Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/FOYoHxqGHAbqHJOgW-u_lMVrtJE.roa
File: FOYoHxqGHAbqHJOgW-u_lMVrtJE.roa (raw, json)
Hash identifier: AMS0O3DGv0dM8Qp9TOKCAub70+mn0ydaJhONccyxJ60=
Subject key identifier: 14:E6:28:1F:1A:86:1C:06:EA:1C:93:A0:5B:EB:BF:94:C5:6B:B4:91
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018572E83045948B68E988354FF31112E687
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/FOYoHxqGHAbqHJOgW-u_lMVrtJE.roa
Signing time: Mon 02 Jan 2023 14:34:57 +0000
ROA not before: Mon 02 Jan 2023 14:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 45.91.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:e8:30:45:94:8b:68:e9:88:35:4f:f3:11:12:e6:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 2 14:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14e6281f1a861c06ea1c93a05bebbf94c56bb491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:36:72:27:b4:fc:39:57:00:77:93:6b:18:bf:
72:63:5f:29:78:ed:b4:c0:20:70:1b:84:29:54:d8:
42:3e:87:5a:5d:04:75:f0:df:bf:a2:86:e6:ac:db:
e0:98:2c:21:66:6e:2c:a1:35:d3:b4:b8:25:9d:88:
d1:8e:7d:b3:8f:4c:53:36:8b:29:4b:22:0e:92:9d:
e2:cb:1d:e4:aa:0f:be:b0:a9:f0:6f:ae:45:bf:06:
23:09:e0:3e:a3:21:58:9b:ac:db:34:89:69:02:d7:
5d:66:be:5b:19:35:a1:4e:97:2b:83:21:a8:40:34:
f0:df:e4:c9:3f:11:a0:96:1c:6a:f9:1a:60:09:35:
ea:43:f3:14:a1:aa:15:35:a8:2d:85:4e:9a:33:40:
c3:38:54:90:06:3b:6f:9e:4b:68:78:ae:1d:9c:e0:
03:29:e7:20:09:a6:1d:db:3c:17:b7:03:85:f1:72:
c2:57:c4:35:c2:20:e5:7f:62:5c:7c:e0:a9:b4:9a:
10:9b:50:30:0f:9f:11:2f:37:d8:1b:77:f0:e9:c3:
fb:7c:75:bc:eb:4a:59:b8:a8:55:cd:ed:75:70:b0:
96:23:c8:a9:b2:8e:f5:09:70:59:cb:e7:48:d5:66:
68:6e:f3:1e:3e:5c:1b:ae:22:06:47:da:9c:a3:6f:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E6:28:1F:1A:86:1C:06:EA:1C:93:A0:5B:EB:BF:94:C5:6B:B4:91
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/FOYoHxqGHAbqHJOgW-u_lMVrtJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.64.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:fe:a8:ad:dc:58:f4:85:07:4f:c3:1d:89:b3:31:d3:09:09:
2f:d0:bc:4f:1d:01:9a:87:45:13:71:3e:14:fd:4f:fd:33:33:
e9:93:74:09:04:a0:10:04:9d:14:45:9a:ab:f5:57:39:08:72:
7b:1d:a7:ef:bc:47:13:a3:ba:35:71:82:ac:08:6d:f4:05:91:
bd:2b:a7:43:ac:b4:b8:25:97:15:7d:ff:82:cf:31:19:64:72:
a9:6e:6e:d1:2c:14:53:ec:2d:e4:2b:d0:a0:7e:d0:f6:93:8f:
b5:64:d1:e0:b9:c6:48:e7:93:11:b9:d2:0e:1f:62:e1:d9:2d:
3d:72:e8:fe:ff:67:b6:b0:77:3f:f5:1e:7e:9a:da:fa:06:66:
67:34:d7:55:50:e1:6e:41:93:10:91:11:cc:ae:91:a6:1b:77:
51:ec:0a:2b:84:ab:f7:19:f1:2b:2c:ce:31:28:a9:36:33:8c:
f6:0d:28:07:05:75:76:ce:d1:77:8e:30:51:be:fb:16:a8:ec:
8d:23:47:68:3f:95:df:4a:1e:76:95:83:bc:36:26:ba:82:25:
5b:91:14:e6:2e:68:e7:8d:7c:f3:e2:0c:36:c4:74:99:34:dc:
ea:7f:f3:61:79:ee:59:cc:af:3c:b6:3c:e8:e4:cc:26:4b:75:
2b:09:4e:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVy6DBFlIto6Yg1T/MREuaHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NWViYTVjMWE4MGY4NmE0NTg5Mjc4ZWRkOTMwNGIzZjUx
NjlmODMwHhcNMjMwMTAyMTQzNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGU2MjgxZjFhODYxYzA2ZWExYzkzYTA1YmViYmY5NGM1NmJiNDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTZyJ7T8OVcAd5NrGL9yY18peO20
wCBwG4QpVNhCPodaXQR18N+/oobmrNvgmCwhZm4soTXTtLglnYjRjn2zj0xTNosp
SyIOkp3iyx3kqg++sKnwb65FvwYjCeA+oyFYm6zbNIlpAtddZr5bGTWhTpcrgyGo
QDTw3+TJPxGglhxq+RpgCTXqQ/MUoaoVNagthU6aM0DDOFSQBjtvnktoeK4dnOAD
KecgCaYd2zwXtwOF8XLCV8Q1wiDlf2JcfOCptJoQm1AwD58RLzfYG3fw6cP7fHW8
60pZuKhVze11cLCWI8ipso71CXBZy+dI1WZobvMePlwbriIGR9qco2/YLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBTmKB8ahhwG6hyToFvrv5TFa7SRMB8GA1UdIwQY
MBaAFEZeulwagPhqRYknjt2TBLP1Fp+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQt
NWM0NzZlMzMyNWY1LzEvRk9Zb0h4cUdIQWJxSEpPZ1ctdV9sTVZydEpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQtNWM0NzZlMzMyNWY1
LzEvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVtAMA0G
CSqGSIb3DQEBCwUAA4IBAQBe/qit3Fj0hQdPwx2JszHTCQkv0LxPHQGah0UTcT4U
/U/9MzPpk3QJBKAQBJ0URZqr9Vc5CHJ7HafvvEcTo7o1cYKsCG30BZG9K6dDrLS4
JZcVff+CzzEZZHKpbm7RLBRT7C3kK9CgftD2k4+1ZNHgucZI55MRudIOH2Lh2S09
cuj+/2e2sHc/9R5+mtr6BmZnNNdVUOFuQZMQkRHMrpGmG3dR7AorhKv3GfErLM4x
KKk2M4z2DSgHBXV2ztF3jjBRvvsWqOyNI0doP5XfSh52lYO8Nia6giVbkRTmLmjn
jXzz4gw2xHSZNNzqf/Nhee5ZzK88tjzo5MwmS3UrCU4N
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:10 2024 by rpki-client on console-fra.rpki-client.org