Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p-yoCHFi5ctlrjP12J3ZrW2L0mA.roa
File: p-yoCHFi5ctlrjP12J3ZrW2L0mA.roa (raw, json)
Hash identifier: /B+6RVLXwUX23NYaPc8V5mllt9U+LrlY4oVzakoNjp4=
Subject key identifier: A7:EC:A8:08:71:62:E5:CB:65:AE:33:F5:D8:9D:D9:AD:6D:8B:D2:60
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018B6D73A0B4BA40B74A44511F37005C8C1F
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p-yoCHFi5ctlrjP12J3ZrW2L0mA.roa
Signing time: Thu 26 Oct 2023 19:26:16 +0000
ROA not before: Thu 26 Oct 2023 19:26:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47674
IP address blocks: 45.84.222.0/24 maxlen: 24
194.59.31.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6d:73:a0:b4:ba:40:b7:4a:44:51:1f:37:00:5c:8c:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 26 19:26:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7eca8087162e5cb65ae33f5d89dd9ad6d8bd260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:06:a2:fa:0c:91:5a:0e:0e:65:2c:ab:29:0b:
33:66:8b:65:52:78:3f:47:1d:33:8f:64:0b:c4:c7:
76:a4:79:ba:57:cc:99:da:06:ca:c2:59:0c:13:a9:
17:84:9e:21:5c:80:0e:6a:78:34:3b:37:69:e6:14:
09:db:64:44:a0:a6:8e:ee:e0:6f:c0:f2:e5:f8:ef:
71:41:df:92:cf:0f:cd:2e:ee:23:db:70:70:23:6e:
e2:33:08:d4:85:46:61:bc:b5:a7:64:c5:a0:fd:35:
b7:c9:29:67:77:76:a9:4d:67:47:35:0c:bd:ed:a6:
f4:37:b0:12:eb:5e:48:80:61:25:26:fb:58:8b:88:
ed:86:2a:3e:4f:39:8f:e8:8a:42:a8:1b:2b:14:d9:
c4:71:95:05:80:2e:8f:15:10:bb:34:bb:ab:cf:38:
b1:0e:3d:2c:ae:00:22:1b:35:e7:6b:56:c4:d6:ff:
5d:c5:8a:3f:7c:51:1d:c6:41:95:2c:e1:53:aa:ca:
6d:78:6b:f7:11:91:94:00:c3:74:41:fa:3f:aa:d4:
79:62:7e:43:9e:14:8a:09:14:54:9c:a3:30:fd:ad:
20:20:6b:b3:44:ae:c0:5b:d2:82:0c:43:94:e8:22:
f7:e0:3f:39:75:37:75:e8:aa:5d:60:0c:82:e9:a3:
dc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EC:A8:08:71:62:E5:CB:65:AE:33:F5:D8:9D:D9:AD:6D:8B:D2:60
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p-yoCHFi5ctlrjP12J3ZrW2L0mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.222.0/24
194.59.31.0/24
Signature Algorithm: sha256WithRSAEncryption
62:25:0d:22:34:08:d4:ce:ac:d4:52:11:fb:5b:b8:f9:a2:d1:
ae:dc:99:d9:fd:e0:b2:4e:d3:95:64:d7:c2:f0:2b:18:17:5b:
32:c5:5d:d9:44:a3:02:ba:b8:7a:99:7a:e4:67:c0:9a:34:50:
f1:ce:e1:44:f1:d4:fc:db:d7:37:70:c2:48:72:1a:fc:e5:79:
5a:aa:ab:8e:16:95:43:d8:43:16:e0:5d:b4:74:6b:e2:55:97:
dd:37:c6:19:43:b0:21:5e:de:db:80:ce:9f:2f:64:cf:54:5c:
d3:1a:bc:ee:81:ef:61:94:d1:8e:a4:c5:1f:44:a7:82:46:8e:
7b:c6:e1:59:35:80:2d:fd:ca:63:6c:8e:af:de:a0:6e:ae:f6:
e0:8d:6c:ab:ff:b4:78:d2:b0:31:34:74:46:f3:f1:67:cc:ca:
2e:8f:5f:98:fb:67:65:2f:9c:28:fc:b0:7c:51:dd:c7:4c:d9:
52:df:32:fa:06:fb:df:ff:d9:02:78:ea:6b:3c:14:86:04:af:
cb:98:8e:4e:93:c8:b0:f3:7b:80:7e:8e:69:44:40:af:9e:81:
f0:20:d7:dd:c4:27:f9:6d:1a:a1:a1:37:21:ea:7b:d4:10:8c:
93:40:35:fd:0f:87:58:98:b6:d4:5e:13:a4:9e:0e:34:e9:75:
84:20:c1:9b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYttc6C0ukC3SkRRHzcAXIwfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMxMDI2MTkyNjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2VjYTgwODcxNjJlNWNiNjVhZTMzZjVkODlkZDlhZDZkOGJkMjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQai+gyRWg4OZSyrKQszZotlUng/
Rx0zj2QLxMd2pHm6V8yZ2gbKwlkME6kXhJ4hXIAOang0Ozdp5hQJ22REoKaO7uBv
wPLl+O9xQd+Szw/NLu4j23BwI27iMwjUhUZhvLWnZMWg/TW3ySlnd3apTWdHNQy9
7ab0N7AS615IgGElJvtYi4jthio+TzmP6IpCqBsrFNnEcZUFgC6PFRC7NLurzzix
Dj0srgAiGzXna1bE1v9dxYo/fFEdxkGVLOFTqspteGv3EZGUAMN0Qfo/qtR5Yn5D
nhSKCRRUnKMw/a0gIGuzRK7AW9KCDEOU6CL34D85dTd16KpdYAyC6aPcNQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKfsqAhxYuXLZa4z9did2a1ti9JgMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcC15b0NIRmk1Y3RscmpQMTJKM1pyVzJMMG1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVTeAwQA
wjsfMA0GCSqGSIb3DQEBCwUAA4IBAQBiJQ0iNAjUzqzUUhH7W7j5otGu3JnZ/eCy
TtOVZNfC8CsYF1syxV3ZRKMCurh6mXrkZ8CaNFDxzuFE8dT829c3cMJIchr85Xla
qquOFpVD2EMW4F20dGviVZfdN8YZQ7AhXt7bgM6fL2TPVFzTGrzuge9hlNGOpMUf
RKeCRo57xuFZNYAt/cpjbI6v3qBurvbgjWyr/7R40rAxNHRG8/FnzMouj1+Y+2dl
L5wo/LB8Ud3HTNlS3zL6Bvvf/9kCeOprPBSGBK/LmI5Ok8iw83uAfo5pRECvnoHw
INfdxCf5bRqhoTch6nvUEIyTQDX9D4dYmLbUXhOkng406XWEIMGb
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:43 2024 by rpki-client on console-ams.rpki-client.org