Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EcXmrAnsoZ8cuyZKsK64u70lVUM.roa
File: EcXmrAnsoZ8cuyZKsK64u70lVUM.roa (raw, json)
Hash identifier: TCIz12E6vTQ1ZZ31rbZ5GQvYAL/UmQs/PhD45FNTIVA=
Subject key identifier: 11:C5:E6:AC:09:EC:A1:9F:1C:BB:26:4A:B0:AE:B8:BB:BD:25:55:43
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01895A9DB5BEE5E5ADB1394F669AA883DF90
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EcXmrAnsoZ8cuyZKsK64u70lVUM.roa
Signing time: Sat 15 Jul 2023 17:33:52 +0000
ROA not before: Sat 15 Jul 2023 17:33:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.8.187.0/24 maxlen: 24
85.209.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5a:9d:b5:be:e5:e5:ad:b1:39:4f:66:9a:a8:83:df:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 15 17:33:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11c5e6ac09eca19f1cbb264ab0aeb8bbbd255543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ff:4c:16:64:c5:14:00:c3:e5:f6:ba:be:3d:3e:
6b:b1:45:d9:65:90:25:96:5a:66:7f:af:97:51:a5:
aa:07:67:48:06:21:54:19:49:a7:f6:d5:bf:f3:85:
7a:73:c8:99:e8:11:ce:59:d0:f0:4a:cc:4c:22:78:
b3:2f:07:0d:b6:aa:d7:3a:4e:74:c0:87:35:67:8d:
c1:d6:7b:73:ab:96:0a:c0:96:ee:32:03:15:7a:01:
bc:b5:de:df:5a:ae:b4:32:c9:ac:2e:08:94:80:85:
53:ac:5a:95:c5:17:23:34:6b:26:63:20:d7:ca:2e:
1d:9e:c4:2b:ca:26:4a:c0:fc:ac:5f:b1:83:22:45:
a2:d1:82:62:d3:dd:4d:47:d1:4f:7e:b3:9f:ee:9c:
54:6a:45:dd:0e:d8:b4:ba:87:6c:68:fb:e6:f5:fb:
14:21:b7:22:5f:39:be:39:24:2c:7f:5d:9f:c4:cd:
46:ee:50:cd:38:15:d0:cd:3e:6a:40:f3:d8:a3:1c:
55:49:11:99:f6:d0:31:17:4d:d5:ef:ec:6c:4d:ed:
43:5c:0e:aa:06:82:a6:8c:53:0e:a8:d3:ac:e8:4f:
68:33:22:48:08:d4:b8:66:e7:41:71:43:ca:26:7d:
45:d2:12:f1:44:96:24:a3:f2:56:c8:98:58:34:a2:
4e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C5:E6:AC:09:EC:A1:9F:1C:BB:26:4A:B0:AE:B8:BB:BD:25:55:43
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/EcXmrAnsoZ8cuyZKsK64u70lVUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.187.0/24
85.209.161.0/24
Signature Algorithm: sha256WithRSAEncryption
16:27:e5:90:c8:b1:96:24:2e:6e:64:e5:9c:16:f0:7f:8d:91:
18:9f:c4:83:2d:a7:16:9d:e7:ac:45:3c:eb:4c:07:17:69:a9:
1a:83:be:fd:c7:28:cd:78:2b:0f:6b:12:a0:4e:aa:02:fb:c8:
98:0b:4b:88:00:18:44:98:57:6c:57:8f:71:65:ee:cc:a2:dd:
de:d2:59:51:83:92:0a:8e:80:aa:61:25:20:4e:d1:ce:d2:35:
db:45:54:c1:3a:4c:ce:42:da:a6:10:ca:73:f8:28:33:bc:11:
aa:78:c0:e2:eb:12:0b:af:eb:e5:03:b2:21:8e:9b:e6:7a:7d:
b8:7e:4c:21:ce:e6:41:93:5b:8b:d7:59:74:35:9b:95:65:6a:
d2:c9:d4:c5:68:3d:7b:7c:38:f3:1e:eb:bc:7d:a6:74:bd:02:
5d:a9:c7:0d:ba:03:07:3f:df:b4:b5:f8:77:13:84:36:36:37:
52:cc:2a:45:1a:e8:26:89:d5:6f:99:b0:ca:b8:bf:b1:26:1d:
2b:c7:0e:d6:92:84:1a:eb:74:2b:6e:b8:fe:79:5d:c1:db:48:
35:0e:a5:f2:c7:63:66:a4:ee:02:78:04:91:96:2d:9a:0f:c2:
72:4d:da:4e:cd:2d:cf:6a:96:7f:a3:e2:2b:5e:28:77:78:4a:
9e:b1:2e:0b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYlanbW+5eWtsTlPZpqog9+QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwNzE1MTczMzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWM1ZTZhYzA5ZWNhMTlmMWNiYjI2NGFiMGFlYjhiYmJkMjU1NTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/0wWZMUUAMPl9rq+PT5rsUXZZZAl
llpmf6+XUaWqB2dIBiFUGUmn9tW/84V6c8iZ6BHOWdDwSsxMInizLwcNtqrXOk50
wIc1Z43B1ntzq5YKwJbuMgMVegG8td7fWq60MsmsLgiUgIVTrFqVxRcjNGsmYyDX
yi4dnsQryiZKwPysX7GDIkWi0YJi091NR9FPfrOf7pxUakXdDti0uodsaPvm9fsU
IbciXzm+OSQsf12fxM1G7lDNOBXQzT5qQPPYoxxVSRGZ9tAxF03V7+xsTe1DXA6q
BoKmjFMOqNOs6E9oMyJICNS4ZudBcUPKJn1F0hLxRJYko/JWyJhYNKJOmQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBHF5qwJ7KGfHLsmSrCuuLu9JVVDMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvRWNYbXJBbnNvWjhjdXlaS3NLNjR1NzBsVlVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQi7AwQA
VdGhMA0GCSqGSIb3DQEBCwUAA4IBAQAWJ+WQyLGWJC5uZOWcFvB/jZEYn8SDLacW
neesRTzrTAcXaakag779xyjNeCsPaxKgTqoC+8iYC0uIABhEmFdsV49xZe7Mot3e
0llRg5IKjoCqYSUgTtHO0jXbRVTBOkzOQtqmEMpz+CgzvBGqeMDi6xILr+vlA7Ih
jpvmen24fkwhzuZBk1uL11l0NZuVZWrSydTFaD17fDjzHuu8faZ0vQJdqccNugMH
P9+0tfh3E4Q2NjdSzCpFGugmidVvmbDKuL+xJh0rxw7WkoQa63Qrbrj+eV3B20g1
DqXyx2NmpO4CeASRli2aD8JyTdpOzS3PapZ/o+IrXih3eEqesS4L
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org