Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/vVrvDH1Sc7119wZlvpxpArDVdnw.roa
File: vVrvDH1Sc7119wZlvpxpArDVdnw.roa (raw, json)
Hash identifier: XB/H7iipv/9MAx1DagYh3gwe9db5/Te7h3LFRGxeaYo=
Subject key identifier: BD:5A:EF:0C:7D:52:73:BD:75:F7:06:65:BE:9C:69:02:B0:D5:76:7C
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018703B1F6245A8308E5CB133402BA9EEA02
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/vVrvDH1Sc7119wZlvpxpArDVdnw.roa
Signing time: Tue 21 Mar 2023 10:23:27 +0000
ROA not before: Tue 21 Mar 2023 10:23:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30644
IP address blocks: 45.128.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Apr 2023 15:23:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:b1:f6:24:5a:83:08:e5:cb:13:34:02:ba:9e:ea:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 21 10:23:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd5aef0c7d5273bd75f70665be9c6902b0d5767c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0d:04:05:e6:4b:20:e0:c5:31:42:1a:b7:f0:
b8:d1:6c:03:14:a2:7a:5f:a8:bd:42:ea:37:8c:16:
e8:2e:e6:80:1f:21:92:1d:4e:b0:79:5d:74:b1:11:
0b:dd:92:08:44:fc:d0:25:be:d1:f3:da:ca:ab:8f:
ec:7c:b7:0b:f0:9a:47:30:ec:91:50:d7:0c:40:6f:
f2:eb:c1:07:d2:64:66:7f:fa:53:3a:7c:65:dc:ab:
2d:93:45:72:cb:42:47:4d:b5:f6:d4:71:d6:2a:9e:
3d:42:e0:d0:74:fc:3d:b7:77:0d:2c:8c:47:88:66:
f7:2c:fc:16:26:b8:a1:65:86:45:73:4e:6d:23:c8:
5f:41:9f:ca:ec:29:45:8d:5b:19:0f:cf:b6:16:79:
11:ce:19:9b:3e:28:21:84:b3:8d:40:1d:34:f5:73:
ea:0c:cd:22:7c:f8:ca:5c:ff:67:aa:15:ba:81:e1:
c2:71:a9:72:dd:9e:e2:60:14:e0:34:89:e2:7e:1e:
c7:88:a0:85:2c:58:e1:84:0d:19:ba:81:94:e4:f0:
e8:15:a3:4b:ed:a2:a7:52:a9:7b:bf:23:bb:1d:34:
66:35:27:88:07:62:a3:47:a7:06:25:3f:5a:78:6c:
3c:bc:2a:1b:74:b8:14:50:67:b6:f7:1a:82:33:1d:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5A:EF:0C:7D:52:73:BD:75:F7:06:65:BE:9C:69:02:B0:D5:76:7C
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/vVrvDH1Sc7119wZlvpxpArDVdnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.157.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:13:e9:3f:32:c6:63:da:fd:41:ac:ba:70:c0:a0:d8:21:d6:
a5:bb:d2:99:a1:94:f4:1e:3b:fa:bc:3d:1d:e3:46:53:a4:ce:
f9:09:c7:ab:55:60:ab:0c:a1:29:32:8a:22:79:ba:71:e2:27:
be:28:4b:0e:d6:e7:f8:de:a3:7a:f2:7b:e9:9a:65:46:e5:b0:
c9:11:30:c1:84:2e:97:b3:92:8f:3d:dc:38:bd:45:05:ff:b4:
a4:bc:62:fc:ae:ef:c0:68:92:ce:ab:e9:c2:bb:92:46:b5:2e:
39:f0:92:80:af:4d:92:60:6f:ef:58:a6:d8:26:c0:38:6a:b7:
ab:ca:d5:19:3b:9b:bb:30:56:c3:63:96:e0:a2:4f:e6:37:e4:
13:1a:0c:81:8d:c7:5e:cc:02:6d:ac:69:e9:3c:26:0f:89:66:
9a:e4:87:05:ed:0b:0c:fe:db:23:65:7c:b7:e6:ae:2d:1b:64:
06:0a:f6:f1:df:1a:f1:59:0a:1b:d8:39:c9:20:91:9e:20:58:
73:47:5a:9d:f0:e4:d2:cd:49:c0:07:5f:20:15:16:d1:41:19:
44:00:12:d0:61:90:be:13:91:70:ed:0b:03:86:ec:5e:2d:3e:
73:8d:94:61:e9:3a:67:6e:c1:01:bd:31:09:19:8d:f5:e0:54:
2f:e3:2f:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcDsfYkWoMI5csTNAK6nuoCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjMwMzIxMTAyMzI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDVhZWYwYzdkNTI3M2JkNzVmNzA2NjViZTljNjkwMmIwZDU3NjdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ0EBeZLIODFMUIat/C40WwDFKJ6
X6i9Quo3jBboLuaAHyGSHU6weV10sREL3ZIIRPzQJb7R89rKq4/sfLcL8JpHMOyR
UNcMQG/y68EH0mRmf/pTOnxl3Kstk0Vyy0JHTbX21HHWKp49QuDQdPw9t3cNLIxH
iGb3LPwWJrihZYZFc05tI8hfQZ/K7ClFjVsZD8+2FnkRzhmbPighhLONQB009XPq
DM0ifPjKXP9nqhW6geHCcaly3Z7iYBTgNInifh7HiKCFLFjhhA0ZuoGU5PDoFaNL
7aKnUql7vyO7HTRmNSeIB2KjR6cGJT9aeGw8vCobdLgUUGe29xqCMx15AQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL1a7wx9UnO9dfcGZb6caQKw1XZ8MB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvdlZydkRIMVNjNzExOXdabHZweHBBckRWZG53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYCdMA0G
CSqGSIb3DQEBCwUAA4IBAQBsE+k/MsZj2v1BrLpwwKDYIdalu9KZoZT0Hjv6vD0d
40ZTpM75CcerVWCrDKEpMooiebpx4ie+KEsO1uf43qN68nvpmmVG5bDJETDBhC6X
s5KPPdw4vUUF/7SkvGL8ru/AaJLOq+nCu5JGtS458JKAr02SYG/vWKbYJsA4arer
ytUZO5u7MFbDY5bgok/mN+QTGgyBjcdezAJtrGnpPCYPiWaa5IcF7QsM/tsjZXy3
5q4tG2QGCvbx3xrxWQob2DnJIJGeIFhzR1qd8OTSzUnAB18gFRbRQRlEABLQYZC+
E5Fw7QsDhuxeLT5zjZRh6TpnbsEBvTEJGY314FQv4y+R
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org