Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/vGvr2Y9s2i3w8SEyAQ62UYqM_dE.roa
File: vGvr2Y9s2i3w8SEyAQ62UYqM_dE.roa (raw, json)
Hash identifier: iyLltlPrDiFhQ+PzehM5rTwoUBkdzDXSCYtdhXiDq7U=
Subject key identifier: BC:6B:EB:D9:8F:6C:DA:2D:F0:F1:21:32:01:0E:B6:51:8A:8C:FD:D1
Certificate issuer: /CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Certificate serial: 0185DFB8A24A4CC4590EEC5877B2E86ED290
Authority key identifier: C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/vGvr2Y9s2i3w8SEyAQ62UYqM_dE.roa
Signing time: Mon 23 Jan 2023 17:41:37 +0000
ROA not before: Mon 23 Jan 2023 17:41:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210708
IP address blocks: 45.11.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:df:b8:a2:4a:4c:c4:59:0e:ec:58:77:b2:e8:6e:d2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b21c89bc7e2b214067f30707a4a03dc346ee05
Validity
Not Before: Jan 23 17:41:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc6bebd98f6cda2df0f12132010eb6518a8cfdd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b0:dd:0a:65:8e:3d:84:5a:48:0f:70:eb:08:
56:c2:5a:13:bd:2e:a9:24:14:c8:f9:b3:db:84:3f:
99:4c:20:35:3c:e5:6b:6a:f6:fb:b2:8f:36:ff:55:
fe:56:6d:66:5c:68:49:90:16:5b:98:d2:dc:f3:14:
74:9c:0c:43:fc:51:25:22:9b:30:5e:58:66:7e:a6:
f0:32:3a:07:99:0f:17:47:35:15:37:5c:ea:70:cb:
f4:ea:86:1d:2e:4d:da:f7:dd:a8:85:77:91:d2:51:
8a:d0:e5:15:11:92:9a:49:70:26:56:e7:32:30:1a:
23:8b:61:d2:2f:73:b6:c6:5a:5e:1f:1d:86:d8:ee:
27:3f:66:14:f2:5d:e5:61:02:56:06:ed:b2:3f:a1:
ba:b6:c0:5f:f6:60:5d:93:06:bd:20:57:5f:2f:73:
b0:65:29:47:2a:f8:7f:51:b6:9b:f5:ed:5e:6d:60:
d9:2d:64:00:32:36:c0:d6:81:b8:7e:03:00:00:f1:
3f:f1:cd:3e:7e:50:62:59:66:9a:fa:b5:ac:d1:e9:
d0:25:2a:fe:a5:b7:93:64:27:c1:42:77:d6:ef:26:
25:a2:78:22:0d:06:3b:62:5b:67:b5:48:dd:33:d8:
a3:49:3c:e2:7a:ea:8e:9d:0b:94:aa:b9:71:aa:6a:
c5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:6B:EB:D9:8F:6C:DA:2D:F0:F1:21:32:01:0E:B6:51:8A:8C:FD:D1
X509v3 Authority Key Identifier:
keyid:C4:B2:1C:89:BC:7E:2B:21:40:67:F3:07:07:A4:A0:3D:C3:46:EE:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLIcibx-KyFAZ_MHB6SgPcNG7gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/vGvr2Y9s2i3w8SEyAQ62UYqM_dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/6137b8-1383-4b71-a189-063b40174597/1/xLIcibx-KyFAZ_MHB6SgPcNG7gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.43.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:d6:7c:c6:a0:0e:70:75:27:80:90:6e:a3:5c:77:15:0b:64:
cd:40:c9:ea:e3:07:a9:5b:6e:9e:cb:d5:0d:07:4b:92:31:b4:
75:91:e6:ab:42:87:68:5c:2d:68:38:2c:58:45:df:08:15:06:
33:3e:1e:f2:1a:b8:8d:06:bf:30:d2:d3:a4:ce:72:8b:bf:60:
f0:dc:5c:e5:cb:11:69:51:30:c2:b3:8c:00:d5:34:17:12:e0:
d6:db:43:0c:29:7d:e3:99:c4:70:c4:ff:19:28:2c:93:ba:cc:
02:8d:ea:a7:85:94:96:1b:5a:1d:65:62:1e:80:39:d0:91:21:
f7:67:d1:dc:e4:1f:76:03:40:7c:b5:40:ab:f2:5f:b8:b6:dd:
91:27:8b:51:97:14:cc:98:35:09:3d:94:a5:b7:79:aa:6f:e8:
b8:72:89:d6:a0:8c:a9:e1:49:57:6a:8b:9b:6b:3c:14:f5:89:
36:7c:81:a2:19:14:48:7b:77:9d:ba:3d:53:64:93:4e:8c:3b:
b2:64:cf:b6:ac:8f:74:b4:d9:f2:22:31:4d:1a:32:22:eb:92:
e1:32:98:85:ad:44:4f:06:0c:14:d4:af:f9:0b:49:62:94:85:
86:26:e2:1c:1e:58:14:c0:51:07:5a:40:6d:64:8d:76:e7:70:
f8:79:ef:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXfuKJKTMRZDuxYd7LobtKQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YjIxYzg5YmM3ZTJiMjE0MDY3ZjMwNzA3YTRhMDNkYzM0
NmVlMDUwHhcNMjMwMTIzMTc0MTM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzZiZWJkOThmNmNkYTJkZjBmMTIxMzIwMTBlYjY1MThhOGNmZGQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrDdCmWOPYRaSA9w6whWwloTvS6p
JBTI+bPbhD+ZTCA1POVravb7so82/1X+Vm1mXGhJkBZbmNLc8xR0nAxD/FElIpsw
XlhmfqbwMjoHmQ8XRzUVN1zqcMv06oYdLk3a992ohXeR0lGK0OUVEZKaSXAmVucy
MBoji2HSL3O2xlpeHx2G2O4nP2YU8l3lYQJWBu2yP6G6tsBf9mBdkwa9IFdfL3Ow
ZSlHKvh/Ubab9e1ebWDZLWQAMjbA1oG4fgMAAPE/8c0+flBiWWaa+rWs0enQJSr+
pbeTZCfBQnfW7yYlongiDQY7YltntUjdM9ijSTzieuqOnQuUqrlxqmrFuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLxr69mPbNot8PEhMgEOtlGKjP3RMB8GA1UdIwQY
MBaAFMSyHIm8fishQGfzBwekoD3DRu4FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODkt
MDYzYjQwMTc0NTk3LzEvdkd2cjJZOXMyaTN3OFNFeUFRNjJVWXFNX2RFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MTM3YjgtMTM4My00YjcxLWExODktMDYzYjQwMTc0NTk3
LzEveExJY2lieC1LeUZBWl9NSEI2U2dQY05HN2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQsrMA0G
CSqGSIb3DQEBCwUAA4IBAQCh1nzGoA5wdSeAkG6jXHcVC2TNQMnq4wepW26ey9UN
B0uSMbR1kearQodoXC1oOCxYRd8IFQYzPh7yGriNBr8w0tOkznKLv2Dw3FzlyxFp
UTDCs4wA1TQXEuDW20MMKX3jmcRwxP8ZKCyTuswCjeqnhZSWG1odZWIegDnQkSH3
Z9Hc5B92A0B8tUCr8l+4tt2RJ4tRlxTMmDUJPZSlt3mqb+i4conWoIyp4UlXaoub
azwU9Yk2fIGiGRRIe3eduj1TZJNOjDuyZM+2rI90tNnyIjFNGjIi65LhMpiFrURP
BgwU1K/5C0lilIWGJuIcHlgUwFEHWkBtZI1253D4ee/b
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:50 2024 by rpki-client on console-fra.rpki-client.org