Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/nMHY_DrCgYvApG894f6Rcx6w8w4.roa
File: nMHY_DrCgYvApG894f6Rcx6w8w4.roa (raw, json)
Hash identifier: DUavvB4LcNp+QcBImdo+flRlxPsrMx35dZ6moDIrkCc=
Subject key identifier: 9C:C1:D8:FC:3A:C2:81:8B:C0:A4:6F:3D:E1:FE:91:73:1E:B0:F3:0E
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018B259C33E19E912816DEDC6EF8D3E20B18
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/nMHY_DrCgYvApG894f6Rcx6w8w4.roa
Signing time: Thu 12 Oct 2023 20:37:55 +0000
ROA not before: Thu 12 Oct 2023 20:37:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 45.80.223.0/24 maxlen: 24
45.80.222.0/24 maxlen: 24
45.80.221.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:25:9c:33:e1:9e:91:28:16:de:dc:6e:f8:d3:e2:0b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 12 20:37:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9cc1d8fc3ac2818bc0a46f3de1fe91731eb0f30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:af:75:4e:5b:45:6d:cb:1a:fa:50:eb:20:e2:
18:97:ef:a8:59:f3:b4:b6:3f:af:a2:09:d8:34:42:
16:55:86:46:e1:75:35:7d:d5:c1:42:a9:71:7d:81:
98:2d:8f:2f:82:31:8f:9e:21:65:61:96:d2:0d:57:
b9:db:82:36:7f:be:18:63:c8:84:46:9c:ef:7b:c1:
7c:50:9b:d6:26:cc:8f:5b:1e:e6:4b:59:8f:76:eb:
f3:aa:40:0b:a2:67:d8:7a:c5:b4:2c:8e:71:82:55:
6b:2b:38:e7:47:a2:62:d7:1a:86:31:75:a4:09:e2:
f7:e4:86:c4:31:dc:55:33:bd:c1:11:77:57:f5:15:
66:c4:72:71:95:79:50:cd:cd:19:31:73:03:4b:2a:
e5:3c:1b:e1:59:62:2d:47:13:5f:5f:70:bc:f9:c3:
87:29:7f:c7:b3:20:9b:ed:60:0a:7a:a0:3f:7a:f0:
df:e5:d8:21:36:c8:44:e5:e6:c1:d2:2b:4f:e3:6d:
c8:ce:db:e4:1d:b6:14:8b:f5:2c:89:76:e7:6f:25:
54:26:76:b9:00:77:fb:9b:65:db:85:e2:5a:83:e1:
1e:a7:cc:89:93:78:08:d9:1a:6d:50:0f:58:12:b4:
0f:85:fb:5e:53:33:ce:c8:c0:0f:6d:88:a7:2c:89:
44:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C1:D8:FC:3A:C2:81:8B:C0:A4:6F:3D:E1:FE:91:73:1E:B0:F3:0E
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/nMHY_DrCgYvApG894f6Rcx6w8w4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.221.0-45.80.223.255
Signature Algorithm: sha256WithRSAEncryption
12:cb:2f:2a:ef:24:2a:7d:ae:80:b5:64:ab:9b:d5:8a:eb:82:
38:39:3e:03:d2:07:82:57:ab:5b:f8:7f:16:29:68:21:40:96:
12:c1:ca:65:88:b9:fd:8b:b7:67:30:3d:3b:57:79:72:36:4a:
e8:d2:9d:8f:09:93:11:9b:f4:ef:2a:d5:5d:48:3a:92:05:ff:
39:c6:34:20:7e:e6:29:1a:71:a0:32:5e:e8:79:9b:04:5a:de:
98:31:5a:b0:1e:95:34:ba:29:c2:90:22:d9:3f:f0:6a:38:9c:
40:d9:69:13:7d:54:21:c7:31:22:16:20:69:49:f4:0c:29:7b:
25:ab:57:dd:0c:c6:fd:21:e6:86:14:2d:cb:44:35:05:38:c6:
9a:50:08:54:7d:6c:dd:86:a4:cc:fe:d5:a3:09:33:74:83:b1:
e5:ad:89:18:a2:31:0c:68:fd:f3:6f:82:95:00:89:f5:2d:c7:
0d:07:92:7e:59:3c:1c:f5:bd:f5:50:f5:59:20:68:a7:f9:45:
44:8c:6a:ff:1e:ab:b2:f3:9c:69:0d:13:d3:2f:ec:dd:c4:19:
02:87:38:eb:67:c8:07:ae:de:d5:89:9e:ad:25:e2:44:37:57:
18:cd:e4:12:d3:63:42:eb:a4:3a:e8:60:7b:d7:a0:ef:8d:b3:
1b:1a:82:f7
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYslnDPhnpEoFt7cbvjT4gsYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjMxMDEyMjAzNzU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2MxZDhmYzNhYzI4MThiYzBhNDZmM2RlMWZlOTE3MzFlYjBmMzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgK91TltFbcsa+lDrIOIYl++oWfO0
tj+vognYNEIWVYZG4XU1fdXBQqlxfYGYLY8vgjGPniFlYZbSDVe524I2f74YY8iE
Rpzve8F8UJvWJsyPWx7mS1mPduvzqkALomfYesW0LI5xglVrKzjnR6Ji1xqGMXWk
CeL35IbEMdxVM73BEXdX9RVmxHJxlXlQzc0ZMXMDSyrlPBvhWWItRxNfX3C8+cOH
KX/HsyCb7WAKeqA/evDf5dghNshE5ebB0itP423IztvkHbYUi/UsiXbnbyVUJna5
AHf7m2XbheJag+Eep8yJk3gI2RptUA9YErQPhfteUzPOyMAPbYinLIlEBwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJzB2Pw6woGLwKRvPeH+kXMesPMOMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvbk1IWV9EckNnWXZBcEc4OTRmNlJjeDZ3OHc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtUN0D
BAUtUMAwDQYJKoZIhvcNAQELBQADggEBABLLLyrvJCp9roC1ZKub1Yrrgjg5PgPS
B4JXq1v4fxYpaCFAlhLBymWIuf2Lt2cwPTtXeXI2SujSnY8JkxGb9O8q1V1IOpIF
/znGNCB+5ikacaAyXuh5mwRa3pgxWrAelTS6KcKQItk/8Go4nEDZaRN9VCHHMSIW
IGlJ9AwpeyWrV90Mxv0h5oYULctENQU4xppQCFR9bN2GpMz+1aMJM3SDseWtiRii
MQxo/fNvgpUAifUtxw0Hkn5ZPBz1vfVQ9VkgaKf5RUSMav8eq7LznGkNE9Mv7N3E
GQKHOOtnyAeu3tWJnq0l4kQ3VxjN5BLTY0LrpDroYHvXoO+Nsxsagvc=
-----END CERTIFICATE-----
Generated at Thu Nov 2 11:53:21 2023 by rpki-client on console-fra.rpki-client.org