Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QxYnHVOnUJq-w1DvZjy3kFCW6a0.roa
File: QxYnHVOnUJq-w1DvZjy3kFCW6a0.roa (raw, json)
Hash identifier: 0t8f8JqtKLy8K/FHjIrm5UGRWdj7lUXEZ8o6VUNWHak=
Subject key identifier: 43:16:27:1D:53:A7:50:9A:BE:C3:50:EF:66:3C:B7:90:50:96:E9:AD
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018A6EEB61EE640CED98D210639C4A72B8EF
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QxYnHVOnUJq-w1DvZjy3kFCW6a0.roa
Signing time: Thu 07 Sep 2023 09:13:54 +0000
ROA not before: Thu 07 Sep 2023 09:13:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.128.56.0/24 maxlen: 24
45.128.74.0/24 maxlen: 24
45.92.165.0/24 maxlen: 24
45.92.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6e:eb:61:ee:64:0c:ed:98:d2:10:63:9c:4a:72:b8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 7 09:13:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4316271d53a7509abec350ef663cb7905096e9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:48:79:f4:eb:a9:04:82:06:e5:0a:71:46:a8:
fb:bb:ef:83:39:47:02:7a:d1:50:5e:26:e3:4b:6c:
a7:69:cb:fe:c8:11:89:46:4e:d9:a5:03:4d:71:a8:
8a:40:b1:cf:52:07:be:47:45:86:e6:a5:5f:33:d6:
10:43:64:a5:ec:2d:28:9b:f9:4c:0f:d3:de:c8:f2:
2b:3a:b0:11:28:21:be:ca:84:dc:27:83:92:ba:00:
f9:65:5b:72:94:53:cb:34:2f:61:d9:42:91:19:11:
84:f8:96:bf:4d:8b:6d:cd:dc:9b:c1:f8:c6:49:cb:
7d:2a:f9:a2:a2:2f:dc:93:79:8e:0b:09:de:33:0b:
91:af:68:fb:25:b2:10:7a:f7:d6:34:25:75:e6:dc:
7b:df:4f:0f:7b:cf:d0:87:e4:75:8a:45:83:c8:a6:
7e:65:1e:e8:95:13:ed:4b:c6:4e:47:09:9c:da:89:
05:c8:dc:2c:95:46:2a:47:fd:df:e4:ec:fc:d5:42:
5d:d5:df:b8:e6:88:f4:a7:26:32:45:8b:ba:94:13:
f8:48:92:4b:05:b6:45:cb:ed:6b:4f:fd:ce:49:a7:
1c:78:20:03:20:06:45:e2:6b:f5:81:68:70:a6:8c:
74:c5:4f:67:08:e1:be:8e:76:df:91:e8:08:2c:8f:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:16:27:1D:53:A7:50:9A:BE:C3:50:EF:66:3C:B7:90:50:96:E9:AD
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/QxYnHVOnUJq-w1DvZjy3kFCW6a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.164.0/23
45.128.56.0/24
45.128.74.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:65:c8:2b:26:2b:b1:86:da:89:c0:f2:fe:6a:ca:9d:7c:28:
2a:d2:04:e1:a1:b9:e2:2f:c3:96:f7:f6:da:21:c6:15:b0:74:
31:bb:05:c2:a4:f6:5e:c9:bd:ec:12:74:e9:ef:e2:49:7e:b8:
07:85:0a:8d:bd:86:49:d7:fd:08:10:20:ce:fa:35:20:42:23:
84:4c:09:56:b5:8b:de:f9:07:de:9d:93:41:ee:d7:47:9b:df:
0e:d6:f4:b2:02:b7:e8:76:43:1b:c9:3e:f1:90:22:15:2b:b3:
40:3a:8b:b0:2e:43:21:1e:48:1a:ef:75:bd:6a:5f:e5:53:82:
8b:aa:28:7d:4a:7a:cd:53:60:70:a8:d5:7b:76:59:78:81:e9:
25:98:88:de:1f:ff:b9:44:65:2e:82:b6:eb:be:6b:e5:b6:9b:
3f:7e:43:cc:09:e7:b1:5d:9d:f8:43:b8:1e:19:a9:c0:66:5f:
c9:cc:5a:01:eb:3e:91:cb:02:a3:69:7a:e5:af:0d:0e:58:3e:
08:af:0a:9d:9d:e4:e2:f7:b9:ef:4e:38:19:bb:40:3e:84:cf:
82:07:a8:b7:bd:74:78:91:d9:35:36:bb:71:69:ce:03:75:3b:
24:44:90:9d:78:ad:d3:97:b7:5c:e3:31:62:b5:8b:bc:52:cb:
04:34:bc:60
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYpu62HuZAztmNIQY5xKcrjvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwOTA3MDkxMzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzE2MjcxZDUzYTc1MDlhYmVjMzUwZWY2NjNjYjc5MDUwOTZlOWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0h59OupBIIG5QpxRqj7u++DOUcC
etFQXibjS2ynacv+yBGJRk7ZpQNNcaiKQLHPUge+R0WG5qVfM9YQQ2Sl7C0om/lM
D9PeyPIrOrARKCG+yoTcJ4OSugD5ZVtylFPLNC9h2UKRGRGE+Ja/TYttzdybwfjG
Sct9Kvmioi/ck3mOCwneMwuRr2j7JbIQevfWNCV15tx7308Pe8/Qh+R1ikWDyKZ+
ZR7olRPtS8ZORwmc2okFyNwslUYqR/3f5Oz81UJd1d+45oj0pyYyRYu6lBP4SJJL
BbZFy+1rT/3OSacceCADIAZF4mv1gWhwpox0xU9nCOG+jnbfkegILI/wYQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEMWJx1Tp1CavsNQ72Y8t5BQlumtMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvUXhZbkhWT25VSnEtdzFEdlpqeTNrRkNXNmEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLVykAwQA
LYA4AwQALYBKMA0GCSqGSIb3DQEBCwUAA4IBAQCjZcgrJiuxhtqJwPL+asqdfCgq
0gThobniL8OW9/baIcYVsHQxuwXCpPZeyb3sEnTp7+JJfrgHhQqNvYZJ1/0IECDO
+jUgQiOETAlWtYve+QfenZNB7tdHm98O1vSyArfodkMbyT7xkCIVK7NAOouwLkMh
Hkga73W9al/lU4KLqih9SnrNU2BwqNV7dll4geklmIjeH/+5RGUugrbrvmvltps/
fkPMCeexXZ34Q7geGanAZl/JzFoB6z6RywKjaXrlrw0OWD4IrwqdneTi97nvTjgZ
u0A+hM+CB6i3vXR4kdk1Nrtxac4DdTskRJCdeK3Tl7dc4zFitYu8UssENLxg
-----END CERTIFICATE-----
Generated at Thu Sep 7 11:45:16 2023 by rpki-client on console-fra.rpki-client.org