Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/OXAifKwcv9Zav7ZkTuHfcFBpQ0c.roa
File: OXAifKwcv9Zav7ZkTuHfcFBpQ0c.roa (raw, json)
Hash identifier: 1kuONwBh+/YNDoW2QcdWc8K8w5wJuoQRVYTOgWhRxxI=
Subject key identifier: 39:70:22:7C:AC:1C:BF:D6:5A:BF:B6:64:4E:E1:DF:70:50:69:43:47
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 018AA73A4B712BC760362A6B4DCBF9A09550
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/OXAifKwcv9Zav7ZkTuHfcFBpQ0c.roa
Signing time: Mon 18 Sep 2023 07:38:50 +0000
ROA not before: Mon 18 Sep 2023 07:38:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 45.85.12.0/24 maxlen: 24
45.85.13.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a7:3a:4b:71:2b:c7:60:36:2a:6b:4d:cb:f9:a0:95:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Sep 18 07:38:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3970227cac1cbfd65abfb6644ee1df7050694347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:0c:f2:db:de:3a:9f:4e:f0:f7:e7:91:5f:51:
33:9a:78:1f:6f:e9:cf:59:75:2f:f5:86:af:a8:00:
da:11:d5:64:eb:0e:6c:a6:66:4d:14:82:d4:5e:1c:
67:32:d3:b7:0a:b4:81:10:de:af:50:84:e8:ab:65:
8b:26:77:77:28:60:b3:36:78:e0:23:a4:ee:e2:63:
db:f3:ba:00:33:9f:95:ce:80:62:fa:ea:40:7f:92:
2b:5e:3e:f0:e3:40:7b:88:b0:14:58:5a:a9:49:c7:
da:2e:1a:69:98:0d:04:d7:2c:fb:66:7f:30:5b:55:
48:e8:47:f6:a9:53:e4:d0:40:b2:6d:80:b0:fe:bb:
06:9b:7e:84:80:4e:4b:87:89:d2:98:8e:3c:c3:fd:
8e:4c:8b:b0:52:69:ec:12:87:1e:8c:87:c1:0b:69:
1c:dc:c6:13:30:20:79:15:a5:9f:84:b7:22:2d:df:
9d:6b:f7:a9:48:04:ea:0f:70:6e:29:0a:19:8a:79:
63:16:e1:5d:a3:74:76:6b:d6:18:7d:ee:3b:79:09:
94:2d:bb:21:ea:95:42:3c:89:b0:96:6c:f1:07:6b:
b8:a6:e0:a4:80:dc:d7:36:64:e8:64:86:17:d2:11:
9f:ca:85:11:e0:e0:06:af:c4:a3:06:51:2f:b1:e2:
66:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:70:22:7C:AC:1C:BF:D6:5A:BF:B6:64:4E:E1:DF:70:50:69:43:47
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/OXAifKwcv9Zav7ZkTuHfcFBpQ0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.12.0/23
Signature Algorithm: sha256WithRSAEncryption
94:58:90:3b:e1:97:58:1d:96:d3:50:95:cc:ae:d6:c8:aa:ae:
4d:25:72:b9:36:27:ec:7f:0b:69:9d:58:1e:55:fb:5e:81:32:
59:8d:af:f7:93:cc:c2:c1:e4:88:5c:f7:9d:cb:3f:9b:37:ff:
b7:37:14:98:e0:13:c9:2c:34:d2:80:2c:89:67:9f:2b:69:1d:
75:2c:91:1b:75:d4:a6:c6:59:82:33:f0:a3:2b:df:72:64:ee:
c2:3b:27:2c:e4:d9:57:7d:b5:03:c6:23:3e:cb:4d:56:22:f2:
d6:98:89:ea:be:ae:e2:a6:df:fe:ec:6a:3a:b9:95:47:b8:df:
47:5c:1b:f4:40:de:e0:51:5e:b8:59:0b:50:0d:c5:43:53:be:
eb:4c:2f:e1:4a:b1:62:24:83:62:1e:2e:98:d6:91:68:38:5d:
d4:e0:ab:99:52:82:77:f5:52:bc:06:03:18:5f:46:2b:40:92:
27:5b:50:c8:4e:bd:e5:a1:f8:ee:46:9f:31:b0:7f:2c:e4:24:
44:11:9b:19:92:88:82:92:fd:8b:b2:1f:c3:82:0d:0d:c4:ca:
69:ef:c3:c9:67:23:7a:fe:f9:47:2a:25:7b:6d:e0:61:d8:b6:
f0:39:7a:c2:72:2b:61:03:a1:44:c1:73:60:9b:1d:fe:2c:e8:
7f:24:c3:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqnOktxK8dgNiprTcv5oJVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw
MzdjNmMwHhcNMjMwOTE4MDczODUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTcwMjI3Y2FjMWNiZmQ2NWFiZmI2NjQ0ZWUxZGY3MDUwNjk0MzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgzy2946n07w9+eRX1Ezmngfb+nP
WXUv9YavqADaEdVk6w5spmZNFILUXhxnMtO3CrSBEN6vUIToq2WLJnd3KGCzNnjg
I6Tu4mPb87oAM5+VzoBi+upAf5IrXj7w40B7iLAUWFqpScfaLhppmA0E1yz7Zn8w
W1VI6Ef2qVPk0ECybYCw/rsGm36EgE5Lh4nSmI48w/2OTIuwUmnsEocejIfBC2kc
3MYTMCB5FaWfhLciLd+da/epSATqD3BuKQoZinljFuFdo3R2a9YYfe47eQmULbsh
6pVCPImwlmzxB2u4puCkgNzXNmToZIYX0hGfyoUR4OAGr8SjBlEvseJmlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDlwInysHL/WWr+2ZE7h33BQaUNHMB8GA1UdIwQY
MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt
YzM2OWMxZDRjMzM3LzEvT1hBaWZLd2N2OVphdjdaa1R1SGZjRkJwUTBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3
LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVUMMA0G
CSqGSIb3DQEBCwUAA4IBAQCUWJA74ZdYHZbTUJXMrtbIqq5NJXK5NifsfwtpnVge
VftegTJZja/3k8zCweSIXPedyz+bN/+3NxSY4BPJLDTSgCyJZ58raR11LJEbddSm
xlmCM/CjK99yZO7COycs5NlXfbUDxiM+y01WIvLWmInqvq7ipt/+7Go6uZVHuN9H
XBv0QN7gUV64WQtQDcVDU77rTC/hSrFiJINiHi6Y1pFoOF3U4KuZUoJ39VK8BgMY
X0YrQJInW1DITr3lofjuRp8xsH8s5CREEZsZkoiCkv2Lsh/Dgg0NxMpp78PJZyN6
/vlHKiV7beBh2LbwOXrCcithA6FEwXNgmx3+LOh/JMOZ
-----END CERTIFICATE-----
Generated at Fri Sep 29 09:07:29 2023 by rpki-client on console-fra.rpki-client.org