Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/X4Q3QE2JnAW1JrKWY2fD-AHg2Gs.roa
File: X4Q3QE2JnAW1JrKWY2fD-AHg2Gs.roa (raw, json)
Hash identifier: TfFFafYJveohLEeCUcefyJ62MzTSpNfufUyv+Sq+j9E=
Subject key identifier: 5F:84:37:40:4D:89:9C:05:B5:26:B2:96:63:67:C3:F8:01:E0:D8:6B
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 0185A5EFAA441D1AC5823338210AD0E16BDF
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/X4Q3QE2JnAW1JrKWY2fD-AHg2Gs.roa
Signing time: Thu 12 Jan 2023 12:23:45 +0000
ROA not before: Thu 12 Jan 2023 12:23:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 45.139.44.0/22 maxlen: 24
45.83.152.0/22 maxlen: 24
45.139.56.0/22 maxlen: 24
45.139.64.0/22 maxlen: 24
45.83.124.0/22 maxlen: 24
45.83.132.0/22 maxlen: 24
45.83.144.0/22 maxlen: 24
45.139.36.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:ef:aa:44:1d:1a:c5:82:33:38:21:0a:d0:e1:6b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jan 12 12:23:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f8437404d899c05b526b2966367c3f801e0d86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:91:9d:ab:e3:44:4e:ab:ca:a2:d2:7e:c9:23:
2c:c8:85:a4:af:c2:5c:83:51:e0:c5:d1:60:e4:97:
33:c2:c2:f1:69:bb:67:e4:5a:50:e1:65:13:ec:6a:
ea:7d:10:f5:a9:89:fd:19:59:09:c6:10:fc:1e:26:
d7:d5:d9:12:ae:99:47:1f:f9:2b:19:3d:bd:d1:a8:
d2:eb:26:c8:6e:0a:eb:2c:ff:87:e2:6f:ef:35:c8:
d7:c8:f5:48:8e:93:d2:94:74:7d:fa:c7:34:32:3f:
4a:db:20:39:32:e6:5f:92:0f:a0:8b:62:ed:85:92:
d3:7d:87:85:33:75:a8:cb:d0:d5:72:6c:81:66:fc:
81:b8:9d:35:c7:d4:9a:5e:b7:d5:8c:66:a3:14:52:
27:ca:35:de:d7:7a:9e:61:73:c1:fd:92:3a:9c:a3:
1c:fa:9b:57:5c:ff:30:ad:dd:96:8d:ad:be:53:a6:
cc:40:b7:da:7d:dc:97:60:b0:07:06:9e:9b:33:8a:
5b:01:34:85:30:31:1d:e0:d8:83:57:8f:43:fe:20:
a0:90:c3:f8:76:17:7e:ed:b7:c1:f6:06:fb:09:24:
3e:8a:2a:36:a9:a0:8d:c7:d0:b4:e3:65:8d:50:2f:
0f:57:b5:ec:5c:a5:32:d7:f4:da:07:4d:d7:0c:dd:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:84:37:40:4D:89:9C:05:B5:26:B2:96:63:67:C3:F8:01:E0:D8:6B
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/X4Q3QE2JnAW1JrKWY2fD-AHg2Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.124.0/22
45.83.132.0/22
45.83.144.0/22
45.83.152.0/22
45.139.36.0/22
45.139.44.0/22
45.139.56.0/22
45.139.64.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:90:00:dd:49:c2:9f:df:ad:b0:ac:fc:5e:a8:3b:ee:e0:0b:
cf:8a:01:af:54:11:c2:9b:63:ed:1b:07:c9:a2:23:4f:f1:92:
3b:86:50:c1:91:eb:62:78:36:a8:8a:c8:70:c4:72:96:ef:65:
d5:33:0c:c8:ed:2f:16:34:9e:ca:10:e2:d5:df:df:cc:13:ca:
28:91:9c:47:c1:ca:f2:16:00:b9:02:a9:e1:63:b4:a7:c6:14:
22:12:31:ab:07:fb:80:3d:87:da:0c:c1:38:09:d1:b0:10:cf:
b1:90:0c:74:f3:ad:54:56:f6:e6:c3:fc:1a:a6:10:f3:75:f3:
e9:a9:bd:ce:fa:e7:b9:06:2d:6e:39:f9:81:d2:8f:57:14:d3:
c7:be:2c:f6:46:0b:36:d3:17:f1:9d:e3:bc:60:d2:83:e3:3e:
f2:73:0f:d9:94:07:8b:ab:6d:34:5b:34:15:37:3f:11:9e:cc:
83:b6:ed:87:cc:7b:e3:59:9a:30:91:5b:a3:95:7c:f3:2f:bb:
6d:30:5d:3f:23:2a:74:87:b5:44:bc:3f:b5:24:da:78:c7:83:
ed:54:5e:a9:a4:f0:0e:e8:88:06:ae:11:09:4d:b7:60:ec:dc:
f2:f6:50:c2:ac:f7:6f:0f:97:a0:b1:56:3b:54:8a:6b:af:1a:
3c:5f:4f:b7
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYWl76pEHRrFgjM4IQrQ4WvfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw
MGIwNTEwHhcNMjMwMTEyMTIyMzQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Zjg0Mzc0MDRkODk5YzA1YjUyNmIyOTY2MzY3YzNmODAxZTBkODZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpGdq+NETqvKotJ+ySMsyIWkr8Jc
g1HgxdFg5JczwsLxabtn5FpQ4WUT7GrqfRD1qYn9GVkJxhD8HibX1dkSrplHH/kr
GT290ajS6ybIbgrrLP+H4m/vNcjXyPVIjpPSlHR9+sc0Mj9K2yA5MuZfkg+gi2Lt
hZLTfYeFM3Woy9DVcmyBZvyBuJ01x9SaXrfVjGajFFInyjXe13qeYXPB/ZI6nKMc
+ptXXP8wrd2Wja2+U6bMQLfafdyXYLAHBp6bM4pbATSFMDEd4NiDV49D/iCgkMP4
dhd+7bfB9gb7CSQ+iio2qaCNx9C042WNUC8PV7XsXKUy1/TaB03XDN3GrwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFF+EN0BNiZwFtSaylmNnw/gB4NhrMB8GA1UdIwQY
MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt
YWIxOWZjYjBjZTY0LzEvWDRRM1FFMkpuQVcxSnJLV1kyZkQtQUhnMkdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0
LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCLVN8AwQC
LVOEAwQCLVOQAwQCLVOYAwQCLYskAwQCLYssAwQCLYs4AwQCLYtAMA0GCSqGSIb3
DQEBCwUAA4IBAQCkkADdScKf362wrPxeqDvu4AvPigGvVBHCm2PtGwfJoiNP8ZI7
hlDBketieDaoishwxHKW72XVMwzI7S8WNJ7KEOLV39/ME8ookZxHwcryFgC5Aqnh
Y7SnxhQiEjGrB/uAPYfaDME4CdGwEM+xkAx0861UVvbmw/waphDzdfPpqb3O+ue5
Bi1uOfmB0o9XFNPHviz2Rgs20xfxneO8YNKD4z7ycw/ZlAeLq200WzQVNz8RnsyD
tu2HzHvjWZowkVujlXzzL7ttMF0/Iyp0h7VEvD+1JNp4x4PtVF6ppPAO6IgGrhEJ
Tbdg7Nzy9lDCrPdvD5egsVY7VIprrxo8X0+3
-----END CERTIFICATE-----
Generated at Wed Nov 22 13:20:52 2023 by rpki-client on console-fra.rpki-client.org