Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1DZRfUD_viuPPhqCX_L_wfZqN_c.roa
File: 1DZRfUD_viuPPhqCX_L_wfZqN_c.roa (raw, json)
Hash identifier: s+6hNCpQPoiPz5qR9MtuNfYFAJ4GkEWnJDn/+fTB+V8=
Subject key identifier: D4:36:51:7D:40:FF:BE:2B:8F:3E:1A:82:5F:F2:FF:C1:F6:6A:37:F7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018AADCB352B8EBD503CB3C383159E507AB9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1DZRfUD_viuPPhqCX_L_wfZqN_c.roa
Signing time: Tue 19 Sep 2023 14:14:50 +0000
ROA not before: Tue 19 Sep 2023 14:14:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47757
IP address blocks: 45.89.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:cb:35:2b:8e:bd:50:3c:b3:c3:83:15:9e:50:7a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 19 14:14:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d436517d40ffbe2b8f3e1a825ff2ffc1f66a37f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:d4:6a:f4:c3:57:19:f2:1d:4c:fd:fd:7f:25:
a6:10:27:9b:2b:38:4c:f9:dc:76:45:99:cc:9f:12:
71:73:90:03:7a:32:fc:af:97:22:dc:c1:44:65:c6:
5a:19:38:d8:1d:d0:b8:62:f3:85:4a:d0:99:5e:ab:
90:34:c7:ad:1d:30:2f:88:83:d1:58:88:59:80:82:
eb:50:9a:d8:ad:9e:cf:53:a6:a7:61:8a:b5:15:c3:
fd:4d:11:ee:93:f3:93:a2:80:ff:ed:16:f7:0c:e9:
1f:3a:03:63:ad:a2:c0:ff:3c:56:db:89:1a:a4:2b:
b7:51:c3:60:42:a9:c8:4e:03:d9:72:c2:ee:7f:50:
3d:84:ab:a4:fe:f0:7a:0e:59:68:01:13:0b:59:3b:
0f:a5:dd:96:b7:fa:b0:53:26:56:ee:c6:c0:5e:42:
94:5f:e7:87:7c:91:1e:7d:8d:7f:54:9f:3a:eb:dc:
2e:79:8d:82:71:1c:4c:99:aa:a4:e5:0b:bc:a6:ae:
45:b1:94:d9:f0:1a:ec:38:02:67:4c:7c:42:2d:7c:
8b:f6:29:4f:28:05:f2:1a:02:c0:d8:ed:e5:7a:8f:
e7:03:9c:18:b0:39:b5:78:60:46:7d:90:68:4a:ff:
e0:e8:e8:4a:9e:f5:9e:97:10:02:77:30:c9:31:13:
a7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:36:51:7D:40:FF:BE:2B:8F:3E:1A:82:5F:F2:FF:C1:F6:6A:37:F7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1DZRfUD_viuPPhqCX_L_wfZqN_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.247.0/24
Signature Algorithm: sha256WithRSAEncryption
97:6c:06:df:79:36:ca:12:c8:f8:c0:23:73:ed:53:4a:42:7a:
8f:47:5f:2c:6a:a7:24:22:66:27:35:ff:1e:93:c9:77:eb:f0:
80:66:36:8a:45:dc:f1:6f:3c:0d:fe:1b:9a:d8:22:3b:4d:ac:
83:24:45:4d:c9:d6:6d:b6:6d:71:e8:74:a5:74:6e:ae:45:73:
1f:16:19:be:df:53:2a:3f:a5:a2:f7:d6:26:84:e0:9d:45:78:
e0:70:ee:23:45:04:39:63:12:e6:b5:77:b5:dc:c6:eb:5b:35:
d9:c6:dc:a7:f1:6b:3d:e2:dd:13:ed:a8:89:71:13:50:50:a3:
69:b5:49:b9:2d:a9:e4:de:b4:a1:c7:d1:c1:ad:a7:98:b9:89:
ed:40:48:52:5e:2d:48:72:bb:cf:94:7b:4d:5c:72:99:95:79:
b0:c4:ed:7c:98:f4:9c:47:00:bf:73:f1:4b:26:0b:8f:94:90:
fb:b9:f0:81:54:b6:1c:d3:96:39:2b:00:4a:ff:12:bf:71:a3:
33:79:2c:f8:a4:ef:7e:ba:aa:95:8e:d2:cc:26:c4:15:16:af:
63:dd:ff:0f:b9:53:61:e8:02:8b:02:25:77:07:41:2a:d8:af:
44:d4:a7:27:ab:9b:d1:c7:4a:fd:f7:20:d6:39:e8:1b:c0:46:
0c:ee:f7:b1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqtyzUrjr1QPLPDgxWeUHq5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwOTE5MTQxNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDM2NTE3ZDQwZmZiZTJiOGYzZTFhODI1ZmYyZmZjMWY2NmEzN2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtRq9MNXGfIdTP39fyWmECebKzhM
+dx2RZnMnxJxc5ADejL8r5ci3MFEZcZaGTjYHdC4YvOFStCZXquQNMetHTAviIPR
WIhZgILrUJrYrZ7PU6anYYq1FcP9TRHuk/OTooD/7Rb3DOkfOgNjraLA/zxW24ka
pCu3UcNgQqnITgPZcsLuf1A9hKuk/vB6DlloARMLWTsPpd2Wt/qwUyZW7sbAXkKU
X+eHfJEefY1/VJ8669wueY2CcRxMmaqk5Qu8pq5FsZTZ8BrsOAJnTHxCLXyL9ilP
KAXyGgLA2O3leo/nA5wYsDm1eGBGfZBoSv/g6OhKnvWelxACdzDJMROnFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNQ2UX1A/74rjz4agl/y/8H2ajf3MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvMURaUmZVRF92aXVQUGhxQ1hfTF93ZlpxTl9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVn3MA0G
CSqGSIb3DQEBCwUAA4IBAQCXbAbfeTbKEsj4wCNz7VNKQnqPR18saqckImYnNf8e
k8l36/CAZjaKRdzxbzwN/hua2CI7TayDJEVNydZttm1x6HSldG6uRXMfFhm+31Mq
P6Wi99YmhOCdRXjgcO4jRQQ5YxLmtXe13MbrWzXZxtyn8Ws94t0T7aiJcRNQUKNp
tUm5Lank3rShx9HBraeYuYntQEhSXi1IcrvPlHtNXHKZlXmwxO18mPScRwC/c/FL
JguPlJD7ufCBVLYc05Y5KwBK/xK/caMzeSz4pO9+uqqVjtLMJsQVFq9j3f8PuVNh
6AKLAiV3B0Eq2K9E1Kcnq5vRx0r99yDWOegbwEYM7vex
-----END CERTIFICATE-----
Generated at Fri Oct 20 11:08:47 2023 by rpki-client on console-ams.rpki-client.org