Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d9Sk8cTw1QoKLlYcf5Szmwi6vn0.roa
File: d9Sk8cTw1QoKLlYcf5Szmwi6vn0.roa (raw, json)
Hash identifier: pSO6LTvmXzL6f4YyivmnIKDFmwTOiAY3kTFB6I5GIPg=
Subject key identifier: 77:D4:A4:F1:C4:F0:D5:0A:0A:2E:56:1C:7F:94:B3:9B:08:BA:BE:7D
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCE4366512CD40CAB91282632E32A3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d9Sk8cTw1QoKLlYcf5Szmwi6vn0.roa
Signing time: Tue 02 Jan 2024 06:29:28 +0000
ROA not before: Tue 02 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 45014
IP address blocks: 45.14.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Feb 2024 10:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:e4:36:65:12:cd:40:ca:b9:12:82:63:2e:32:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77d4a4f1c4f0d50a0a2e561c7f94b39b08babe7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:be:01:73:a3:86:c9:ec:78:17:8b:5c:67:78:
6c:d8:56:ab:ad:da:79:e1:59:b8:fe:b7:8d:55:df:
02:0d:45:1b:31:ce:4c:86:33:c8:22:04:36:3b:aa:
f9:59:ee:81:2f:60:1f:87:43:04:8b:f7:1e:11:f0:
53:79:bc:44:4f:8c:d4:bd:ae:52:96:9e:f4:25:56:
92:c1:ab:ee:62:9c:5d:7a:7f:05:96:b7:07:21:50:
95:70:8d:45:82:03:cf:2e:90:60:3f:d3:e8:22:0d:
99:4c:03:89:74:f3:e8:3f:42:c5:0e:8b:6a:f6:a6:
69:3f:20:f8:35:c5:97:e7:0e:10:19:ee:f4:db:e6:
6b:15:f2:32:a2:f8:2b:0a:f1:fd:70:44:a9:aa:a4:
7d:37:60:4d:dc:cb:28:0b:ec:47:9a:3f:58:e6:89:
6f:d0:7d:4e:94:48:d4:8b:74:61:39:c4:48:6c:57:
b6:3f:17:3e:10:60:8d:55:c7:11:ab:a8:e5:9b:6e:
0a:ed:f4:da:90:24:96:59:66:11:d1:4b:63:a2:bd:
e8:4a:b4:e2:c4:90:73:32:f6:6d:4b:84:1d:23:93:
3d:fd:47:af:62:63:da:6f:29:39:42:5b:a6:5c:5a:
ea:21:51:c6:90:51:e4:f4:bd:b4:e0:c4:47:86:e8:
15:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D4:A4:F1:C4:F0:D5:0A:0A:2E:56:1C:7F:94:B3:9B:08:BA:BE:7D
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/d9Sk8cTw1QoKLlYcf5Szmwi6vn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.166.0/24
Signature Algorithm: sha256WithRSAEncryption
13:d0:20:5a:26:d0:ab:9b:ca:88:ba:8c:f8:19:6f:82:20:a2:
a0:59:05:f7:5f:2e:d3:5c:14:94:04:27:a4:cc:b7:3d:a2:bc:
61:32:c0:ab:15:5f:39:23:89:f1:77:c5:fb:6c:b6:ef:6e:bc:
c8:0b:39:24:c4:0d:2c:f2:55:01:72:e5:9f:fe:e9:c0:20:90:
86:91:88:83:65:d8:5b:5c:8b:53:c9:78:20:c9:00:33:aa:ec:
42:40:c2:87:63:6b:8a:90:4d:7c:c3:ba:b6:e0:d6:22:e2:9f:
ee:26:a7:d8:7f:8d:2c:7e:14:4e:88:0f:b0:54:08:aa:51:7b:
60:58:e8:ef:0d:42:4e:5c:ba:fb:b1:2f:fa:9e:fe:ff:20:17:
d7:13:6a:f9:67:dc:0c:c1:5d:4b:2a:db:d5:9c:9d:b4:de:ef:
c7:fc:ae:e9:2f:e5:9a:c2:e8:64:f9:e6:31:f0:6a:52:ba:e6:
e7:67:ac:67:0d:17:43:71:bf:0a:b1:40:dd:ea:db:21:3e:48:
6f:94:c2:6e:8b:5e:97:10:6a:e4:5a:04:47:48:9f:0b:e2:ce:
0f:30:0e:9b:1a:33:1f:61:82:09:7e:3f:08:09:c8:05:6c:eb:
bf:bb:ec:ee:e0:ee:5a:c4:bf:dc:c7:fc:30:d6:40:c3:ff:d6:
1e:3a:35:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3OQ2ZRLNQMq5EoJjLjKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTAyMDYyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2Q0YTRmMWM0ZjBkNTBhMGEyZTU2MWM3Zjk0YjM5YjA4YmFiZTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb4Bc6OGyex4F4tcZ3hs2Farrdp5
4Vm4/reNVd8CDUUbMc5MhjPIIgQ2O6r5We6BL2Afh0MEi/ceEfBTebxET4zUva5S
lp70JVaSwavuYpxden8FlrcHIVCVcI1FggPPLpBgP9PoIg2ZTAOJdPPoP0LFDotq
9qZpPyD4NcWX5w4QGe702+ZrFfIyovgrCvH9cESpqqR9N2BN3MsoC+xHmj9Y5olv
0H1OlEjUi3RhOcRIbFe2Pxc+EGCNVccRq6jlm24K7fTakCSWWWYR0Utjor3oSrTi
xJBzMvZtS4QdI5M9/UevYmPabyk5QlumXFrqIVHGkFHk9L204MRHhugVVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHfUpPHE8NUKCi5WHH+Us5sIur59MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvZDlTazhjVHcxUW9LTGxZY2Y1U3ptd2k2dm4wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ6mMA0G
CSqGSIb3DQEBCwUAA4IBAQAT0CBaJtCrm8qIuoz4GW+CIKKgWQX3Xy7TXBSUBCek
zLc9orxhMsCrFV85I4nxd8X7bLbvbrzICzkkxA0s8lUBcuWf/unAIJCGkYiDZdhb
XItTyXggyQAzquxCQMKHY2uKkE18w7q24NYi4p/uJqfYf40sfhROiA+wVAiqUXtg
WOjvDUJOXLr7sS/6nv7/IBfXE2r5Z9wMwV1LKtvVnJ203u/H/K7pL+Wawuhk+eYx
8GpSuubnZ6xnDRdDcb8KsUDd6tshPkhvlMJui16XEGrkWgRHSJ8L4s4PMA6bGjMf
YYIJfj8ICcgFbOu/u+zu4O5axL/cx/ww1kDD/9YeOjUF
-----END CERTIFICATE-----
Generated at Sat Feb 24 13:43:56 2024 by rpki-client on console-ams.rpki-client.org