Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/CStr1_3Ro1npZzoPBeTLnhWkNi8.roa
File: CStr1_3Ro1npZzoPBeTLnhWkNi8.roa (raw, json)
Hash identifier: ++ouIa1boQMvN09aQ9miEAmnN6vJMNbuA5EufIbQfK8=
Subject key identifier: 09:2B:6B:D7:FD:D1:A3:59:E9:67:3A:0F:05:E4:CB:9E:15:A4:36:2F
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018A237898818B458DB3AF0D7ED12F4E32E2
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/CStr1_3Ro1npZzoPBeTLnhWkNi8.roa
Signing time: Wed 23 Aug 2023 17:37:00 +0000
ROA not before: Wed 23 Aug 2023 17:37:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 45.67.202.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Sep 2023 11:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:23:78:98:81:8b:45:8d:b3:af:0d:7e:d1:2f:4e:32:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Aug 23 17:37:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=092b6bd7fdd1a359e9673a0f05e4cb9e15a4362f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fd:82:e5:2f:cd:72:5c:9d:09:fe:00:4a:1a:
42:12:06:75:6f:eb:a9:f4:e8:25:ff:3c:c6:98:23:
e4:77:60:dd:50:d9:59:69:19:0f:e2:eb:96:b1:51:
fb:91:7f:c0:e8:82:5b:bb:90:08:61:be:27:23:7d:
00:ce:90:92:1f:e0:2a:69:67:2d:c8:fd:4a:9b:b8:
b2:7f:47:2a:be:85:19:93:6e:06:9c:a1:8c:61:da:
0c:1d:e9:52:cf:08:1f:62:f3:8e:28:c7:e4:97:a6:
a6:fb:6a:88:9c:a9:30:cd:8a:51:c9:90:89:b2:d2:
91:32:56:04:eb:ba:b4:78:6a:a9:b4:4a:85:14:a0:
7f:60:7c:d7:11:3d:8a:60:b4:18:6e:e3:73:49:a6:
d4:14:04:3f:bd:94:53:be:8f:2b:db:88:d5:9f:17:
84:91:f4:6c:ab:dd:31:3a:13:f9:95:7a:ec:c2:68:
4e:df:65:fa:f0:dc:fa:53:d3:8e:40:b2:ae:d3:1c:
76:b3:8c:8b:9c:67:63:c2:6d:b1:cd:15:7c:5e:2e:
aa:08:63:60:55:35:2e:03:8e:a3:21:10:a0:d1:93:
1b:e1:bb:25:6b:e1:00:57:ed:22:ef:25:51:76:c8:
56:8d:4c:b3:4d:37:b1:70:60:82:3a:a2:3b:3d:c6:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2B:6B:D7:FD:D1:A3:59:E9:67:3A:0F:05:E4:CB:9E:15:A4:36:2F
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/CStr1_3Ro1npZzoPBeTLnhWkNi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.202.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:c5:83:00:4a:91:93:f7:57:36:49:c9:22:2c:ec:f9:2d:4e:
0e:72:7a:15:4e:27:61:41:30:e8:4f:70:84:ff:16:eb:57:22:
e0:3c:d7:3f:01:4b:e5:78:ca:dc:60:73:32:33:87:ac:5d:72:
22:ce:15:ca:47:aa:37:07:b0:08:1f:1b:91:c4:aa:12:71:00:
c1:8e:19:48:65:54:d8:b2:b1:81:63:b9:e0:66:e8:9b:0f:02:
76:6a:39:cb:20:77:8a:51:f4:58:10:b6:71:72:3e:44:6c:69:
8f:35:25:98:87:8a:fe:1f:cb:0d:48:45:a6:4d:20:d9:7a:b4:
a9:16:df:97:a7:00:ce:75:16:9f:15:b0:2e:b7:35:7f:d1:13:
63:09:91:ab:65:39:a2:49:e7:54:61:ba:11:31:cc:a4:fa:09:
7d:fd:de:0a:f9:44:65:3e:56:bb:08:d2:57:06:f8:c4:2c:1a:
10:f1:31:e9:a7:e8:59:7a:59:1c:ff:79:14:05:c6:3b:93:a0:
95:59:06:a9:a9:d3:72:c0:42:5f:66:64:e0:16:98:a9:a0:80:
d3:b2:17:79:be:95:cf:f7:1d:a3:d5:8b:d8:1c:ab:02:ee:45:
7d:fd:a8:2d:2b:e8:01:c5:e9:c0:4b:8d:4b:11:f7:b0:3d:11:
f0:2c:c0:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYojeJiBi0WNs68NftEvTjLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjMwODIzMTczNzAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTJiNmJkN2ZkZDFhMzU5ZTk2NzNhMGYwNWU0Y2I5ZTE1YTQzNjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/2C5S/NclydCf4AShpCEgZ1b+up
9Ogl/zzGmCPkd2DdUNlZaRkP4uuWsVH7kX/A6IJbu5AIYb4nI30AzpCSH+AqaWct
yP1Km7iyf0cqvoUZk24GnKGMYdoMHelSzwgfYvOOKMfkl6am+2qInKkwzYpRyZCJ
stKRMlYE67q0eGqptEqFFKB/YHzXET2KYLQYbuNzSabUFAQ/vZRTvo8r24jVnxeE
kfRsq90xOhP5lXrswmhO32X68Nz6U9OOQLKu0xx2s4yLnGdjwm2xzRV8Xi6qCGNg
VTUuA46jIRCg0ZMb4bsla+EAV+0i7yVRdshWjUyzTTexcGCCOqI7PcZKwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAkra9f90aNZ6Wc6DwXky54VpDYvMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvQ1N0cjFfM1JvMW5wWnpvUEJlVExuaFdrTmk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLUPKMA0G
CSqGSIb3DQEBCwUAA4IBAQAuxYMASpGT91c2SckiLOz5LU4OcnoVTidhQTDoT3CE
/xbrVyLgPNc/AUvleMrcYHMyM4esXXIizhXKR6o3B7AIHxuRxKoScQDBjhlIZVTY
srGBY7ngZuibDwJ2ajnLIHeKUfRYELZxcj5EbGmPNSWYh4r+H8sNSEWmTSDZerSp
Ft+XpwDOdRafFbAutzV/0RNjCZGrZTmiSedUYboRMcyk+gl9/d4K+URlPla7CNJX
BvjELBoQ8THpp+hZelkc/3kUBcY7k6CVWQapqdNywEJfZmTgFpipoIDTshd5vpXP
9x2j1YvYHKsC7kV9/agtK+gBxenAS41LEfewPRHwLMCt
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org