Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/e-SkuQHktgOgsONU6_dWhk5RzYA.roa
File: e-SkuQHktgOgsONU6_dWhk5RzYA.roa (raw, json)
Hash identifier: JpQlYI7FT4nghbYkwKt3i7uZwwEHB6LSb6SJoCHHNMU=
Subject key identifier: 7B:E4:A4:B9:01:E4:B6:03:A0:B0:E3:54:EB:F7:56:86:4E:51:CD:80
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 018946EC7A83A309377B4E893844356BC903
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/e-SkuQHktgOgsONU6_dWhk5RzYA.roa
Signing time: Tue 11 Jul 2023 21:47:30 +0000
ROA not before: Tue 11 Jul 2023 21:47:30 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.148.132.0/24 maxlen: 24
45.148.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 14 Jul 2023 22:20:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:46:ec:7a:83:a3:09:37:7b:4e:89:38:44:35:6b:c9:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Jul 11 21:47:30 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7be4a4b901e4b603a0b0e354ebf756864e51cd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:26:f9:e5:a8:42:5e:c0:5d:d3:44:1f:93:70:
cb:bb:de:d0:e6:79:e1:d7:4c:fa:a2:5e:d1:16:f0:
36:10:ef:f5:4f:94:5b:f8:98:a0:3d:2f:34:a8:d2:
30:b2:f7:11:d7:85:60:b7:f8:f2:ed:72:b1:df:ff:
bf:65:af:62:71:aa:2f:ec:e4:ce:6a:58:3a:ed:ce:
69:46:86:02:18:04:1e:65:b5:88:41:c5:33:29:22:
a9:b4:6d:a0:6d:8a:b5:85:fa:f9:d3:24:d7:fd:6d:
a3:9e:20:d9:ef:61:f3:7d:e7:9f:3c:d7:82:2d:e3:
21:50:b8:b7:33:25:f7:37:82:8f:bc:02:54:2f:0f:
94:6e:f5:ed:92:83:18:f9:98:eb:cb:41:93:fa:4c:
ce:cc:a5:0e:81:75:14:de:6e:37:18:65:81:72:21:
d0:66:11:04:6a:0f:cb:91:6b:ba:d1:cd:c6:66:38:
63:81:e3:ff:f5:68:2a:e5:0f:65:59:f3:33:e9:f0:
e4:60:85:27:3a:32:28:ac:20:af:17:75:92:52:3a:
eb:d5:6f:32:d1:54:c1:ae:14:0d:59:86:14:b4:45:
76:76:55:2b:fa:ee:70:79:1c:33:8e:e9:85:64:47:
00:78:80:b9:69:bf:1f:c5:30:b2:d6:82:da:e8:9d:
25:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E4:A4:B9:01:E4:B6:03:A0:B0:E3:54:EB:F7:56:86:4E:51:CD:80
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/e-SkuQHktgOgsONU6_dWhk5RzYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.132.0/24
45.148.135.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d6:bc:1c:c2:d5:5e:b3:70:21:f4:c6:bb:1d:71:da:5e:b7:
e6:a0:f3:fb:42:be:43:b5:d9:d1:b5:73:81:df:cb:4a:ce:a9:
60:6f:31:d5:0b:25:4a:f5:6f:3c:af:2b:d2:ea:96:e7:6b:03:
d9:b5:3d:aa:57:11:b6:30:26:db:47:f7:48:23:6e:2c:ba:4d:
cb:72:53:cf:3f:4c:23:54:a6:79:e3:22:0a:2b:0d:94:d9:cd:
ca:a2:33:f0:28:fe:df:c9:8b:6d:f2:85:13:9d:5f:51:7f:48:
b1:af:be:6a:93:d1:40:22:bb:fb:f3:60:45:c3:fb:5c:1c:09:
37:60:d1:b1:0c:b4:ca:32:a1:83:34:ec:18:f6:00:da:fd:ae:
2b:d0:ea:2e:73:a5:2a:f3:61:e0:40:0d:ae:0f:c9:1e:81:51:
1e:af:df:30:73:eb:20:ca:f5:b8:0a:68:b7:64:ad:64:49:8f:
a7:d7:01:75:a8:61:24:46:01:0c:e5:e7:05:9e:9c:83:fd:dd:
fd:76:71:94:ca:33:2b:91:93:ea:7f:ad:93:2e:b7:94:cb:41:
21:2d:70:57:42:eb:50:b7:22:a2:94:9c:4c:a0:f7:98:a2:8f:
a9:72:46:29:1d:5d:bd:0d:79:cf:2c:36:40:9e:05:78:86:88:
b9:e5:39:a6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYlG7HqDowk3e06JOEQ1a8kDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZDcxODUzMzI0ZWIwNjBmYmFmYzk4ODIzMzg2MDQ5OWM5
NmM1M2EwHhcNMjMwNzExMjE0NzMwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmU0YTRiOTAxZTRiNjAzYTBiMGUzNTRlYmY3NTY4NjRlNTFjZDgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCb55ahCXsBd00Qfk3DLu97Q5nnh
10z6ol7RFvA2EO/1T5Rb+JigPS80qNIwsvcR14Vgt/jy7XKx3/+/Za9icaov7OTO
alg67c5pRoYCGAQeZbWIQcUzKSKptG2gbYq1hfr50yTX/W2jniDZ72HzfeefPNeC
LeMhULi3MyX3N4KPvAJULw+UbvXtkoMY+Zjry0GT+kzOzKUOgXUU3m43GGWBciHQ
ZhEEag/LkWu60c3GZjhjgeP/9Wgq5Q9lWfMz6fDkYIUnOjIorCCvF3WSUjrr1W8y
0VTBrhQNWYYUtEV2dlUr+u5weRwzjumFZEcAeIC5ab8fxTCy1oLa6J0lWQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHvkpLkB5LYDoLDjVOv3VoZOUc2AMB8GA1UdIwQY
MBaAFKHXGFMyTrBg+6/JiCM4YEmclsU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUt
NzA2MTM1NmJlZjFiLzEvZS1Ta3VRSGt0Z09nc09OVTZfZFdoazVSellBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUtNzA2MTM1NmJlZjFi
LzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZSEAwQA
LZSHMA0GCSqGSIb3DQEBCwUAA4IBAQCK1rwcwtVes3Ah9Ma7HXHaXrfmoPP7Qr5D
tdnRtXOB38tKzqlgbzHVCyVK9W88ryvS6pbnawPZtT2qVxG2MCbbR/dII24suk3L
clPPP0wjVKZ54yIKKw2U2c3KojPwKP7fyYtt8oUTnV9Rf0ixr75qk9FAIrv782BF
w/tcHAk3YNGxDLTKMqGDNOwY9gDa/a4r0Oouc6Uq82HgQA2uD8kegVEer98wc+sg
yvW4Cmi3ZK1kSY+n1wF1qGEkRgEM5ecFnpyD/d39dnGUyjMrkZPqf62TLreUy0Eh
LXBXQutQtyKilJxMoPeYoo+pckYpHV29DXnPLDZAngV4hoi55Tmm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:51 2024 by rpki-client on console-fra.rpki-client.org