Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1oEGj5-oVdXvxgXbwgwiPNiUU0E.roa
File: 1oEGj5-oVdXvxgXbwgwiPNiUU0E.roa (raw, json)
Hash identifier: C12lzTMJ3LIMRMbS3ljxQ27YKTFWgGG0BzMGJF7BFck=
Subject key identifier: D6:81:06:8F:9F:A8:55:D5:EF:C6:05:DB:C2:0C:22:3C:D8:94:53:41
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 0185D6447E5709B5F491D54A9D1B0F5BDE63
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1oEGj5-oVdXvxgXbwgwiPNiUU0E.roa
Signing time: Sat 21 Jan 2023 21:38:11 +0000
ROA not before: Sat 21 Jan 2023 21:38:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 45.149.92.0/23 maxlen: 24
80.246.233.0/24 maxlen: 24
80.246.232.0/24 maxlen: 24
80.246.234.0/24 maxlen: 24
80.246.235.0/24 maxlen: 24
80.246.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d6:44:7e:57:09:b5:f4:91:d5:4a:9d:1b:0f:5b:de:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jan 21 21:38:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d681068f9fa855d5efc605dbc20c223cd8945341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:06:aa:96:e2:18:0d:84:d9:68:d4:d5:8e:f3:
82:f6:1d:d2:0a:a0:9a:80:1b:4d:a2:ec:55:09:f0:
27:fb:74:da:3a:75:59:ad:3a:7f:f5:b5:bf:68:7f:
90:d4:5f:b1:89:46:a4:42:a1:3e:49:cd:ae:35:e3:
1e:a5:00:ef:ef:51:82:44:6b:1e:45:c1:e5:a5:2b:
c5:d8:bc:40:b9:b0:15:5d:90:64:08:f8:4b:08:b3:
8e:58:df:a0:7f:04:c7:e4:07:fd:bb:b8:b8:e7:59:
ea:fa:dc:ae:ad:45:29:2f:76:42:3d:52:b7:dc:9b:
df:13:95:26:8a:6e:1f:4b:4c:2b:04:aa:f6:db:47:
92:b3:13:1c:13:c7:26:d0:5b:9a:e2:9c:1c:1d:b0:
d6:47:61:f8:b8:bf:cc:8e:e4:69:16:61:37:f4:42:
c9:61:65:67:82:e2:c5:9f:b4:8e:6d:63:d0:9f:ce:
e9:72:b7:b7:3b:87:8c:8b:6f:6e:2e:4c:fe:4a:f2:
e4:5b:ac:9d:6d:41:ba:86:30:4f:69:8f:7a:84:fe:
bd:2f:b2:dc:65:f1:0b:c5:5d:61:dc:0a:31:1e:96:
54:97:63:5d:20:c3:25:29:33:8f:ce:85:93:ee:ab:
fa:43:be:fe:ba:d9:c6:28:17:37:4b:72:7a:be:23:
05:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:81:06:8F:9F:A8:55:D5:EF:C6:05:DB:C2:0C:22:3C:D8:94:53:41
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1oEGj5-oVdXvxgXbwgwiPNiUU0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.92.0/23
80.246.232.0-80.246.236.255
Signature Algorithm: sha256WithRSAEncryption
43:ed:2b:ab:39:1b:94:73:9b:e0:1c:ca:de:18:b3:49:d8:da:
48:7e:2b:48:dd:64:3f:72:e0:3a:be:2f:7e:f3:b8:54:5e:b8:
b1:5a:78:bb:84:6c:59:3e:85:69:24:38:56:cd:d2:ae:5d:ea:
6e:2f:d4:ff:67:1a:75:d4:ad:70:5a:b8:f2:8c:39:50:5f:b6:
6a:b4:96:2c:78:98:e3:fe:dd:0a:67:22:c3:69:75:6b:a9:ce:
7a:c3:c7:0d:4d:1b:9a:d5:d0:33:5d:50:e0:18:94:c7:20:2d:
4d:86:f0:6d:e6:a6:62:20:c0:ca:68:88:d8:f3:0a:4a:8a:7a:
d4:af:b9:5a:83:04:a8:4d:4d:2e:46:08:45:9e:7f:6d:30:1a:
59:9d:99:e7:37:3d:ca:14:8d:45:b2:41:fc:8a:5c:4c:a8:4a:
cc:f6:85:e1:b1:9b:a1:72:4d:0b:3f:33:c0:70:3f:66:b7:bf:
1a:55:f2:9f:aa:76:7f:65:8d:8b:c0:7a:d0:4d:86:53:9a:a5:
bb:55:33:03:2b:19:c5:62:37:ff:1f:50:51:05:13:34:23:37:
8a:bc:4a:f7:15:28:c8:7f:92:a6:86:aa:f4:a3:8f:7d:ca:e6:
a1:71:4d:95:3a:e3:b2:c7:53:5a:0c:44:8a:d3:5b:32:ba:5a:
c6:81:eb:99
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYXWRH5XCbX0kdVKnRsPW95jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjMwMTIxMjEzODExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjgxMDY4ZjlmYTg1NWQ1ZWZjNjA1ZGJjMjBjMjIzY2Q4OTQ1MzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigaqluIYDYTZaNTVjvOC9h3SCqCa
gBtNouxVCfAn+3TaOnVZrTp/9bW/aH+Q1F+xiUakQqE+Sc2uNeMepQDv71GCRGse
RcHlpSvF2LxAubAVXZBkCPhLCLOOWN+gfwTH5Af9u7i451nq+tyurUUpL3ZCPVK3
3JvfE5Umim4fS0wrBKr220eSsxMcE8cm0Fua4pwcHbDWR2H4uL/MjuRpFmE39ELJ
YWVnguLFn7SObWPQn87pcre3O4eMi29uLkz+SvLkW6ydbUG6hjBPaY96hP69L7Lc
ZfELxV1h3AoxHpZUl2NdIMMlKTOPzoWT7qv6Q77+utnGKBc3S3J6viMFhQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFNaBBo+fqFXV78YF28IMIjzYlFNBMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvMW9FR2o1LW9WZFh2eGdYYndnd2lQTmlVVTBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQBLZVcMAwD
BANQ9ugDBABQ9uwwDQYJKoZIhvcNAQELBQADggEBAEPtK6s5G5Rzm+Acyt4Ys0nY
2kh+K0jdZD9y4Dq+L37zuFReuLFaeLuEbFk+hWkkOFbN0q5d6m4v1P9nGnXUrXBa
uPKMOVBftmq0lix4mOP+3QpnIsNpdWupznrDxw1NG5rV0DNdUOAYlMcgLU2G8G3m
pmIgwMpoiNjzCkqKetSvuVqDBKhNTS5GCEWef20wGlmdmec3PcoUjUWyQfyKXEyo
Ssz2heGxm6FyTQs/M8BwP2a3vxpV8p+qdn9ljYvAetBNhlOapbtVMwMrGcViN/8f
UFEFEzQjN4q8SvcVKMh/kqaGqvSjj33K5qFxTZU647LHU1oMRIrTWzK6WsaB65k=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:09 2023 by rpki-client on console-ams.rpki-client.org