Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/8Ha2jnoYNESZVbdrpLJ0JnUV2sQ.roa
File: 8Ha2jnoYNESZVbdrpLJ0JnUV2sQ.roa (raw, json)
Hash identifier: q0Y0dOdEknoTkEJPPTSN3z192fKlgC8rMg4fvJ3FNOc=
Subject key identifier: F0:76:B6:8E:7A:18:34:44:99:55:B7:6B:A4:B2:74:26:75:15:DA:C4
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018BAA73F64ED2A8F66E68846C09A7C88D14
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/8Ha2jnoYNESZVbdrpLJ0JnUV2sQ.roa
Signing time: Tue 07 Nov 2023 15:43:28 +0000
ROA not before: Tue 07 Nov 2023 15:43:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60647
IP address blocks: 45.67.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Dec 2023 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:aa:73:f6:4e:d2:a8:f6:6e:68:84:6c:09:a7:c8:8d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Nov 7 15:43:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f076b68e7a1834449955b76ba4b274267515dac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:11:4f:4c:5f:9c:60:ed:34:ea:de:31:2c:01:
cb:2c:23:4e:26:51:16:cb:77:57:8c:7f:cd:9c:28:
60:df:b5:56:27:9e:47:d1:7e:aa:6f:3e:b2:c3:4e:
f8:4f:b5:71:81:b5:1a:48:9b:ac:60:ee:69:f0:a6:
fc:c6:10:97:4f:9c:c1:1c:44:29:10:23:fc:bc:b9:
53:44:4b:e5:65:c6:71:85:ea:ba:4f:8a:c4:d4:7e:
31:97:b8:3c:08:cb:62:02:4b:e1:6d:a7:95:e8:95:
ba:e2:35:f7:4b:75:ba:22:5c:f3:2c:30:0a:cd:ef:
c3:ea:35:37:32:8d:45:34:b4:92:00:0b:41:0a:df:
cc:b6:2d:7a:26:e5:ae:a0:56:98:70:d2:10:d2:8a:
14:76:12:db:1e:b8:a4:89:f7:42:98:8c:05:09:6c:
ca:72:db:7b:0b:ee:2e:66:a2:c6:1b:e4:9a:28:bc:
fe:e6:46:98:1a:4b:56:0f:5b:6c:a4:f5:bf:11:8b:
d2:98:6d:37:f6:2e:bc:a7:e6:8e:e3:7a:ac:9c:e4:
b0:41:b1:3e:9a:e2:9d:90:5e:22:e5:e7:0e:97:5b:
cc:c8:5c:c1:71:41:ec:82:2d:db:34:86:0a:7d:0e:
74:33:c8:61:5c:56:61:96:f4:c5:3f:90:10:ca:01:
54:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:76:B6:8E:7A:18:34:44:99:55:B7:6B:A4:B2:74:26:75:15:DA:C4
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/8Ha2jnoYNESZVbdrpLJ0JnUV2sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.202.0/24
Signature Algorithm: sha256WithRSAEncryption
06:cf:3e:2d:65:29:3b:45:7b:36:fd:46:07:44:7b:cf:63:2d:
ec:41:b2:7e:de:d8:82:15:b7:90:b1:a7:fb:f7:84:6e:4a:48:
b9:25:e8:f4:d6:bd:4e:48:17:16:98:eb:d7:76:6d:74:23:5f:
82:9e:71:72:53:0b:75:55:54:3b:d5:7f:77:79:5d:6d:55:c7:
50:22:39:fe:53:c9:b7:ae:2f:d6:1e:08:cb:fb:d3:89:08:2b:
dc:cd:1a:b9:74:19:8b:04:f5:63:01:81:80:81:b7:fa:56:c5:
01:96:2e:58:ae:8e:f8:e7:be:43:ae:db:9c:cb:fc:cf:a7:e6:
06:1f:6b:44:97:3f:7c:a3:a7:f5:df:9a:c4:a5:d3:40:df:a7:
cd:33:3e:66:d1:30:8c:13:0f:a2:bf:23:38:b5:12:f9:a1:90:
0b:f1:33:4a:22:76:83:3f:4f:3f:94:21:8d:a6:93:e9:50:4c:
a4:c1:c8:0e:9f:19:76:a8:87:c0:02:00:82:bd:a1:9b:5e:b6:
b0:1b:c2:0a:2e:74:c2:e5:8c:5d:91:b7:c7:7f:75:61:06:4e:
4d:d1:e0:a6:4d:a6:ec:e6:e6:9d:32:e5:27:ca:99:8b:8b:57:
16:fb:0d:c0:81:46:ed:11:f4:0c:99:65:ab:86:7c:24:30:74:
29:97:73:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuqc/ZO0qj2bmiEbAmnyI0UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjMxMTA3MTU0MzI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDc2YjY4ZTdhMTgzNDQ0OTk1NWI3NmJhNGIyNzQyNjc1MTVkYWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihFPTF+cYO006t4xLAHLLCNOJlEW
y3dXjH/NnChg37VWJ55H0X6qbz6yw074T7VxgbUaSJusYO5p8Kb8xhCXT5zBHEQp
ECP8vLlTREvlZcZxheq6T4rE1H4xl7g8CMtiAkvhbaeV6JW64jX3S3W6IlzzLDAK
ze/D6jU3Mo1FNLSSAAtBCt/Mti16JuWuoFaYcNIQ0ooUdhLbHrikifdCmIwFCWzK
ctt7C+4uZqLGG+SaKLz+5kaYGktWD1tspPW/EYvSmG039i68p+aO43qsnOSwQbE+
muKdkF4i5ecOl1vMyFzBcUHsgi3bNIYKfQ50M8hhXFZhlvTFP5AQygFUDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPB2to56GDREmVW3a6SydCZ1FdrEMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvOEhhMmpub1lORVNaVmJkcnBMSjBKblVWMnNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUPKMA0G
CSqGSIb3DQEBCwUAA4IBAQAGzz4tZSk7RXs2/UYHRHvPYy3sQbJ+3tiCFbeQsaf7
94RuSki5Jej01r1OSBcWmOvXdm10I1+CnnFyUwt1VVQ71X93eV1tVcdQIjn+U8m3
ri/WHgjL+9OJCCvczRq5dBmLBPVjAYGAgbf6VsUBli5Yro74575Drtucy/zPp+YG
H2tElz98o6f135rEpdNA36fNMz5m0TCMEw+ivyM4tRL5oZAL8TNKInaDP08/lCGN
ppPpUEykwcgOnxl2qIfAAgCCvaGbXrawG8IKLnTC5YxdkbfHf3VhBk5N0eCmTabs
5uadMuUnypmLi1cW+w3AgUbtEfQMmWWrhnwkMHQpl3Pg
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org