Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/RovjrHgnRN134qPR-_26gf9uhgg.roa
File: RovjrHgnRN134qPR-_26gf9uhgg.roa (raw, json)
Hash identifier: amajePN79uAREkDAu432iyK1JiLhmYUDiuRUqihD6PM=
Subject key identifier: 46:8B:E3:AC:78:27:44:DD:77:E2:A3:D1:FB:FD:BA:81:FF:6E:86:08
Certificate issuer: /CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Certificate serial: 0186844DC6752D8FF007BA5B1ABE1BBF7AA7
Authority key identifier: 49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/RovjrHgnRN134qPR-_26gf9uhgg.roa
Signing time: Fri 24 Feb 2023 16:42:14 +0000
ROA not before: Fri 24 Feb 2023 16:42:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 152.89.28.0/22 maxlen: 22
45.138.12.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:84:4d:c6:75:2d:8f:f0:07:ba:5b:1a:be:1b:bf:7a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4986c73994d02d91fc97d916e9809a6d981e6b17
Validity
Not Before: Feb 24 16:42:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=468be3ac782744dd77e2a3d1fbfdba81ff6e8608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bf:fc:48:0e:78:5d:94:ed:f3:46:5a:35:d3:
11:3b:fc:ad:3f:be:74:ee:35:4d:ca:f8:3b:42:4d:
2b:6a:e3:da:02:b9:82:6e:0d:55:2b:5e:a7:79:2d:
26:40:b2:e6:c9:58:8e:74:6c:78:eb:8f:df:20:7b:
69:63:9f:ae:03:5e:02:ad:8f:21:40:8b:6b:a1:b9:
2a:41:34:bc:94:90:36:23:1e:26:5d:1f:8a:b2:fd:
3b:18:1e:ba:3c:38:74:05:2a:f0:a9:4b:25:97:31:
75:9e:77:54:c5:cf:f7:c7:92:91:c3:f3:4b:41:e9:
39:b9:2c:66:95:ae:fa:a6:ef:56:9a:eb:df:06:42:
87:18:ed:f1:d1:20:ee:45:93:83:99:e9:f1:49:f7:
b2:ea:32:1b:89:c5:8d:61:4a:aa:32:96:2b:77:16:
f5:97:38:2f:aa:4d:b7:8a:d1:eb:75:b4:ed:55:97:
3e:c8:fe:02:b5:4e:a8:0b:b1:de:6b:03:63:12:24:
b5:36:c6:da:4a:f5:36:70:57:de:b0:fb:99:d6:c9:
dc:66:f6:53:74:95:8f:89:3d:c2:5b:aa:3f:32:ac:
7d:b2:94:99:27:4d:35:1f:b3:8f:22:46:fb:ac:b7:
dc:f3:2b:28:f5:5a:5a:70:16:51:d3:26:0d:1f:df:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8B:E3:AC:78:27:44:DD:77:E2:A3:D1:FB:FD:BA:81:FF:6E:86:08
X509v3 Authority Key Identifier:
keyid:49:86:C7:39:94:D0:2D:91:FC:97:D9:16:E9:80:9A:6D:98:1E:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYbHOZTQLZH8l9kW6YCabZgeaxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/RovjrHgnRN134qPR-_26gf9uhgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/457e13-41d3-40ef-b572-9e895d0ef8d2/1/SYbHOZTQLZH8l9kW6YCabZgeaxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.12.0/22
152.89.28.0/22
Signature Algorithm: sha256WithRSAEncryption
85:b0:88:00:b1:ed:e7:a1:f7:9f:c8:2f:36:e6:19:6d:5e:54:
29:d0:87:01:d6:81:b0:47:9e:59:6e:f6:71:c7:2a:bd:70:6a:
a0:e8:0d:01:39:3a:46:41:2f:06:b7:f2:37:90:62:be:8e:ca:
01:29:b4:99:fc:6c:ec:9e:e6:20:21:13:90:b4:f5:20:9b:31:
a5:f9:42:c2:57:d5:07:00:78:d8:e9:23:3d:d2:6e:2d:04:11:
32:5f:87:ed:87:cd:ec:30:f4:96:24:a0:05:ff:71:4d:a0:1e:
da:d8:bd:80:00:73:64:fa:ca:af:e8:c0:68:c7:95:8f:b0:ad:
6c:de:c9:00:b9:4d:e6:45:b5:92:e0:4d:38:d2:ea:20:03:c2:
3a:6f:00:0b:33:be:9b:1c:e4:9d:f5:34:44:70:ea:a3:c5:d2:
95:d8:ac:33:6d:a0:4d:c1:08:a8:24:33:e6:f0:19:b8:37:db:
d5:ba:e8:a2:8e:bc:68:73:25:d8:29:2f:8c:19:e0:2f:6f:3a:
25:55:f6:ea:38:34:0b:04:fe:2c:81:48:3d:92:74:81:88:62:
37:21:7d:61:90:5b:5d:6e:de:35:de:9d:74:c8:e3:51:5c:28:
3e:16:4e:ea:9b:69:a0:e5:11:92:82:40:8f:3e:1b:b3:8c:8e:
ce:54:ac:fa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYaETcZ1LY/wB7pbGr4bv3qnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ODZjNzM5OTRkMDJkOTFmYzk3ZDkxNmU5ODA5YTZkOTgx
ZTZiMTcwHhcNMjMwMjI0MTY0MjE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NjhiZTNhYzc4Mjc0NGRkNzdlMmEzZDFmYmZkYmE4MWZmNmU4NjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL/8SA54XZTt80ZaNdMRO/ytP750
7jVNyvg7Qk0rauPaArmCbg1VK16neS0mQLLmyViOdGx464/fIHtpY5+uA14CrY8h
QItrobkqQTS8lJA2Ix4mXR+Ksv07GB66PDh0BSrwqUsllzF1nndUxc/3x5KRw/NL
Qek5uSxmla76pu9WmuvfBkKHGO3x0SDuRZODmenxSfey6jIbicWNYUqqMpYrdxb1
lzgvqk23itHrdbTtVZc+yP4CtU6oC7HeawNjEiS1NsbaSvU2cFfesPuZ1sncZvZT
dJWPiT3CW6o/Mqx9spSZJ001H7OPIkb7rLfc8yso9VpacBZR0yYNH99ctQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEaL46x4J0Tdd+Kj0fv9uoH/boYIMB8GA1UdIwQY
MBaAFEmGxzmU0C2R/JfZFumAmm2YHmsXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzIt
OWU4OTVkMGVmOGQyLzEvUm92anJIZ25STjEzNHFQUi1fMjZnZjl1aGdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS80NTdlMTMtNDFkMy00MGVmLWI1NzItOWU4OTVkMGVmOGQy
LzEvU1liSE9aVFFMWkg4bDlrVzZZQ2FiWmdlYXhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYoMAwQC
mFkcMA0GCSqGSIb3DQEBCwUAA4IBAQCFsIgAse3nofefyC825hltXlQp0IcB1oGw
R55ZbvZxxyq9cGqg6A0BOTpGQS8Gt/I3kGK+jsoBKbSZ/GzsnuYgIROQtPUgmzGl
+ULCV9UHAHjY6SM90m4tBBEyX4fth83sMPSWJKAF/3FNoB7a2L2AAHNk+sqv6MBo
x5WPsK1s3skAuU3mRbWS4E040uogA8I6bwALM76bHOSd9TREcOqjxdKV2KwzbaBN
wQioJDPm8Bm4N9vVuuiijrxocyXYKS+MGeAvbzolVfbqODQLBP4sgUg9knSBiGI3
IX1hkFtdbt413p10yONRXCg+Fk7qm2mg5RGSgkCPPhuzjI7OVKz6
Generated at Fri Sep 15 16:16:11 2023 by rpki-client on console-ams.rpki-client.org