Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/edqc0i4TCbiU6xzrT4zx7shj_dY.roa
File: edqc0i4TCbiU6xzrT4zx7shj_dY.roa (raw, json)
Hash identifier: L0YSOINO2NlssOZg8O2V8SDRCEB3WoSD0S5zkCa/CLU=
Subject key identifier: 79:DA:9C:D2:2E:13:09:B8:94:EB:1C:EB:4F:8C:F1:EE:C8:63:FD:D6
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018CBEE43CE106634B2541BB7DFFD3D80C74
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/edqc0i4TCbiU6xzrT4zx7shj_dY.roa
Signing time: Sun 31 Dec 2023 08:01:17 +0000
ROA not before: Sun 31 Dec 2023 08:01:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206995
IP address blocks: 45.67.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:13:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:be:e4:3c:e1:06:63:4b:25:41:bb:7d:ff:d3:d8:0c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Dec 31 08:01:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79da9cd22e1309b894eb1ceb4f8cf1eec863fdd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:b9:d5:96:c7:3f:e0:fd:a8:e0:6f:5a:99:
44:f8:71:5a:01:7d:ef:e6:75:f8:e5:36:22:15:c6:
32:37:ec:1e:80:78:f6:b5:4c:09:f3:ef:80:e8:54:
be:45:8c:94:fa:e5:46:bf:0e:a5:15:4e:bb:45:1a:
7c:70:55:83:91:ef:fa:f4:1d:dc:41:e0:03:08:3f:
a5:8c:d6:ae:ed:6e:8e:a3:fa:5c:8a:71:c5:05:98:
d5:bd:80:0d:ef:ca:18:b2:ea:cc:40:eb:bd:6b:f9:
76:3b:54:6c:1a:84:9b:ac:6e:7d:1a:5c:a0:b4:26:
3f:df:57:85:4b:bc:13:6f:ab:3d:f7:02:20:8b:da:
ae:23:10:92:ca:9b:a3:fa:d7:48:8f:58:24:dc:8b:
af:f7:55:3f:31:02:6d:79:ff:f2:96:87:40:cc:34:
3c:b3:cc:f8:e1:d2:84:1d:50:3c:1d:40:f8:f0:5f:
80:12:7e:a8:12:da:51:bb:bc:56:89:46:52:ce:14:
5f:a3:b2:8c:7b:6f:4d:f9:f4:62:e2:d6:f1:6f:78:
4c:58:45:cd:56:4c:d8:98:b9:55:a7:31:13:25:80:
d6:33:11:ee:cc:64:4d:e3:63:91:52:be:ff:a8:d3:
bd:ce:45:c9:60:7b:9e:39:b0:49:ce:e2:91:33:ee:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DA:9C:D2:2E:13:09:B8:94:EB:1C:EB:4F:8C:F1:EE:C8:63:FD:D6
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/edqc0i4TCbiU6xzrT4zx7shj_dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.202.0/24
Signature Algorithm: sha256WithRSAEncryption
18:da:23:84:6a:8a:7d:74:86:db:67:6c:75:8b:5f:e2:8c:d3:
0d:d9:8c:41:88:b6:80:9a:11:d9:68:4a:34:90:06:90:ab:7b:
43:18:94:b6:8a:57:96:a5:cf:93:50:0f:d3:ae:a6:8c:80:e9:
7f:fb:11:c7:42:1c:67:85:9f:e5:95:94:1c:56:90:87:5f:fd:
b0:33:90:f7:43:49:94:2d:13:c5:c9:d2:be:1e:12:ae:cc:ed:
01:6c:4b:20:72:d2:88:66:92:04:2f:9d:ea:d2:df:d3:8c:c6:
25:76:65:fa:79:32:0e:a2:f9:6b:5d:40:69:99:ff:8c:8c:d5:
24:8f:ac:9c:e9:d0:cd:28:61:b1:ba:b9:10:ca:2e:24:aa:de:
ad:80:30:12:0f:22:03:f6:f7:bb:60:52:f9:0a:e7:f0:ff:d5:
78:8c:a4:31:e8:c0:bd:27:78:5d:1b:4d:ef:13:25:38:84:e8:
86:bc:59:16:01:6b:40:a5:18:c5:2e:24:22:fa:dd:8d:34:ac:
0a:b8:9a:c4:81:c0:7c:71:53:77:67:fa:f8:49:f1:24:7a:2e:
64:4e:8e:10:42:95:f6:a3:4d:2b:82:60:9d:e0:c8:e9:13:64:
be:9b:17:9d:90:89:79:b9:11:47:01:18:78:2c:83:f1:cb:ed:
34:a5:73:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYy+5DzhBmNLJUG7ff/T2Ax0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjMxMjMxMDgwMTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWRhOWNkMjJlMTMwOWI4OTRlYjFjZWI0ZjhjZjFlZWM4NjNmZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUq51ZbHP+D9qOBvWplE+HFaAX3v
5nX45TYiFcYyN+wegHj2tUwJ8++A6FS+RYyU+uVGvw6lFU67RRp8cFWDke/69B3c
QeADCD+ljNau7W6Oo/pcinHFBZjVvYAN78oYsurMQOu9a/l2O1RsGoSbrG59Glyg
tCY/31eFS7wTb6s99wIgi9quIxCSypuj+tdIj1gk3Iuv91U/MQJtef/ylodAzDQ8
s8z44dKEHVA8HUD48F+AEn6oEtpRu7xWiUZSzhRfo7KMe29N+fRi4tbxb3hMWEXN
VkzYmLlVpzETJYDWMxHuzGRN42ORUr7/qNO9zkXJYHueObBJzuKRM+6d6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHnanNIuEwm4lOsc60+M8e7IY/3WMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvZWRxYzBpNFRDYmlVNnh6clQ0eng3c2hqX2RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUPKMA0G
CSqGSIb3DQEBCwUAA4IBAQAY2iOEaop9dIbbZ2x1i1/ijNMN2YxBiLaAmhHZaEo0
kAaQq3tDGJS2ileWpc+TUA/TrqaMgOl/+xHHQhxnhZ/llZQcVpCHX/2wM5D3Q0mU
LRPFydK+HhKuzO0BbEsgctKIZpIEL53q0t/TjMYldmX6eTIOovlrXUBpmf+MjNUk
j6yc6dDNKGGxurkQyi4kqt6tgDASDyID9ve7YFL5Cufw/9V4jKQx6MC9J3hdG03v
EyU4hOiGvFkWAWtApRjFLiQi+t2NNKwKuJrEgcB8cVN3Z/r4SfEkei5kTo4QQpX2
o00rgmCd4MjpE2S+mxedkIl5uRFHARh4LIPxy+00pXPX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org