Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/spkQ6TWWvIivVxErRbLLIg4IoZk.roa
File: spkQ6TWWvIivVxErRbLLIg4IoZk.roa (raw, json)
Hash identifier: jABLXikR1mQ5QNlJocZ90J1pIXFkBdOXPmMKUP2oToo=
Subject key identifier: B2:99:10:E9:35:96:BC:88:AF:57:11:2B:45:B2:CB:22:0E:08:A1:99
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 018D5F2559BA0BD4161456A7C26E4962138E
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/spkQ6TWWvIivVxErRbLLIg4IoZk.roa
Signing time: Wed 31 Jan 2024 10:51:39 +0000
ROA not before: Wed 31 Jan 2024 10:51:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21859
IP address blocks: 45.85.15.0/24 maxlen: 24
193.43.138.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Feb 2024 06:10:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5f:25:59:ba:0b:d4:16:14:56:a7:c2:6e:49:62:13:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Jan 31 10:51:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b29910e93596bc88af57112b45b2cb220e08a199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b2:03:9f:1c:ad:ce:c5:47:c4:03:e1:57:f6:
37:e0:48:b6:93:b6:76:d9:48:74:12:a9:78:48:ae:
a4:a7:8d:b9:5d:da:ed:a4:5e:d6:c3:99:62:ea:80:
e8:44:77:46:e1:1d:c4:06:39:23:51:36:7f:ee:1d:
d9:10:99:49:a5:da:8b:d8:1a:ca:22:51:cf:9d:40:
cd:76:25:b7:c7:e0:5d:2a:5e:f3:32:7f:d9:a6:a3:
86:5d:1d:dc:98:68:8b:1e:eb:5a:b1:12:0c:ea:3e:
94:6c:01:05:c4:08:48:f0:46:cc:19:35:2e:5d:29:
a2:16:42:29:ee:5d:b0:e9:43:b4:9c:6a:9b:e9:27:
7c:b0:6d:85:80:b4:ec:56:a8:b7:bb:ad:bd:3c:19:
26:a6:81:72:f8:56:9a:bf:1b:e4:ca:9f:a4:17:c8:
ad:1c:7e:1f:f5:ad:60:a6:c6:12:7e:4f:b8:5d:f9:
e3:64:e4:86:84:e3:f4:cb:64:2d:e0:0a:83:dd:af:
53:53:21:fc:57:fb:27:a7:de:02:35:18:8f:be:2f:
bb:9d:87:6d:18:17:80:d1:fa:98:be:8a:58:e8:bf:
fe:f2:9d:ba:38:83:4d:b7:e3:4d:e9:44:2e:e8:fa:
c8:79:ae:c3:b4:9b:e1:30:22:04:7b:4c:25:3f:5f:
4c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:99:10:E9:35:96:BC:88:AF:57:11:2B:45:B2:CB:22:0E:08:A1:99
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/spkQ6TWWvIivVxErRbLLIg4IoZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.15.0/24
193.43.138.0/24
Signature Algorithm: sha256WithRSAEncryption
91:14:21:fd:62:8f:6c:38:13:e4:e2:11:ce:b0:e6:bf:1c:61:
f6:e0:11:3c:b2:2e:39:ac:13:ce:e0:b2:b7:a2:50:4c:23:72:
24:53:55:9e:83:8f:b6:61:3e:96:02:4e:03:7a:20:be:ec:ed:
b8:28:5f:40:20:89:46:cd:51:c1:ee:8c:32:ee:7e:99:16:6a:
d0:23:24:8e:a3:43:1b:b5:55:d4:82:d4:64:e8:62:66:b2:a7:
fd:2b:b0:ee:92:f8:17:b3:89:b3:74:a1:a5:97:2c:83:7f:c3:
46:bc:93:f6:95:10:0c:e1:d3:ec:7b:fc:79:e3:73:ef:23:1b:
97:2c:a1:f9:96:f7:e3:10:28:44:fe:f3:45:18:d0:c3:41:4a:
fb:3b:f0:0a:3d:43:8b:80:f6:6b:27:96:3c:9d:12:48:a3:21:
e4:e0:d0:9c:6f:80:d9:97:11:dc:93:b9:ee:cf:4e:75:ec:e0:
ed:82:e7:f0:28:f0:61:70:86:86:15:1e:ae:cb:ce:d3:a2:7f:
b1:43:b7:18:2c:e3:b4:d2:57:fc:99:27:0f:b4:c7:e2:d1:3c:
2c:d2:ce:7f:39:32:30:ce:cb:de:2a:11:40:52:84:a2:d3:6e:
ea:7f:7f:0e:7d:34:3a:59:d0:9c:58:18:2e:04:02:74:c3:90:
60:39:c0:f9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY1fJVm6C9QWFFanwm5JYhOOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw
MzdjNmMwHhcNMjQwMTMxMTA1MTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjk5MTBlOTM1OTZiYzg4YWY1NzExMmI0NWIyY2IyMjBlMDhhMTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7IDnxytzsVHxAPhV/Y34Ei2k7Z2
2Uh0Eql4SK6kp425XdrtpF7Ww5li6oDoRHdG4R3EBjkjUTZ/7h3ZEJlJpdqL2BrK
IlHPnUDNdiW3x+BdKl7zMn/ZpqOGXR3cmGiLHutasRIM6j6UbAEFxAhI8EbMGTUu
XSmiFkIp7l2w6UO0nGqb6Sd8sG2FgLTsVqi3u629PBkmpoFy+Faavxvkyp+kF8it
HH4f9a1gpsYSfk+4XfnjZOSGhOP0y2Qt4AqD3a9TUyH8V/snp94CNRiPvi+7nYdt
GBeA0fqYvopY6L/+8p26OINNt+NN6UQu6PrIea7DtJvhMCIEe0wlP19MCQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLKZEOk1lryIr1cRK0WyyyIOCKGZMB8GA1UdIwQY
MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt
YzM2OWMxZDRjMzM3LzEvc3BrUTZUV1d2SWl2VnhFclJiTExJZzRJb1prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3
LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVUPAwQA
wSuKMA0GCSqGSIb3DQEBCwUAA4IBAQCRFCH9Yo9sOBPk4hHOsOa/HGH24BE8si45
rBPO4LK3olBMI3IkU1Weg4+2YT6WAk4DeiC+7O24KF9AIIlGzVHB7owy7n6ZFmrQ
IySOo0MbtVXUgtRk6GJmsqf9K7DukvgXs4mzdKGllyyDf8NGvJP2lRAM4dPse/x5
43PvIxuXLKH5lvfjEChE/vNFGNDDQUr7O/AKPUOLgPZrJ5Y8nRJIoyHk4NCcb4DZ
lxHck7nuz0517ODtgufwKPBhcIaGFR6uy87Ton+xQ7cYLOO00lf8mScPtMfi0Tws
0s5/OTIwzsveKhFAUoSi027qf38OfTQ6WdCcWBguBAJ0w5BgOcD5
Generated at Thu Feb 29 09:42:55 2024 by rpki-client on console-fra.rpki-client.org