Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/IfZbFlwYeo7vj8mFAJaX7_MFYX0.roa
File: IfZbFlwYeo7vj8mFAJaX7_MFYX0.roa (raw, json)
Hash identifier: jVptIxuqQj1Jutq/1sUD/Psyk9tW9nQdeFmOJCPuG/g=
Subject key identifier: 21:F6:5B:16:5C:18:7A:8E:EF:8F:C9:85:00:96:97:EF:F3:05:61:7D
Certificate issuer: /CN=869569a2526687da91a7ecd4f567f5409cdffe79
Certificate serial: 01865E55A7C969EF3C1197E8E892C6DCEF0E
Authority key identifier: 86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/IfZbFlwYeo7vj8mFAJaX7_MFYX0.roa
Signing time: Fri 17 Feb 2023 07:45:17 +0000
ROA not before: Fri 17 Feb 2023 07:45:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49360
IP address blocks: 45.90.232.0/22 maxlen: 22
31.7.144.0/20 maxlen: 20
91.214.72.0/22 maxlen: 22
185.29.248.0/22 maxlen: 22
2a0a:d3c0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:5e:55:a7:c9:69:ef:3c:11:97:e8:e8:92:c6:dc:ef:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=869569a2526687da91a7ecd4f567f5409cdffe79
Validity
Not Before: Feb 17 07:45:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21f65b165c187a8eef8fc985009697eff305617d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0b:09:37:a9:6b:d7:9f:22:e9:55:e3:00:a6:
b3:f2:96:27:89:51:63:90:5c:b5:42:5e:0b:fa:8d:
23:75:83:2b:4e:97:0b:a6:ca:29:5a:07:0e:88:b4:
f3:d4:67:ac:b7:16:bb:e3:02:53:02:4d:ef:51:76:
65:cf:79:0f:07:c5:a0:1e:81:31:33:31:52:ea:1b:
88:70:32:2f:64:0c:b3:9c:00:bd:d4:04:b6:6c:46:
a9:28:c6:74:23:0d:b5:a4:ec:61:eb:0b:ab:ee:da:
7f:f2:99:2d:06:c8:43:90:b3:ce:28:c6:bd:54:06:
e5:7b:74:da:b3:21:1a:43:d6:e3:4f:4c:27:e8:bc:
56:ef:01:2d:d2:dd:21:09:ae:96:59:73:b0:bd:39:
cb:7c:2b:1e:b4:48:4a:f6:e7:79:c2:dc:f4:c9:aa:
6b:8f:33:cd:c0:37:8b:e0:c9:d1:4b:21:f2:9c:9f:
2a:82:73:cf:ff:71:21:4e:85:a6:e5:bb:b4:02:ca:
d5:d3:a1:69:d9:d9:62:88:6b:ec:9c:b2:59:a6:9e:
e5:db:58:2a:7d:dd:49:58:57:c1:bf:1f:97:62:dd:
b9:be:f2:57:9a:aa:3f:96:4b:07:23:15:0f:dd:b4:
37:9d:68:75:d5:21:60:23:88:07:29:6f:50:2f:b8:
46:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F6:5B:16:5C:18:7A:8E:EF:8F:C9:85:00:96:97:EF:F3:05:61:7D
X509v3 Authority Key Identifier:
keyid:86:95:69:A2:52:66:87:DA:91:A7:EC:D4:F5:67:F5:40:9C:DF:FE:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hpVpolJmh9qRp-zU9Wf1QJzf_nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/IfZbFlwYeo7vj8mFAJaX7_MFYX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/740dec-059f-45c0-999a-1eaa591b6771/1/hpVpolJmh9qRp-zU9Wf1QJzf_nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.7.144.0/20
45.90.232.0/22
91.214.72.0/22
185.29.248.0/22
IPv6:
2a0a:d3c0::/29
Signature Algorithm: sha256WithRSAEncryption
28:21:10:9b:36:df:dc:7d:c4:8e:35:24:99:f3:72:e9:af:0f:
58:5d:01:00:cd:10:b2:b2:0c:cf:a9:ee:6d:3d:52:31:a3:cd:
85:dc:72:18:4d:8e:f7:0f:98:1d:af:4b:9c:4e:53:ed:f7:d0:
59:96:50:f3:35:76:64:0a:9c:0f:8f:73:9b:4d:1e:c7:17:5d:
92:60:2d:cd:c0:7b:2e:5e:67:72:24:24:f3:c4:73:12:09:0e:
ad:09:03:51:77:08:db:e6:e5:38:58:10:f6:27:56:e3:56:f7:
44:1f:82:2f:d6:2a:9e:63:4e:5b:b6:49:3d:b5:ac:ed:98:bc:
92:1a:e0:18:42:cb:82:d4:47:a1:ae:25:50:ff:bd:c6:3b:c8:
16:c5:94:be:54:5c:65:0a:d8:ee:94:77:1e:4e:3b:0d:b6:9c:
ea:4c:da:91:36:a4:d8:d0:6f:bc:00:23:56:bd:33:df:09:f2:
81:2d:f3:ee:96:d2:11:1e:05:6b:61:c6:01:63:68:c1:57:d3:
7d:01:6f:fb:a1:8b:43:66:27:d6:14:80:0a:a3:85:7f:a3:e2:
6f:97:fe:7c:f7:85:a1:75:ab:52:59:da:ef:3e:a4:f7:b1:0b:
40:ba:1d:67:d3:5e:a4:ce:67:6b:b9:78:f6:56:c9:ae:df:7d:
48:13:a2:45
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYZeVafJae88EZfo6JLG3O8OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2OTU2OWEyNTI2Njg3ZGE5MWE3ZWNkNGY1NjdmNTQwOWNk
ZmZlNzkwHhcNMjMwMjE3MDc0NTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWY2NWIxNjVjMTg3YThlZWY4ZmM5ODUwMDk2OTdlZmYzMDU2MTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgsJN6lr158i6VXjAKaz8pYniVFj
kFy1Ql4L+o0jdYMrTpcLpsopWgcOiLTz1Gestxa74wJTAk3vUXZlz3kPB8WgHoEx
MzFS6huIcDIvZAyznAC91AS2bEapKMZ0Iw21pOxh6wur7tp/8pktBshDkLPOKMa9
VAble3TasyEaQ9bjT0wn6LxW7wEt0t0hCa6WWXOwvTnLfCsetEhK9ud5wtz0yapr
jzPNwDeL4MnRSyHynJ8qgnPP/3EhToWm5bu0AsrV06Fp2dliiGvsnLJZpp7l21gq
fd1JWFfBvx+XYt25vvJXmqo/lksHIxUP3bQ3nWh11SFgI4gHKW9QL7hGrwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFCH2WxZcGHqO74/JhQCWl+/zBWF9MB8GA1UdIwQY
MBaAFIaVaaJSZofakafs1PVn9UCc3/55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHBWcG9sSm1oOXFScC16VTlXZjFRSnpmX25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS83NDBkZWMtMDU5Zi00NWMwLTk5OWEt
MWVhYTU5MWI2NzcxLzEvSWZaYkZsd1llbzd2ajhtRkFKYVg3X01GWVgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS83NDBkZWMtMDU5Zi00NWMwLTk5OWEtMWVhYTU5MWI2Nzcx
LzEvaHBWcG9sSm1oOXFScC16VTlXZjFRSnpmX25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEHweQAwQC
LVroAwQCW9ZIAwQCuR34MA0EAgACMAcDBQMqCtPAMA0GCSqGSIb3DQEBCwUAA4IB
AQAoIRCbNt/cfcSONSSZ83Lprw9YXQEAzRCysgzPqe5tPVIxo82F3HIYTY73D5gd
r0ucTlPt99BZllDzNXZkCpwPj3ObTR7HF12SYC3NwHsuXmdyJCTzxHMSCQ6tCQNR
dwjb5uU4WBD2J1bjVvdEH4Iv1iqeY05btkk9taztmLySGuAYQsuC1EehriVQ/73G
O8gWxZS+VFxlCtjulHceTjsNtpzqTNqRNqTY0G+8ACNWvTPfCfKBLfPultIRHgVr
YcYBY2jBV9N9AW/7oYtDZifWFIAKo4V/o+Jvl/5894WhdatSWdrvPqT3sQtAuh1n
016kzmdruXj2Vsmu331IE6JF
Generated at Wed Nov 22 09:14:12 2023 by rpki-client on console-ams.rpki-client.org