Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/4KjniywEihEvBnGxlyk_DS8BI34.roa
File: 4KjniywEihEvBnGxlyk_DS8BI34.roa (raw, json)
Hash identifier: IHgT5MNqGHdzFZTtWDa7fg+FP5hepjwVGY457W7ULDo=
Subject key identifier: E0:A8:E7:8B:2C:04:8A:11:2F:06:71:B1:97:29:3F:0D:2F:01:23:7E
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 018AB6580814CDAD9686A8D824728071BEB0
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/4KjniywEihEvBnGxlyk_DS8BI34.roa
Signing time: Thu 21 Sep 2023 06:05:37 +0000
ROA not before: Thu 21 Sep 2023 06:05:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 123.253.212.0/24 maxlen: 24
46.175.130.0/24 maxlen: 24
141.98.139.0/24 maxlen: 24
141.98.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b6:58:08:14:cd:ad:96:86:a8:d8:24:72:80:71:be:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Sep 21 06:05:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0a8e78b2c048a112f0671b197293f0d2f01237e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:56:cc:79:5e:7e:55:e0:9e:76:1c:b6:77:08:
a2:1f:e5:77:aa:91:c6:06:e2:02:09:3a:75:57:44:
13:cb:e0:67:bf:cf:22:42:8b:dc:00:fb:e7:2e:0c:
e0:b6:5b:35:ea:a4:13:02:fd:ff:62:c7:24:1f:39:
b2:85:1d:f2:60:10:ee:23:69:ef:6d:2a:d5:88:35:
22:bd:0a:b3:08:71:78:7c:00:01:07:86:6f:f6:59:
e9:0c:53:b9:ab:6a:88:4d:d4:fd:7c:08:77:35:b9:
9b:b8:12:67:cc:33:91:85:5e:f9:ea:90:06:82:10:
8d:39:d1:cf:b1:14:c9:f7:39:34:6d:68:ce:38:f2:
9d:e3:41:bf:9b:75:78:8b:a3:25:26:1f:12:87:e5:
81:13:4f:67:8f:21:2a:e5:85:c1:fc:bf:3c:98:ac:
4d:04:a2:18:83:ca:21:4e:76:ed:ba:09:c4:74:0b:
d8:c5:17:51:32:1e:1b:2e:5d:1c:92:d4:96:e1:a4:
3a:0d:ed:57:09:e9:cf:56:9f:71:0e:a5:69:30:ca:
eb:2f:89:b7:c3:ed:9a:ca:19:51:c1:2a:53:59:39:
65:1d:c2:62:40:ab:72:13:2a:a1:f6:8b:06:a2:90:
f9:ab:76:ca:b2:76:f0:92:5c:37:b3:f5:9f:79:fa:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A8:E7:8B:2C:04:8A:11:2F:06:71:B1:97:29:3F:0D:2F:01:23:7E
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/4KjniywEihEvBnGxlyk_DS8BI34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.130.0/24
123.253.212.0/24
141.98.137.0/24
141.98.139.0/24
Signature Algorithm: sha256WithRSAEncryption
89:8f:b7:c8:dc:52:78:20:f3:be:dc:76:ec:0c:c8:a8:08:0a:
8e:b5:17:9b:48:fa:09:e3:8d:90:9d:f4:20:b2:c5:5e:ed:95:
4f:5f:f6:b0:34:50:36:55:4b:c3:b7:c1:c5:50:a0:4f:36:8c:
3f:5e:c4:cf:f8:c1:18:6e:4f:7f:2e:2d:87:de:85:98:25:27:
f9:34:03:21:87:5e:11:37:3d:2f:fb:29:55:18:46:1d:10:f8:
a9:f8:a3:0b:5e:94:7d:c2:bf:4c:ad:47:ca:80:69:ca:78:39:
d2:0b:8a:29:be:c4:29:c1:78:1c:2f:9d:1b:b8:8c:45:3d:8a:
5a:3f:cf:18:e0:06:fc:55:76:8a:c0:3f:e3:ed:5f:eb:02:c0:
56:d6:95:eb:df:29:39:5c:ee:d8:93:ce:36:16:15:13:40:d7:
e7:08:39:d3:68:da:b4:a4:45:96:dd:66:49:a9:ce:73:24:d5:
48:c8:3d:42:e6:cd:90:cb:62:14:0c:77:99:e8:e7:e7:ea:0a:
3a:df:57:48:c5:4a:08:22:67:d7:a7:e5:2b:28:b0:d7:54:b3:
08:3c:64:22:69:2d:ee:7d:55:fc:8c:03:87:a0:dd:25:56:48:
03:cf:d1:fd:4b:a8:56:08:ce:44:03:3a:52:29:95:ac:36:d4:
09:87:a3:c8
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYq2WAgUza2WhqjYJHKAcb6wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi
ZWJmOGQwHhcNMjMwOTIxMDYwNTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGE4ZTc4YjJjMDQ4YTExMmYwNjcxYjE5NzI5M2YwZDJmMDEyMzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFbMeV5+VeCedhy2dwiiH+V3qpHG
BuICCTp1V0QTy+Bnv88iQovcAPvnLgzgtls16qQTAv3/YsckHzmyhR3yYBDuI2nv
bSrViDUivQqzCHF4fAABB4Zv9lnpDFO5q2qITdT9fAh3NbmbuBJnzDORhV756pAG
ghCNOdHPsRTJ9zk0bWjOOPKd40G/m3V4i6MlJh8Sh+WBE09njyEq5YXB/L88mKxN
BKIYg8ohTnbtugnEdAvYxRdRMh4bLl0cktSW4aQ6De1XCenPVp9xDqVpMMrrL4m3
w+2ayhlRwSpTWTllHcJiQKtyEyqh9osGopD5q3bKsnbwklw3s/WfefpzswIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOCo54ssBIoRLwZxsZcpPw0vASN+MB8GA1UdIwQY
MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt
NWM1ODkyYWZhNDg3LzEvNEtqbml5d0VpaEV2Qm5HeGx5a19EUzhCSTM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3
LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALq+CAwQA
e/3UAwQAjWKJAwQAjWKLMA0GCSqGSIb3DQEBCwUAA4IBAQCJj7fI3FJ4IPO+3Hbs
DMioCAqOtRebSPoJ442QnfQgssVe7ZVPX/awNFA2VUvDt8HFUKBPNow/XsTP+MEY
bk9/Li2H3oWYJSf5NAMhh14RNz0v+ylVGEYdEPip+KMLXpR9wr9MrUfKgGnKeDnS
C4opvsQpwXgcL50buIxFPYpaP88Y4Ab8VXaKwD/j7V/rAsBW1pXr3yk5XO7Yk842
FhUTQNfnCDnTaNq0pEWW3WZJqc5zJNVIyD1C5s2Qy2IUDHeZ6Ofn6go631dIxUoI
ImfXp+UrKLDXVLMIPGQiaS3ufVX8jAOHoN0lVkgDz9H9S6hWCM5EAzpSKZWsNtQJ
h6PI
-----END CERTIFICATE-----
Generated at Tue Oct 10 17:41:17 2023 by rpki-client on console-ams.rpki-client.org