Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4AFKiUwuFSSUbRZ3qN2NRrb4ttw.roa
File: 4AFKiUwuFSSUbRZ3qN2NRrb4ttw.roa (raw, json)
Hash identifier: ooydK+gWCSzpk0FoYZLr6EPOBHDgZZqEFqHqZxT9yoM=
Subject key identifier: E0:01:4A:89:4C:2E:15:24:94:6D:16:77:A8:DD:8D:46:B6:F8:B6:DC
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C5401A327DDAF44D1232511E57F6247
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4AFKiUwuFSSUbRZ3qN2NRrb4ttw.roa
Signing time: Sun 01 Jan 2023 07:55:22 +0000
ROA not before: Sun 01 Jan 2023 07:55:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60952
IP address blocks: 45.132.15.0/24 maxlen: 32
92.119.149.0/24 maxlen: 32
2a06:7a02::/48 maxlen: 128
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:01:a3:27:dd:af:44:d1:23:25:11:e5:7f:62:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0014a894c2e1524946d1677a8dd8d46b6f8b6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:57:a8:49:c8:21:81:05:83:bc:b0:1a:08:83:
fc:cb:4d:9e:e6:00:d9:ee:a7:8c:d8:aa:31:c8:20:
16:2e:1c:3f:2d:2a:f3:a9:5a:c8:24:3a:40:89:2a:
72:7c:7c:d4:8f:b8:dc:73:d9:23:91:8c:47:ad:2b:
d5:ba:91:2d:64:c1:6f:d1:c2:0d:d3:a7:ce:68:c9:
fd:61:7d:60:52:c0:e4:a5:cf:06:f0:1c:f3:cf:12:
c0:fa:b2:d1:25:45:af:7e:d9:1e:6b:1c:03:c1:38:
c5:bc:0a:b3:5c:cc:2c:56:69:fb:77:12:09:de:2e:
d3:52:35:ed:a0:ce:9c:a9:ef:d6:57:be:c7:cc:9d:
44:fb:18:78:83:8f:2e:ed:86:64:44:c2:36:2a:63:
6d:ec:74:b7:97:64:30:15:de:ac:c7:36:87:a5:fd:
4d:40:0f:ae:79:ef:b3:44:5a:4a:95:74:b3:7f:c9:
71:81:08:39:1f:f1:0c:27:1c:5c:ab:53:2e:80:9d:
b8:7d:30:88:b1:46:43:76:1c:0d:40:9a:0d:db:05:
a3:27:be:51:cb:9c:b0:c6:67:bc:41:18:c5:e7:52:
cb:62:b1:01:b2:8f:37:4a:22:d5:b5:0d:6d:c5:ad:
4d:7e:b3:6e:2c:9a:e2:1e:8c:fa:e1:11:69:bb:37:
85:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:01:4A:89:4C:2E:15:24:94:6D:16:77:A8:DD:8D:46:B6:F8:B6:DC
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/4AFKiUwuFSSUbRZ3qN2NRrb4ttw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.15.0/24
92.119.149.0/24
IPv6:
2a06:7a02::/48
Signature Algorithm: sha256WithRSAEncryption
be:ea:51:d2:71:8e:ad:ab:6d:2f:c9:78:6c:58:73:d3:ed:2e:
70:94:38:74:ad:f8:27:80:30:59:6e:e5:f3:6a:67:0e:90:27:
5d:41:33:7a:82:38:61:2e:8c:5f:59:3a:09:17:a1:48:41:29:
b4:16:88:99:d2:74:94:f6:33:93:97:0d:27:bc:d9:27:de:22:
32:b8:59:91:05:ca:00:fd:17:f4:a6:50:d3:83:e1:a7:61:19:
eb:9b:c2:37:54:9b:ed:6a:11:a2:53:7c:79:a1:91:91:09:10:
13:df:68:51:00:26:43:ea:50:9f:29:d4:9b:27:b0:b0:a5:f3:
a1:aa:61:34:47:fd:cd:ee:0f:dc:95:ad:cf:24:d7:9e:1b:9f:
91:77:49:09:ac:4b:8e:9d:2c:07:91:0c:8a:df:49:18:79:83:
8b:d7:95:1f:cd:db:ba:98:58:40:74:5d:2c:78:62:45:eb:e7:
a5:59:de:8f:3d:b4:d2:07:b6:43:e4:63:d4:4c:d1:e6:57:dd:
15:8e:f8:5b:f8:7a:5c:bb:ff:2a:1e:a4:a1:25:21:74:14:a2:
8d:9f:fd:0a:04:bd:c4:15:47:68:80:ae:05:93:0b:d6:89:82:
58:0e:06:3d:6b:77:c4:2d:1b:a6:0e:ba:35:a2:41:f8:da:e8:
8f:ee:27:0e
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVsVAGjJ92vRNEjJRHlf2JHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjMwMTAxMDc1NTIyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDAxNGE4OTRjMmUxNTI0OTQ2ZDE2NzdhOGRkOGQ0NmI2ZjhiNmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41eoScghgQWDvLAaCIP8y02e5gDZ
7qeM2KoxyCAWLhw/LSrzqVrIJDpAiSpyfHzUj7jcc9kjkYxHrSvVupEtZMFv0cIN
06fOaMn9YX1gUsDkpc8G8BzzzxLA+rLRJUWvftkeaxwDwTjFvAqzXMwsVmn7dxIJ
3i7TUjXtoM6cqe/WV77HzJ1E+xh4g48u7YZkRMI2KmNt7HS3l2QwFd6sxzaHpf1N
QA+uee+zRFpKlXSzf8lxgQg5H/EMJxxcq1MugJ24fTCIsUZDdhwNQJoN2wWjJ75R
y5ywxme8QRjF51LLYrEBso83SiLVtQ1txa1NfrNuLJriHoz64RFpuzeF4wIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFOABSolMLhUklG0Wd6jdjUa2+LbcMB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvNEFGS2lVd3VGU1NVYlJaM3FOMk5ScmI0dHR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALYQPAwQA
XHeVMA8EAgACMAkDBwAqBnoCAAAwDQYJKoZIhvcNAQELBQADggEBAL7qUdJxjq2r
bS/JeGxYc9PtLnCUOHSt+CeAMFlu5fNqZw6QJ11BM3qCOGEujF9ZOgkXoUhBKbQW
iJnSdJT2M5OXDSe82SfeIjK4WZEFygD9F/SmUNOD4adhGeubwjdUm+1qEaJTfHmh
kZEJEBPfaFEAJkPqUJ8p1JsnsLCl86GqYTRH/c3uD9yVrc8k154bn5F3SQmsS46d
LAeRDIrfSRh5g4vXlR/N27qYWEB0XSx4YkXr56VZ3o89tNIHtkPkY9RM0eZX3RWO
+Fv4ely7/yoepKElIXQUoo2f/QoEvcQVR2iArgWTC9aJglgOBj1rd8QtG6YOujWi
Qfja6I/uJw4=
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:55 2024 by rpki-client on console-fra.rpki-client.org