Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/v_b6qq1McXgrZ8Vh17qIhDncSiA.roa
File: v_b6qq1McXgrZ8Vh17qIhDncSiA.roa (raw, json)
Hash identifier: i1JBsHjx6tSxXwGwbIDpygcYlrIfCJWOeS0R2qQjpOw=
Subject key identifier: BF:F6:FA:AA:AD:4C:71:78:2B:67:C5:61:D7:BA:88:84:39:DC:4A:20
Certificate issuer: /CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Certificate serial: 018572B41C0CBD970676F00A56D6B2DAE728
Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/v_b6qq1McXgrZ8Vh17qIhDncSiA.roa
Signing time: Mon 02 Jan 2023 13:38:04 +0000
ROA not before: Mon 02 Jan 2023 13:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44061
IP address blocks: 79.175.208.0/20 maxlen: 20
109.74.96.0/20 maxlen: 20
79.175.224.0/20 maxlen: 20
79.175.240.0/21 maxlen: 21
79.175.248.0/21 maxlen: 21
79.175.252.0/22 maxlen: 22
79.175.248.0/22 maxlen: 22
45.139.93.0/24 maxlen: 24
45.139.95.0/24 maxlen: 24
45.139.92.0/24 maxlen: 24
45.139.94.0/24 maxlen: 24
79.175.192.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:1c:0c:bd:97:06:76:f0:0a:56:d6:b2:da:e7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Validity
Not Before: Jan 2 13:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bff6faaaad4c71782b67c561d7ba888439dc4a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4f:b0:a2:e2:3e:f9:9d:03:0f:66:8a:35:de:
53:14:ec:01:46:a3:5e:7d:85:c6:9b:57:14:0f:e9:
9a:5b:05:2c:7e:d9:ef:6f:2a:fc:5e:63:b6:8e:f6:
e7:e0:06:d1:21:aa:b9:be:93:f8:04:f7:a1:82:db:
4a:94:eb:41:e9:99:a5:2d:f3:c3:72:37:1f:2c:f3:
81:c1:79:08:41:15:6b:d5:a1:af:89:ce:83:ef:63:
38:66:1f:db:89:7f:d6:25:89:92:0a:2a:a6:0a:a6:
8b:1a:9a:ce:2f:5f:61:80:b8:23:1c:71:fd:ac:ac:
f1:1c:25:e2:36:b5:ff:7f:09:fd:7f:f8:f7:4c:ff:
b8:bf:f8:f0:45:02:e2:18:38:3e:4b:68:e9:78:40:
47:7e:43:9b:91:a9:e5:f7:54:35:0d:ec:34:b3:dc:
fa:d2:87:b1:94:66:04:29:90:28:0f:58:a6:8a:d9:
9b:55:ff:ff:34:e4:24:17:5e:12:d8:d9:cd:b8:34:
46:31:a1:b1:21:ad:58:88:9e:7d:fa:fd:71:11:f3:
ab:4d:00:e8:dd:6e:9c:af:f3:29:9c:b7:5d:2e:1c:
30:c4:49:2b:16:84:6c:2b:d8:d8:15:e7:b8:81:6a:
58:5e:45:4b:49:6a:5b:05:4a:13:df:c8:17:95:34:
2b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F6:FA:AA:AD:4C:71:78:2B:67:C5:61:D7:BA:88:84:39:DC:4A:20
X509v3 Authority Key Identifier:
keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/v_b6qq1McXgrZ8Vh17qIhDncSiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.92.0/22
79.175.192.0/18
109.74.96.0/20
Signature Algorithm: sha256WithRSAEncryption
0f:e5:c8:2c:14:e5:e2:90:39:9b:2c:fd:16:7d:15:36:ac:9f:
33:f1:c1:af:48:81:f0:cf:79:c7:5a:7d:87:5c:47:fe:ba:b5:
cc:b6:0b:d4:53:72:ac:9e:1b:76:33:3a:b8:8f:f2:7c:9a:21:
8d:42:b2:28:b6:f6:9c:3e:00:3a:5a:50:a4:0b:07:0a:57:90:
0e:51:8c:9c:5d:ae:6e:0d:ef:d2:c2:ea:81:02:82:7f:67:90:
60:ab:e0:fb:9d:cd:23:57:9d:87:4b:cd:2d:de:e8:fe:80:3c:
95:99:2b:72:b3:d8:9c:6b:25:b0:7f:69:e0:96:03:78:36:c7:
08:81:8d:35:11:e9:62:66:1f:75:51:a9:5b:f6:5a:e0:39:9d:
ab:a0:7c:f3:66:91:93:3a:91:59:e4:50:c5:74:f5:65:db:db:
88:c2:5e:7a:26:bb:2a:c4:72:d4:6d:f4:3b:d2:ab:02:fd:a5:
d0:9a:d3:6b:4e:61:18:eb:d1:18:e3:d4:23:fd:76:1b:38:eb:
ac:7c:ce:14:b0:10:73:e3:0d:bb:06:2a:b8:4a:6c:9a:1e:85:
c5:87:a5:d4:79:1b:fc:cb:c9:6f:e0:51:3f:3b:14:b3:df:e7:
bf:f5:b9:6e:2d:ca:d8:80:55:0b:b4:90:b4:58:16:bd:80:ce:
43:9d:62:0f
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYVytBwMvZcGdvAKVtay2ucoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NWRmOThiZWM4Mjc2YjgyYmE4MmQ5Mzc2MDQ0N2JhNDRk
MWExOWIwHhcNMjMwMTAyMTMzODA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmY2ZmFhYWFkNGM3MTc4MmI2N2M1NjFkN2JhODg4NDM5ZGM0YTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE+wouI++Z0DD2aKNd5TFOwBRqNe
fYXGm1cUD+maWwUsftnvbyr8XmO2jvbn4AbRIaq5vpP4BPehgttKlOtB6ZmlLfPD
cjcfLPOBwXkIQRVr1aGvic6D72M4Zh/biX/WJYmSCiqmCqaLGprOL19hgLgjHHH9
rKzxHCXiNrX/fwn9f/j3TP+4v/jwRQLiGDg+S2jpeEBHfkObkanl91Q1Dew0s9z6
0oexlGYEKZAoD1imitmbVf//NOQkF14S2NnNuDRGMaGxIa1YiJ59+v1xEfOrTQDo
3W6cr/MpnLddLhwwxEkrFoRsK9jYFee4gWpYXkVLSWpbBUoT38gXlTQrtQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFL/2+qqtTHF4K2fFYde6iIQ53EogMB8GA1UdIwQY
MBaAFNRd+Yvsgna4K6gtk3YER7pE0aGbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kZTA2NWQtMzBlMi00M2Q1LWIzNTct
YzA5NTZhODAxMzJkLzEvdl9iNnFxMU1jWGdyWjhWaDE3cUloRG5jU2lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kZTA2NWQtMzBlMi00M2Q1LWIzNTctYzA5NTZhODAxMzJk
LzEvMUYzNWkteUNkcmdycUMyVGRnUkh1a1RSb1pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLYtcAwQG
T6/AAwQEbUpgMA0GCSqGSIb3DQEBCwUAA4IBAQAP5cgsFOXikDmbLP0WfRU2rJ8z
8cGvSIHwz3nHWn2HXEf+urXMtgvUU3Ksnht2Mzq4j/J8miGNQrIotvacPgA6WlCk
CwcKV5AOUYycXa5uDe/SwuqBAoJ/Z5Bgq+D7nc0jV52HS80t3uj+gDyVmStys9ic
ayWwf2nglgN4NscIgY01EeliZh91Ualb9lrgOZ2roHzzZpGTOpFZ5FDFdPVl29uI
wl56JrsqxHLUbfQ70qsC/aXQmtNrTmEY69EY49Qj/XYbOOusfM4UsBBz4w27Biq4
SmyaHoXFh6XUeRv8y8lv4FE/OxSz3+e/9bluLcrYgFULtJC0WBa9gM5DnWIP
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:53 2024 by rpki-client on console-ams.rpki-client.org