Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/L8OYLZXarEFpwOxTqTgj-N9F7G8.roa
File: L8OYLZXarEFpwOxTqTgj-N9F7G8.roa (raw, json)
Hash identifier: hjyF0YgCxzcdhcsYf3ruTOrN3V6KZ/2S4DaDy0Mpwhg=
Subject key identifier: 2F:C3:98:2D:95:DA:AC:41:69:C0:EC:53:A9:38:23:F8:DF:45:EC:6F
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 018C96A0EDCA0238E0B40006C83CD0AA3393
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/L8OYLZXarEFpwOxTqTgj-N9F7G8.roa
Signing time: Sat 23 Dec 2023 12:22:58 +0000
ROA not before: Sat 23 Dec 2023 12:22:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49228
IP address blocks: 45.94.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:a0:ed:ca:02:38:e0:b4:00:06:c8:3c:d0:aa:33:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Dec 23 12:22:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2fc3982d95daac4169c0ec53a93823f8df45ec6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a6:71:9a:59:52:38:39:0f:b7:c9:88:87:57:
f0:67:f4:83:f3:1d:5e:63:aa:ac:27:ef:eb:50:54:
c5:18:b3:86:b7:63:3e:97:54:02:d2:58:9e:4c:03:
9c:a4:57:5f:c6:f3:2c:fb:2f:e3:01:a0:48:32:12:
40:bb:6d:82:d0:29:c1:53:b9:2a:29:62:2e:0a:21:
b7:06:ac:e5:34:33:f5:2a:d7:9c:20:dc:fc:27:53:
21:c4:25:bf:7f:3d:1a:c5:3a:71:8d:b3:61:e0:29:
69:9c:4b:f5:39:c9:cb:b9:ee:23:dc:f4:93:1d:7d:
67:cd:d8:c4:c6:e6:ae:93:f8:da:bc:4e:93:06:3c:
83:57:84:51:9c:d6:ca:80:21:6b:7d:f7:c6:c4:b1:
49:d7:ef:e8:02:89:6b:1e:25:24:a4:c3:69:61:f6:
c9:45:66:49:27:9b:87:1c:4f:07:ec:5f:10:1e:3c:
1b:65:02:1e:83:00:83:8f:39:1e:90:b8:2b:ac:c7:
33:63:90:38:2a:e0:e6:a8:18:66:61:ce:8a:36:96:
7d:c0:47:65:4f:b2:26:ad:0c:43:31:64:f2:9b:09:
85:45:94:10:06:be:5d:c0:d0:1a:4f:01:93:36:5a:
24:ba:85:25:46:f4:63:40:7c:35:94:df:be:74:ca:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C3:98:2D:95:DA:AC:41:69:C0:EC:53:A9:38:23:F8:DF:45:EC:6F
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/L8OYLZXarEFpwOxTqTgj-N9F7G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.212.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:26:33:5a:5e:11:f7:31:f4:e9:56:18:b9:05:e9:71:f8:e9:
4f:99:6c:5a:05:fd:9c:3a:f6:f9:a4:cd:bd:3f:ef:5d:65:89:
18:2d:27:b6:12:c6:83:3f:56:ac:d8:e3:ae:8a:2c:03:d3:43:
6b:47:9f:b1:5d:2f:33:07:22:62:95:cc:df:92:66:13:a6:75:
40:76:89:21:f2:05:69:94:d1:23:21:03:80:42:e4:fc:36:a6:
d8:60:0f:52:b5:e4:45:1c:05:0c:dd:d3:38:0e:5f:56:32:49:
ae:aa:94:b5:5c:5a:b3:a8:e0:e5:a7:43:92:69:f8:08:8f:89:
c3:2e:5f:5f:ff:f6:5d:7b:f3:b5:f7:e0:ab:f0:d7:19:88:e5:
e7:4f:d6:09:45:6e:58:e1:c2:2e:a7:86:98:7d:47:3b:c6:6a:
29:76:c1:ed:85:d4:c2:49:d8:3f:67:92:42:fd:79:49:87:e4:
95:15:0e:33:95:b2:7d:1e:1e:79:de:72:ef:7b:1d:7c:4c:f7:
30:75:8e:05:91:d1:19:04:05:c1:1d:58:9a:47:62:db:e0:4a:
b3:ac:81:11:56:fa:15:7b:b4:18:d8:29:37:64:6a:70:a0:0b:
f5:76:50:62:19:ed:e7:6a:15:69:49:e9:28:a0:04:7c:49:c0:
1f:9a:b5:c7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyWoO3KAjjgtAAGyDzQqjOTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz
MjdlYmUwHhcNMjMxMjIzMTIyMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmMzOTgyZDk1ZGFhYzQxNjljMGVjNTNhOTM4MjNmOGRmNDVlYzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56ZxmllSODkPt8mIh1fwZ/SD8x1e
Y6qsJ+/rUFTFGLOGt2M+l1QC0lieTAOcpFdfxvMs+y/jAaBIMhJAu22C0CnBU7kq
KWIuCiG3BqzlNDP1KtecINz8J1MhxCW/fz0axTpxjbNh4ClpnEv1OcnLue4j3PST
HX1nzdjExuauk/javE6TBjyDV4RRnNbKgCFrfffGxLFJ1+/oAolrHiUkpMNpYfbJ
RWZJJ5uHHE8H7F8QHjwbZQIegwCDjzkekLgrrMczY5A4KuDmqBhmYc6KNpZ9wEdl
T7ImrQxDMWTymwmFRZQQBr5dwNAaTwGTNlokuoUlRvRjQHw1lN++dMp7XwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC/DmC2V2qxBacDsU6k4I/jfRexvMB8GA1UdIwQY
MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt
M2RmYTUxMGQ2YjE2LzEvTDhPWUxaWGFyRUZwd094VHFUZ2otTjlGN0c4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2
LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV7UMA0G
CSqGSIb3DQEBCwUAA4IBAQBsJjNaXhH3MfTpVhi5Belx+OlPmWxaBf2cOvb5pM29
P+9dZYkYLSe2EsaDP1as2OOuiiwD00NrR5+xXS8zByJilczfkmYTpnVAdokh8gVp
lNEjIQOAQuT8NqbYYA9SteRFHAUM3dM4Dl9WMkmuqpS1XFqzqODlp0OSafgIj4nD
Ll9f//Zde/O19+Cr8NcZiOXnT9YJRW5Y4cIup4aYfUc7xmopdsHthdTCSdg/Z5JC
/XlJh+SVFQ4zlbJ9Hh553nLvex18TPcwdY4FkdEZBAXBHViaR2Lb4EqzrIERVvoV
e7QY2Ck3ZGpwoAv1dlBiGe3nahVpSekooAR8ScAfmrXH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:49 2024 by rpki-client on console-ams.rpki-client.org