Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YjP6qzuE206OqFlG16DDl2TTFKM.roa
File: YjP6qzuE206OqFlG16DDl2TTFKM.roa (raw, json)
Hash identifier: rtRYDv2V9+cxdfCEXnP8zSxKTjVDLj+R9XILOAlFP5U=
Subject key identifier: 62:33:FA:AB:3B:84:DB:4E:8E:A8:59:46:D7:A0:C3:97:64:D3:14:A3
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01870982E94B2EAAB9B07982E721ECC28E76
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YjP6qzuE206OqFlG16DDl2TTFKM.roa
Signing time: Wed 22 Mar 2023 13:29:47 +0000
ROA not before: Wed 22 Mar 2023 13:29:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8767
IP address blocks: 45.8.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 20 Apr 2023 06:18:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:09:82:e9:4b:2e:aa:b9:b0:79:82:e7:21:ec:c2:8e:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 22 13:29:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6233faab3b84db4e8ea85946d7a0c39764d314a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b6:9f:e3:d2:7e:10:9f:0e:fd:35:1f:c4:d1:
32:22:a9:7b:a1:99:87:8b:f6:56:84:3b:0e:74:ef:
d6:0a:aa:82:93:be:a2:ef:fd:74:fb:07:2d:7d:6d:
07:7f:90:3d:e3:98:ed:64:3e:75:3f:44:89:9c:0f:
56:0e:3f:f4:48:e4:3f:ae:5c:f5:3d:7f:48:40:c8:
5d:b4:47:3c:be:0a:5a:4b:fc:88:5b:d6:42:c6:9d:
ab:23:c2:0a:e6:27:57:6f:ce:94:74:4f:61:da:0d:
a8:98:48:a0:3a:4c:77:7b:95:88:69:12:c0:3c:10:
a4:86:04:d2:e6:2c:3b:81:bd:ed:a3:83:9d:23:f0:
05:dc:c5:c7:e1:95:96:d2:5f:dc:2e:9f:21:c1:85:
be:f9:ad:09:ee:7f:fd:af:ae:d2:91:fd:7b:ce:29:
47:c2:aa:1b:c0:7b:e6:56:ce:41:3c:4b:d4:9d:1e:
af:5c:1b:c9:8e:6f:3d:01:ff:b3:21:8f:d2:96:3b:
d9:e4:8e:21:93:e1:86:1e:cf:1e:54:49:02:8f:e1:
1f:90:fe:55:bf:6a:3b:62:ab:31:4c:01:e2:27:b5:
69:7d:9f:3d:aa:30:be:35:3e:d0:db:9d:e2:14:c3:
2f:ca:b4:b9:f9:42:b2:e7:1d:6d:9d:82:89:e9:c5:
fa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:33:FA:AB:3B:84:DB:4E:8E:A8:59:46:D7:A0:C3:97:64:D3:14:A3
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YjP6qzuE206OqFlG16DDl2TTFKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.93.0/24
Signature Algorithm: sha256WithRSAEncryption
31:03:54:b1:82:a1:17:21:93:3e:b8:89:d2:b0:f5:a1:d3:e8:
fb:b7:f0:0e:05:d7:96:d7:13:a8:35:d3:fa:74:d8:63:54:f3:
ec:d5:3e:59:87:35:b2:76:80:ed:8c:f1:be:e7:16:b3:f3:1d:
70:c6:91:fc:65:80:9b:16:d9:9b:de:00:8b:b2:64:78:d7:6a:
68:0b:31:cc:42:74:f8:11:7c:d8:af:b7:12:ff:c9:a1:c7:bc:
ed:80:3c:77:c9:f0:eb:9d:61:23:36:23:42:78:01:70:39:44:
d7:33:74:ef:22:58:a0:aa:ee:c0:5c:47:14:d8:37:81:ac:50:
1b:13:6c:0f:8b:b1:68:f6:62:68:75:68:31:7a:d4:10:31:be:
b4:8e:27:ee:a5:92:e9:b9:89:af:9f:57:d3:a8:77:33:21:24:
fc:78:70:07:84:0a:8c:a9:5e:b0:b2:61:50:8d:cb:20:48:ea:
1e:14:7b:0c:9a:d9:bd:c4:06:18:7c:9d:91:04:68:1f:ba:5e:
da:a9:07:3b:89:38:99:d4:8f:25:35:00:ea:f9:c6:20:d8:79:
e3:58:2f:53:d3:2b:c5:c6:38:2e:62:39:77:9d:05:49:47:1e:
12:0d:d1:0a:1d:74:fb:ed:60:f5:9b:04:33:be:1a:38:22:f4:
ef:cb:48:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcJgulLLqq5sHmC5yHswo52MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMzIyMTMyOTQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjMzZmFhYjNiODRkYjRlOGVhODU5NDZkN2EwYzM5NzY0ZDMxNGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7af49J+EJ8O/TUfxNEyIql7oZmH
i/ZWhDsOdO/WCqqCk76i7/10+wctfW0Hf5A945jtZD51P0SJnA9WDj/0SOQ/rlz1
PX9IQMhdtEc8vgpaS/yIW9ZCxp2rI8IK5idXb86UdE9h2g2omEigOkx3e5WIaRLA
PBCkhgTS5iw7gb3to4OdI/AF3MXH4ZWW0l/cLp8hwYW++a0J7n/9r67Skf17zilH
wqobwHvmVs5BPEvUnR6vXBvJjm89Af+zIY/SljvZ5I4hk+GGHs8eVEkCj+EfkP5V
v2o7YqsxTAHiJ7VpfZ89qjC+NT7Q253iFMMvyrS5+UKy5x1tnYKJ6cX6qQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGIz+qs7hNtOjqhZRtegw5dk0xSjMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvWWpQNnF6dUUyMDZPcUZsRzE2RERsMlRURktNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQhdMA0G
CSqGSIb3DQEBCwUAA4IBAQAxA1SxgqEXIZM+uInSsPWh0+j7t/AOBdeW1xOoNdP6
dNhjVPPs1T5ZhzWydoDtjPG+5xaz8x1wxpH8ZYCbFtmb3gCLsmR412poCzHMQnT4
EXzYr7cS/8mhx7ztgDx3yfDrnWEjNiNCeAFwOUTXM3TvIligqu7AXEcU2DeBrFAb
E2wPi7Fo9mJodWgxetQQMb60jifupZLpuYmvn1fTqHczIST8eHAHhAqMqV6wsmFQ
jcsgSOoeFHsMmtm9xAYYfJ2RBGgful7aqQc7iTiZ1I8lNQDq+cYg2HnjWC9T0yvF
xjguYjl3nQVJRx4SDdEKHXT77WD1mwQzvho4IvTvy0iq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:13 2024 by rpki-client on console-fra.rpki-client.org