Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/2WJvHqMVuW6g_RjPdz9Gud_eyYk.roa
File: 2WJvHqMVuW6g_RjPdz9Gud_eyYk.roa (raw, json)
Hash identifier: VkrDFfJz5yMNmAiotAI3lqOFahmXchz89MOi5PGSxeI=
Subject key identifier: D9:62:6F:1E:A3:15:B9:6E:A0:FD:18:CF:77:3F:46:B9:DF:DE:C9:89
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F798C9B567875515D259994A43A0C7A
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/2WJvHqMVuW6g_RjPdz9Gud_eyYk.roa
Signing time: Sun 01 Jan 2023 22:35:14 +0000
ROA not before: Sun 01 Jan 2023 22:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61272
IP address blocks: 45.132.194.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:8c:9b:56:78:75:51:5d:25:99:94:a4:3a:0c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9626f1ea315b96ea0fd18cf773f46b9dfdec989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0d:81:07:ea:f6:64:9f:50:a0:72:1c:67:82:
b4:38:c5:81:65:65:4a:ae:c1:94:7b:c0:bd:67:63:
3e:b1:5c:b1:47:bc:77:b9:36:f8:21:57:e8:6f:ce:
e2:a4:0c:5d:6a:1b:7b:68:87:bb:fa:3f:18:74:01:
99:d5:64:ce:4a:f6:24:d2:01:5d:44:65:ce:e6:8a:
a5:a7:8a:40:bb:ec:e4:5f:d7:39:37:92:3c:b3:e1:
c1:5b:0f:20:65:2a:79:f0:a0:85:64:4f:86:25:3c:
13:48:40:a7:6e:96:d1:9e:f2:c9:73:cd:2f:a6:c0:
92:f2:ec:2c:89:67:30:cb:99:8e:59:70:bc:7f:94:
fc:f1:c7:66:f0:29:92:71:33:ec:fc:0a:de:ca:e3:
b0:7e:ae:2a:4a:7c:25:96:e7:4e:ec:ea:e4:1d:0e:
7e:e7:26:57:a5:ee:37:30:2c:37:b5:10:a1:c1:d5:
fa:5d:c8:15:b7:6a:b2:19:28:ed:8c:b8:45:8e:63:
aa:38:80:5b:1e:b2:16:e5:6c:91:64:60:89:c8:19:
c9:74:5d:32:85:c5:07:73:97:16:07:0a:c7:28:c2:
82:01:04:2b:70:68:66:7b:d2:d6:85:0b:1e:96:e4:
a0:da:40:8a:12:4b:49:a0:7a:54:14:20:69:d4:c4:
61:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:62:6F:1E:A3:15:B9:6E:A0:FD:18:CF:77:3F:46:B9:DF:DE:C9:89
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/2WJvHqMVuW6g_RjPdz9Gud_eyYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.194.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:7b:fc:0e:de:fd:99:f3:63:a9:09:e2:ca:7a:6c:4f:d8:4c:
89:ec:bc:63:2b:51:2f:1c:9e:fa:f3:95:a7:e8:72:17:16:37:
c5:52:80:df:9b:65:04:4c:b6:8b:24:d2:54:40:a2:1e:d7:a5:
3b:0e:ca:f4:92:35:30:f0:27:8d:46:1a:15:72:29:31:35:3e:
dd:74:bb:b7:31:7a:45:ba:84:b5:c3:69:3d:f8:da:2a:4e:06:
d5:ad:9b:8f:08:33:1e:06:a9:18:d6:af:03:a6:50:4a:6c:b9:
07:0f:a7:07:ac:6f:01:30:5e:e3:1d:88:4c:a5:9c:ce:a2:6a:
14:1e:32:8c:0b:86:e8:ab:3b:5e:5d:0a:93:5b:eb:9b:c6:27:
69:7a:f0:a5:a3:6b:b4:40:e6:36:2b:88:00:fb:c6:3b:ab:a8:
27:fe:bf:42:f6:d7:14:a4:60:3a:bd:9f:d2:ca:22:dc:76:a7:
76:ff:02:61:5f:94:d8:b3:df:6a:68:cc:40:7d:a0:db:10:e9:
15:2b:25:e5:bb:6d:11:25:78:9a:7c:a0:a9:a1:4c:15:92:b6:
50:5a:49:cd:a8:48:b1:a2:13:6c:ba:b1:14:88:e4:db:18:8c:
82:fc:2f:11:85:bf:34:3c:96:4a:bd:c9:8c:ab:08:66:17:22:
1f:a1:c7:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVveYybVnh1UV0lmZSkOgx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwMTAxMjIzNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTYyNmYxZWEzMTViOTZlYTBmZDE4Y2Y3NzNmNDZiOWRmZGVjOTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA2BB+r2ZJ9QoHIcZ4K0OMWBZWVK
rsGUe8C9Z2M+sVyxR7x3uTb4IVfob87ipAxdaht7aIe7+j8YdAGZ1WTOSvYk0gFd
RGXO5oqlp4pAu+zkX9c5N5I8s+HBWw8gZSp58KCFZE+GJTwTSECnbpbRnvLJc80v
psCS8uwsiWcwy5mOWXC8f5T88cdm8CmScTPs/AreyuOwfq4qSnwlludO7OrkHQ5+
5yZXpe43MCw3tRChwdX6XcgVt2qyGSjtjLhFjmOqOIBbHrIW5WyRZGCJyBnJdF0y
hcUHc5cWBwrHKMKCAQQrcGhme9LWhQseluSg2kCKEktJoHpUFCBp1MRhswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNlibx6jFbluoP0Yz3c/Rrnf3smJMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvMldKdkhxTVZ1VzZnX1JqUGR6OUd1ZF9leVlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYTCMA0G
CSqGSIb3DQEBCwUAA4IBAQCre/wO3v2Z82OpCeLKemxP2EyJ7LxjK1EvHJ7685Wn
6HIXFjfFUoDfm2UETLaLJNJUQKIe16U7Dsr0kjUw8CeNRhoVcikxNT7ddLu3MXpF
uoS1w2k9+NoqTgbVrZuPCDMeBqkY1q8DplBKbLkHD6cHrG8BMF7jHYhMpZzOomoU
HjKMC4boqzteXQqTW+ubxidpevClo2u0QOY2K4gA+8Y7q6gn/r9C9tcUpGA6vZ/S
yiLcdqd2/wJhX5TYs99qaMxAfaDbEOkVKyXlu20RJXiafKCpoUwVkrZQWknNqEix
ohNsurEUiOTbGIyC/C8Rhb80PJZKvcmMqwhmFyIfoccC
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org