Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/RF6zInFqhTeOYWT9lsPyw0LW9BE.roa
File: RF6zInFqhTeOYWT9lsPyw0LW9BE.roa (raw, json)
Hash identifier: 4gGKTBskYg+Ok+X5lnaV1rlIboZGDDB0shmQNSxeC/4=
Subject key identifier: 44:5E:B3:22:71:6A:85:37:8E:61:64:FD:96:C3:F2:C3:42:D6:F4:11
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018C3A8F8B1C8AD6FE89212C5DCDE7E07318
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/RF6zInFqhTeOYWT9lsPyw0LW9BE.roa
Signing time: Tue 05 Dec 2023 15:18:54 +0000
ROA not before: Tue 05 Dec 2023 15:18:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6079
IP address blocks: 45.138.0.0/23 maxlen: 23
46.161.218.0/23 maxlen: 23
2a0e:eb45::/32 maxlen: 32
2a0c:9e05::/32 maxlen: 32
2a0e:eb46::/32 maxlen: 32
2a0e:eb41::/32 maxlen: 32
2a0e:eb43::/32 maxlen: 32
2a0e:eb47::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 05 Dec 2023 15:19:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3a:8f:8b:1c:8a:d6:fe:89:21:2c:5d:cd:e7:e0:73:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Dec 5 15:18:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=445eb322716a85378e6164fd96c3f2c342d6f411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cc:70:2b:73:b6:3d:26:bc:f6:4a:91:64:c7:
87:03:29:9e:95:2d:2d:e1:9b:a5:35:9c:4d:a4:0c:
69:27:a4:49:90:65:98:ac:d1:e7:fa:f1:78:e3:de:
db:ee:a3:de:65:ce:b5:b8:53:94:d3:90:74:65:3d:
5c:ad:26:06:66:53:03:47:38:3d:62:71:a1:25:f8:
4c:fe:27:b0:c0:b6:b1:32:fa:88:fa:97:87:a4:19:
4f:59:1b:08:ff:11:bd:7d:fd:d2:79:1d:cc:3e:03:
1b:5c:0d:d4:31:c4:47:db:59:19:b4:e8:cf:19:9c:
3e:a6:43:d6:bb:99:aa:b9:0e:5c:c9:64:8e:13:05:
e2:e2:fd:39:2c:bd:86:59:17:48:3a:b1:cf:5c:6c:
c4:c8:a2:08:d5:0f:df:dc:ae:3b:3e:cb:01:3d:c6:
46:ce:cf:8d:d5:d6:d7:0d:e8:d3:3a:9b:7a:c7:a8:
d9:65:65:b7:99:60:1b:0a:55:5a:d1:fe:82:f6:cf:
3e:75:40:a2:dc:69:32:1f:89:d3:06:90:0a:c0:75:
37:46:9d:5f:bb:d7:50:a0:c3:bf:a3:2c:64:13:4a:
b2:2c:fd:93:14:8e:43:e7:63:38:ea:d2:26:4d:23:
b6:1e:99:d0:3b:0a:00:f5:b5:70:8a:9f:10:4f:e5:
cc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5E:B3:22:71:6A:85:37:8E:61:64:FD:96:C3:F2:C3:42:D6:F4:11
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/RF6zInFqhTeOYWT9lsPyw0LW9BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.0.0/23
46.161.218.0/23
IPv6:
2a0c:9e05::/32
2a0e:eb41::/32
2a0e:eb43::/32
2a0e:eb45::-2a0e:eb47:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
25:1d:d3:b5:16:6a:2f:b6:a5:4c:c1:0c:e1:3c:5d:03:b8:87:
89:60:e9:07:dc:e0:96:f2:8d:0b:bc:3f:44:e1:31:9b:9d:67:
36:11:44:f0:04:66:50:5c:23:b3:71:1f:b5:30:9d:92:78:e0:
66:ea:36:4b:f7:bd:73:23:1c:25:e5:28:4d:ab:2c:73:40:e7:
32:eb:9c:99:20:36:d4:b6:f7:49:71:ca:7d:c2:bc:ac:a0:16:
b0:33:d6:f9:43:19:8d:14:d1:64:0a:e5:44:4d:a6:33:8c:31:
55:d2:2a:8a:01:ac:2e:3a:51:52:3f:90:cb:3d:f3:f8:5b:4c:
de:d8:07:b9:38:b8:92:d8:c9:51:52:36:bf:74:ed:8c:e6:95:
28:0a:5b:90:d5:e7:1d:c4:5d:bd:c7:cb:ce:45:57:98:e5:15:
7b:cb:51:36:13:a9:11:b2:73:1e:0b:b5:e4:ed:a6:d0:69:bf:
d6:e3:b8:2b:d8:68:2c:28:f1:ad:f8:01:c4:4b:71:ec:1e:0b:
c3:cb:de:47:d4:1c:e3:6a:cb:59:39:80:b7:6f:43:4b:fb:a1:
3f:f2:28:15:a2:a1:96:06:35:99:61:10:01:91:b9:65:d7:de:
c2:c9:19:b1:1e:cc:63:2d:08:da:2f:ac:0e:fc:12:b2:bf:bb:
94:01:0c:43
-----BEGIN CERTIFICATE-----
MIIFMDCCBBigAwIBAgISAYw6j4scitb+iSEsXc3n4HMYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjMxMjA1MTUxODU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDVlYjMyMjcxNmE4NTM3OGU2MTY0ZmQ5NmMzZjJjMzQyZDZmNDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicxwK3O2PSa89kqRZMeHAymelS0t
4ZulNZxNpAxpJ6RJkGWYrNHn+vF4497b7qPeZc61uFOU05B0ZT1crSYGZlMDRzg9
YnGhJfhM/iewwLaxMvqI+peHpBlPWRsI/xG9ff3SeR3MPgMbXA3UMcRH21kZtOjP
GZw+pkPWu5mquQ5cyWSOEwXi4v05LL2GWRdIOrHPXGzEyKII1Q/f3K47PssBPcZG
zs+N1dbXDejTOpt6x6jZZWW3mWAbClVa0f6C9s8+dUCi3GkyH4nTBpAKwHU3Rp1f
u9dQoMO/oyxkE0qyLP2TFI5D52M46tImTSO2HpnQOwoA9bVwip8QT+XMPQIDAQAB
o4ICPDCCAjgwHQYDVR0OBBYEFEResyJxaoU3jmFk/ZbD8sNC1vQRMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvUkY2ekluRnFoVGVPWVdUOWxzUHl3MExXOUJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFIGCCsGAQUFBwEHAQH/BEMwQTASBAIAATAMAwQBLYoAAwQB
LqHaMCsEAgACMCUDBQAqDJ4FAwUAKg7rQQMFACoO60MwDgMFACoO60UDBQMqDutA
MA0GCSqGSIb3DQEBCwUAA4IBAQAlHdO1FmovtqVMwQzhPF0DuIeJYOkH3OCW8o0L
vD9E4TGbnWc2EUTwBGZQXCOzcR+1MJ2SeOBm6jZL971zIxwl5ShNqyxzQOcy65yZ
IDbUtvdJccp9wrysoBawM9b5QxmNFNFkCuVETaYzjDFV0iqKAawuOlFSP5DLPfP4
W0ze2Ae5OLiS2MlRUja/dO2M5pUoCluQ1ecdxF29x8vORVeY5RV7y1E2E6kRsnMe
C7Xk7abQab/W47gr2GgsKPGt+AHES3HsHgvDy95H1BzjastZOYC3b0NL+6E/8igV
oqGWBjWZYRABkbll197CyRmxHsxjLQjaL6wO/BKyv7uUAQxD
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org