Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/RHd-cvY_z8kP6Miga_LTuKwe3us.roa
File: RHd-cvY_z8kP6Miga_LTuKwe3us.roa (raw, json)
Hash identifier: o0HmI7nSqdHsRw3q6S5iKmw0HZuDM/XwKJ97TNkqfp8=
Subject key identifier: 44:77:7E:72:F6:3F:CF:C9:0F:E8:C8:A0:6B:F2:D3:B8:AC:1E:DE:EB
Certificate issuer: /CN=c8d02a9a3a3338ae63d484ef3006b8ad6eafaa1a
Certificate serial: 0185703970580D0FC27EFD913F4FD28D38AD
Authority key identifier: C8:D0:2A:9A:3A:33:38:AE:63:D4:84:EF:30:06:B8:AD:6E:AF:AA:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNAqmjozOK5j1ITvMAa4rW6vqho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/RHd-cvY_z8kP6Miga_LTuKwe3us.roa
Signing time: Mon 02 Jan 2023 02:04:50 +0000
ROA not before: Mon 02 Jan 2023 02:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202754
IP address blocks: 45.84.48.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:70:58:0d:0f:c2:7e:fd:91:3f:4f:d2:8d:38:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d02a9a3a3338ae63d484ef3006b8ad6eafaa1a
Validity
Not Before: Jan 2 02:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=44777e72f63fcfc90fe8c8a06bf2d3b8ac1edeeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:72:e9:db:74:72:48:52:86:92:8c:3b:7a:
26:b3:a0:66:1f:eb:88:c2:bf:6f:c4:86:c1:8a:c6:
7f:61:e1:20:de:80:f7:9a:ff:a9:a9:f2:db:49:f1:
9e:af:7b:b2:37:a0:fc:ff:54:51:53:a3:c2:66:9e:
d7:f6:9b:b0:0e:9c:49:8c:4a:81:39:96:4a:cb:af:
79:0e:86:3d:1a:18:70:95:c4:e4:dd:52:92:53:b1:
5c:9a:04:c5:49:b2:fc:13:5d:9d:4b:de:1f:e4:34:
60:27:69:55:cb:03:96:d8:55:2e:06:06:05:92:11:
13:9a:f4:dd:4e:c5:a7:c2:fb:46:84:82:3f:7f:6f:
5a:df:49:62:91:88:72:60:c9:5d:ca:3b:bd:00:3d:
f9:83:eb:2b:84:19:ed:f9:d3:6f:cd:c0:89:46:cd:
7c:6b:69:b0:47:f1:7f:69:1d:f8:60:06:8b:c0:f5:
20:52:4a:70:ba:24:c0:e4:1d:91:10:9f:79:52:82:
e7:81:21:57:f3:6f:2a:0a:51:c1:89:90:25:75:1d:
2d:a8:16:51:31:43:35:f6:8b:15:4b:c2:71:10:eb:
8c:6f:b4:9d:1a:8b:b0:5a:2d:6c:d4:c3:98:cf:ac:
60:5b:f7:ed:2f:81:9e:68:61:00:40:6b:1b:2b:68:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:77:7E:72:F6:3F:CF:C9:0F:E8:C8:A0:6B:F2:D3:B8:AC:1E:DE:EB
X509v3 Authority Key Identifier:
keyid:C8:D0:2A:9A:3A:33:38:AE:63:D4:84:EF:30:06:B8:AD:6E:AF:AA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNAqmjozOK5j1ITvMAa4rW6vqho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/RHd-cvY_z8kP6Miga_LTuKwe3us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/yNAqmjozOK5j1ITvMAa4rW6vqho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.48.0/22
Signature Algorithm: sha256WithRSAEncryption
0b:4c:be:d8:98:28:9e:f7:76:b1:b1:8c:98:79:8f:0c:b8:8b:
e7:35:95:91:c3:32:db:73:84:9a:be:3c:dd:61:cb:77:8d:57:
51:e1:73:42:21:db:4d:91:bd:51:9b:19:67:46:9a:0c:16:73:
78:01:5b:fd:15:c9:d6:ea:e0:b5:5c:52:17:3a:f5:1e:87:8b:
0e:75:93:49:34:4f:90:4d:9a:3d:f4:4a:0b:9b:7e:29:34:a2:
57:c0:be:e0:a0:bd:c8:48:e9:cc:1e:da:10:c4:5c:13:53:c2:
53:e0:aa:36:5d:c2:02:37:0d:a7:bd:e4:29:46:c5:5b:a9:30:
c8:25:a9:96:82:aa:6d:f5:b1:47:f7:f1:d4:89:d9:fc:00:12:
22:c0:70:ed:e6:1e:88:d0:bb:68:ba:0d:3c:cd:f5:f9:9a:48:
bd:97:80:b0:d0:fd:83:aa:e9:e5:56:21:8f:b5:8b:87:c2:87:
c6:a5:d6:b2:b9:3a:b1:3a:f1:db:9b:8f:ce:82:a6:4f:15:ba:
4a:78:75:3a:98:6a:b0:43:d2:18:f5:84:73:bd:d3:b6:4c:8e:
80:dc:55:a2:a6:68:71:2f:0c:f0:0f:bd:6e:25:e1:28:03:29:
5e:4d:88:34:7d:7d:82:80:fd:0b:b8:69:db:57:51:bc:a4:92:
54:39:ee:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwOXBYDQ/Cfv2RP0/SjTitMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4ZDAyYTlhM2EzMzM4YWU2M2Q0ODRlZjMwMDZiOGFkNmVh
ZmFhMWEwHhcNMjMwMTAyMDIwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDc3N2U3MmY2M2ZjZmM5MGZlOGM4YTA2YmYyZDNiOGFjMWVkZWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCJy6dt0ckhShpKMO3oms6BmH+uI
wr9vxIbBisZ/YeEg3oD3mv+pqfLbSfGer3uyN6D8/1RRU6PCZp7X9puwDpxJjEqB
OZZKy695DoY9GhhwlcTk3VKSU7FcmgTFSbL8E12dS94f5DRgJ2lVywOW2FUuBgYF
khETmvTdTsWnwvtGhII/f29a30likYhyYMldyju9AD35g+srhBnt+dNvzcCJRs18
a2mwR/F/aR34YAaLwPUgUkpwuiTA5B2REJ95UoLngSFX828qClHBiZAldR0tqBZR
MUM19osVS8JxEOuMb7SdGouwWi1s1MOYz6xgW/ftL4GeaGEAQGsbK2idqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFER3fnL2P8/JD+jIoGvy07isHt7rMB8GA1UdIwQY
MBaAFMjQKpo6MziuY9SE7zAGuK1ur6oaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveU5BcW1qb3pPSzVqMUlUdk1BYTRyVzZ2cWhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy81MTUxYzUtZmFhNC00NWVmLWIyMzgt
YjY5Y2RiNGVmZDgyLzEvUkhkLWN2WV96OGtQNk1pZ2FfTFR1S3dlM3VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy81MTUxYzUtZmFhNC00NWVmLWIyMzgtYjY5Y2RiNGVmZDgy
LzEveU5BcW1qb3pPSzVqMUlUdk1BYTRyVzZ2cWhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVQwMA0G
CSqGSIb3DQEBCwUAA4IBAQALTL7YmCie93axsYyYeY8MuIvnNZWRwzLbc4Savjzd
Yct3jVdR4XNCIdtNkb1RmxlnRpoMFnN4AVv9FcnW6uC1XFIXOvUeh4sOdZNJNE+Q
TZo99EoLm34pNKJXwL7goL3ISOnMHtoQxFwTU8JT4Ko2XcICNw2nveQpRsVbqTDI
JamWgqpt9bFH9/HUidn8ABIiwHDt5h6I0Ltoug08zfX5mki9l4Cw0P2DqunlViGP
tYuHwofGpdayuTqxOvHbm4/OgqZPFbpKeHU6mGqwQ9IY9YRzvdO2TI6A3FWipmhx
LwzwD71uJeEoAyleTYg0fX2CgP0LuGnbV1G8pJJUOe7K
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:08 2024 by rpki-client on console-fra.rpki-client.org