Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/gSJIikfqaZ55yCyycirj5FsvfPk.roa
File: gSJIikfqaZ55yCyycirj5FsvfPk.roa (raw, json)
Hash identifier: zJle1VCso/bVs2UYLeGdiIjjHm9nMTYlRbmjLZnvCG0=
Subject key identifier: 81:22:48:8A:47:EA:69:9E:79:C8:2C:B2:72:2A:E3:E4:5B:2F:7C:F9
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 019024D8EC6D632601624B555B24352BFC40
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/gSJIikfqaZ55yCyycirj5FsvfPk.roa
Signing time: Mon 17 Jun 2024 06:18:34 +0000
ROA not before: Mon 17 Jun 2024 06:18:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.149.94.0/24 maxlen: 24
80.246.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jun 2024 18:54:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:24:d8:ec:6d:63:26:01:62:4b:55:5b:24:35:2b:fc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Jun 17 06:18:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8122488a47ea699e79c82cb2722ae3e45b2f7cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:90:dd:2f:d4:f2:a7:ae:0c:00:81:11:ba:a5:
60:31:b4:f2:ed:02:21:8e:61:aa:e4:b2:94:fd:c1:
ee:2f:66:eb:b5:2b:bd:47:48:ce:f6:78:e5:7b:05:
5b:34:65:95:d8:08:f7:fb:cb:5e:91:38:e6:11:f1:
b1:b6:d9:60:a5:3e:de:a8:36:be:d9:1d:ff:24:c3:
45:43:b9:db:db:82:c1:90:ba:77:6c:0a:71:2b:91:
05:64:2a:ea:a1:9c:b2:da:d5:71:dc:72:e0:05:53:
ad:7a:9d:6b:df:74:99:05:9b:fd:3b:2f:0c:cb:86:
0f:df:9e:70:31:f9:7a:3d:e2:49:40:51:4a:70:06:
34:99:ff:27:4d:bc:42:dc:8e:b0:06:f0:99:77:61:
bf:f3:35:e5:72:88:f8:84:bd:b4:4b:41:31:25:de:
bd:9e:b3:4d:a2:da:13:fb:04:a5:0a:cc:be:00:cb:
88:b2:33:99:c6:04:0e:62:3c:eb:26:ee:72:ce:91:
ab:4c:0e:90:84:4a:60:33:d3:32:ff:d8:62:ad:54:
fa:f2:5e:f2:e1:ab:0d:d6:0c:e8:11:1b:88:d2:e3:
7a:6b:4d:8f:43:28:73:5e:e8:e6:96:8b:a9:0e:83:
f5:27:42:5f:9e:6b:a9:95:1e:e1:5d:e0:d0:dd:f4:
e8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:22:48:8A:47:EA:69:9E:79:C8:2C:B2:72:2A:E3:E4:5B:2F:7C:F9
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/gSJIikfqaZ55yCyycirj5FsvfPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.94.0/24
80.246.230.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d3:b6:cc:9d:0c:9d:fe:4a:ba:80:f8:58:f0:df:16:e5:03:
c8:40:f7:09:66:1a:d6:c0:55:85:73:ee:9b:48:80:14:a5:02:
ca:4e:9f:eb:97:cc:c9:5e:ca:5e:3f:82:e1:04:c7:4f:a4:40:
3c:12:4a:0a:4c:2a:34:7b:08:95:50:22:95:bc:1b:72:74:cc:
6e:13:fa:09:73:7e:d4:70:9d:3a:73:bd:be:2d:55:eb:6e:d9:
f9:84:d5:4f:31:0f:ad:a0:e3:84:81:af:f5:0b:bf:2e:10:e9:
f1:90:1b:d2:5f:ae:78:35:ae:f0:fe:d6:0e:18:32:6b:6f:dc:
8d:f3:7d:c5:18:d9:73:5e:4d:e1:bf:0b:e9:c8:cd:f5:c3:7c:
f3:82:7b:f9:1c:26:80:09:de:8f:5b:49:98:37:ed:e8:55:f5:
c5:a1:81:22:ad:03:47:5c:67:73:fe:97:0f:e9:bc:9d:2b:18:
f8:6a:e5:70:c5:0b:3d:7c:37:f7:63:04:28:b7:f2:74:86:d2:
5a:b9:b8:61:1c:59:7f:c9:01:8d:a3:21:00:cc:56:ee:34:2a:
5c:fc:3a:23:70:ec:70:09:11:e7:7a:d6:65:9b:99:99:aa:04:
0d:4d:70:9f:93:bb:1b:ba:c1:d8:39:a2:2d:74:8a:06:40:47:
5d:9b:9e:1e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZAk2OxtYyYBYktVWyQ1K/xAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjQwNjE3MDYxODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MTIyNDg4YTQ3ZWE2OTllNzljODJjYjI3MjJhZTNlNDViMmY3Y2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJDdL9Typ64MAIERuqVgMbTy7QIh
jmGq5LKU/cHuL2brtSu9R0jO9njlewVbNGWV2Aj3+8tekTjmEfGxttlgpT7eqDa+
2R3/JMNFQ7nb24LBkLp3bApxK5EFZCrqoZyy2tVx3HLgBVOtep1r33SZBZv9Oy8M
y4YP355wMfl6PeJJQFFKcAY0mf8nTbxC3I6wBvCZd2G/8zXlcoj4hL20S0ExJd69
nrNNotoT+wSlCsy+AMuIsjOZxgQOYjzrJu5yzpGrTA6QhEpgM9My/9hirVT68l7y
4asN1gzoERuI0uN6a02PQyhzXujmloupDoP1J0JfnmuplR7hXeDQ3fToUQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIEiSIpH6mmeecgssnIq4+RbL3z5MB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvZ1NKSWlrZnFhWjU1eUN5eWNpcmo1RnN2ZlBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZVeAwQA
UPbmMA0GCSqGSIb3DQEBCwUAA4IBAQAo07bMnQyd/kq6gPhY8N8W5QPIQPcJZhrW
wFWFc+6bSIAUpQLKTp/rl8zJXspeP4LhBMdPpEA8EkoKTCo0ewiVUCKVvBtydMxu
E/oJc37UcJ06c72+LVXrbtn5hNVPMQ+toOOEga/1C78uEOnxkBvSX654Na7w/tYO
GDJrb9yN833FGNlzXk3hvwvpyM31w3zzgnv5HCaACd6PW0mYN+3oVfXFoYEirQNH
XGdz/pcP6bydKxj4auVwxQs9fDf3YwQot/J0htJaubhhHFl/yQGNoyEAzFbuNCpc
/DojcOxwCRHnetZlm5mZqgQNTXCfk7sbusHYOaItdIoGQEddm54e
-----END CERTIFICATE-----
Generated at Tue Jun 18 22:10:16 2024 by rpki-client on console-fra.rpki-client.org