Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/A72dDbrswsEIT16CMY79rSiDMS0.roa
File: A72dDbrswsEIT16CMY79rSiDMS0.roa (raw, json)
Hash identifier: TrMZrRTuRFQYiEolOtKmh9Eba6wEh9ZzvG7vB9zIqDw=
Subject key identifier: 03:BD:9D:0D:BA:EC:C2:C1:08:4F:5E:82:31:8E:FD:AD:28:83:31:2D
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018BEDE8897AFC36F24B81FF1E333D353C6C
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/A72dDbrswsEIT16CMY79rSiDMS0.roa
Signing time: Mon 20 Nov 2023 18:05:21 +0000
ROA not before: Mon 20 Nov 2023 18:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44103
IP address blocks: 45.94.54.0/24 maxlen: 24
45.94.53.0/24 maxlen: 24
45.94.55.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ed:e8:89:7a:fc:36:f2:4b:81:ff:1e:33:3d:35:3c:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Nov 20 18:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=03bd9d0dbaecc2c1084f5e82318efdad2883312d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:24:94:d9:79:63:77:d3:af:f0:59:ad:4b:f0:
bd:ed:1b:d7:de:b6:ed:70:bb:16:36:60:df:10:6c:
d9:bf:78:3f:f3:76:a4:d0:6d:22:24:3a:3c:d8:1d:
f8:80:62:0e:a5:2e:3c:4d:82:db:ff:62:30:15:d9:
7e:cb:46:99:fe:a6:90:c4:c6:7b:1e:89:26:5f:0a:
30:b7:af:e8:ef:5a:4a:c6:fc:7b:ae:56:e4:05:0b:
51:41:3a:4f:3e:fd:9e:b3:ae:46:00:cc:11:61:4c:
a4:e6:a5:19:04:ab:2e:85:9a:a7:cc:0f:10:4d:4d:
fb:5f:ca:42:ab:99:dd:a5:90:fd:68:fe:14:e8:73:
26:f1:3a:c9:49:ef:a3:6f:e3:07:b2:53:b1:b7:20:
dc:2b:b2:4a:d2:0d:59:33:c8:b0:5c:09:25:88:74:
4f:5f:f8:20:d8:e3:34:62:cb:25:58:50:33:2f:62:
34:23:69:07:41:30:69:18:7f:3a:b2:63:24:6c:e9:
ca:54:5d:03:e6:10:31:52:ea:be:7c:6f:c6:47:dc:
17:8d:e0:62:cd:95:c5:b3:49:92:8f:83:6e:f5:f0:
54:ff:30:df:43:f3:61:4a:d4:5f:13:e7:f3:f5:ee:
ca:bb:12:94:65:6b:84:5f:78:78:1d:bd:07:5b:72:
cb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BD:9D:0D:BA:EC:C2:C1:08:4F:5E:82:31:8E:FD:AD:28:83:31:2D
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/A72dDbrswsEIT16CMY79rSiDMS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.53.0-45.94.55.255
Signature Algorithm: sha256WithRSAEncryption
bc:87:4a:dc:7e:9e:df:34:3f:f4:08:21:48:3d:ba:6f:79:2c:
a8:99:b4:3f:58:6e:98:d9:dc:22:1a:28:5b:cb:3c:c3:56:0a:
85:78:6a:e1:66:df:6b:a7:e4:3b:71:59:3a:4c:2d:d0:0f:e2:
6e:bf:45:21:6d:c3:7d:f1:cf:a6:73:19:e9:b5:e6:16:fd:02:
8e:2a:6f:21:db:a7:10:37:b2:70:56:82:59:e5:69:16:85:71:
d8:a3:8e:89:5d:67:fe:7d:d7:c4:50:e3:29:59:b3:1c:72:4d:
ee:b2:95:85:91:07:4e:f4:08:42:ab:31:34:02:d6:97:46:f9:
6c:b5:aa:06:71:38:5b:ae:2e:94:8a:bd:89:4e:bf:47:4c:1f:
1e:f4:db:0d:e3:3f:f4:fa:56:c4:9b:79:94:bc:9e:3d:62:67:
cd:6a:55:13:a8:ae:0a:e9:76:f7:a2:8c:fb:a4:cb:7b:9a:62:
77:a2:59:86:a3:30:b8:37:59:5e:a5:4a:7a:96:0e:b6:91:48:
56:76:38:54:78:2d:df:2e:82:a4:90:8c:b6:f8:8b:09:83:6b:
4f:d0:ac:ce:52:de:42:0d:f3:6e:20:f9:0d:ad:5a:96:7f:ea:
7b:70:84:76:50:96:58:07:4c:aa:6a:2f:fb:7b:e7:87:64:9f:
90:2f:1e:f1
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYvt6Il6/DbyS4H/HjM9NTxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy
MzQxMmYwHhcNMjMxMTIwMTgwNTIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2JkOWQwZGJhZWNjMmMxMDg0ZjVlODIzMThlZmRhZDI4ODMzMTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiSU2Xljd9Ov8FmtS/C97RvX3rbt
cLsWNmDfEGzZv3g/83ak0G0iJDo82B34gGIOpS48TYLb/2IwFdl+y0aZ/qaQxMZ7
HokmXwowt6/o71pKxvx7rlbkBQtRQTpPPv2es65GAMwRYUyk5qUZBKsuhZqnzA8Q
TU37X8pCq5ndpZD9aP4U6HMm8TrJSe+jb+MHslOxtyDcK7JK0g1ZM8iwXAkliHRP
X/gg2OM0YsslWFAzL2I0I2kHQTBpGH86smMkbOnKVF0D5hAxUuq+fG/GR9wXjeBi
zZXFs0mSj4Nu9fBU/zDfQ/NhStRfE+fz9e7KuxKUZWuEX3h4Hb0HW3LLbwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAO9nQ267MLBCE9egjGO/a0ogzEtMB8GA1UdIwQY
MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt
MWUwNDY1NTEzYjYzLzEvQTcyZERicnN3c0VJVDE2Q01ZNzlyU2lETVMwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz
LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtXjUD
BAMtXjAwDQYJKoZIhvcNAQELBQADggEBALyHStx+nt80P/QIIUg9um95LKiZtD9Y
bpjZ3CIaKFvLPMNWCoV4auFm32un5DtxWTpMLdAP4m6/RSFtw33xz6ZzGem15hb9
Ao4qbyHbpxA3snBWglnlaRaFcdijjoldZ/5918RQ4ylZsxxyTe6ylYWRB070CEKr
MTQC1pdG+Wy1qgZxOFuuLpSKvYlOv0dMHx702w3jP/T6VsSbeZS8nj1iZ81qVROo
rgrpdveijPuky3uaYneiWYajMLg3WV6lSnqWDraRSFZ2OFR4Ld8ugqSQjLb4iwmD
a0/QrM5S3kIN824g+Q2tWpZ/6ntwhHZQllgHTKpqL/t754dkn5AvHvE=
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:32 2024 by rpki-client on console-ams.rpki-client.org