Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/T_f4AzvC90HL2VXvx1AoMEG-nx4.roa
File: T_f4AzvC90HL2VXvx1AoMEG-nx4.roa (raw, json)
Hash identifier: zsNoeIcmhLEGq16n7TlH2dY4/JEoWwM+qu+LhE9RMZ8=
Subject key identifier: 4F:F7:F8:03:3B:C2:F7:41:CB:D9:55:EF:C7:50:28:30:41:BE:9F:1E
Certificate issuer: /CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Certificate serial: 0185718C2CD7E715789F30C380A92BC30C65
Authority key identifier: 31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/T_f4AzvC90HL2VXvx1AoMEG-nx4.roa
Signing time: Mon 02 Jan 2023 08:14:49 +0000
ROA not before: Mon 02 Jan 2023 08:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39801
IP address blocks: 45.146.32.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Aug 2023 09:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:2c:d7:e7:15:78:9f:30:c3:80:a9:2b:c3:0c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=311d62b7fd9fcfc87dfea987515767c838e21bb9
Validity
Not Before: Jan 2 08:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ff7f8033bc2f741cbd955efc750283041be9f1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:c7:b2:39:fb:f2:54:87:76:73:7c:38:84:
06:0d:4c:d7:71:ad:d7:2d:06:f7:8e:12:39:3f:26:
72:18:88:f5:7d:ee:52:9f:03:80:b1:37:cd:97:e5:
09:e0:77:e5:07:a3:e8:a9:f7:61:4c:fb:88:1a:aa:
0a:f4:89:76:67:13:2f:38:ff:c0:33:08:07:ee:d8:
7e:e5:8c:2f:bd:7e:cd:ad:e2:05:11:58:8d:5b:22:
73:84:a6:be:0a:1c:ae:a4:d5:91:4e:a5:03:f0:26:
af:19:3b:7f:c7:c7:b8:5b:b9:c1:61:e9:ed:d0:0c:
49:ce:24:b9:3f:84:fc:eb:0c:dd:c9:5b:ac:cd:2f:
1c:d1:90:1c:d7:ef:9b:a8:9b:a6:6b:28:59:b9:41:
de:2a:f2:49:03:dc:f0:15:30:d5:93:b8:7e:8c:e7:
f9:86:07:e3:fe:90:87:90:7c:0f:bd:64:ff:ef:69:
9c:87:32:a6:9c:e4:61:e5:b1:6a:3a:72:4c:19:cd:
7f:05:34:52:80:d6:2f:20:62:5a:b0:f4:ae:75:c5:
0e:0f:27:12:a0:27:21:4f:46:4d:dd:17:a9:81:9c:
06:97:1b:be:bc:bb:10:bf:29:d8:e2:e3:5f:1e:5e:
0d:cb:12:b6:4a:5f:a9:d9:90:60:75:26:e0:10:a6:
15:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F7:F8:03:3B:C2:F7:41:CB:D9:55:EF:C7:50:28:30:41:BE:9F:1E
X509v3 Authority Key Identifier:
keyid:31:1D:62:B7:FD:9F:CF:C8:7D:FE:A9:87:51:57:67:C8:38:E2:1B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MR1it_2fz8h9_qmHUVdnyDjiG7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/T_f4AzvC90HL2VXvx1AoMEG-nx4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/57688e-a964-4933-8631-850f34906229/1/MR1it_2fz8h9_qmHUVdnyDjiG7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.32.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:23:82:57:dc:fc:91:53:1f:d3:e7:94:ff:02:2c:ff:9a:92:
71:c8:1d:61:39:4c:ba:13:ba:88:0f:2a:dd:01:81:4d:58:7d:
20:9e:98:73:19:bb:57:77:01:be:b3:3f:1f:ce:c6:63:5e:bc:
59:de:ee:ec:2e:21:47:57:75:a2:00:c9:a9:54:74:c0:ed:9d:
a7:c9:06:59:ab:dd:a4:8b:b7:15:34:1b:53:c4:c8:91:cf:e8:
9a:f7:09:43:30:8f:b4:45:bc:cf:fd:d3:71:a2:34:88:16:5e:
98:d7:03:48:6b:29:d1:0e:d9:bb:7f:48:58:99:4e:33:93:0a:
78:e8:86:1d:f6:aa:85:22:ce:8a:d6:ab:23:3b:d8:44:ed:c7:
74:62:6d:61:a4:d7:19:a3:ef:eb:2b:4c:f7:f3:fb:63:3e:aa:
58:f3:72:8b:1a:95:bb:67:de:48:59:36:d7:9b:6a:2d:68:66:
d1:00:30:b0:cc:78:43:d6:5d:ad:57:e8:18:4a:9e:57:d7:b2:
4d:ef:d1:35:a2:f0:c7:d1:a5:15:32:32:12:38:69:99:fe:b7:
eb:ac:06:05:96:88:37:4c:29:0e:aa:f5:25:1d:03:39:bf:5f:
f9:e6:41:9c:1d:d3:83:01:bf:2c:5d:21:77:6a:1e:fc:2a:c6:
75:82:d6:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxjCzX5xV4nzDDgKkrwwxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxMWQ2MmI3ZmQ5ZmNmYzg3ZGZlYTk4NzUxNTc2N2M4Mzhl
MjFiYjkwHhcNMjMwMTAyMDgxNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmY3ZjgwMzNiYzJmNzQxY2JkOTU1ZWZjNzUwMjgzMDQxYmU5ZjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9DHsjn78lSHdnN8OIQGDUzXca3X
LQb3jhI5PyZyGIj1fe5SnwOAsTfNl+UJ4HflB6PoqfdhTPuIGqoK9Il2ZxMvOP/A
MwgH7th+5YwvvX7NreIFEViNWyJzhKa+ChyupNWRTqUD8CavGTt/x8e4W7nBYent
0AxJziS5P4T86wzdyVuszS8c0ZAc1++bqJumayhZuUHeKvJJA9zwFTDVk7h+jOf5
hgfj/pCHkHwPvWT/72mchzKmnORh5bFqOnJMGc1/BTRSgNYvIGJasPSudcUODycS
oCchT0ZN3RepgZwGlxu+vLsQvynY4uNfHl4NyxK2Sl+p2ZBgdSbgEKYVfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE/3+AM7wvdBy9lV78dQKDBBvp8eMB8GA1UdIwQY
MBaAFDEdYrf9n8/Iff6ph1FXZ8g44hu5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEt
ODUwZjM0OTA2MjI5LzEvVF9mNEF6dkM5MEhMMlZYdngxQW9NRUctbng0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy81NzY4OGUtYTk2NC00OTMzLTg2MzEtODUwZjM0OTA2MjI5
LzEvTVIxaXRfMmZ6OGg5X3FtSFVWZG55RGppRzdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZIgMA0G
CSqGSIb3DQEBCwUAA4IBAQCtI4JX3PyRUx/T55T/Aiz/mpJxyB1hOUy6E7qIDyrd
AYFNWH0gnphzGbtXdwG+sz8fzsZjXrxZ3u7sLiFHV3WiAMmpVHTA7Z2nyQZZq92k
i7cVNBtTxMiRz+ia9wlDMI+0RbzP/dNxojSIFl6Y1wNIaynRDtm7f0hYmU4zkwp4
6IYd9qqFIs6K1qsjO9hE7cd0Ym1hpNcZo+/rK0z38/tjPqpY83KLGpW7Z95IWTbX
m2otaGbRADCwzHhD1l2tV+gYSp5X17JN79E1ovDH0aUVMjISOGmZ/rfrrAYFlog3
TCkOqvUlHQM5v1/55kGcHdODAb8sXSF3ah78KsZ1gtbn
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:35 2024 by rpki-client on console-ams.rpki-client.org