Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/2GkfRwA6JRH_HIFrILvnl13PmKk.roa
File: 2GkfRwA6JRH_HIFrILvnl13PmKk.roa (raw, json)
Hash identifier: Itaqw+ms6gGjaQp0xJdhkphbIE8ORjrXcVBwBhvUBeY=
Subject key identifier: D8:69:1F:47:00:3A:25:11:FF:1C:81:6B:20:BB:E7:97:5D:CF:98:A9
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018B8FC15D45C198335B30D26E61705EB9D8
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/2GkfRwA6JRH_HIFrILvnl13PmKk.roa
Signing time: Thu 02 Nov 2023 11:18:15 +0000
ROA not before: Thu 02 Nov 2023 11:18:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 45.80.223.0/24 maxlen: 24
45.80.222.0/24 maxlen: 24
45.80.221.0/24 maxlen: 24
45.130.149.0/24 maxlen: 24
45.130.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:c1:5d:45:c1:98:33:5b:30:d2:6e:61:70:5e:b9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Nov 2 11:18:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8691f47003a2511ff1c816b20bbe7975dcf98a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:67:57:a4:ed:15:c9:72:da:a9:9a:e9:06:15:
67:c2:24:44:6b:2d:31:ae:51:cf:b2:94:57:8b:73:
7c:4f:f0:3f:6f:97:23:9f:d2:b9:81:dc:e2:38:ff:
11:71:6e:52:b1:ab:83:35:97:ca:d9:83:4f:84:f3:
ef:b9:ef:12:71:84:dc:42:4f:7e:51:fc:6b:27:c7:
47:b0:a3:c1:da:7d:36:c2:15:2a:08:00:d5:49:55:
47:ca:f6:af:59:97:1a:90:34:bf:81:80:aa:b4:ec:
f4:78:e6:c7:60:06:87:22:ea:47:a1:93:7b:f7:14:
c2:e1:4a:20:de:f3:f7:6a:0b:4b:ce:f0:77:34:b4:
5d:d6:23:2e:13:1e:1a:40:83:64:ac:1b:4d:d3:59:
b1:39:83:0b:67:ef:fc:d0:88:17:a5:65:98:4d:c2:
fe:ee:12:19:2b:7d:b1:7a:88:bf:0c:90:26:ab:b9:
d7:d5:6e:6c:c8:c4:6d:b6:c1:b8:00:98:1d:1f:f7:
e1:e4:d9:0d:8c:e4:73:bc:c7:66:23:ee:d4:0e:b0:
ae:0e:70:b8:66:76:0d:96:45:7c:11:b6:6c:0a:31:
b9:d1:aa:31:2d:35:1e:4a:68:12:f5:ed:9e:06:5c:
81:32:f9:68:58:43:9b:e9:5e:a4:31:e6:ae:f9:d6:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:69:1F:47:00:3A:25:11:FF:1C:81:6B:20:BB:E7:97:5D:CF:98:A9
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/2GkfRwA6JRH_HIFrILvnl13PmKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.221.0-45.80.223.255
45.130.148.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:83:43:bf:46:b5:6e:eb:8b:2f:71:75:b3:72:93:d0:65:4d:
8d:9c:ef:aa:31:76:e7:e8:1a:a4:e9:31:88:92:21:ec:a4:3a:
ff:c1:70:9f:83:46:42:c3:f9:c0:1a:e7:ef:76:f2:90:c6:7d:
61:e6:5e:1a:be:2b:26:2e:54:0f:3d:44:e2:cb:7d:34:e9:55:
74:d9:55:da:7e:8b:dd:bf:3f:e1:a7:3c:dd:8c:14:b8:c3:61:
41:ac:d4:b0:1e:8a:0f:94:9a:67:be:88:fb:2e:4f:24:b6:7f:
d1:8f:04:86:56:f6:2d:73:c1:ec:aa:ef:05:2f:03:65:56:b4:
1e:93:4d:64:4d:b0:94:c1:d3:70:a6:c7:3f:c9:af:45:f4:14:
18:cb:42:bd:f4:1f:6f:eb:ff:54:03:33:9b:52:13:c6:30:a1:
53:e1:05:60:5a:a6:aa:40:c8:a3:bd:2a:39:0e:25:cc:71:34:
21:b3:c0:b9:13:c9:35:88:e6:b8:68:ce:e7:7d:fc:5d:03:35:
44:13:1f:ee:df:ea:01:19:0f:92:a1:d6:b1:75:f6:f4:67:29:
0b:c8:be:72:07:5f:30:da:74:6a:de:d2:50:d9:b5:67:c6:3c:
94:c3:45:13:2d:5a:9f:3d:29:ab:f0:c0:a5:5c:d2:84:ca:91:
5e:c9:f7:bd
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYuPwV1FwZgzWzDSbmFwXrnYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjMxMTAyMTExODE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODY5MWY0NzAwM2EyNTExZmYxYzgxNmIyMGJiZTc5NzVkY2Y5OGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmdXpO0VyXLaqZrpBhVnwiREay0x
rlHPspRXi3N8T/A/b5cjn9K5gdziOP8RcW5SsauDNZfK2YNPhPPvue8ScYTcQk9+
UfxrJ8dHsKPB2n02whUqCADVSVVHyvavWZcakDS/gYCqtOz0eObHYAaHIupHoZN7
9xTC4Uog3vP3agtLzvB3NLRd1iMuEx4aQINkrBtN01mxOYMLZ+/80IgXpWWYTcL+
7hIZK32xeoi/DJAmq7nX1W5syMRttsG4AJgdH/fh5NkNjORzvMdmI+7UDrCuDnC4
ZnYNlkV8EbZsCjG50aoxLTUeSmgS9e2eBlyBMvloWEOb6V6kMeau+daAHwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFNhpH0cAOiUR/xyBayC755ddz5ipMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvMkdrZlJ3QTZKUkhfSElGcklMdm5sMTNQbUtrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAtUN0D
BAUtUMADBAEtgpQwDQYJKoZIhvcNAQELBQADggEBAIuDQ79GtW7riy9xdbNyk9Bl
TY2c76oxdufoGqTpMYiSIeykOv/BcJ+DRkLD+cAa5+928pDGfWHmXhq+KyYuVA89
ROLLfTTpVXTZVdp+i92/P+GnPN2MFLjDYUGs1LAeig+Umme+iPsuTyS2f9GPBIZW
9i1zweyq7wUvA2VWtB6TTWRNsJTB03Cmxz/Jr0X0FBjLQr30H2/r/1QDM5tSE8Yw
oVPhBWBapqpAyKO9KjkOJcxxNCGzwLkTyTWI5rhozud9/F0DNUQTH+7f6gEZD5Kh
1rF19vRnKQvIvnIHXzDadGre0lDZtWfGPJTDRRMtWp89KavwwKVc0oTKkV7J970=
Generated at Thu Nov 2 12:17:01 2023 by rpki-client on console-ams.rpki-client.org