Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/yUCuvoKQOCuF8182M4CDVq1lL4c.roa
File: yUCuvoKQOCuF8182M4CDVq1lL4c.roa (raw, json)
Hash identifier: VPNAT1LEdgpZqCuv/awZfCNwOtD8dvxLHHSLewIL7K8=
Subject key identifier: C9:40:AE:BE:82:90:38:2B:85:F3:5F:36:33:80:83:56:AD:65:2F:87
Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial: 0188CA0BB346F2467BF45C49D6AC0491DA21
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/yUCuvoKQOCuF8182M4CDVq1lL4c.roa
Signing time: Sat 17 Jun 2023 15:49:04 +0000
ROA not before: Sat 17 Jun 2023 15:49:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398395
IP address blocks: 45.67.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ca:0b:b3:46:f2:46:7b:f4:5c:49:d6:ac:04:91:da:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Validity
Not Before: Jun 17 15:49:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c940aebe8290382b85f35f3633808356ad652f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:dd:d5:c8:bc:27:ed:95:68:84:3c:2a:09:
1a:5a:ca:b1:b2:a1:31:c4:f2:09:c8:45:19:84:28:
48:2d:78:12:1d:3a:55:6c:08:cb:68:b9:d4:20:49:
e9:cf:e7:d3:d9:8b:bc:5f:30:7e:ad:47:3e:ed:ca:
d5:54:6a:cb:f5:49:7c:75:73:f7:7e:7a:55:e5:33:
3f:24:8b:1b:2d:f4:a9:1e:89:10:3e:52:d3:10:97:
15:0b:0f:a1:da:b7:d7:ab:98:b7:66:a5:e6:b0:5a:
1b:58:af:40:d8:05:00:ac:86:de:90:84:a1:72:9f:
eb:79:b6:82:2b:56:f0:1e:b9:2e:59:f8:46:c2:a8:
92:b4:a5:54:81:95:2c:f9:2a:cc:af:ad:ad:31:f9:
6c:64:0e:b6:4f:21:cc:9f:87:74:ac:44:59:db:2d:
7f:67:7e:69:8f:c0:96:58:72:70:96:3c:52:d5:df:
ec:b7:03:be:06:c3:b2:54:81:44:c3:b3:34:b0:6a:
e1:96:7c:ef:3d:fb:55:8d:4e:3d:65:f0:74:60:f2:
c2:69:37:45:25:ed:da:75:8c:9a:ad:8b:e4:53:a4:
26:c0:9e:16:23:3c:7a:08:a4:86:5e:49:e4:c5:ec:
ab:9b:1b:cd:da:30:be:8f:23:17:71:9b:61:35:9b:
46:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:40:AE:BE:82:90:38:2B:85:F3:5F:36:33:80:83:56:AD:65:2F:87
X509v3 Authority Key Identifier:
keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/yUCuvoKQOCuF8182M4CDVq1lL4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.13.0/24
Signature Algorithm: sha256WithRSAEncryption
41:1a:b0:b4:6d:cf:c8:f3:e5:a0:c8:a6:67:71:e0:33:8c:97:
f0:be:06:0f:7f:8b:4b:85:ea:53:a2:47:68:7b:77:0e:83:fd:
b5:13:d1:d9:10:ad:b3:ed:1a:f4:c2:da:c9:47:98:3a:cb:51:
8a:2e:74:fe:a0:cc:74:ca:5a:b6:96:03:58:c9:c8:a7:a9:52:
23:6a:6d:66:f8:56:b3:ba:38:ce:94:95:37:61:e4:23:20:20:
70:f1:1e:43:51:be:78:94:48:88:8d:ae:57:7d:93:29:b7:03:
76:3e:c8:3c:f2:d6:de:a5:20:dd:00:13:2c:0a:51:30:67:38:
02:87:80:ef:2c:13:cb:7c:19:99:cf:65:6f:0b:38:26:ee:ec:
cc:60:ea:78:87:46:71:fb:aa:24:03:c3:2a:f6:27:69:18:5a:
2d:51:77:38:3d:c6:f8:c7:85:39:5d:ad:f1:c2:a9:1d:3f:b9:
84:f3:2c:62:4d:f0:1f:a3:de:62:03:a0:71:0a:5c:25:86:49:
04:1f:af:c9:9a:46:7e:e7:9f:fa:64:48:5e:7c:ec:81:c1:93:
34:ec:6f:f5:10:93:6a:81:bc:67:a5:a3:d5:69:fb:44:7c:16:
41:13:45:1d:6c:2b:96:21:3d:70:0d:e3:9d:1d:fa:ff:12:06:
9b:0b:03:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjKC7NG8kZ79FxJ1qwEkdohMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YzQwYTc0N2UzYWMxYWNjNjExYTRjNDAzYjYwMDczOThl
N2Q3OWYwHhcNMjMwNjE3MTU0OTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTQwYWViZTgyOTAzODJiODVmMzVmMzYzMzgwODM1NmFkNjUyZjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM3d1ci8J+2VaIQ8KgkaWsqxsqEx
xPIJyEUZhChILXgSHTpVbAjLaLnUIEnpz+fT2Yu8XzB+rUc+7crVVGrL9Ul8dXP3
fnpV5TM/JIsbLfSpHokQPlLTEJcVCw+h2rfXq5i3ZqXmsFobWK9A2AUArIbekISh
cp/rebaCK1bwHrkuWfhGwqiStKVUgZUs+SrMr62tMflsZA62TyHMn4d0rERZ2y1/
Z35pj8CWWHJwljxS1d/stwO+BsOyVIFEw7M0sGrhlnzvPftVjU49ZfB0YPLCaTdF
Je3adYyarYvkU6QmwJ4WIzx6CKSGXknkxeyrmxvN2jC+jyMXcZthNZtGiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMlArr6CkDgrhfNfNjOAg1atZS+HMB8GA1UdIwQY
MBaAFLfECnR+OsGsxhGkxAO2AHOY59efMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDhRS2RINDZ3YXpHRWFURUE3WUFjNWpuMTU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zNzVlYmMtYmFmYi00ZTBiLWI1NDkt
Nzc2MzVhMjJlYjk2LzEveVVDdXZvS1FPQ3VGODE4Mk00Q0RWcTFsTDRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zNzVlYmMtYmFmYi00ZTBiLWI1NDktNzc2MzVhMjJlYjk2
LzEvdDhRS2RINDZ3YXpHRWFURUE3WUFjNWpuMTU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUMNMA0G
CSqGSIb3DQEBCwUAA4IBAQBBGrC0bc/I8+WgyKZnceAzjJfwvgYPf4tLhepTokdo
e3cOg/21E9HZEK2z7Rr0wtrJR5g6y1GKLnT+oMx0ylq2lgNYycinqVIjam1m+Faz
ujjOlJU3YeQjICBw8R5DUb54lEiIja5XfZMptwN2Psg88tbepSDdABMsClEwZzgC
h4DvLBPLfBmZz2VvCzgm7uzMYOp4h0Zx+6okA8Mq9idpGFotUXc4Pcb4x4U5Xa3x
wqkdP7mE8yxiTfAfo95iA6BxClwlhkkEH6/JmkZ+55/6ZEhefOyBwZM07G/1EJNq
gbxnpaPVaftEfBZBE0UdbCuWIT1wDeOdHfr/EgabCwP/
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org