Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vaeoPuoIMcS_tGopTqek8wjikjk.roa
File: vaeoPuoIMcS_tGopTqek8wjikjk.roa (raw, json)
Hash identifier: X9WXYy4DyoakKGW6UollNDZiTMkD211ZMBDi3F7ITDc=
Subject key identifier: BD:A7:A8:3E:EA:08:31:C4:BF:B4:6A:29:4E:A7:A4:F3:08:E2:92:39
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185A5EDD237F61EED3B12BEF92F4AC87DD6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vaeoPuoIMcS_tGopTqek8wjikjk.roa
Signing time: Thu 12 Jan 2023 12:21:44 +0000
ROA not before: Thu 12 Jan 2023 12:21:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60446
IP address blocks: 45.14.164.0/24 maxlen: 24
45.9.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a5:ed:d2:37:f6:1e:ed:3b:12:be:f9:2f:4a:c8:7d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 12 12:21:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bda7a83eea0831c4bfb46a294ea7a4f308e29239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:98:4b:8c:2b:13:fe:58:9c:33:bb:b4:3c:a2:
ff:ec:0a:0a:fc:fa:91:7b:18:c4:6a:20:1f:8e:3d:
74:ac:64:7b:92:ed:cd:0e:50:e5:de:bb:f5:44:fb:
28:64:80:21:15:74:68:d8:cf:c6:56:c7:81:8f:4b:
49:26:cf:cb:c3:34:4d:74:e3:d0:f5:44:c7:45:b0:
b9:b5:6c:33:60:a1:2a:58:0c:f1:e8:8c:15:5b:fc:
23:31:7b:54:bb:5f:52:f7:73:d2:3f:d9:ba:e8:34:
5b:e1:81:06:c5:48:a7:d3:83:f1:63:80:38:ba:ce:
d5:95:f5:07:3e:cb:7a:21:e9:6e:19:05:22:52:46:
8e:94:f6:94:bb:40:74:c5:ba:25:90:31:b4:57:42:
96:12:b5:e6:93:f9:1b:9e:30:2b:53:d9:f6:c8:f1:
8c:20:e8:03:81:d6:49:3a:e8:43:36:25:9a:a0:0d:
e9:1a:fe:75:6c:1e:f7:77:eb:cb:20:0f:19:b7:f7:
43:71:5f:02:d8:ea:d0:4b:e3:72:13:34:73:6c:a4:
44:70:f2:0c:26:eb:cf:45:a8:e8:b2:54:6c:b0:66:
6c:30:24:80:4e:b4:0f:31:d6:2a:48:32:b4:d4:e4:
cc:bc:88:8b:7a:05:7c:30:5f:61:0f:d2:22:74:ae:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A7:A8:3E:EA:08:31:C4:BF:B4:6A:29:4E:A7:A4:F3:08:E2:92:39
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vaeoPuoIMcS_tGopTqek8wjikjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.157.0/24
45.14.164.0/24
Signature Algorithm: sha256WithRSAEncryption
30:08:45:db:ed:e0:83:e3:b7:08:d9:b8:a8:a9:2e:b6:8d:8f:
a1:99:5f:95:1e:10:3d:90:6c:6c:2f:bd:5a:13:72:8d:9c:71:
48:e9:6e:73:eb:cf:09:b0:a8:d1:c4:33:0d:30:76:c3:ce:a8:
45:7a:ad:9f:1b:72:76:b9:97:46:1d:56:e2:66:8c:50:b8:46:
da:3b:44:65:f7:82:ab:af:78:ed:07:4f:2e:52:68:1b:ed:75:
2c:19:9c:c0:be:6c:26:ae:5a:22:91:15:1a:5d:94:ba:8c:b4:
ac:73:89:e4:6e:4b:43:83:60:2c:bc:56:21:e6:77:0b:01:88:
68:a7:6c:7e:de:e2:26:d4:bf:27:96:12:74:fb:fa:c5:dd:db:
69:36:c8:f6:20:d2:65:5d:92:85:79:b5:4b:aa:eb:ff:b7:9d:
64:5c:70:e5:ca:78:39:4b:af:7b:d6:dd:f5:a3:00:64:9f:b6:
3f:f4:7f:32:4a:e8:5e:19:52:fa:70:4d:c4:f8:99:d5:98:1b:
31:f7:ce:ff:4a:f3:a7:49:6f:aa:75:62:76:8a:e9:87:ed:f2:
47:46:21:94:d3:f9:b4:d8:45:51:d1:e1:54:0a:ff:20:bd:8d:
c7:8f:09:1a:da:ba:e4:37:57:cd:67:ad:c2:7a:9c:9e:21:e3:
0c:c4:6f:7c
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYWl7dI39h7tOxK++S9KyH3WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjMwMTEyMTIyMTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGE3YTgzZWVhMDgzMWM0YmZiNDZhMjk0ZWE3YTRmMzA4ZTI5MjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJhLjCsT/licM7u0PKL/7AoK/PqR
exjEaiAfjj10rGR7ku3NDlDl3rv1RPsoZIAhFXRo2M/GVseBj0tJJs/LwzRNdOPQ
9UTHRbC5tWwzYKEqWAzx6IwVW/wjMXtUu19S93PSP9m66DRb4YEGxUin04PxY4A4
us7VlfUHPst6IeluGQUiUkaOlPaUu0B0xbolkDG0V0KWErXmk/kbnjArU9n2yPGM
IOgDgdZJOuhDNiWaoA3pGv51bB73d+vLIA8Zt/dDcV8C2OrQS+NyEzRzbKREcPIM
JuvPRajoslRssGZsMCSATrQPMdYqSDK01OTMvIiLegV8MF9hD9IidK5RsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL2nqD7qCDHEv7RqKU6npPMI4pI5MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvdmFlb1B1b0lNY1NfdEdvcFRxZWs4d2ppa2prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALQmdAwQA
LQ6kMA0GCSqGSIb3DQEBCwUAA4IBAQAwCEXb7eCD47cI2bioqS62jY+hmV+VHhA9
kGxsL71aE3KNnHFI6W5z688JsKjRxDMNMHbDzqhFeq2fG3J2uZdGHVbiZoxQuEba
O0Rl94Krr3jtB08uUmgb7XUsGZzAvmwmrloikRUaXZS6jLSsc4nkbktDg2AsvFYh
5ncLAYhop2x+3uIm1L8nlhJ0+/rF3dtpNsj2INJlXZKFebVLquv/t51kXHDlyng5
S6971t31owBkn7Y/9H8ySuheGVL6cE3E+JnVmBsx987/SvOnSW+qdWJ2iumH7fJH
RiGU0/m02EVR0eFUCv8gvY3Hjwka2rrkN1fNZ63CepyeIeMMxG98
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:43 2023 by rpki-client on console-ams.rpki-client.org