Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/IrH_CBS5Owa69T78NGrW2N5o5x0.roa
File: IrH_CBS5Owa69T78NGrW2N5o5x0.roa (raw, json)
Hash identifier: 2UvzjtvaH3m+ITUrmCS12AbrLOcaEMg8yisCJHJdNzg=
Subject key identifier: 22:B1:FF:08:14:B9:3B:06:BA:F5:3E:FC:34:6A:D6:D8:DE:68:E7:1D
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018CC2DB679C3D4121D5FCFF7C1E4EB409E8
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/IrH_CBS5Owa69T78NGrW2N5o5x0.roa
Signing time: Mon 01 Jan 2024 02:30:07 +0000
ROA not before: Mon 01 Jan 2024 02:30:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 45.80.223.0/24 maxlen: 24
45.80.222.0/24 maxlen: 24
45.80.221.0/24 maxlen: 24
45.130.149.0/24 maxlen: 24
45.130.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:67:9c:3d:41:21:d5:fc:ff:7c:1e:4e:b4:09:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 02:30:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=22b1ff0814b93b06baf53efc346ad6d8de68e71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:03:ac:d9:ac:90:ad:cb:a7:96:f3:14:3d:13:
0d:61:cf:a7:23:05:1f:d2:70:98:b1:2a:63:89:18:
9b:94:0c:8e:13:fe:47:46:f8:be:8c:91:76:63:e5:
34:a4:c5:73:c6:b7:d8:67:64:6f:d4:56:a4:02:e0:
71:df:05:65:6f:df:2c:fd:28:85:1b:8b:dd:46:d5:
4a:a6:af:96:eb:0f:31:c0:8a:d3:9b:a0:05:5b:f8:
c5:69:df:03:a2:a0:df:1b:0f:bf:14:51:b2:35:82:
67:99:93:d9:4c:33:f5:86:72:00:ec:b4:e9:3d:fb:
5e:fb:b8:be:ac:40:aa:3b:ea:bf:d0:86:0d:b7:1d:
7c:5d:3f:cc:5b:28:99:ef:56:74:27:6c:03:ae:4c:
e1:6e:36:99:1b:db:35:b4:af:30:49:66:c8:f2:f0:
0b:36:ed:ea:c7:3f:be:ab:df:db:29:e7:a2:dd:d3:
1d:8e:d7:69:a4:a8:20:27:91:67:4b:0c:3a:0a:91:
56:03:e9:18:6e:94:55:19:e3:4d:37:cc:56:ba:2f:
8f:34:dc:d0:c9:64:f9:2e:01:1a:76:80:ea:28:e4:
a7:b2:13:10:92:4a:a8:8f:5c:79:73:87:f1:2b:a6:
55:c8:e8:4d:65:09:84:94:60:60:54:a6:30:68:58:
b9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B1:FF:08:14:B9:3B:06:BA:F5:3E:FC:34:6A:D6:D8:DE:68:E7:1D
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/IrH_CBS5Owa69T78NGrW2N5o5x0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.221.0-45.80.223.255
45.130.148.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:26:ae:7f:4c:1a:c7:75:38:54:2d:5b:80:e1:5d:ea:f3:87:
f0:26:db:01:b8:48:b2:35:d5:d3:2f:80:cb:23:d0:76:3d:2e:
e7:86:d8:5b:95:7d:b8:d5:8b:9b:45:8b:d5:50:83:6d:82:df:
c5:0d:1a:71:cd:8c:f1:c8:fe:1b:87:d2:96:4b:50:e8:b5:a1:
89:1e:e3:03:cd:bd:7c:a5:cc:b3:fa:4e:f4:c4:88:c4:a0:ca:
c8:e5:c0:b4:d7:a4:04:bd:2c:e0:62:0c:08:32:59:62:96:4b:
f5:2e:aa:2a:33:bf:b0:96:9b:f9:fe:8d:65:84:90:fa:8a:e5:
79:3d:d5:e1:28:29:aa:90:c7:24:df:41:70:ff:e9:6f:5e:b8:
48:dc:5a:21:a3:54:31:7c:0e:b5:01:2e:61:4f:4a:06:48:d8:
8f:0e:dd:d6:60:03:fa:07:0e:01:38:fc:3f:90:d1:d5:7c:07:
fd:fa:2e:5b:fa:b0:36:be:7f:5b:3a:b0:93:48:d4:cf:64:5a:
eb:59:cc:0a:30:f0:fe:d4:b0:e3:81:69:6b:fe:08:28:37:d2:
76:d6:91:04:56:36:b3:e1:ed:27:2e:92:29:04:73:b5:d8:5f:
87:b1:b5:7d:e1:e3:c9:39:f7:0e:81:30:54:a2:3b:1e:40:7c:
b5:71:e6:e3
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzC22ecPUEh1fz/fB5OtAnoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjQwMTAxMDIzMDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMmIxZmYwODE0YjkzYjA2YmFmNTNlZmMzNDZhZDZkOGRlNjhlNzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgOs2ayQrcunlvMUPRMNYc+nIwUf
0nCYsSpjiRiblAyOE/5HRvi+jJF2Y+U0pMVzxrfYZ2Rv1FakAuBx3wVlb98s/SiF
G4vdRtVKpq+W6w8xwIrTm6AFW/jFad8DoqDfGw+/FFGyNYJnmZPZTDP1hnIA7LTp
Pfte+7i+rECqO+q/0IYNtx18XT/MWyiZ71Z0J2wDrkzhbjaZG9s1tK8wSWbI8vAL
Nu3qxz++q9/bKeei3dMdjtdppKggJ5FnSww6CpFWA+kYbpRVGeNNN8xWui+PNNzQ
yWT5LgEadoDqKOSnshMQkkqoj1x5c4fxK6ZVyOhNZQmElGBgVKYwaFi5+wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFCKx/wgUuTsGuvU+/DRq1tjeaOcdMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvSXJIX0NCUzVPd2E2OVQ3OE5HclcyTjVvNXgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAtUN0D
BAUtUMADBAEtgpQwDQYJKoZIhvcNAQELBQADggEBAGwmrn9MGsd1OFQtW4DhXerz
h/Am2wG4SLI11dMvgMsj0HY9LueG2FuVfbjVi5tFi9VQg22C38UNGnHNjPHI/huH
0pZLUOi1oYke4wPNvXylzLP6TvTEiMSgysjlwLTXpAS9LOBiDAgyWWKWS/Uuqioz
v7CWm/n+jWWEkPqK5Xk91eEoKaqQxyTfQXD/6W9euEjcWiGjVDF8DrUBLmFPSgZI
2I8O3dZgA/oHDgE4/D+Q0dV8B/36Llv6sDa+f1s6sJNI1M9kWutZzAow8P7UsOOB
aWv+CCg30nbWkQRWNrPh7ScukikEc7XYX4extX3h48k59w6BMFSiOx5AfLVx5uM=
-----END CERTIFICATE-----
Generated at Wed Jan 3 22:35:28 2024 by rpki-client on console-ams.rpki-client.org