Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/T5HyTQF44Hn3hF7GRCSoYq7le38.roa
File: T5HyTQF44Hn3hF7GRCSoYq7le38.roa (raw, json)
Hash identifier: tj6l58q+G75ylzmlzWIgXyir9vl7u/43/ckMogBoyTg=
Subject key identifier: 4F:91:F2:4D:01:78:E0:79:F7:84:5E:C6:44:24:A8:62:AE:E5:7B:7F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018858648EA867EF1FE24031064BB8B6249C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/T5HyTQF44Hn3hF7GRCSoYq7le38.roa
Signing time: Fri 26 May 2023 14:09:25 +0000
ROA not before: Fri 26 May 2023 14:09:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31469
IP address blocks: 45.89.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:58:64:8e:a8:67:ef:1f:e2:40:31:06:4b:b8:b6:24:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 26 14:09:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f91f24d0178e079f7845ec64424a862aee57b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b6:10:6e:ca:d2:4c:2f:aa:65:3a:73:f5:1d:
4c:93:82:a3:12:d9:d6:ea:95:af:19:00:18:6d:69:
58:96:f4:48:36:d9:a7:27:4f:21:93:57:aa:a5:c8:
a4:b2:21:62:06:4a:0a:98:a8:44:3e:08:cf:3c:15:
15:14:fa:98:b5:d6:10:52:42:5c:bd:7a:41:ff:df:
27:94:83:17:a7:3b:e7:f0:66:68:7e:01:a3:be:8f:
70:eb:e5:0e:d4:85:3e:03:dd:d3:8b:b3:9f:f4:54:
83:c5:14:05:d8:c7:c5:aa:06:87:21:07:35:5a:9c:
6b:93:9a:db:5c:96:0e:4b:88:9a:42:78:5a:e0:4e:
e6:63:8b:07:66:a2:39:b4:d6:29:ca:85:19:50:4d:
fd:98:a9:9f:0a:76:30:86:25:64:f7:42:f2:43:07:
c6:a8:cc:5e:0f:63:e3:c2:38:a2:38:72:e2:1d:20:
73:1b:20:87:c4:58:0b:76:d1:b2:1b:bd:cc:c2:9d:
c8:64:b2:fc:c1:09:e0:04:33:b5:9c:6a:88:25:9b:
e0:19:8c:da:17:53:2e:ff:cf:c3:81:df:f4:59:3e:
d7:44:a2:81:9f:c7:e5:97:48:ea:96:70:41:77:9d:
43:bf:24:33:47:84:bc:15:f4:49:94:2f:72:48:ca:
65:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:91:F2:4D:01:78:E0:79:F7:84:5E:C6:44:24:A8:62:AE:E5:7B:7F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/T5HyTQF44Hn3hF7GRCSoYq7le38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.245.0/24
Signature Algorithm: sha256WithRSAEncryption
65:c9:ef:23:97:5a:cc:ed:73:66:b4:81:13:e8:f8:58:23:3f:
91:9d:12:bc:f0:73:11:f2:f2:15:99:29:a2:bd:ac:af:15:62:
0b:bf:67:a2:83:1b:eb:54:6f:a8:39:fb:29:39:15:83:7f:62:
14:06:a0:ba:93:5f:d2:4d:db:56:92:87:05:46:ee:21:3c:78:
14:4c:78:ee:ac:de:60:87:3f:f0:1f:d8:cd:3b:db:48:b2:75:
67:12:60:e0:9f:81:0e:0e:cc:ca:01:01:1f:47:e1:9e:5f:10:
20:3c:de:15:e1:d8:95:20:2e:2c:ac:83:4d:a5:aa:aa:98:4a:
a8:73:53:b7:00:83:0b:8b:ad:3e:f5:12:85:56:36:25:01:98:
94:3b:f5:a7:8b:30:09:cc:3d:35:2e:48:ce:c0:ca:13:2a:89:
05:9e:25:13:64:a4:90:37:4f:0e:16:14:41:e2:9b:a1:45:23:
bc:36:83:2b:97:fa:c4:3d:93:fc:46:91:78:47:f6:4b:cf:89:
45:b4:eb:66:56:43:cf:4e:31:ff:a8:1b:c0:c0:09:07:07:17:
76:8c:85:b6:7a:e3:0a:b7:b2:3f:0b:b2:7f:2d:90:6e:7c:50:
f4:6e:21:e7:5c:9c:29:76:8c:66:b0:70:9c:2e:cf:fc:d1:e2:
45:c7:ca:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYhYZI6oZ+8f4kAxBku4tiScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwNTI2MTQwOTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjkxZjI0ZDAxNzhlMDc5Zjc4NDVlYzY0NDI0YTg2MmFlZTU3YjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbYQbsrSTC+qZTpz9R1Mk4KjEtnW
6pWvGQAYbWlYlvRINtmnJ08hk1eqpciksiFiBkoKmKhEPgjPPBUVFPqYtdYQUkJc
vXpB/98nlIMXpzvn8GZofgGjvo9w6+UO1IU+A93Ti7Of9FSDxRQF2MfFqgaHIQc1
Wpxrk5rbXJYOS4iaQnha4E7mY4sHZqI5tNYpyoUZUE39mKmfCnYwhiVk90LyQwfG
qMxeD2PjwjiiOHLiHSBzGyCHxFgLdtGyG73Mwp3IZLL8wQngBDO1nGqIJZvgGYza
F1Mu/8/Dgd/0WT7XRKKBn8fll0jqlnBBd51DvyQzR4S8FfRJlC9ySMpl6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE+R8k0BeOB594RexkQkqGKu5Xt/MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvVDVIeVRRRjQ0SG4zaEY3R1JDU29ZcTdsZTM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVn1MA0G
CSqGSIb3DQEBCwUAA4IBAQBlye8jl1rM7XNmtIET6PhYIz+RnRK88HMR8vIVmSmi
vayvFWILv2eigxvrVG+oOfspORWDf2IUBqC6k1/STdtWkocFRu4hPHgUTHjurN5g
hz/wH9jNO9tIsnVnEmDgn4EODszKAQEfR+GeXxAgPN4V4diVIC4srINNpaqqmEqo
c1O3AIMLi60+9RKFVjYlAZiUO/WnizAJzD01LkjOwMoTKokFniUTZKSQN08OFhRB
4puhRSO8NoMrl/rEPZP8RpF4R/ZLz4lFtOtmVkPPTjH/qBvAwAkHBxd2jIW2euMK
t7I/C7J/LZBufFD0biHnXJwpdoxmsHCcLs/80eJFx8rK
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:47 2024 by rpki-client on console-fra.rpki-client.org