Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/yM8xFZSCy8B6b41OJdHMjp-7sPM.roa
File: yM8xFZSCy8B6b41OJdHMjp-7sPM.roa (raw, json)
Hash identifier: Rs1bp+3BLTJvWjgxem6oz4QHSO/bJex+NQDtCK0TN3g=
Subject key identifier: C8:CF:31:15:94:82:CB:C0:7A:6F:8D:4E:25:D1:CC:8E:9F:BB:B0:F3
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 018BB4EDFB45C59DA83752A52B651D84CB31
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/yM8xFZSCy8B6b41OJdHMjp-7sPM.roa
Signing time: Thu 09 Nov 2023 16:32:57 +0000
ROA not before: Thu 09 Nov 2023 16:32:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42156
IP address blocks: 45.83.172.0/22 maxlen: 22
185.161.188.0/24 maxlen: 24
45.143.62.0/23 maxlen: 23
45.143.60.0/24 maxlen: 24
45.143.61.0/24 maxlen: 24
69.48.159.0/24 maxlen: 24
2a0e:e2c0::/29 maxlen: 29
2a0e:8480::/29 maxlen: 29
2a0e:e2c1::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b4:ed:fb:45:c5:9d:a8:37:52:a5:2b:65:1d:84:cb:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Nov 9 16:32:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8cf31159482cbc07a6f8d4e25d1cc8e9fbbb0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8c:54:71:15:9c:4d:ec:73:af:ba:be:df:b9:
8a:6f:f4:fb:11:38:37:b6:f5:46:eb:b9:50:2b:e1:
af:46:cb:fa:6d:8d:97:4b:4b:ea:24:9e:9d:85:46:
cb:7f:b0:28:11:38:5b:36:82:47:c8:6c:9e:71:3f:
6e:37:dc:57:99:af:1e:89:dd:ac:91:c5:33:d4:dc:
c4:92:f5:c8:f9:c3:86:e4:3b:58:2f:51:1b:09:5f:
9a:6c:0e:aa:b8:be:1c:08:6c:50:ff:83:70:73:6d:
0e:88:9b:50:c3:02:e0:ed:8a:50:42:ff:31:a6:aa:
8b:36:05:45:32:8c:82:20:9c:71:de:2e:48:c9:97:
fb:f0:c6:de:7f:2c:7a:2d:47:8b:de:95:ac:39:db:
08:d9:0d:2f:71:c5:8d:c0:83:37:8b:79:04:c0:70:
d8:65:39:c7:c0:a1:87:6e:e2:2c:0f:b8:d1:bb:d2:
f3:ac:5b:ca:f0:cd:8a:40:ad:04:78:c3:8a:65:8a:
49:52:b1:36:dd:04:43:ad:c1:d6:55:58:90:c6:74:
17:f9:a7:01:31:c0:f2:c8:5d:5f:a8:dd:af:5d:25:
90:56:aa:88:5e:e5:5c:c8:c8:d5:c6:7b:0e:38:a6:
01:03:62:54:fa:77:68:19:99:6d:dd:8e:40:0a:43:
c9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CF:31:15:94:82:CB:C0:7A:6F:8D:4E:25:D1:CC:8E:9F:BB:B0:F3
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/yM8xFZSCy8B6b41OJdHMjp-7sPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.172.0/22
45.143.60.0/22
69.48.159.0/24
185.161.188.0/24
IPv6:
2a0e:8480::/29
2a0e:e2c0::/29
Signature Algorithm: sha256WithRSAEncryption
0a:3e:d8:89:b4:84:06:d0:e4:0c:7c:0a:ef:ce:5c:3e:a7:54:
34:a3:8d:87:4c:67:81:5c:39:06:da:01:06:6f:6d:50:20:c8:
7b:f8:64:b2:67:f9:35:65:8e:fb:45:c9:12:28:29:ad:ae:9e:
f9:85:94:fc:9b:07:cc:4b:c7:93:4b:e2:f1:38:f7:90:07:99:
57:a1:1d:e1:2b:49:d6:9c:0b:ff:a0:6f:a7:67:87:28:73:51:
22:97:25:1a:b4:30:24:3e:56:3f:10:5a:25:5e:b1:8a:c3:56:
02:c3:78:80:b9:77:55:12:6c:2b:29:67:55:ac:4c:65:ce:6a:
61:b2:d7:66:c3:ad:ea:c8:3b:2c:84:2f:20:11:95:31:e6:83:
da:46:4d:7a:3f:d4:1b:28:5d:51:61:6e:b5:2e:d6:89:23:4d:
e4:fd:c1:23:45:1e:d3:5b:34:41:f1:68:03:de:22:d7:1a:09:
0d:6c:ff:48:1c:25:5f:04:66:63:d8:62:25:2b:6e:8d:55:a8:
3b:9f:2d:f5:a4:98:3b:a1:3a:7e:06:b9:b6:7e:e0:e6:c2:86:
43:c8:cd:26:f7:2a:d1:29:b9:e1:ee:65:4a:fc:15:8b:72:b4:
d2:1c:43:e3:41:fd:35:ae:df:c8:b7:b7:98:2b:8b:cf:8e:0f:
93:4c:26:ee
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAYu07ftFxZ2oN1KlK2UdhMsxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYWYwM2NhMmRmNjQyM2I3N2QwZWYzNzM3YjBmNDc5MWFh
MDM1YTMwHhcNMjMxMTA5MTYzMjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGNmMzExNTk0ODJjYmMwN2E2ZjhkNGUyNWQxY2M4ZTlmYmJiMGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIxUcRWcTexzr7q+37mKb/T7ETg3
tvVG67lQK+GvRsv6bY2XS0vqJJ6dhUbLf7AoEThbNoJHyGyecT9uN9xXma8eid2s
kcUz1NzEkvXI+cOG5DtYL1EbCV+abA6quL4cCGxQ/4Nwc20OiJtQwwLg7YpQQv8x
pqqLNgVFMoyCIJxx3i5IyZf78Mbefyx6LUeL3pWsOdsI2Q0vccWNwIM3i3kEwHDY
ZTnHwKGHbuIsD7jRu9LzrFvK8M2KQK0EeMOKZYpJUrE23QRDrcHWVViQxnQX+acB
McDyyF1fqN2vXSWQVqqIXuVcyMjVxnsOOKYBA2JU+ndoGZlt3Y5ACkPJvwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFMjPMRWUgsvAem+NTiXRzI6fu7DzMB8GA1UdIwQY
MBaAFJKvA8ot9kI7d9DvNzew9HkaoDWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85ODIyYmMtMTU5My00OThjLThmNmEt
NzAzYjZiNzBhN2VjLzEveU04eEZaU0N5OEI2YjQxT0pkSE1qcC03c1BNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85ODIyYmMtMTU5My00OThjLThmNmEtNzAzYjZiNzBhN2Vj
LzEva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQCLVOsAwQC
LY88AwQARTCfAwQAuaG8MBQEAgACMA4DBQMqDoSAAwUDKg7iwDANBgkqhkiG9w0B
AQsFAAOCAQEACj7YibSEBtDkDHwK785cPqdUNKONh0xngVw5BtoBBm9tUCDIe/hk
smf5NWWO+0XJEigpra6e+YWU/JsHzEvHk0vi8Tj3kAeZV6Ed4StJ1pwL/6Bvp2eH
KHNRIpclGrQwJD5WPxBaJV6xisNWAsN4gLl3VRJsKylnVaxMZc5qYbLXZsOt6sg7
LIQvIBGVMeaD2kZNej/UGyhdUWFutS7WiSNN5P3BI0Ue01s0QfFoA94i1xoJDWz/
SBwlXwRmY9hiJStujVWoO58t9aSYO6E6fga5tn7g5sKGQ8jNJvcq0Sm54e5lSvwV
i3K00hxD40H9Na7fyLe3mCuLz44Pk0wm7g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:17 2024 by rpki-client on console-fra.rpki-client.org