Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/toHqRgBCy1bl5nvCQ-bLDYYWA9M.roa
File: toHqRgBCy1bl5nvCQ-bLDYYWA9M.roa (raw, json)
Hash identifier: wWYyACYLlCQPk4lxcaksEle9+/sUj33lyiGVGqvcfFU=
Subject key identifier: B6:81:EA:46:00:42:CB:56:E5:E6:7B:C2:43:E6:CB:0D:86:16:03:D3
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018C5EE3A49E89CF6328B01694DD84BBFA77
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/toHqRgBCy1bl5nvCQ-bLDYYWA9M.roa
Signing time: Tue 12 Dec 2023 16:37:06 +0000
ROA not before: Tue 12 Dec 2023 16:37:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213122
IP address blocks: 2.58.201.0/24 maxlen: 24
45.134.111.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5e:e3:a4:9e:89:cf:63:28:b0:16:94:dd:84:bb:fa:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Dec 12 16:37:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b681ea460042cb56e5e67bc243e6cb0d861603d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:d9:1b:53:49:d2:99:1c:6a:6a:73:d7:20:
92:d3:85:b8:a0:35:f0:d0:21:73:09:40:1e:d1:44:
61:b3:79:43:d3:23:d1:d1:4c:17:12:8a:24:8e:52:
da:2a:0c:5a:37:f5:0d:ad:65:c5:02:ae:84:58:e8:
d0:86:58:ae:ac:b5:18:e9:f6:57:ba:99:23:61:ad:
6e:7c:46:28:a8:5d:8f:90:8c:c5:38:97:43:c3:66:
69:fc:fd:14:54:81:d5:19:92:0c:2f:0b:6e:66:76:
3f:f1:ce:0c:9b:69:bd:c0:2a:10:94:4c:a7:9d:58:
b8:5f:3b:92:be:fd:39:5c:cb:fc:48:c6:b4:60:0f:
41:67:30:dd:a0:ba:9f:39:3d:b8:2a:e8:43:67:e5:
59:f5:3e:e3:b9:e5:ef:28:68:4c:f9:b6:74:f4:82:
64:8c:47:42:58:23:3b:3d:d2:d6:02:7c:47:b3:77:
f1:cc:47:bd:e1:ff:90:ec:6a:95:62:79:16:56:4f:
85:3f:e4:4d:ea:62:4e:10:f9:18:7f:fa:f1:37:96:
e8:9b:90:e2:6a:f8:8c:52:48:c3:cb:dd:36:c3:02:
d5:0a:39:eb:cd:23:4f:f2:f8:0a:3c:57:cf:80:be:
d5:21:16:74:64:90:96:fc:2e:34:4f:cb:be:9c:3e:
5e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:81:EA:46:00:42:CB:56:E5:E6:7B:C2:43:E6:CB:0D:86:16:03:D3
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/toHqRgBCy1bl5nvCQ-bLDYYWA9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.201.0/24
45.134.111.0/24
Signature Algorithm: sha256WithRSAEncryption
82:94:74:f6:36:18:31:0b:0b:98:51:ea:21:7d:fd:3e:95:82:
f4:ae:d7:12:53:7d:26:de:3a:76:25:d3:61:6a:36:07:46:81:
f2:5e:fc:9e:00:87:ff:eb:ea:25:0d:f5:8a:5c:5c:d9:de:54:
d3:25:00:d4:ca:ce:21:6c:41:32:a2:42:d5:36:3d:7e:b6:f1:
2a:83:9d:b0:bf:79:be:61:65:10:b8:4d:22:e0:b5:54:22:b5:
44:50:ab:50:34:9c:7f:a6:10:2c:8f:21:01:21:67:65:f2:74:
9f:5d:67:ec:26:48:d3:0f:49:9d:ba:d8:82:ef:84:d6:56:e0:
1f:60:18:53:3d:14:ea:e2:38:b1:6a:bd:a9:90:37:cf:ae:47:
f7:25:e9:98:3c:db:5d:fc:e7:54:60:86:31:ae:b8:3c:68:b3:
9a:0b:94:ca:e2:7f:23:93:3f:e0:c6:7f:e6:16:54:86:f4:8c:
15:d2:1d:10:2f:a9:9c:d4:c4:69:00:93:f5:ec:d2:86:b5:87:
50:80:47:df:8b:e4:34:cd:8c:cc:43:b7:7b:e5:3c:f8:9c:15:
ab:ff:85:83:15:1f:b4:b3:e5:0a:c2:73:b9:e3:97:bf:d8:53:
71:d9:51:5c:78:56:52:ac:f6:a4:6c:96:59:93:86:ca:3f:79:
1e:e4:6c:26
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYxe46Seic9jKLAWlN2Eu/p3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjMxMjEyMTYzNzA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjgxZWE0NjAwNDJjYjU2ZTVlNjdiYzI0M2U2Y2IwZDg2MTYwM2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGvZG1NJ0pkcampz1yCS04W4oDXw
0CFzCUAe0URhs3lD0yPR0UwXEookjlLaKgxaN/UNrWXFAq6EWOjQhliurLUY6fZX
upkjYa1ufEYoqF2PkIzFOJdDw2Zp/P0UVIHVGZIMLwtuZnY/8c4Mm2m9wCoQlEyn
nVi4XzuSvv05XMv8SMa0YA9BZzDdoLqfOT24KuhDZ+VZ9T7jueXvKGhM+bZ09IJk
jEdCWCM7PdLWAnxHs3fxzEe94f+Q7GqVYnkWVk+FP+RN6mJOEPkYf/rxN5bom5Di
aviMUkjDy902wwLVCjnrzSNP8vgKPFfPgL7VIRZ0ZJCW/C40T8u+nD5e1wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLaB6kYAQstW5eZ7wkPmyw2GFgPTMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvdG9IcVJnQkN5MWJsNW52Q1EtYkxEWVlXQTlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjrJAwQA
LYZvMA0GCSqGSIb3DQEBCwUAA4IBAQCClHT2NhgxCwuYUeohff0+lYL0rtcSU30m
3jp2JdNhajYHRoHyXvyeAIf/6+olDfWKXFzZ3lTTJQDUys4hbEEyokLVNj1+tvEq
g52wv3m+YWUQuE0i4LVUIrVEUKtQNJx/phAsjyEBIWdl8nSfXWfsJkjTD0mdutiC
74TWVuAfYBhTPRTq4jixar2pkDfPrkf3JemYPNtd/OdUYIYxrrg8aLOaC5TK4n8j
kz/gxn/mFlSG9IwV0h0QL6mc1MRpAJP17NKGtYdQgEffi+Q0zYzMQ7d75Tz4nBWr
/4WDFR+0s+UKwnO545e/2FNx2VFceFZSrPakbJZZk4bKP3ke5Gwm
-----END CERTIFICATE-----
Generated at Fri Dec 22 13:56:08 2023 by rpki-client on console-fra.rpki-client.org