Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/n0VOg8veYfaQwegu0hVVib7QbOc.roa
File: n0VOg8veYfaQwegu0hVVib7QbOc.roa (raw, json)
Hash identifier: oJ5MaYBXUlqUp0KyntKCw0ADOXH9obWIzYr51JOe68s=
Subject key identifier: 9F:45:4E:83:CB:DE:61:F6:90:C1:E8:2E:D2:15:55:89:BE:D0:6C:E7
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018B1B5D38DD3027AFD7E89DD22176386331
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/n0VOg8veYfaQwegu0hVVib7QbOc.roa
Signing time: Tue 10 Oct 2023 20:52:56 +0000
ROA not before: Tue 10 Oct 2023 20:52:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.92.0/23 maxlen: 24
80.246.225.0/24 maxlen: 24
80.246.232.0/24 maxlen: 24
80.246.233.0/24 maxlen: 24
80.246.236.0/24 maxlen: 24
80.246.236.0/22 maxlen: 24
80.246.237.0/24 maxlen: 24
80.246.238.0/24 maxlen: 24
80.246.239.0/24 maxlen: 24
80.246.234.0/24 maxlen: 24
80.246.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1b:5d:38:dd:30:27:af:d7:e8:9d:d2:21:76:38:63:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Oct 10 20:52:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f454e83cbde61f690c1e82ed2155589bed06ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:35:f0:2e:90:0e:51:5c:f0:3e:a9:90:ae:
d6:6d:46:59:e1:e9:00:5a:4c:ef:f5:79:ab:35:08:
4b:2e:1c:13:8f:93:b3:e8:9d:3f:2f:b0:7c:d9:8c:
4c:0e:bf:73:ff:e3:32:c1:97:7b:8d:f4:85:2c:fd:
2b:93:d3:72:c4:47:c0:47:54:3d:98:2a:da:d8:bc:
e3:5f:cd:58:7b:f8:a0:79:76:a0:83:44:e0:6c:ae:
ff:e2:fc:04:1f:b6:a8:24:ac:43:b8:88:e6:63:8f:
3e:46:a2:f1:d6:4c:20:c3:69:37:94:30:2d:11:86:
db:b8:0a:24:c4:22:4b:28:ca:6a:fc:7e:83:8a:43:
1a:8f:e9:e9:61:54:7b:eb:f7:d9:d2:61:0d:ff:7a:
5a:81:eb:57:4a:a1:68:fc:df:4d:70:b8:8e:8f:5a:
29:78:c6:03:77:d8:c1:89:3a:a6:cc:1a:f6:8a:aa:
8b:a7:80:d9:a5:bd:8d:51:35:3a:8a:1b:04:91:ad:
d5:c2:b1:b6:f0:e0:8e:19:36:f7:4c:79:83:ea:d2:
e2:d4:d2:c2:d1:22:54:ff:2b:e5:58:eb:f3:55:77:
b5:64:7e:02:06:10:8f:79:87:74:12:57:ad:9e:f5:
21:0d:7a:00:ea:3f:ed:c4:84:a6:ed:1c:bf:21:db:
7a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:45:4E:83:CB:DE:61:F6:90:C1:E8:2E:D2:15:55:89:BE:D0:6C:E7
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/n0VOg8veYfaQwegu0hVVib7QbOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.92.0/23
80.246.225.0/24
80.246.232.0/21
Signature Algorithm: sha256WithRSAEncryption
74:c1:d5:4d:ca:1b:e8:f0:de:37:33:f9:50:d4:b5:5b:6d:55:
7b:64:1d:ac:84:58:66:93:d6:11:cf:8c:d2:25:a8:14:b2:1c:
c2:8b:31:21:98:ba:50:b7:7e:5c:43:f2:21:3f:09:5e:11:74:
d1:6a:36:1b:77:1c:c1:b2:cf:12:60:32:64:1f:a7:5e:9f:37:
9d:8f:3b:0f:d9:a5:85:e6:49:f1:14:de:4d:2d:30:53:eb:6c:
76:5e:64:05:da:d3:bf:e3:16:d5:de:43:a7:d6:ee:6c:2f:16:
a0:09:a0:f6:7c:60:94:0e:3c:aa:6f:69:d4:24:f7:94:9b:46:
74:e6:47:86:6d:47:18:71:c3:e3:f3:ef:02:f7:56:2d:75:46:
90:e2:c0:26:f1:c5:98:8e:54:1b:f3:7a:a9:c0:e4:86:9d:0d:
7e:f5:c3:38:f1:0c:25:5f:6a:f1:07:a0:d3:21:48:2f:06:7b:
02:31:dd:59:f7:43:66:a1:8c:57:60:05:7e:d9:8a:f6:a7:d8:
c5:8c:2d:29:ec:c1:8c:52:6c:2c:4a:42:a9:09:d1:19:83:ac:
d4:a9:33:28:8b:f8:a0:8c:db:ee:df:74:97:7b:e9:7a:74:5c:
cc:76:f0:36:ee:9b:0a:3c:fc:24:69:60:c8:03:44:8b:4a:50:
17:a2:49:9e
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYsbXTjdMCev1+id0iF2OGMxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjMxMDEwMjA1MjU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjQ1NGU4M2NiZGU2MWY2OTBjMWU4MmVkMjE1NTU4OWJlZDA2Y2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLM18C6QDlFc8D6pkK7WbUZZ4ekA
Wkzv9XmrNQhLLhwTj5Oz6J0/L7B82YxMDr9z/+MywZd7jfSFLP0rk9NyxEfAR1Q9
mCra2LzjX81Ye/igeXagg0TgbK7/4vwEH7aoJKxDuIjmY48+RqLx1kwgw2k3lDAt
EYbbuAokxCJLKMpq/H6DikMaj+npYVR76/fZ0mEN/3pagetXSqFo/N9NcLiOj1op
eMYDd9jBiTqmzBr2iqqLp4DZpb2NUTU6ihsEka3VwrG28OCOGTb3THmD6tLi1NLC
0SJU/yvlWOvzVXe1ZH4CBhCPeYd0EletnvUhDXoA6j/txISm7Ry/Idt61wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJ9FToPL3mH2kMHoLtIVVYm+0GznMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvbjBWT2c4dmVZZmFRd2VndTBoVlZpYjdRYk9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLZVcAwQA
UPbhAwQDUPboMA0GCSqGSIb3DQEBCwUAA4IBAQB0wdVNyhvo8N43M/lQ1LVbbVV7
ZB2shFhmk9YRz4zSJagUshzCizEhmLpQt35cQ/IhPwleEXTRajYbdxzBss8SYDJk
H6denzedjzsP2aWF5knxFN5NLTBT62x2XmQF2tO/4xbV3kOn1u5sLxagCaD2fGCU
Djyqb2nUJPeUm0Z05keGbUcYccPj8+8C91YtdUaQ4sAm8cWYjlQb83qpwOSGnQ1+
9cM48QwlX2rxB6DTIUgvBnsCMd1Z90NmoYxXYAV+2Yr2p9jFjC0p7MGMUmwsSkKp
CdEZg6zUqTMoi/igjNvu33SXe+l6dFzMdvA27psKPPwkaWDIA0SLSlAXokme
-----END CERTIFICATE-----
Generated at Wed Oct 25 17:36:13 2023 by rpki-client on console-fra.rpki-client.org