Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/1-KdyV92WVBdlbwl8IBnm_NxHG0M.roa
File: 1-KdyV92WVBdlbwl8IBnm_NxHG0M.roa (raw, json)
Hash identifier: eUmMMirFsL5+wP5fJ+B+JQYZ/j8/9HZqHdsbDRM1ghI=
Subject key identifier: F8:A7:72:57:DD:96:54:17:65:6F:09:7C:20:19:E6:FC:DC:47:1B:43
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 0188F6BDD7A272EE2C8D29532C2CE364CE36
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/1-KdyV92WVBdlbwl8IBnm_NxHG0M.roa
Signing time: Mon 26 Jun 2023 08:06:56 +0000
ROA not before: Mon 26 Jun 2023 08:06:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209408
IP address blocks: 80.71.232.0/24 maxlen: 24
45.66.224.0/22 maxlen: 22
81.29.151.0/24 maxlen: 24
2a09:6c40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f6:bd:d7:a2:72:ee:2c:8d:29:53:2c:2c:e3:64:ce:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jun 26 08:06:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8a77257dd965417656f097c2019e6fcdc471b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4f:96:6e:56:81:73:b9:d9:fc:9b:a6:23:20:
67:8f:65:24:bd:2c:5f:0b:3e:79:dd:88:21:cf:1b:
7b:c7:7a:c9:24:00:66:b1:0d:80:9a:0b:65:f3:9a:
5f:d7:46:f1:d3:86:31:69:8e:ee:31:b9:5f:78:b1:
1c:21:3f:9d:90:50:1c:9c:c9:e3:fb:6a:79:f6:e2:
49:88:57:b0:2c:a5:f8:c1:af:80:4a:8f:a6:7c:a6:
f8:e7:f2:d3:7b:b0:46:c6:b2:73:8f:c1:19:eb:80:
d6:4a:2c:81:8b:f9:4c:67:7b:1d:bc:4a:e3:b0:36:
96:e9:f3:b8:83:27:51:c1:96:77:eb:e9:72:72:b7:
60:46:bc:07:c7:77:a7:d0:2d:84:71:51:66:cf:de:
22:bf:fd:f9:dc:6f:73:9a:be:a0:79:7b:ba:99:09:
6a:90:39:71:10:d6:b4:77:73:3a:9d:5c:1f:01:8f:
a6:30:2b:fd:14:11:53:43:e5:57:c7:73:be:84:5d:
db:64:29:e6:33:ec:e3:a6:b9:7e:af:b9:62:eb:45:
b0:b3:13:bd:78:cc:57:cb:81:af:ba:29:e1:ad:cb:
81:64:08:15:00:26:05:8c:af:f8:e7:87:e9:0d:27:
6b:7d:c5:7a:da:08:29:e8:bf:7c:d4:eb:e3:fc:25:
ee:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A7:72:57:DD:96:54:17:65:6F:09:7C:20:19:E6:FC:DC:47:1B:43
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/1-KdyV92WVBdlbwl8IBnm_NxHG0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.224.0/22
80.71.232.0/24
81.29.151.0/24
IPv6:
2a09:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
a4:5a:32:b3:bb:0d:84:8f:39:58:0c:0b:fd:2c:88:c8:fa:c2:
55:e4:18:c1:ad:f8:b1:48:00:e5:24:19:21:d7:ad:02:21:f4:
b9:f3:a2:90:25:f3:04:a0:dc:c3:fd:de:1a:70:ff:82:c1:44:
cb:9a:93:a7:b4:51:7b:26:e2:59:3b:9d:ec:36:28:66:51:88:
55:31:c5:89:b6:20:11:cd:a1:bc:da:54:d5:ff:6a:ce:7b:59:
71:8a:f9:6e:23:35:8c:92:26:44:59:b3:53:c8:12:7e:23:58:
dc:05:d0:47:35:6c:1e:93:15:79:ad:48:6b:f7:12:76:50:b7:
f6:76:7a:9d:37:23:44:67:4a:64:0b:54:3f:94:f3:9a:d1:25:
4e:8f:9e:15:0a:1c:99:4c:7b:ed:d0:af:63:a4:b8:3f:4f:a8:
74:44:f4:01:ac:04:cd:53:76:5f:81:c3:e5:5d:c3:db:f4:fb:
91:26:5d:b1:2e:1e:83:dc:7d:31:0b:3f:5b:17:08:ba:ba:6b:
48:2a:db:56:b4:b6:2f:fa:de:ae:85:7f:c0:e7:b6:aa:47:97:
99:96:92:a2:e6:a7:70:57:11:9e:b6:f0:10:24:31:e0:31:6a:
90:55:85:42:c6:52:5f:24:9d:02:04:04:a1:6e:b2:1d:25:d4:
ae:e2:ed:fe
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYj2vdeicu4sjSlTLCzjZM42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjMwNjI2MDgwNjU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGE3NzI1N2RkOTY1NDE3NjU2ZjA5N2MyMDE5ZTZmY2RjNDcxYjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10+WblaBc7nZ/JumIyBnj2UkvSxf
Cz553Yghzxt7x3rJJABmsQ2Amgtl85pf10bx04YxaY7uMblfeLEcIT+dkFAcnMnj
+2p59uJJiFewLKX4wa+ASo+mfKb45/LTe7BGxrJzj8EZ64DWSiyBi/lMZ3sdvErj
sDaW6fO4gydRwZZ36+lycrdgRrwHx3en0C2EcVFmz94iv/353G9zmr6geXu6mQlq
kDlxENa0d3M6nVwfAY+mMCv9FBFTQ+VXx3O+hF3bZCnmM+zjprl+r7li60WwsxO9
eMxXy4GvuinhrcuBZAgVACYFjK/454fpDSdrfcV62ggp6L981Ovj/CXuAQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPinclfdllQXZW8JfCAZ5vzcRxtDMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvMS1LZHlWOTJXVkJkbGJ3bDhJQm5tX054SEcwTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODYvOWRiNTI1LTEwNTktNGMwNy1hNWFkLTE5MTg5YjNjOWM3
ZC8xL1NlVVdsTVRVYTBfTUF2cm5IbDI1UXFjUWprYy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA6BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAi1C4AME
AFBH6AMEAFEdlzANBAIAAjAHAwUDKglsQDANBgkqhkiG9w0BAQsFAAOCAQEApFoy
s7sNhI85WAwL/SyIyPrCVeQYwa34sUgA5SQZIdetAiH0ufOikCXzBKDcw/3eGnD/
gsFEy5qTp7RReybiWTud7DYoZlGIVTHFibYgEc2hvNpU1f9qzntZcYr5biM1jJIm
RFmzU8gSfiNY3AXQRzVsHpMVea1Ia/cSdlC39nZ6nTcjRGdKZAtUP5TzmtElTo+e
FQocmUx77dCvY6S4P0+odET0AawEzVN2X4HD5V3D2/T7kSZdsS4eg9x9MQs/WxcI
urprSCrbVrS2L/reroV/wOe2qkeXmZaSouancFcRnrbwECQx4DFqkFWFQsZSXySd
AgQEoW6yHSXUruLt/g==
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:39 2023 by rpki-client on console.sobornost.net