Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/dnEyxRmXMOOsZLFNk6rgZP7eQ4A.roa
File: dnEyxRmXMOOsZLFNk6rgZP7eQ4A.roa (raw, json)
Hash identifier: 9PGbHHA8fekCXS16m/DW9ZZOCsoaFEP2WaejKDIqOm4=
Subject key identifier: 76:71:32:C5:19:97:30:E3:AC:64:B1:4D:93:AA:E0:64:FE:DE:43:80
Certificate issuer: /CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
Certificate serial: 018570398B112E371A24584C46400FD604C3
Authority key identifier: E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/dnEyxRmXMOOsZLFNk6rgZP7eQ4A.roa
Signing time: Mon 02 Jan 2023 02:04:57 +0000
ROA not before: Mon 02 Jan 2023 02:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50673
IP address blocks: 45.141.28.0/22 maxlen: 22
91.199.167.0/24 maxlen: 24
2a0e:c9c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:8b:11:2e:37:1a:24:58:4c:46:40:0f:d6:04:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7507db088a7c81a0dbec8f1addb52f95bd10143
Validity
Not Before: Jan 2 02:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=767132c5199730e3ac64b14d93aae064fede4380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d6:e2:2a:8d:00:dc:d0:1b:72:7e:42:d7:21:
17:b8:60:ee:cc:98:28:a2:f2:92:c1:7e:df:81:3d:
90:86:63:55:ad:ed:78:87:38:05:07:93:0b:03:3f:
cc:09:a9:58:f2:a3:52:ea:63:2c:70:38:8f:8f:ec:
2f:3b:ff:74:aa:f5:ae:f9:87:c6:a2:5f:cb:ee:ac:
29:1b:76:bb:e8:ff:b6:1e:c6:c7:9e:41:ba:ed:7b:
2b:89:5e:97:da:8a:be:9c:fc:c9:58:4f:54:57:94:
7e:f1:d7:a3:95:ec:d1:0f:f6:28:a9:53:b8:18:ab:
6a:77:8a:9a:0a:19:75:92:06:78:85:5c:54:fb:d0:
89:f8:cd:ed:b6:70:3f:59:84:cc:98:17:cd:83:c5:
54:2f:e9:46:86:b1:4b:4b:41:d4:e2:d3:34:7e:08:
c7:7a:e0:89:b4:af:1e:68:6a:d2:a6:1b:0d:6e:93:
ad:0b:e4:0a:d3:92:b7:e4:c2:f5:72:66:fc:a3:1c:
07:97:b7:f7:e8:aa:6e:38:76:56:3b:c6:76:62:b5:
6d:fd:8a:fc:92:43:c8:b9:cb:b9:c5:96:92:cc:20:
8e:fc:9f:c4:1a:e5:42:bf:d7:d5:1e:36:82:91:25:
24:e3:1f:bf:c5:e0:2d:36:b3:8c:15:60:4a:e5:1c:
83:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:71:32:C5:19:97:30:E3:AC:64:B1:4D:93:AA:E0:64:FE:DE:43:80
X509v3 Authority Key Identifier:
keyid:E7:50:7D:B0:88:A7:C8:1A:0D:BE:C8:F1:AD:DB:52:F9:5B:D1:01:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51B9sIinyBoNvsjxrdtS-VvRAUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/dnEyxRmXMOOsZLFNk6rgZP7eQ4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f413c2-c2ec-41f1-9d85-5d8634ab7d91/1/51B9sIinyBoNvsjxrdtS-VvRAUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.28.0/22
91.199.167.0/24
IPv6:
2a0e:c9c0::/29
Signature Algorithm: sha256WithRSAEncryption
3b:aa:ed:44:ab:ee:23:b0:5d:b8:0c:3b:34:20:9f:18:c9:e3:
fa:48:3a:2e:b5:52:54:37:8b:3a:55:5c:de:90:9d:52:81:48:
c8:42:4b:d1:58:9a:3e:3a:96:ac:11:89:50:62:5b:88:c6:02:
e7:7b:00:cd:25:f6:05:d5:29:b3:cd:a2:4b:00:fc:2c:31:dd:
1f:97:87:8b:26:00:6c:70:b7:6a:18:62:28:d5:d0:34:42:98:
f6:e0:5a:86:6d:54:28:a7:81:b5:03:33:df:ac:d9:6f:96:58:
17:f3:5a:3d:18:f0:f8:7e:49:23:2f:c5:5c:4d:d1:5e:04:7e:
72:af:10:61:78:07:f6:88:80:37:f7:e6:42:93:2a:52:4b:2e:
06:ca:56:3f:34:d2:9d:6c:0a:c9:fd:cc:34:39:96:54:61:c8:
bf:d1:4c:fc:2e:45:70:2f:e7:4a:8e:73:c5:4a:36:fc:d5:eb:
27:7b:ec:61:06:f7:7f:e4:6a:95:97:bb:4d:30:a3:61:c1:a8:
db:35:a3:a9:15:ab:f9:be:fe:0f:26:1f:bb:29:91:1e:0b:ef:
ec:7d:45:5d:dd:b1:4e:58:79:73:fa:1f:51:ff:3e:d8:1d:38:
78:c4:ab:fe:8f:51:6e:cd:30:be:41:e2:47:7f:4f:22:31:f5:
6c:b3:4e:1c
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYVwOYsRLjcaJFhMRkAP1gTDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NTA3ZGIwODhhN2M4MWEwZGJlYzhmMWFkZGI1MmY5NWJk
MTAxNDMwHhcNMjMwMTAyMDIwNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjcxMzJjNTE5OTczMGUzYWM2NGIxNGQ5M2FhZTA2NGZlZGU0MzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtbiKo0A3NAbcn5C1yEXuGDuzJgo
ovKSwX7fgT2QhmNVre14hzgFB5MLAz/MCalY8qNS6mMscDiPj+wvO/90qvWu+YfG
ol/L7qwpG3a76P+2HsbHnkG67XsriV6X2oq+nPzJWE9UV5R+8dejlezRD/YoqVO4
GKtqd4qaChl1kgZ4hVxU+9CJ+M3ttnA/WYTMmBfNg8VUL+lGhrFLS0HU4tM0fgjH
euCJtK8eaGrSphsNbpOtC+QK05K35ML1cmb8oxwHl7f36KpuOHZWO8Z2YrVt/Yr8
kkPIucu5xZaSzCCO/J/EGuVCv9fVHjaCkSUk4x+/xeAtNrOMFWBK5RyDMwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHZxMsUZlzDjrGSxTZOq4GT+3kOAMB8GA1UdIwQY
MBaAFOdQfbCIp8gaDb7I8a3bUvlb0QFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTFCOXNJaW55Qm9OdnNqeHJkdFMtVnZSQVVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNDEzYzItYzJlYy00MWYxLTlkODUt
NWQ4NjM0YWI3ZDkxLzEvZG5FeXhSbVhNT09zWkxGTms2cmdaUDdlUTRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNDEzYzItYzJlYy00MWYxLTlkODUtNWQ4NjM0YWI3ZDkx
LzEvNTFCOXNJaW55Qm9OdnNqeHJkdFMtVnZSQVVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLY0cAwQA
W8enMA0EAgACMAcDBQMqDsnAMA0GCSqGSIb3DQEBCwUAA4IBAQA7qu1Eq+4jsF24
DDs0IJ8YyeP6SDoutVJUN4s6VVzekJ1SgUjIQkvRWJo+OpasEYlQYluIxgLnewDN
JfYF1SmzzaJLAPwsMd0fl4eLJgBscLdqGGIo1dA0Qpj24FqGbVQop4G1AzPfrNlv
llgX81o9GPD4fkkjL8VcTdFeBH5yrxBheAf2iIA39+ZCkypSSy4GylY/NNKdbArJ
/cw0OZZUYci/0Uz8LkVwL+dKjnPFSjb81esne+xhBvd/5GqVl7tNMKNhwajbNaOp
Fav5vv4PJh+7KZEeC+/sfUVd3bFOWHlz+h9R/z7YHTh4xKv+j1FuzTC+QeJHf08i
MfVss04c
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:52 2024 by rpki-client on console-fra.rpki-client.org