Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/bezXkxWMoFWVt6TFT-fTPwGd1ZQ.roa
File: bezXkxWMoFWVt6TFT-fTPwGd1ZQ.roa (raw, json)
Hash identifier: aD1Zt4LhNH5QDCgILVF6/S5Hp6Hfs5Lb+Jsi1nmdiTI=
Subject key identifier: 6D:EC:D7:93:15:8C:A0:55:95:B7:A4:C5:4F:E7:D3:3F:01:9D:D5:94
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 01890C30990E53748FCA6D8298E52EC585B5
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/bezXkxWMoFWVt6TFT-fTPwGd1ZQ.roa
Signing time: Fri 30 Jun 2023 12:04:18 +0000
ROA not before: Fri 30 Jun 2023 12:04:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.143.217.0/24 maxlen: 24
194.143.218.0/24 maxlen: 24
194.143.223.0/24 maxlen: 24
45.155.242.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:30:99:0e:53:74:8f:ca:6d:82:98:e5:2e:c5:85:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jun 30 12:04:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6decd793158ca05595b7a4c54fe7d33f019dd594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:61:cf:db:de:b9:be:3c:01:c6:dc:02:4e:87:
b7:6b:69:d7:61:2a:07:e9:a9:23:75:24:37:4e:aa:
e1:76:1e:ce:23:83:d1:40:53:4f:b4:c9:a0:be:5d:
9c:e7:11:68:3d:7d:50:8b:ae:85:94:ec:32:da:b5:
72:e0:0d:70:6b:61:7f:86:96:53:7b:f6:5d:a2:d7:
56:d0:0b:9b:f5:a3:64:f5:b6:b2:e8:94:a4:3d:a6:
ae:3d:fc:61:db:a0:32:ce:61:c2:dd:d7:99:5c:7b:
04:8e:3f:28:22:a0:16:25:15:4c:ea:4b:db:73:9f:
54:09:e5:88:59:6f:10:5c:3f:6e:d4:7b:02:a0:d3:
ed:39:76:ea:df:a3:26:80:76:bb:cb:5a:2f:43:e0:
68:22:0d:4f:0d:3b:4f:5f:c5:c7:83:5a:57:bc:15:
78:ff:3a:f2:6b:42:f1:1b:96:e7:73:d8:e7:7d:56:
ba:1f:35:b4:78:65:1b:e8:f2:f8:f5:65:dd:1e:87:
d5:5e:d0:1a:79:63:8f:9a:44:ae:9d:13:5e:32:05:
32:5d:64:7a:9e:7d:e1:c3:60:5c:a0:cf:d9:87:bd:
c0:70:0f:68:96:2d:e9:8f:08:09:5a:ee:06:01:8e:
75:ea:68:43:4e:2e:90:e4:87:35:e3:97:2e:16:f7:
2e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EC:D7:93:15:8C:A0:55:95:B7:A4:C5:4F:E7:D3:3F:01:9D:D5:94
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/bezXkxWMoFWVt6TFT-fTPwGd1ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.242.0/23
194.143.217.0-194.143.218.255
194.143.223.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ea:cd:a9:d9:dc:f4:09:0b:c3:35:df:ab:88:dc:94:11:dd:
03:7e:47:f6:e0:be:e9:05:4a:a6:d7:0b:26:65:d1:12:10:c5:
29:85:f6:80:fa:9b:5e:4d:f4:55:fb:f4:d8:98:42:19:73:c4:
b4:01:54:21:eb:72:69:4b:e1:4e:9a:c8:73:b2:fc:21:31:9d:
ce:20:32:7c:4a:fa:7e:7a:85:d9:97:6f:ca:4a:99:7a:f8:8b:
19:ed:87:5f:3e:c3:ba:f1:5b:9a:6d:20:19:92:06:98:3d:02:
bb:ef:5f:c6:c2:fd:c1:5c:06:63:80:33:90:28:3e:70:1a:ef:
e3:70:ad:75:99:9f:a0:2f:90:73:39:95:41:d6:8f:9d:9c:0e:
98:10:46:ad:a7:c8:f2:85:4f:1b:5b:8c:0c:81:50:b1:73:1f:
26:92:fa:db:79:f2:b9:22:2e:c8:23:e8:92:a9:18:28:99:8a:
a8:c8:1b:d9:3f:25:6d:6b:11:05:f7:2c:ae:bf:a6:ef:ea:7a:
79:69:f1:b7:02:44:a9:8b:88:a0:c1:68:b3:15:d1:0a:48:85:
70:9f:b8:02:dc:78:5e:51:35:53:e8:71:92:b8:d6:e7:53:91:
98:2f:ec:88:4b:e1:c6:43:ee:e7:23:21:49:b3:b5:59:e8:d1:
f2:bb:0f:bd
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYkMMJkOU3SPym2CmOUuxYW1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NzFkY2M3YTlhYzczNTFjNzFlMGJjMjI3OGNmNDVmZDAy
MGFlMmUwHhcNMjMwNjMwMTIwNDE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGVjZDc5MzE1OGNhMDU1OTViN2E0YzU0ZmU3ZDMzZjAxOWRkNTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2HP2965vjwBxtwCToe3a2nXYSoH
6akjdSQ3Tqrhdh7OI4PRQFNPtMmgvl2c5xFoPX1Qi66FlOwy2rVy4A1wa2F/hpZT
e/ZdotdW0Aub9aNk9bay6JSkPaauPfxh26AyzmHC3deZXHsEjj8oIqAWJRVM6kvb
c59UCeWIWW8QXD9u1HsCoNPtOXbq36MmgHa7y1ovQ+BoIg1PDTtPX8XHg1pXvBV4
/zrya0LxG5bnc9jnfVa6HzW0eGUb6PL49WXdHofVXtAaeWOPmkSunRNeMgUyXWR6
nn3hw2BcoM/Zh73AcA9oli3pjwgJWu4GAY516mhDTi6Q5Ic145cuFvcuUwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFG3s15MVjKBVlbekxU/n0z8BndWUMB8GA1UdIwQY
MBaAFAZx3MeprHNRxx4LwieM9F/QIK4uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGIt
MWRkZWM0Y2NlMjRjLzEvYmV6WGt4V01vRldWdDZURlQtZlRQd0dkMVpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xZjk0OTMtZDQ2OC00YTdjLThjNGItMWRkZWM0Y2NlMjRj
LzEvQm5IY3g2bXNjMUhISGd2Q0o0ejBYOUFncmk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBLZvyMAwD
BADCj9kDBADCj9oDBADCj98wDQYJKoZIhvcNAQELBQADggEBAJbqzanZ3PQJC8M1
36uI3JQR3QN+R/bgvukFSqbXCyZl0RIQxSmF9oD6m15N9FX79NiYQhlzxLQBVCHr
cmlL4U6ayHOy/CExnc4gMnxK+n56hdmXb8pKmXr4ixnth18+w7rxW5ptIBmSBpg9
ArvvX8bC/cFcBmOAM5AoPnAa7+NwrXWZn6AvkHM5lUHWj52cDpgQRq2nyPKFTxtb
jAyBULFzHyaS+tt58rkiLsgj6JKpGCiZiqjIG9k/JW1rEQX3LK6/pu/qenlp8bcC
RKmLiKDBaLMV0QpIhXCfuALceF5RNVPocZK41udTkZgv7IhL4cZD7ucjIUmztVno
0fK7D70=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:42 2023 by rpki-client on console-ams.rpki-client.org