Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/S1xB1NWqYmIZIm_-BhDQUNX1GPY.roa
File: S1xB1NWqYmIZIm_-BhDQUNX1GPY.roa (raw, json)
Hash identifier: 5hmlveo4i1gg1Ns8p/UkyB9IFEfmdz3g9t8QS4Ppss4=
Subject key identifier: 4B:5C:41:D4:D5:AA:62:62:19:22:6F:FE:06:10:D0:50:D5:F5:18:F6
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01863FC56B85C5643B11F376CD6FAD9AEBE5
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/S1xB1NWqYmIZIm_-BhDQUNX1GPY.roa
Signing time: Sat 11 Feb 2023 09:19:08 +0000
ROA not before: Sat 11 Feb 2023 09:19:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 77.83.39.0/24 maxlen: 24
45.138.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Mar 2023 21:58:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:3f:c5:6b:85:c5:64:3b:11:f3:76:cd:6f:ad:9a:eb:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 11 09:19:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b5c41d4d5aa626219226ffe0610d050d5f518f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5e:cd:80:a4:6f:75:48:7a:5a:59:12:84:70:
be:53:ce:f2:7f:ec:93:54:00:2f:33:8a:3b:a2:43:
24:a7:18:c0:99:14:15:7d:23:f0:67:8c:a6:d8:5e:
24:60:0c:ae:b8:4b:d1:4b:54:41:37:64:6a:a9:12:
2d:4a:0f:d4:2d:fc:8d:3f:54:a4:c8:8d:75:db:57:
f1:63:fc:e8:0f:4a:a9:e6:7f:db:59:5e:f8:f8:c1:
62:ef:2c:94:ea:6f:8e:28:91:07:09:bb:46:aa:d5:
6a:38:17:f9:88:5d:19:61:87:63:7c:61:06:13:29:
36:82:19:9e:a9:84:9e:0d:de:ad:25:2f:af:b6:8b:
68:a7:73:c7:52:02:0e:a1:93:c6:c3:58:64:43:24:
a5:c9:41:8b:07:3e:c8:9a:fb:ad:52:f0:e1:41:89:
d3:9d:c0:b6:72:10:6a:8b:83:b9:40:ce:8f:7f:50:
64:a3:51:aa:aa:86:1d:01:58:c1:fa:9d:a0:f9:ff:
12:f3:59:c4:b8:5c:2c:ff:fd:cf:7c:46:a3:dc:27:
4c:55:e6:8c:39:77:72:ac:ca:d3:5d:e6:ad:8f:ef:
50:f6:fc:60:a0:41:13:aa:32:c8:f2:93:40:d1:3a:
27:06:b7:16:f5:6d:e1:87:31:05:c4:6e:80:d5:14:
88:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5C:41:D4:D5:AA:62:62:19:22:6F:FE:06:10:D0:50:D5:F5:18:F6
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/S1xB1NWqYmIZIm_-BhDQUNX1GPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.180.0/24
77.83.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:be:6b:20:e5:99:ae:bc:61:67:d7:0c:dc:73:02:43:59:65:
0b:19:82:64:38:72:90:70:77:43:d5:30:44:62:a6:c8:56:25:
2b:96:17:e3:9c:b2:e0:0e:b1:f5:2b:ee:d5:0a:35:2a:40:cc:
bf:29:eb:85:a9:b4:ad:69:be:2e:a5:63:80:8a:66:a3:5b:e0:
2a:0d:90:43:40:e6:49:6d:8f:2a:96:75:6f:6c:df:2e:3d:97:
d5:00:56:c5:3b:ee:94:a0:81:f9:94:d8:f8:3f:49:2f:5b:e6:
09:61:b6:83:b8:c9:a9:4a:72:70:9d:d2:9c:25:59:36:88:7e:
9c:a9:a9:52:fe:50:ea:e2:1d:a9:c2:68:e3:cc:4e:2a:56:10:
05:ca:3e:fb:f0:96:9d:f3:38:ef:02:8f:6e:88:ef:7a:c3:f2:
56:ef:32:ae:ab:9c:70:3f:63:db:f3:80:c4:0f:e3:21:75:6b:
05:9e:b2:42:fa:11:48:5c:29:59:38:7b:38:fb:77:ef:4f:19:
6b:e9:58:da:dd:2b:75:40:24:36:48:e2:be:ac:0c:98:4f:d0:
b5:2d:fb:6d:0e:cc:90:30:07:1f:ed:fc:fe:b2:56:82:3b:76:
95:b6:05:58:df:eb:64:41:73:72:26:e8:41:f5:d0:d7:49:26:
68:a7:17:68
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYY/xWuFxWQ7EfN2zW+tmuvlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMwMjExMDkxOTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjVjNDFkNGQ1YWE2MjYyMTkyMjZmZmUwNjEwZDA1MGQ1ZjUxOGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV7NgKRvdUh6WlkShHC+U87yf+yT
VAAvM4o7okMkpxjAmRQVfSPwZ4ym2F4kYAyuuEvRS1RBN2RqqRItSg/ULfyNP1Sk
yI1121fxY/zoD0qp5n/bWV74+MFi7yyU6m+OKJEHCbtGqtVqOBf5iF0ZYYdjfGEG
Eyk2ghmeqYSeDd6tJS+vtotop3PHUgIOoZPGw1hkQySlyUGLBz7ImvutUvDhQYnT
ncC2chBqi4O5QM6Pf1Bko1GqqoYdAVjB+p2g+f8S81nEuFws//3PfEaj3CdMVeaM
OXdyrMrTXeatj+9Q9vxgoEETqjLI8pNA0TonBrcW9W3hhzEFxG6A1RSIbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEtcQdTVqmJiGSJv/gYQ0FDV9Rj2MB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvUzF4QjFOV3FZbUlaSW1fLUJoRFFVTlgxR1BZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYq0AwQA
TVMnMA0GCSqGSIb3DQEBCwUAA4IBAQBfvmsg5ZmuvGFn1wzccwJDWWULGYJkOHKQ
cHdD1TBEYqbIViUrlhfjnLLgDrH1K+7VCjUqQMy/KeuFqbStab4upWOAimajW+Aq
DZBDQOZJbY8qlnVvbN8uPZfVAFbFO+6UoIH5lNj4P0kvW+YJYbaDuMmpSnJwndKc
JVk2iH6cqalS/lDq4h2pwmjjzE4qVhAFyj778Jad8zjvAo9uiO96w/JW7zKuq5xw
P2Pb84DED+MhdWsFnrJC+hFIXClZOHs4+3fvTxlr6Vja3St1QCQ2SOK+rAyYT9C1
LfttDsyQMAcf7fz+slaCO3aVtgVY3+tkQXNyJuhB9dDXSSZopxdo
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org