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NXF6LCZks1amekx5lk1nzut4K+E
3o323LnGckcH1N8+m+miBjEckYS+t+9gHFJSzw6zULMYvNAuMMSZ8GM60/adfeEk
kTvN4fpxIJS28euLe8C5eSFAeJyaFENp59ZLfuaOSrDGvshM79/mpkW+L3+9TsHc
smakTw+VYWqQaBrgTLlImlJWB0I+0nHibR5vBwADZo2sGSvtg9vIT0uVCDxemmJT
+XplthGyUjb0Dxt0yVaIL+KAf/jr98cK+cai7aLA6sl4uVb01CHBolIqVNub6zJg
MhZDGoKTiIG0SILrjaJqEP45tanP3pHy/FVryFP37DsOjJVrP5bhEfqK2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHfXafJwrNPYH2kuX5VsxNSBdREzMB8GA1UdIwQY
MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt
YjAzZGY5OTZlNDgxLzEvZDlkcDhuQ3MwOWdmYVM1ZmxXekUxSUYxRVRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx
LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZbgAwQA
V+ylMA0GCSqGSIb3DQEBCwUAA4IBAQAZlPIpjQYFspREdvKCerv840LyAY7ReWTN
uBJr3l6qbqOMppLj1iNnV+pd+Gy2Zm+T3f6ay/ttuD1Xmeg2IfHeDloRCKeAyK/h
eRmCC3zp5g2jOpZP0+KnDyj9spp7NGtZYTYcbFETTkK9Qs+m9XAjSqMt4SRT5Ik2
neW57cMYRLT6GdzpqpBazduHGIM9Bita1Pn3f1FvdjTzXSHfU6N3dYWxtW3Wbbh+
tFBxJ/CjRYQVel8t5HMdzt+t/K08JDGPfww8MOw232fSMpAGcJOONkFBcfw3PmoQ
3zYTuTvtHGtVH8OrnqiMJHT+Zi4rl3QIo5LvwhW63rVqI6beXOXL
-----END CERTIFICATE-----
Generated at Fri Dec 15 19:42:36 2023 by rpki-client on console-fra.rpki-client.org