Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/t8zvwSwnFUYFfrXIPNXGFYXdoBc.roa
File: t8zvwSwnFUYFfrXIPNXGFYXdoBc.roa (raw, json)
Hash identifier: eRJsMSHakzSr6CWhn3sTnrFjK1dbc+Ogyn6sD+9qUQE=
Subject key identifier: B7:CC:EF:C1:2C:27:15:46:05:7E:B5:C8:3C:D5:C6:15:85:DD:A0:17
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018570F0ABAB82C5A06A255C38688B503261
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/t8zvwSwnFUYFfrXIPNXGFYXdoBc.roa
Signing time: Mon 02 Jan 2023 05:24:58 +0000
ROA not before: Mon 02 Jan 2023 05:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 45.87.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 02 Jan 2023 09:42:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:ab:ab:82:c5:a0:6a:25:5c:38:68:8b:50:32:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 2 05:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7ccefc12c271546057eb5c83cd5c61585dda017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6e:ea:dd:34:f9:8a:f0:a0:54:02:e5:a2:5c:
e2:9e:e8:74:c0:0d:01:76:2e:a5:3f:a4:2e:92:25:
63:52:f2:1b:65:58:fb:c0:b1:b5:3d:66:e4:51:3c:
e6:d8:7c:dc:8f:3b:6c:6b:41:f7:8d:21:dc:74:36:
9b:9d:6e:c1:52:24:ae:ab:4a:16:aa:3a:13:92:fe:
32:f3:3d:8a:7b:0f:e3:ff:62:97:10:07:6d:1e:59:
1d:e2:5b:51:16:98:ae:13:db:74:53:ca:d6:27:ac:
c1:b6:95:fe:0d:65:e8:c4:bf:e8:9d:72:04:74:56:
c6:82:71:e5:38:79:e5:c3:5a:4f:ad:a0:3e:f6:bf:
3f:f1:50:e6:6e:83:d8:48:dc:06:6b:90:61:49:cf:
ec:1d:b2:a1:da:fa:83:92:d1:df:48:75:40:73:be:
7f:41:41:b3:aa:9e:11:24:f3:50:f9:3e:f7:7b:2f:
15:0e:48:a1:04:43:32:ab:66:24:c4:9d:25:bc:72:
40:54:ac:7f:ac:3b:c9:98:5e:97:cd:79:42:29:e6:
b3:f9:4c:2e:85:a8:de:3b:51:27:ff:74:2f:69:fa:
6a:39:9d:97:c4:da:76:0e:c8:d4:4c:74:81:87:1f:
5f:0e:5b:5d:6e:2b:df:f7:9b:fe:01:a9:c6:c0:76:
7d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CC:EF:C1:2C:27:15:46:05:7E:B5:C8:3C:D5:C6:15:85:DD:A0:17
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/t8zvwSwnFUYFfrXIPNXGFYXdoBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.44.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:c9:ba:14:8d:0a:ac:0c:8b:33:02:cf:a1:ac:a8:77:09:13:
84:c7:59:f5:af:4d:c6:b0:0f:12:96:26:c8:14:24:45:6a:b3:
f7:f1:d9:c6:e5:4d:c9:0c:a8:ec:02:0d:81:03:b4:d2:53:74:
b6:4e:27:02:9b:70:9d:99:cb:8a:a8:7a:e3:64:48:9e:fc:85:
3b:e8:5c:96:a1:98:3f:41:af:fa:f8:a3:04:a1:a9:4f:ab:b1:
8c:8a:0f:65:ff:65:fb:c0:35:13:e8:bb:22:31:94:9e:1f:4b:
6d:dc:24:7b:a7:ec:90:7e:b6:3c:81:fc:a8:5b:7b:cb:cc:8e:
c5:e0:27:69:06:52:e5:55:ca:05:90:90:37:16:08:e8:bb:42:
7c:ab:7a:67:a2:28:79:19:0b:77:c0:b0:35:f7:e3:d8:37:01:
56:f5:54:a3:ec:35:0c:aa:fb:b5:ae:80:9d:df:e8:15:17:57:
b7:c1:a0:e8:17:3b:62:d4:fc:52:6d:04:e4:2b:84:95:d3:7a:
b4:a2:ee:be:28:90:63:05:bf:f8:0e:56:a5:6f:6e:8b:c6:59:
dd:48:74:f3:30:41:5e:66:a0:c3:33:ed:58:e6:8e:c7:10:1b:
37:fc:a8:d5:ea:81:b2:e1:24:5b:57:41:fb:89:65:21:a2:01:
c7:53:3c:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw8KurgsWgaiVcOGiLUDJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjMwMTAyMDUyNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2NjZWZjMTJjMjcxNTQ2MDU3ZWI1YzgzY2Q1YzYxNTg1ZGRhMDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW7q3TT5ivCgVALlolzinuh0wA0B
di6lP6QukiVjUvIbZVj7wLG1PWbkUTzm2Hzcjztsa0H3jSHcdDabnW7BUiSuq0oW
qjoTkv4y8z2Kew/j/2KXEAdtHlkd4ltRFpiuE9t0U8rWJ6zBtpX+DWXoxL/onXIE
dFbGgnHlOHnlw1pPraA+9r8/8VDmboPYSNwGa5BhSc/sHbKh2vqDktHfSHVAc75/
QUGzqp4RJPNQ+T73ey8VDkihBEMyq2YkxJ0lvHJAVKx/rDvJmF6XzXlCKeaz+Uwu
hajeO1En/3QvafpqOZ2XxNp2DsjUTHSBhx9fDltdbivf95v+AanGwHZ9CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLfM78EsJxVGBX61yDzVxhWF3aAXMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvdDh6dndTd25GVVlGZnJYSVBOWEdGWVhkb0JjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVcsMA0G
CSqGSIb3DQEBCwUAA4IBAQAsyboUjQqsDIszAs+hrKh3CROEx1n1r03GsA8SlibI
FCRFarP38dnG5U3JDKjsAg2BA7TSU3S2TicCm3CdmcuKqHrjZEie/IU76FyWoZg/
Qa/6+KMEoalPq7GMig9l/2X7wDUT6LsiMZSeH0tt3CR7p+yQfrY8gfyoW3vLzI7F
4CdpBlLlVcoFkJA3Fgjou0J8q3pnoih5GQt3wLA19+PYNwFW9VSj7DUMqvu1roCd
3+gVF1e3waDoFzti1PxSbQTkK4SV03q0ou6+KJBjBb/4Dlalb26LxlndSHTzMEFe
ZqDDM+1Y5o7HEBs3/KjV6oGy4SRbV0H7iWUhogHHUzxl
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org