Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/AVyBlBsSHqtZA-LFBxJBZagJf0U.roa
File: AVyBlBsSHqtZA-LFBxJBZagJf0U.roa (raw, json)
Hash identifier: ygNaWl87AS1MbNClRNbTU2JBy9P6S6AWtQ4DWk5OwN4=
Subject key identifier: 01:5C:81:94:1B:12:1E:AB:59:03:E2:C5:07:12:41:65:A8:09:7F:45
Certificate issuer: /CN=646579561eca5879a747025e5798487b19cd2a97
Certificate serial: 018570152EDF9DC9ECDE7A610BED15D8049F
Authority key identifier: 64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/AVyBlBsSHqtZA-LFBxJBZagJf0U.roa
Signing time: Mon 02 Jan 2023 01:25:14 +0000
ROA not before: Mon 02 Jan 2023 01:25:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 45.146.156.0/24 maxlen: 24
45.146.159.0/24 maxlen: 24
45.146.158.0/24 maxlen: 24
45.146.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:2e:df:9d:c9:ec:de:7a:61:0b:ed:15:d8:04:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646579561eca5879a747025e5798487b19cd2a97
Validity
Not Before: Jan 2 01:25:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=015c81941b121eab5903e2c507124165a8097f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d0:a5:3c:0e:c9:6d:f4:f5:b9:1c:f2:a9:22:
6c:db:d9:e2:83:e7:64:ce:48:15:59:5f:f7:92:ff:
23:34:c2:ae:be:49:a9:61:4f:f5:e4:8a:62:3f:3f:
27:22:5d:43:7d:24:a0:14:30:a5:c5:f0:db:31:c3:
b0:32:48:3c:66:5d:52:73:21:90:77:c4:50:cc:9e:
61:cf:e1:b4:e7:0a:ef:dd:3f:bf:86:62:de:a4:38:
dc:16:f3:e6:6a:b7:76:e0:4a:84:d5:2d:93:3b:8e:
46:b1:20:d2:3a:64:9a:1c:7d:21:42:07:47:32:8b:
31:10:d6:ed:d2:88:9c:e3:fd:94:9b:82:b5:c9:3d:
94:f6:d0:c3:5c:4a:3b:d6:99:01:09:e0:bb:ba:88:
6e:61:0f:9f:2c:a9:00:1d:c4:94:20:2f:43:40:80:
1d:7b:21:61:45:77:eb:c0:15:7d:5a:3d:e0:41:3b:
f1:65:25:d9:34:f6:47:70:19:46:9c:67:91:8a:c2:
f6:cd:87:f5:c2:6c:2f:7d:88:a4:12:ba:18:21:d0:
a4:82:38:48:ff:c0:77:9e:c8:07:fe:34:db:7b:fb:
59:dc:ad:af:11:32:8f:10:cd:95:e3:e9:45:fd:e4:
e1:ff:f6:2a:62:e1:f4:7b:f7:00:76:07:69:a8:fa:
29:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5C:81:94:1B:12:1E:AB:59:03:E2:C5:07:12:41:65:A8:09:7F:45
X509v3 Authority Key Identifier:
keyid:64:65:79:56:1E:CA:58:79:A7:47:02:5E:57:98:48:7B:19:CD:2A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/AVyBlBsSHqtZA-LFBxJBZagJf0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/604346-c97c-4097-8997-55c3d129ec28/1/ZGV5Vh7KWHmnRwJeV5hIexnNKpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.156.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:ce:b0:4f:a9:8e:ff:15:5e:e4:15:c2:de:9f:ba:c4:1b:77:
e8:ba:f4:b8:51:db:aa:1a:52:36:d1:0c:58:6f:05:13:f5:fa:
b0:d2:c2:78:07:4d:d3:ca:05:d9:80:2e:e4:db:1a:a2:56:a6:
cf:f6:5c:dd:57:50:52:83:c4:f9:cc:63:dc:d6:13:1c:0d:0c:
f0:fc:2e:6f:eb:31:2c:10:a8:18:67:09:00:aa:e6:f1:ad:fa:
ca:d8:11:a0:17:3c:95:2f:b3:04:9c:e8:40:13:af:df:58:ad:
4b:96:de:46:79:45:9e:09:e5:2b:e0:10:44:91:08:83:b4:19:
7b:7c:52:1f:a8:75:a4:85:c5:56:d2:10:9c:b8:9f:4e:53:e3:
e6:87:d9:f2:9d:7b:09:69:4d:1c:4a:1c:f9:41:c1:f3:b1:17:
40:e5:c7:c7:1f:b2:9c:27:75:40:d2:83:22:45:c7:61:e5:b6:
fe:5d:0f:f4:2d:d1:97:bd:ec:b8:69:bc:75:f3:1e:86:d1:bf:
2b:a8:0e:66:9b:8f:dd:8e:2d:da:55:6a:ec:cd:18:87:79:c1:
ba:07:6e:ae:42:7f:01:19:b9:d4:c9:21:e2:5f:10:a1:0c:e7:
5f:67:c3:99:24:1c:c7:be:da:8a:23:83:bd:49:d3:3a:41:35:
d6:ed:d8:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwFS7fncns3nphC+0V2ASfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjU3OTU2MWVjYTU4NzlhNzQ3MDI1ZTU3OTg0ODdiMTlj
ZDJhOTcwHhcNMjMwMTAyMDEyNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTVjODE5NDFiMTIxZWFiNTkwM2UyYzUwNzEyNDE2NWE4MDk3ZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9ClPA7JbfT1uRzyqSJs29nig+dk
zkgVWV/3kv8jNMKuvkmpYU/15IpiPz8nIl1DfSSgFDClxfDbMcOwMkg8Zl1ScyGQ
d8RQzJ5hz+G05wrv3T+/hmLepDjcFvPmard24EqE1S2TO45GsSDSOmSaHH0hQgdH
MosxENbt0oic4/2Um4K1yT2U9tDDXEo71pkBCeC7uohuYQ+fLKkAHcSUIC9DQIAd
eyFhRXfrwBV9Wj3gQTvxZSXZNPZHcBlGnGeRisL2zYf1wmwvfYikEroYIdCkgjhI
/8B3nsgH/jTbe/tZ3K2vETKPEM2V4+lF/eTh//YqYuH0e/cAdgdpqPopCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAFcgZQbEh6rWQPixQcSQWWoCX9FMB8GA1UdIwQY
MBaAFGRleVYeylh5p0cCXleYSHsZzSqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTct
NTVjM2QxMjllYzI4LzEvQVZ5QmxCc1NIcXRaQS1MRkJ4SkJaYWdKZjBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82MDQzNDYtYzk3Yy00MDk3LTg5OTctNTVjM2QxMjllYzI4
LzEvWkdWNVZoN0tXSG1uUndKZVY1aElleG5OS3BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZKcMA0G
CSqGSIb3DQEBCwUAA4IBAQCPzrBPqY7/FV7kFcLen7rEG3fouvS4UduqGlI20QxY
bwUT9fqw0sJ4B03TygXZgC7k2xqiVqbP9lzdV1BSg8T5zGPc1hMcDQzw/C5v6zEs
EKgYZwkAqubxrfrK2BGgFzyVL7MEnOhAE6/fWK1Llt5GeUWeCeUr4BBEkQiDtBl7
fFIfqHWkhcVW0hCcuJ9OU+Pmh9nynXsJaU0cShz5QcHzsRdA5cfHH7KcJ3VA0oMi
Rcdh5bb+XQ/0LdGXvey4abx18x6G0b8rqA5mm4/dji3aVWrszRiHecG6B26uQn8B
GbnUySHiXxChDOdfZ8OZJBzHvtqKI4O9SdM6QTXW7di7
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:16 2024 by rpki-client on console-ams.rpki-client.org