Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/iyMLV_ueb_dUVKeclgCDr3yeTMo.roa
File: iyMLV_ueb_dUVKeclgCDr3yeTMo.roa (raw, json)
Hash identifier: d3jo3+0lOPCbqfGwb2amnjLbzqBXMRCvm7JWXqCPBvE=
Subject key identifier: 8B:23:0B:57:FB:9E:6F:F7:54:54:A7:9C:96:00:83:AF:7C:9E:4C:CA
Certificate issuer: /CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Certificate serial: 018C1A7AE977B1A6CC93095CBF15C16EEDD7
Authority key identifier: 14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/iyMLV_ueb_dUVKeclgCDr3yeTMo.roa
Signing time: Wed 29 Nov 2023 09:48:31 +0000
ROA not before: Wed 29 Nov 2023 09:48:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212369
IP address blocks: 45.155.125.0/24 maxlen: 24
194.36.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:1a:7a:e9:77:b1:a6:cc:93:09:5c:bf:15:c1:6e:ed:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143239651db6aab1bcb67325f785b5ee1f4025cb
Validity
Not Before: Nov 29 09:48:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b230b57fb9e6ff75454a79c960083af7c9e4cca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4e:5b:80:55:dc:4a:48:e8:c5:2f:76:4f:7f:
24:3d:41:71:72:75:49:e6:5c:2e:26:6d:5b:b2:32:
eb:9c:42:fa:19:64:e8:bc:39:5b:9d:40:0a:bc:7f:
a5:15:2c:b6:af:b7:a8:d4:8a:58:96:fc:13:e5:f9:
0b:22:08:b3:0e:1f:16:42:93:06:97:ca:46:62:aa:
44:ad:ec:f2:bb:90:3d:3d:dc:18:ee:45:60:bf:35:
f2:e1:09:3a:47:b8:10:ef:51:8a:7f:a1:6a:dc:da:
69:a6:08:8b:f2:d6:cd:15:05:50:f6:ca:c8:c9:9d:
ef:15:44:5e:71:9b:e8:c3:83:55:14:cb:f9:f9:79:
31:35:30:e6:6d:ed:30:f3:80:ec:a8:d2:16:90:f2:
c2:a9:9c:76:b7:f7:bb:e2:e0:aa:52:79:24:fa:18:
5b:f5:34:46:1d:3b:1d:54:fd:42:f8:57:5c:48:55:
f4:d0:56:e4:62:63:a2:55:51:3a:fb:24:b3:99:1a:
27:86:0c:b0:d9:68:ce:97:4a:6d:f1:b6:69:7b:9d:
6b:3c:3e:fd:aa:18:c6:d4:73:2e:0a:12:b5:1b:24:
73:b7:60:ce:b0:31:9f:d1:fd:e8:2a:cc:f0:a9:85:
19:9b:5a:96:3f:ab:74:4d:4a:56:3a:5a:b4:e8:31:
33:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:23:0B:57:FB:9E:6F:F7:54:54:A7:9C:96:00:83:AF:7C:9E:4C:CA
X509v3 Authority Key Identifier:
keyid:14:32:39:65:1D:B6:AA:B1:BC:B6:73:25:F7:85:B5:EE:1F:40:25:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FDI5ZR22qrG8tnMl94W17h9AJcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/iyMLV_ueb_dUVKeclgCDr3yeTMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/6f46d9-3af0-42aa-b334-6eec77d9b985/1/FDI5ZR22qrG8tnMl94W17h9AJcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.125.0/24
194.36.85.0/24
Signature Algorithm: sha256WithRSAEncryption
98:2e:40:e2:20:a5:0f:30:8a:45:be:e4:e8:3d:62:9d:74:c6:
51:ff:e6:d4:7f:8e:88:e4:17:f0:c2:bf:70:47:01:1f:e3:e1:
76:29:db:92:37:2f:eb:30:21:84:82:19:78:d8:52:fc:69:fc:
44:69:b0:61:44:f5:89:bc:94:00:8c:76:93:48:7f:4a:2e:a3:
84:ae:0b:67:b9:9b:33:9a:15:08:13:95:ec:63:ca:d4:4f:64:
1d:89:44:b6:82:ab:da:87:60:4e:a9:17:7b:30:0b:e2:70:8e:
aa:b3:76:eb:e7:0a:3e:12:2d:8d:93:58:ad:e9:56:14:ff:75:
31:7f:64:14:6a:f3:11:a3:8d:38:d7:23:ee:fa:10:1b:68:a1:
c1:05:0c:ad:24:54:1a:2c:39:0f:b0:21:7f:23:b1:7d:0b:30:
4d:e0:3a:51:f6:98:71:a8:49:a4:1d:09:7f:34:97:f3:67:e0:
f3:f7:9e:ea:87:dd:19:14:73:ae:b1:6c:62:5d:da:00:1b:76:
34:e1:7b:f4:5d:47:74:82:cf:c0:a9:79:07:23:90:1c:d1:0a:
ed:12:8f:a1:98:55:e9:a4:55:b8:55:d4:1a:78:26:d2:6d:d1:
51:64:d8:69:d9:57:aa:f4:aa:11:41:67:51:2d:4b:59:f9:1f:
0c:8a:88:0a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYwaeul3sabMkwlcvxXBbu3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0MzIzOTY1MWRiNmFhYjFiY2I2NzMyNWY3ODViNWVlMWY0
MDI1Y2IwHhcNMjMxMTI5MDk0ODMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjIzMGI1N2ZiOWU2ZmY3NTQ1NGE3OWM5NjAwODNhZjdjOWU0Y2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg05bgFXcSkjoxS92T38kPUFxcnVJ
5lwuJm1bsjLrnEL6GWTovDlbnUAKvH+lFSy2r7eo1IpYlvwT5fkLIgizDh8WQpMG
l8pGYqpErezyu5A9PdwY7kVgvzXy4Qk6R7gQ71GKf6Fq3NpppgiL8tbNFQVQ9srI
yZ3vFURecZvow4NVFMv5+XkxNTDmbe0w84DsqNIWkPLCqZx2t/e74uCqUnkk+hhb
9TRGHTsdVP1C+FdcSFX00FbkYmOiVVE6+ySzmRonhgyw2WjOl0pt8bZpe51rPD79
qhjG1HMuChK1GyRzt2DOsDGf0f3oKszwqYUZm1qWP6t0TUpWOlq06DEzbQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIsjC1f7nm/3VFSnnJYAg698nkzKMB8GA1UdIwQY
MBaAFBQyOWUdtqqxvLZzJfeFte4fQCXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQt
NmVlYzc3ZDliOTg1LzEvaXlNTFZfdWViX2RVVktlY2xnQ0RyM3llVE1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC82ZjQ2ZDktM2FmMC00MmFhLWIzMzQtNmVlYzc3ZDliOTg1
LzEvRkRJNVpSMjJxckc4dG5NbDk0VzE3aDlBSmNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZt9AwQA
wiRVMA0GCSqGSIb3DQEBCwUAA4IBAQCYLkDiIKUPMIpFvuToPWKddMZR/+bUf46I
5Bfwwr9wRwEf4+F2KduSNy/rMCGEghl42FL8afxEabBhRPWJvJQAjHaTSH9KLqOE
rgtnuZszmhUIE5XsY8rUT2QdiUS2gqvah2BOqRd7MAvicI6qs3br5wo+Ei2Nk1it
6VYU/3Uxf2QUavMRo4041yPu+hAbaKHBBQytJFQaLDkPsCF/I7F9CzBN4DpR9phx
qEmkHQl/NJfzZ+Dz957qh90ZFHOusWxiXdoAG3Y04Xv0XUd0gs/AqXkHI5Ac0Qrt
Eo+hmFXppFW4VdQaeCbSbdFRZNhp2Veq9KoRQWdRLUtZ+R8MiogK
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:25 2024 by rpki-client on console-ams.rpki-client.org