Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/i4936BLroE-KzlQHw-UkAJ0dm2Q.roa
File: i4936BLroE-KzlQHw-UkAJ0dm2Q.roa (raw, json)
Hash identifier: tAUwnkTo4YMGGuEcwHhvDRKZMCyZYYx0SxQ08gC2Arg=
Subject key identifier: 8B:8F:77:E8:12:EB:A0:4F:8A:CE:54:07:C3:E5:24:00:9D:1D:9B:64
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 01856F6FFBE1EA959E3E290324263872A9D5
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/i4936BLroE-KzlQHw-UkAJ0dm2Q.roa
Signing time: Sun 01 Jan 2023 22:24:47 +0000
ROA not before: Sun 01 Jan 2023 22:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62257
IP address blocks: 194.147.150.0/24 maxlen: 24
194.147.170.0/24 maxlen: 24
194.36.175.0/24 maxlen: 24
45.139.9.0/24 maxlen: 24
194.180.208.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:fb:e1:ea:95:9e:3e:29:03:24:26:38:72:a9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: Jan 1 22:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b8f77e812eba04f8ace5407c3e524009d1d9b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ed:9c:10:fb:73:f5:22:d2:ad:80:b5:e4:44:
40:08:9d:c6:9e:ef:2f:96:5b:89:a8:e7:1f:b6:f6:
37:f5:a0:0a:d7:fc:29:a8:d0:01:8e:82:b4:78:f7:
9a:51:df:d5:be:f1:35:76:a4:ef:a7:b6:64:5e:ee:
f2:9f:3b:ee:eb:f6:36:76:56:90:b3:10:6a:99:15:
49:4c:ea:9a:f8:23:43:fe:8d:d7:9f:58:cd:f4:6b:
43:b3:49:7d:a6:25:b9:85:dd:3b:88:08:e1:1a:a0:
84:9d:be:8c:08:e6:49:00:d7:59:14:f1:2b:2a:ce:
03:95:11:ec:15:27:15:23:9d:1f:cd:06:15:e1:67:
e7:0b:36:dd:c5:11:c1:0d:49:e7:12:1c:10:56:65:
f2:2c:6b:cc:26:ff:c7:f5:62:99:60:b1:ae:0d:05:
b9:27:ca:8c:00:89:47:d9:96:f3:d5:c5:e4:f5:fa:
00:81:5e:26:3e:60:1f:ef:07:e0:c9:09:2a:f3:ae:
ee:e7:84:3c:27:d5:04:eb:d2:06:08:05:cc:eb:02:
37:3c:0b:53:22:19:72:bf:0d:d7:9a:e4:13:5c:36:
48:91:88:fa:a3:f9:61:7b:d7:b7:e6:9b:2d:16:c3:
24:01:01:e8:48:7a:59:de:2d:d0:9f:4a:5c:ba:7f:
a6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8F:77:E8:12:EB:A0:4F:8A:CE:54:07:C3:E5:24:00:9D:1D:9B:64
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/i4936BLroE-KzlQHw-UkAJ0dm2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.9.0/24
194.36.175.0/24
194.147.150.0/24
194.147.170.0/24
194.180.208.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:cd:11:59:f9:69:4f:9c:ec:ba:ed:bb:a6:30:bf:b1:6a:67:
bc:cc:2e:09:a5:55:28:f8:be:6f:c6:c1:97:73:4f:11:25:dc:
8a:ac:0a:51:3b:29:4a:d6:66:4d:fc:8c:b3:97:ce:c3:33:87:
52:f3:2c:e4:43:66:72:3d:0e:b6:db:3b:6d:2e:05:64:60:f1:
cb:d3:01:cd:29:c3:60:b9:98:3c:b1:af:b5:a2:ed:f9:00:e3:
20:2a:aa:27:7e:07:c4:f4:d7:2e:7f:59:ac:7e:2d:7b:f6:c9:
ad:c9:2a:0e:f6:03:82:6f:7d:89:4e:8b:7a:e1:52:a5:19:24:
d6:9e:b3:65:31:3e:d6:27:d8:0f:35:3d:25:4b:53:74:1f:30:
7f:7a:e0:bc:85:8c:46:f7:5c:8f:b7:43:b2:35:e3:eb:52:8b:
09:15:b7:bd:74:57:b6:cc:db:70:69:f5:94:e4:69:93:10:b1:
5b:21:ce:7a:38:b8:c4:8a:3d:ae:8d:c3:6c:61:7c:15:d4:24:
81:ca:da:51:35:32:c7:cc:49:ab:d1:a0:b4:ee:6a:89:3a:b2:
c9:6c:9f:d5:20:7c:48:21:58:a0:d8:15:da:fe:b9:53:61:7c:
57:16:2b:be:f2:2e:2b:37:2d:e7:3f:42:80:82:40:52:d6:f8:
cf:9d:0a:cc
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVvb/vh6pWePikDJCY4cqnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4N2I1OTRlNWU2NzEzYTViODBhNTQ4MWE1Y2U3MWU2NTJk
ODQ1NzMwHhcNMjMwMTAxMjIyNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjhmNzdlODEyZWJhMDRmOGFjZTU0MDdjM2U1MjQwMDlkMWQ5YjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAku2cEPtz9SLSrYC15ERACJ3Gnu8v
lluJqOcftvY39aAK1/wpqNABjoK0ePeaUd/VvvE1dqTvp7ZkXu7ynzvu6/Y2dlaQ
sxBqmRVJTOqa+CND/o3Xn1jN9GtDs0l9piW5hd07iAjhGqCEnb6MCOZJANdZFPEr
Ks4DlRHsFScVI50fzQYV4WfnCzbdxRHBDUnnEhwQVmXyLGvMJv/H9WKZYLGuDQW5
J8qMAIlH2Zbz1cXk9foAgV4mPmAf7wfgyQkq867u54Q8J9UE69IGCAXM6wI3PAtT
Ihlyvw3XmuQTXDZIkYj6o/lhe9e35pstFsMkAQHoSHpZ3i3Qn0pcun+m7wIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFIuPd+gS66BPis5UB8PlJACdHZtkMB8GA1UdIwQY
MBaAFMh7WU5eZxOluApUgaXOceZS2EVzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUh0WlRsNW5FNlc0Q2xTQnBjNXg1bExZUlhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MjRmNzgtZGVlMi00N2JjLWFmMmYt
MzhjYjZlNDE2ZjNhLzEvaTQ5MzZCTHJvRS1LemxRSHctVWtBSjBkbTJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84MjRmNzgtZGVlMi00N2JjLWFmMmYtMzhjYjZlNDE2ZjNh
LzEveUh0WlRsNW5FNlc0Q2xTQnBjNXg1bExZUlhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALYsJAwQA
wiSvAwQAwpOWAwQAwpOqAwQAwrTQMA0GCSqGSIb3DQEBCwUAA4IBAQAfzRFZ+WlP
nOy67bumML+xame8zC4JpVUo+L5vxsGXc08RJdyKrApROylK1mZN/Iyzl87DM4dS
8yzkQ2ZyPQ622zttLgVkYPHL0wHNKcNguZg8sa+1ou35AOMgKqonfgfE9Ncuf1ms
fi179smtySoO9gOCb32JTot64VKlGSTWnrNlMT7WJ9gPNT0lS1N0HzB/euC8hYxG
91yPt0OyNePrUosJFbe9dFe2zNtwafWU5GmTELFbIc56OLjEij2ujcNsYXwV1CSB
ytpRNTLHzEmr0aC07mqJOrLJbJ/VIHxIIVig2BXa/rlTYXxXFiu+8i4rNy3nP0KA
gkBS1vjPnQrM
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:14 2023 by rpki-client on console-ams.rpki-client.org