Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/1-xQGO9ksvVWATfXFmCFgntQ4GAY.roa
File: 1-xQGO9ksvVWATfXFmCFgntQ4GAY.roa (raw, json)
Hash identifier: TKKLgEa36+f6VvTGivZav4ACOSYk1bGES5ON4SLZKr4=
Subject key identifier: FB:14:06:3B:D9:2C:BD:55:80:4D:F5:C5:98:21:60:9E:D4:38:18:06
Certificate issuer: /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial: 0189CFAEAB2440C1DC638837AA407060C1AC
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/1-xQGO9ksvVWATfXFmCFgntQ4GAY.roa
Signing time: Mon 07 Aug 2023 11:07:58 +0000
ROA not before: Mon 07 Aug 2023 11:07:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50286
IP address blocks: 45.134.9.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Sep 2023 06:54:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:ae:ab:24:40:c1:dc:63:88:37:aa:40:70:60:c1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
Validity
Not Before: Aug 7 11:07:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb14063bd92cbd55804df5c59821609ed4381806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a9:45:b2:85:0c:10:24:8b:9b:48:aa:fc:2a:
e3:3e:a3:53:be:73:8f:da:bb:df:47:e4:3b:d1:55:
b6:6f:8b:82:67:00:2e:bd:e3:ec:c9:11:2b:0b:6d:
09:ac:56:08:fa:d0:0a:7f:1e:04:b9:56:34:61:5f:
5c:d2:7a:54:ab:72:40:6a:c6:76:7a:11:a5:ea:31:
08:9f:32:14:be:c0:40:6e:bb:50:46:40:2a:87:5d:
fb:8a:28:8d:12:34:3b:e4:73:f0:85:dd:8c:f8:02:
43:a7:15:34:bb:63:d3:c3:7c:b8:58:37:35:b7:c5:
d9:2e:27:ff:11:90:c4:35:52:71:da:d6:02:d4:25:
95:b7:0e:ed:45:f2:57:d6:e6:16:c0:0e:ca:28:05:
ef:7a:41:d0:29:72:d7:67:70:3b:65:23:8d:93:00:
fb:f2:8e:a0:80:ca:53:bc:dc:29:21:3c:2b:df:7e:
99:72:1a:b4:d4:d0:bb:6a:f0:72:d1:5f:93:4f:30:
01:00:b0:f9:d8:ec:e3:84:71:d6:c7:90:c3:23:a0:
14:1c:c0:67:46:25:98:47:95:67:cf:85:fc:52:34:
6e:ac:f1:bd:10:39:15:4c:e3:3d:f7:52:03:bc:10:
57:fe:0c:51:50:6b:68:96:41:85:80:a1:7e:85:ab:
c7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:14:06:3B:D9:2C:BD:55:80:4D:F5:C5:98:21:60:9E:D4:38:18:06
X509v3 Authority Key Identifier:
keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/1-xQGO9ksvVWATfXFmCFgntQ4GAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.9.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:91:10:8a:6f:06:41:ea:a4:7e:a8:43:c8:63:e8:db:02:31:
f4:9c:3d:13:68:4c:a8:b5:aa:e6:52:43:28:39:2a:31:0f:64:
b5:58:fb:f1:51:bd:cb:51:29:da:74:cd:bb:ca:e8:df:9d:cf:
a7:9e:e6:50:37:2a:88:66:4d:1b:02:81:b6:76:09:64:ca:44:
47:1d:f7:24:6b:86:2a:b9:c2:99:15:2c:01:96:9e:10:5a:e5:
6d:b5:2d:d8:9b:ed:89:3d:ea:c0:83:1b:4f:5d:c2:43:e6:43:
06:cb:7e:fd:13:b6:b2:1d:61:a0:bc:ab:06:24:d6:64:9d:27:
38:d2:e6:ef:dc:bb:07:6b:aa:e6:f1:0b:b7:2a:ee:d9:02:7e:
4a:97:8b:3b:30:eb:0b:95:e4:73:98:9d:32:30:5f:ad:2c:1d:
e5:68:58:22:e1:a2:65:d4:7a:33:89:5a:29:ec:c5:ad:7b:ea:
13:f8:e0:64:29:55:c6:9c:07:16:9c:12:0d:27:34:d2:6c:20:
52:45:91:7c:a3:59:ac:74:b9:4c:d3:80:0a:83:70:03:38:72:
81:19:77:05:14:74:a8:0c:5c:e3:64:79:e5:2a:90:0d:93:8c:
db:12:52:b7:83:7b:b6:73:a2:7c:85:ee:8c:60:ba:12:56:70:
6f:d1:89:40
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYnPrqskQMHcY4g3qkBwYMGsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMTlkNDUzNWM3ZTYyYjkyMWU4NTllNjU1N2I4MjFmMjc4
ZTcxNmEwHhcNMjMwODA3MTEwNzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjE0MDYzYmQ5MmNiZDU1ODA0ZGY1YzU5ODIxNjA5ZWQ0MzgxODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKlFsoUMECSLm0iq/CrjPqNTvnOP
2rvfR+Q70VW2b4uCZwAuvePsyRErC20JrFYI+tAKfx4EuVY0YV9c0npUq3JAasZ2
ehGl6jEInzIUvsBAbrtQRkAqh137iiiNEjQ75HPwhd2M+AJDpxU0u2PTw3y4WDc1
t8XZLif/EZDENVJx2tYC1CWVtw7tRfJX1uYWwA7KKAXvekHQKXLXZ3A7ZSONkwD7
8o6ggMpTvNwpITwr336Zchq01NC7avBy0V+TTzABALD52OzjhHHWx5DDI6AUHMBn
RiWYR5Vnz4X8UjRurPG9EDkVTOM991IDvBBX/gxRUGtolkGFgKF+havHvQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPsUBjvZLL1VgE31xZghYJ7UOBgGMB8GA1UdIwQY
MBaAFL0Z1FNcfmK5IehZ5lV7gh8njnFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTct
YzEzMzFmNDlmYzA5LzEvMS14UUdPOWtzdlZXQVRmWEZtQ0ZnbnRRNEdBWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDMvMjU5OWY5LTZmNzYtNGRiNi1iY2E3LWMxMzMxZjQ5ZmMw
OS8xL3ZSblVVMXgtWXJraDZGbm1WWHVDSHllT2NXby5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2GCTAN
BgkqhkiG9w0BAQsFAAOCAQEAD5EQim8GQeqkfqhDyGPo2wIx9Jw9E2hMqLWq5lJD
KDkqMQ9ktVj78VG9y1Ep2nTNu8ro353Pp57mUDcqiGZNGwKBtnYJZMpERx33JGuG
KrnCmRUsAZaeEFrlbbUt2JvtiT3qwIMbT13CQ+ZDBst+/RO2sh1hoLyrBiTWZJ0n
ONLm79y7B2uq5vELtyru2QJ+SpeLOzDrC5Xkc5idMjBfrSwd5WhYIuGiZdR6M4la
KezFrXvqE/jgZClVxpwHFpwSDSc00mwgUkWRfKNZrHS5TNOACoNwAzhygRl3BRR0
qAxc42R55SqQDZOM2xJSt4N7tnOifIXujGC6ElZwb9GJQA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:18 2024 by rpki-client on console-ams.rpki-client.org