Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/Rd3dubeLaQK9c1FV3fglbvEqWL4.roa
File: Rd3dubeLaQK9c1FV3fglbvEqWL4.roa (raw, json)
Hash identifier: JWgXO8eOxmGm1V55y0H6qT1xV9vUotELOlG8mrfjhr0=
Subject key identifier: 45:DD:DD:B9:B7:8B:69:02:BD:73:51:55:DD:F8:25:6E:F1:2A:58:BE
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 01864F2EC5D541596BC9DE4D3AE8C1970869
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/Rd3dubeLaQK9c1FV3fglbvEqWL4.roa
Signing time: Tue 14 Feb 2023 09:08:30 +0000
ROA not before: Tue 14 Feb 2023 09:08:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49022
IP address blocks: 185.190.25.0/24 maxlen: 24
185.105.238.0/24 maxlen: 24
45.139.8.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4f:2e:c5:d5:41:59:6b:c9:de:4d:3a:e8:c1:97:08:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Feb 14 09:08:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45ddddb9b78b6902bd735155ddf8256ef12a58be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:66:7a:b1:74:0e:f8:67:da:5e:76:ba:34:
35:97:ad:0c:68:86:75:f3:f6:82:7a:d2:3f:0f:ad:
46:fa:56:e2:cb:dc:4c:4f:29:33:74:72:0f:38:5e:
f4:97:e9:a5:64:df:8e:1b:96:0a:39:7f:f8:45:4f:
dd:3b:dc:46:81:b0:8d:38:1b:e3:6c:b0:1e:a0:4f:
39:e9:38:ab:36:b5:4b:ba:4d:5f:77:e2:6b:eb:d9:
26:59:3e:c0:8d:4f:76:37:b0:d2:d9:28:61:52:c0:
a8:4b:03:7e:76:a7:b9:24:4e:4d:ac:6c:52:db:0d:
7f:f9:28:8f:32:70:53:6e:40:30:c6:e3:5a:1d:e2:
41:90:17:ea:a3:5a:0d:1e:be:7d:4a:ed:16:62:72:
31:0b:34:02:8c:96:51:ad:bc:f1:9e:b5:ec:3b:9c:
0a:13:79:03:5a:95:79:95:39:b0:a7:b4:83:b1:db:
4f:f6:1a:e6:d2:26:6a:37:42:a2:40:89:3c:b4:62:
84:7d:85:50:23:fd:51:d6:83:25:cb:72:42:9a:ed:
ba:bb:77:c4:b1:e2:d7:7f:8d:66:27:a3:51:d2:b3:
f7:f8:66:1f:8a:0a:95:c1:00:a4:b5:28:6b:71:0b:
0c:d8:23:77:88:79:a3:4a:05:2e:20:e5:ec:99:51:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DD:DD:B9:B7:8B:69:02:BD:73:51:55:DD:F8:25:6E:F1:2A:58:BE
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/Rd3dubeLaQK9c1FV3fglbvEqWL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.8.0/24
185.105.238.0/24
185.190.25.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c2:13:44:32:b1:9b:05:b2:8c:5f:07:e0:18:8e:1d:11:f6:
bb:7e:3c:49:68:1c:4f:81:e2:83:b9:85:b0:a8:fe:ba:bf:87:
27:cd:af:3b:f6:67:c6:e7:22:f8:e0:66:f5:be:ff:02:46:43:
56:f0:23:40:e8:88:07:a3:0e:6b:8d:04:02:d3:60:e1:37:93:
00:b7:8c:c0:b8:c8:28:ac:b8:9e:6c:52:a0:19:a2:c9:84:ae:
7d:cb:3a:03:66:f2:7b:f6:6c:b7:15:30:d9:d9:14:6c:bc:34:
26:0d:e6:e9:9e:fb:33:43:66:65:43:0c:04:b8:89:df:c7:10:
46:0b:14:29:2b:5c:96:45:8b:9b:06:2d:3f:58:86:de:49:de:
2e:eb:34:b5:e8:94:c0:4f:0c:26:9e:ae:88:a9:f0:fe:bd:74:
38:84:0f:45:0d:ff:0e:84:91:ce:71:31:5a:49:07:ea:8d:cb:
60:56:b7:27:18:6f:0a:44:ab:26:7e:63:90:d6:6e:ea:0b:06:
d7:9a:ef:a8:46:74:58:92:66:51:fa:d3:75:99:7c:84:1f:6e:
94:65:1c:e7:e4:21:7f:9a:ea:37:e5:c8:39:16:21:fe:e1:9c:
54:5e:b9:78:99:4f:15:c3:a7:65:e3:55:ab:66:fc:8a:a5:ec:
a7:48:fa:f9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYZPLsXVQVlryd5NOujBlwhpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4N2I1OTRlNWU2NzEzYTViODBhNTQ4MWE1Y2U3MWU2NTJk
ODQ1NzMwHhcNMjMwMjE0MDkwODMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NWRkZGRiOWI3OGI2OTAyYmQ3MzUxNTVkZGY4MjU2ZWYxMmE1OGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdBmerF0Dvhn2l52ujQ1l60MaIZ1
8/aCetI/D61G+lbiy9xMTykzdHIPOF70l+mlZN+OG5YKOX/4RU/dO9xGgbCNOBvj
bLAeoE856TirNrVLuk1fd+Jr69kmWT7AjU92N7DS2ShhUsCoSwN+dqe5JE5NrGxS
2w1/+SiPMnBTbkAwxuNaHeJBkBfqo1oNHr59Su0WYnIxCzQCjJZRrbzxnrXsO5wK
E3kDWpV5lTmwp7SDsdtP9hrm0iZqN0KiQIk8tGKEfYVQI/1R1oMly3JCmu26u3fE
seLXf41mJ6NR0rP3+GYfigqVwQCktShrcQsM2CN3iHmjSgUuIOXsmVE84QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEXd3bm3i2kCvXNRVd34JW7xKli+MB8GA1UdIwQY
MBaAFMh7WU5eZxOluApUgaXOceZS2EVzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUh0WlRsNW5FNlc0Q2xTQnBjNXg1bExZUlhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MjRmNzgtZGVlMi00N2JjLWFmMmYt
MzhjYjZlNDE2ZjNhLzEvUmQzZHViZUxhUUs5YzFGVjNmZ2xidkVxV0w0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84MjRmNzgtZGVlMi00N2JjLWFmMmYtMzhjYjZlNDE2ZjNh
LzEveUh0WlRsNW5FNlc0Q2xTQnBjNXg1bExZUlhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYsIAwQA
uWnuAwQAub4ZMA0GCSqGSIb3DQEBCwUAA4IBAQCEwhNEMrGbBbKMXwfgGI4dEfa7
fjxJaBxPgeKDuYWwqP66v4cnza879mfG5yL44Gb1vv8CRkNW8CNA6IgHow5rjQQC
02DhN5MAt4zAuMgorLiebFKgGaLJhK59yzoDZvJ79my3FTDZ2RRsvDQmDebpnvsz
Q2ZlQwwEuInfxxBGCxQpK1yWRYubBi0/WIbeSd4u6zS16JTATwwmnq6IqfD+vXQ4
hA9FDf8OhJHOcTFaSQfqjctgVrcnGG8KRKsmfmOQ1m7qCwbXmu+oRnRYkmZR+tN1
mXyEH26UZRzn5CF/muo35cg5FiH+4ZxUXrl4mU8Vw6dl41WrZvyKpeynSPr5
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:14 2023 by rpki-client on console-ams.rpki-client.org