Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1-qH7xa-RH_fKUcwXb-7LENOc_eY.roa
File: 1-qH7xa-RH_fKUcwXb-7LENOc_eY.roa (raw, json)
Hash identifier: sdhR7SGBAuRuWlVkgszG27dXoAN0DV2SqhkNb/3SbEE=
Subject key identifier: FA:A1:FB:C5:AF:91:1F:F7:CA:51:CC:17:6F:EE:CB:10:D3:9C:FD:E6
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0189BE9BF2DB64D4CE42DF36DF873D3B8C7C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1-qH7xa-RH_fKUcwXb-7LENOc_eY.roa
Signing time: Fri 04 Aug 2023 03:33:58 +0000
ROA not before: Fri 04 Aug 2023 03:33:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.144.213.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Aug 2023 09:06:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:be:9b:f2:db:64:d4:ce:42:df:36:df:87:3d:3b:8c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Aug 4 03:33:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faa1fbc5af911ff7ca51cc176feecb10d39cfde6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:bb:7a:da:af:bd:43:e5:20:ee:b1:fe:91:
66:8d:0c:9c:cf:87:38:95:b1:15:c3:c2:e0:1e:e0:
80:21:98:78:5e:d8:f3:b2:15:34:1d:4b:f5:bb:f9:
da:3a:29:c4:99:72:8a:d7:2b:12:32:fb:19:43:1a:
7c:41:a4:1b:2a:05:a5:c5:51:f3:1f:db:6a:40:5b:
6e:62:62:63:5a:00:ce:44:2c:57:a4:ca:c1:b4:97:
a6:3d:2b:68:2a:01:17:de:23:94:dd:e5:37:fa:41:
17:06:8b:69:8a:a1:95:15:72:bf:25:cd:1a:26:49:
7c:cd:a7:16:bd:c4:6f:c8:3a:b0:79:b3:43:ef:d9:
7f:27:07:52:18:e9:ae:71:d8:a3:92:3c:fe:c4:96:
3b:6d:87:a9:f8:55:2d:6f:b3:c7:74:f8:d4:65:24:
53:17:3e:b1:85:7e:34:b6:13:c9:81:70:1a:2e:34:
b8:f5:0c:e6:96:ec:58:18:20:d4:73:28:d9:8b:0f:
41:1b:1e:de:7e:d6:0f:d9:71:12:d3:f4:08:94:8a:
7a:7d:48:30:4a:3b:40:a7:b4:44:72:16:b0:cb:09:
48:27:44:bc:ae:cf:8e:7a:27:fe:fa:49:e4:c5:de:
18:60:a1:22:cf:77:a9:1d:f4:78:42:d3:5c:3a:3c:
f9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A1:FB:C5:AF:91:1F:F7:CA:51:CC:17:6F:EE:CB:10:D3:9C:FD:E6
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1-qH7xa-RH_fKUcwXb-7LENOc_eY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.213.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:13:74:86:06:6d:98:b6:60:aa:b8:33:a3:51:70:d0:2c:22:
7e:02:f2:66:72:9d:2d:ab:d9:51:f0:5b:f7:b5:14:03:0f:6d:
e2:7e:34:80:17:b3:d9:da:af:24:a4:04:9c:a6:6e:1c:7a:2e:
9c:29:0b:74:8b:28:71:da:e6:3d:1b:00:a1:21:6b:7b:2f:e6:
55:f3:df:1c:9a:b3:e1:64:2a:77:96:89:36:c6:eb:c2:e9:b9:
e4:68:eb:80:5d:90:98:ce:05:ba:57:5a:f7:06:de:82:39:66:
87:8a:ee:19:f8:d9:45:7a:2d:da:a3:79:c7:70:5d:21:47:51:
8e:1f:f3:fb:b8:cc:87:1e:0c:be:ae:6c:e5:d8:7b:da:3c:69:
44:62:90:6d:b7:f1:24:8f:79:33:c8:5f:fa:18:e4:24:bf:ab:
7a:fc:c5:08:30:fe:92:f4:5e:8d:dd:3e:38:7a:f2:1f:5b:6f:
68:12:b0:6d:a1:a5:77:11:22:9c:c7:b7:22:af:99:aa:a9:20:
f2:ea:c1:4c:0e:f0:53:a2:92:44:05:53:b0:9a:51:f1:b6:c6:
1e:8d:5d:88:0c:e1:68:e0:a2:f8:12:b7:2f:93:87:48:3e:cb:
64:c8:ef:49:b6:71:72:b9:8b:ce:99:3f:9e:3b:03:7d:c0:b6:
dd:30:ec:7f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYm+m/LbZNTOQt8234c9O4x8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMwODA0MDMzMzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWExZmJjNWFmOTExZmY3Y2E1MWNjMTc2ZmVlY2IxMGQzOWNmZGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/67etqvvUPlIO6x/pFmjQycz4c4
lbEVw8LgHuCAIZh4XtjzshU0HUv1u/naOinEmXKK1ysSMvsZQxp8QaQbKgWlxVHz
H9tqQFtuYmJjWgDORCxXpMrBtJemPStoKgEX3iOU3eU3+kEXBotpiqGVFXK/Jc0a
Jkl8zacWvcRvyDqwebND79l/JwdSGOmucdijkjz+xJY7bYep+FUtb7PHdPjUZSRT
Fz6xhX40thPJgXAaLjS49QzmluxYGCDUcyjZiw9BGx7eftYP2XES0/QIlIp6fUgw
SjtAp7REchawywlIJ0S8rs+Oeif++knkxd4YYKEiz3epHfR4QtNcOjz5GQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPqh+8WvkR/3ylHMF2/uyxDTnP3mMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvMS1xSDd4YS1SSF9mS1Vjd1hiLTdMRU5PY19lWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTYvNjYzZGY1LTU4MGMtNGYyYy1hNjZjLWVlZjM1MTFmNmM2
MC8xL25TcEhpN0N3am1ZYkN5LWZ2b2sxdkp3cUtLRS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2Q1TAN
BgkqhkiG9w0BAQsFAAOCAQEAohN0hgZtmLZgqrgzo1Fw0CwifgLyZnKdLavZUfBb
97UUAw9t4n40gBez2dqvJKQEnKZuHHounCkLdIsocdrmPRsAoSFrey/mVfPfHJqz
4WQqd5aJNsbrwum55GjrgF2QmM4Fulda9wbegjlmh4ruGfjZRXot2qN5x3BdIUdR
jh/z+7jMhx4Mvq5s5dh72jxpRGKQbbfxJI95M8hf+hjkJL+revzFCDD+kvRejd0+
OHryH1tvaBKwbaGldxEinMe3Iq+Zqqkg8urBTA7wU6KSRAVTsJpR8bbGHo1diAzh
aOCi+BK3L5OHSD7LZMjvSbZxcrmLzpk/njsDfcC23TDsfw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org