Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/SJjXM1yCBMJlPMR0ocJX7V-Tz1c.roa
File: SJjXM1yCBMJlPMR0ocJX7V-Tz1c.roa (raw, json)
Hash identifier: UWUboe4n0Nu31KaJl5suiCmEvSrn2LtJz7A7xbwkDZ0=
Subject key identifier: 48:98:D7:33:5C:82:04:C2:65:3C:C4:74:A1:C2:57:ED:5F:93:CF:57
Certificate issuer: /CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Certificate serial: 01856F8B6D7B6DA3B87FA1A6A184BA09799C
Authority key identifier: B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/SJjXM1yCBMJlPMR0ocJX7V-Tz1c.roa
Signing time: Sun 01 Jan 2023 22:54:46 +0000
ROA not before: Sun 01 Jan 2023 22:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201401
IP address blocks: 45.157.76.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:6d:7b:6d:a3:b8:7f:a1:a6:a1:84:ba:09:79:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Validity
Not Before: Jan 1 22:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4898d7335c8204c2653cc474a1c257ed5f93cf57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:82:37:aa:be:02:b7:b6:50:e5:ad:50:6b:5c:
10:d2:95:ad:f3:d0:ca:39:ce:d6:6c:e5:d2:ea:ac:
43:ab:41:5a:78:17:45:ca:f7:72:0d:8c:ac:51:de:
95:07:85:8e:56:19:27:95:27:ed:9a:8f:c5:f2:35:
30:d9:3d:c8:90:14:63:94:ea:ad:5c:69:85:c3:6c:
3f:2b:32:ba:44:27:af:e0:b6:cf:a7:fd:b5:e2:fb:
bd:83:a7:78:7d:ef:a4:e5:3f:65:58:50:ab:d5:86:
71:60:5f:f9:f5:b9:39:af:2a:22:cc:40:59:fd:12:
0c:bf:f5:98:51:ef:da:7f:2a:cb:79:07:19:46:b9:
97:fe:8f:ca:de:79:91:11:c9:5a:0a:26:8c:72:c6:
c5:c7:9b:58:d3:14:a6:6c:98:aa:de:36:63:04:da:
35:9b:af:79:59:22:c0:e9:91:3a:3e:9c:8e:9b:50:
c7:20:03:07:e8:87:7e:8f:19:93:5c:4f:4d:86:11:
75:a4:d2:34:26:fd:ea:61:9f:80:52:a9:61:bc:a8:
4c:a8:53:9e:bf:b9:2d:0e:78:01:ea:c7:25:29:db:
62:65:a7:02:91:e1:9d:6b:b1:fe:e1:42:72:e3:a6:
6a:1c:8c:cf:42:96:9f:2e:b9:53:ab:92:64:ab:62:
f7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:98:D7:33:5C:82:04:C2:65:3C:C4:74:A1:C2:57:ED:5F:93:CF:57
X509v3 Authority Key Identifier:
keyid:B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/SJjXM1yCBMJlPMR0ocJX7V-Tz1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.76.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:ad:ea:1a:cc:cb:85:09:f9:df:f8:b6:9a:bf:44:cf:a1:bf:
e5:96:5b:0f:96:91:16:cc:92:98:47:e6:9a:2d:00:ff:97:29:
46:d6:46:1d:f9:8e:2b:6f:df:6c:8e:26:44:f0:4a:f2:1a:25:
99:42:30:b6:9a:44:1f:f1:88:fd:40:4f:46:b1:cc:6e:64:88:
1a:db:bc:11:bd:7c:46:6f:2d:58:be:ee:84:e4:2d:fb:41:5c:
cf:59:e0:a5:0a:60:7d:2d:7a:71:0f:ed:23:24:f9:0c:2f:17:
b9:dc:ef:29:e3:ee:75:18:b5:58:ef:f9:b2:56:f7:ba:e3:6f:
76:23:ba:90:7f:4a:00:88:0e:a2:2d:70:c2:9f:a1:2d:f9:11:
6c:1e:c5:56:b9:e1:d3:ae:e4:2c:db:6a:a6:e1:67:04:fd:82:
bd:d5:86:7d:84:6a:0a:45:eb:bf:52:98:c5:39:d1:79:d0:16:
dc:d7:cb:c8:da:0b:26:cc:b4:1a:6e:67:92:05:60:70:5c:b0:
aa:1e:9b:3b:0f:e9:f5:4e:46:23:25:fb:66:b4:ca:59:75:ae:
de:79:57:50:38:50:38:36:1c:29:c8:7e:42:63:84:1b:d4:f5:
50:c0:63:9b:da:2d:7a:e3:e4:d7:f0:9b:7b:7e:24:bb:89:44:
f4:f3:9f:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvi217baO4f6GmoYS6CXmcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MmRkNjA1NDhiNjdjYzQxZTY3YjZhNjE2YTEyZWM1M2Jm
NDI5NzgwHhcNMjMwMTAxMjI1NDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODk4ZDczMzVjODIwNGMyNjUzY2M0NzRhMWMyNTdlZDVmOTNjZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmII3qr4Ct7ZQ5a1Qa1wQ0pWt89DK
Oc7WbOXS6qxDq0FaeBdFyvdyDYysUd6VB4WOVhknlSftmo/F8jUw2T3IkBRjlOqt
XGmFw2w/KzK6RCev4LbPp/214vu9g6d4fe+k5T9lWFCr1YZxYF/59bk5ryoizEBZ
/RIMv/WYUe/afyrLeQcZRrmX/o/K3nmREclaCiaMcsbFx5tY0xSmbJiq3jZjBNo1
m695WSLA6ZE6PpyOm1DHIAMH6Id+jxmTXE9NhhF1pNI0Jv3qYZ+AUqlhvKhMqFOe
v7ktDngB6sclKdtiZacCkeGda7H+4UJy46ZqHIzPQpafLrlTq5Jkq2L3vQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEiY1zNcggTCZTzEdKHCV+1fk89XMB8GA1UdIwQY
MBaAFLYt1gVItnzEHme2phahLsU79Cl4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGkzV0JVaTJmTVFlWjdhbUZxRXV4VHYwS1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC80OTBlMTItMWE0NS00YjAwLWE0NmMt
YWYxZTZkMDc3ZTBjLzEvU0pqWE0xeUNCTUpsUE1SMG9jSlg3Vi1UejFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC80OTBlMTItMWE0NS00YjAwLWE0NmMtYWYxZTZkMDc3ZTBj
LzEvdGkzV0JVaTJmTVFlWjdhbUZxRXV4VHYwS1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ1MMA0G
CSqGSIb3DQEBCwUAA4IBAQB6reoazMuFCfnf+Laav0TPob/lllsPlpEWzJKYR+aa
LQD/lylG1kYd+Y4rb99sjiZE8EryGiWZQjC2mkQf8Yj9QE9GscxuZIga27wRvXxG
by1Yvu6E5C37QVzPWeClCmB9LXpxD+0jJPkMLxe53O8p4+51GLVY7/myVve64292
I7qQf0oAiA6iLXDCn6Et+RFsHsVWueHTruQs22qm4WcE/YK91YZ9hGoKReu/UpjF
OdF50Bbc18vI2gsmzLQabmeSBWBwXLCqHps7D+n1TkYjJftmtMpZda7eeVdQOFA4
NhwpyH5CY4Qb1PVQwGOb2i164+TX8Jt7fiS7iUT0858a
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:50 2023 by rpki-client on console-fra.rpki-client.org