Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/R-Vl4TpXxnYBe036m8uYpMEqRyk.roa
File: R-Vl4TpXxnYBe036m8uYpMEqRyk.roa (raw, json)
Hash identifier: Dno/KsqtPcqd+EGLRW5XSVGLLyTlLuxRbUBBtErd/bs=
Subject key identifier: 47:E5:65:E1:3A:57:C6:76:01:7B:4D:FA:9B:CB:98:A4:C1:2A:47:29
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018B8FC8B0F2F6EBDA32E2D8296A330AB738
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/R-Vl4TpXxnYBe036m8uYpMEqRyk.roa
Signing time: Thu 02 Nov 2023 11:26:16 +0000
ROA not before: Thu 02 Nov 2023 11:26:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 45.80.223.0/24 maxlen: 24
45.80.222.0/24 maxlen: 24
45.80.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8f:c8:b0:f2:f6:eb:da:32:e2:d8:29:6a:33:0a:b7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Nov 2 11:26:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47e565e13a57c676017b4dfa9bcb98a4c12a4729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b0:ff:ed:33:ef:37:e0:4c:3b:13:d2:90:8a:
55:95:36:a5:ec:b1:c4:59:aa:7b:93:73:7c:1a:5d:
45:40:1b:66:19:4c:49:9c:8c:4f:e1:24:4b:d6:a7:
1e:3b:43:70:77:b8:8a:07:43:95:c2:a1:fe:ea:66:
98:fe:fa:a3:b4:8a:33:93:e3:7b:e8:86:dc:71:bc:
1d:97:37:02:83:ba:01:af:c1:44:ac:96:a9:27:a0:
c7:13:55:44:75:a0:21:fb:0f:9d:32:fb:53:03:99:
41:af:da:a5:9d:dd:70:84:5a:bd:48:ff:d6:5b:bb:
e7:d9:77:f1:e3:41:95:bd:7d:8e:69:70:25:25:76:
f9:c2:b6:7d:53:3c:ce:da:c9:16:48:a0:91:4e:df:
b8:3c:96:12:fc:3b:4a:3c:e4:3c:10:55:96:86:97:
4d:b8:40:13:f9:41:c4:ba:29:5d:a7:12:7c:40:19:
55:4c:59:56:ad:ef:e8:c7:0d:fa:36:e4:61:ad:70:
7f:8a:ac:c5:a0:65:45:bf:89:39:f1:9b:b1:3f:ce:
5c:b9:f6:a5:02:e2:32:c7:c4:6a:8a:2b:ff:80:7c:
f9:1a:21:7c:27:70:73:80:e8:ad:e9:9b:f8:4d:22:
54:d6:93:b4:91:dd:01:cb:ca:dd:d8:9f:ee:54:d9:
e9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E5:65:E1:3A:57:C6:76:01:7B:4D:FA:9B:CB:98:A4:C1:2A:47:29
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/R-Vl4TpXxnYBe036m8uYpMEqRyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.221.0-45.80.223.255
Signature Algorithm: sha256WithRSAEncryption
55:94:6d:7e:48:de:4d:dc:12:c1:3e:87:11:fa:c1:87:b2:8d:
fe:58:a3:50:5e:69:0e:c7:54:c9:95:46:1c:b4:d9:21:8f:53:
91:b9:79:97:0f:eb:65:af:aa:88:89:be:dc:1a:ef:ab:56:f5:
7d:f9:df:7f:be:f5:c6:dd:d7:c9:7e:14:fd:b2:89:ad:03:33:
fe:66:b9:52:02:69:c1:8c:e9:e6:8f:94:f0:42:de:6e:53:50:
c1:51:10:93:0a:05:08:d8:2e:6b:49:57:d1:ae:8f:e9:3a:13:
cd:ee:62:62:21:41:0b:cf:ad:10:87:7f:a7:61:52:3b:d6:bd:
c4:53:86:f1:4d:8a:26:77:b8:b2:8a:ae:c1:b9:9b:4d:0f:fb:
6d:50:0d:b4:a6:9f:83:eb:53:2f:90:e0:6a:e7:2b:61:6a:0e:
dc:a8:7c:a1:f9:e0:92:5b:3c:c6:2f:b6:42:69:90:ef:48:f4:
c8:aa:5c:41:3f:9c:61:59:43:41:27:1d:7f:a1:f2:a3:f5:ba:
2c:e1:85:ea:44:01:7a:d2:f1:1e:01:eb:bc:37:2b:4a:8b:d2:
d7:6e:fb:d9:30:ee:ed:aa:e1:31:f8:26:0e:98:8f:4f:50:b4:
7a:c9:d4:fc:b4:fb:8a:32:e7:63:42:e3:1a:3e:eb:1f:15:0b:
f6:a1:f0:f8
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYuPyLDy9uvaMuLYKWozCrc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjMxMTAyMTEyNjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0N2U1NjVlMTNhNTdjNjc2MDE3YjRkZmE5YmNiOThhNGMxMmE0NzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7D/7TPvN+BMOxPSkIpVlTal7LHE
Wap7k3N8Gl1FQBtmGUxJnIxP4SRL1qceO0Nwd7iKB0OVwqH+6maY/vqjtIozk+N7
6IbccbwdlzcCg7oBr8FErJapJ6DHE1VEdaAh+w+dMvtTA5lBr9qlnd1whFq9SP/W
W7vn2Xfx40GVvX2OaXAlJXb5wrZ9UzzO2skWSKCRTt+4PJYS/DtKPOQ8EFWWhpdN
uEAT+UHEuildpxJ8QBlVTFlWre/oxw36NuRhrXB/iqzFoGVFv4k58ZuxP85cufal
AuIyx8Rqiiv/gHz5GiF8J3BzgOit6Zv4TSJU1pO0kd0By8rd2J/uVNnpcwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEflZeE6V8Z2AXtN+pvLmKTBKkcpMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvUi1WbDRUcFh4bllCZTAzNm04dVlwTUVxUnlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtUN0D
BAUtUMAwDQYJKoZIhvcNAQELBQADggEBAFWUbX5I3k3cEsE+hxH6wYeyjf5Yo1Be
aQ7HVMmVRhy02SGPU5G5eZcP62WvqoiJvtwa76tW9X3533++9cbd18l+FP2yia0D
M/5muVICacGM6eaPlPBC3m5TUMFREJMKBQjYLmtJV9Guj+k6E83uYmIhQQvPrRCH
f6dhUjvWvcRThvFNiiZ3uLKKrsG5m00P+21QDbSmn4PrUy+Q4GrnK2FqDtyofKH5
4JJbPMYvtkJpkO9I9MiqXEE/nGFZQ0EnHX+h8qP1uizhhepEAXrS8R4B67w3K0qL
0tdu+9kw7u2q4TH4Jg6Yj09QtHrJ1Py0+4oy52NC4xo+6x8VC/ah8Pg=
-----END CERTIFICATE-----
Generated at Thu Nov 2 14:14:39 2023 by rpki-client on console-fra.rpki-client.org