Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Qp5xHiOtxuhKJ-tQh_ajMo7Azaw.roa
File: Qp5xHiOtxuhKJ-tQh_ajMo7Azaw.roa (raw, json)
Hash identifier: D9V/HqPC8uW+TtJ69afumpvnbLqRMg773zPYHC2gMMk=
Subject key identifier: 42:9E:71:1E:23:AD:C6:E8:4A:27:EB:50:87:F6:A3:32:8E:C0:CD:AC
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018BB048631CA3D337CE9F2EC1732364A05A
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Qp5xHiOtxuhKJ-tQh_ajMo7Azaw.roa
Signing time: Wed 08 Nov 2023 18:53:35 +0000
ROA not before: Wed 08 Nov 2023 18:53:35 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44103
IP address blocks: 45.94.54.0/24 maxlen: 24
45.94.53.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b0:48:63:1c:a3:d3:37:ce:9f:2e:c1:73:23:64:a0:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Nov 8 18:53:35 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=429e711e23adc6e84a27eb5087f6a3328ec0cdac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e1:94:83:5f:4e:27:25:7b:58:a0:70:e2:43:
b5:40:1c:e8:26:14:e3:f5:83:ce:c3:3e:0e:a9:a0:
8f:54:3f:c0:50:f0:81:82:a5:84:47:fd:b5:80:ca:
da:88:7a:8b:dd:92:d3:a5:e6:20:fc:35:59:9a:13:
3a:9f:15:7b:97:e6:7e:ff:d2:26:51:92:00:5b:6e:
70:4d:69:f9:ac:73:ba:4a:ee:7f:1c:02:5b:ca:eb:
cf:e2:9c:48:8e:7e:0f:4d:a9:0c:0b:56:ff:38:5b:
48:2f:e0:d1:8b:45:5e:26:1d:17:7c:4c:35:87:c8:
7a:8b:12:7a:63:8c:00:8b:ce:be:e0:7e:f0:81:bb:
34:30:97:0f:a8:35:23:54:ac:b9:28:99:a7:c5:a8:
8e:e2:39:87:52:ea:75:f1:0c:e4:dd:46:85:bb:a7:
97:96:03:66:d2:81:53:37:ba:a7:aa:3f:45:32:a8:
85:41:66:af:7f:74:48:a4:99:ad:65:20:3f:ee:67:
6c:e7:2a:b6:8c:99:3f:39:c4:21:1d:88:59:ea:7c:
35:87:ec:7e:c4:4d:d0:25:ec:91:4e:79:29:b4:a2:
3f:c1:9d:4d:36:ba:28:b3:1e:ed:4b:c1:b6:00:e6:
96:f5:c9:97:ea:ee:a8:e3:9b:8e:ea:67:23:bd:83:
8c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9E:71:1E:23:AD:C6:E8:4A:27:EB:50:87:F6:A3:32:8E:C0:CD:AC
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/Qp5xHiOtxuhKJ-tQh_ajMo7Azaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.53.0-45.94.54.255
Signature Algorithm: sha256WithRSAEncryption
3f:c7:d0:99:39:78:47:9e:38:88:20:78:b0:22:1e:91:85:39:
81:e0:6e:3e:17:65:17:02:40:21:9d:5f:59:d6:12:df:6a:79:
ad:e1:ff:c8:94:dd:61:ec:15:b6:7c:b5:cc:c3:fd:52:78:5f:
63:97:38:21:d2:48:5b:12:0e:9f:dc:47:f6:0b:de:b6:f0:d5:
fe:d9:51:89:a8:1e:5e:8c:a5:1e:95:51:1b:ae:43:f7:dd:7b:
9d:60:13:1d:f0:d4:25:3b:b2:2d:e2:03:12:97:98:da:8a:5c:
1c:96:b9:bd:e3:b0:cd:f0:a6:37:5e:be:38:3e:22:af:31:0c:
e7:d0:37:ea:a1:1f:d4:1a:fa:ee:70:49:57:1d:80:ec:85:8c:
5f:fd:9e:f8:5a:5c:b0:bf:3b:32:19:cf:79:9a:cb:29:a2:73:
71:9c:92:65:89:74:14:43:f2:3f:ee:54:df:1d:ff:9a:98:0d:
df:f5:00:54:76:90:54:b8:5a:68:b0:3b:9a:a2:41:01:dd:e6:
b9:d6:6e:f2:3a:8e:72:a6:66:92:a4:6c:bf:74:ba:9f:cc:4e:
de:32:c7:60:70:23:95:d3:ad:63:99:ce:33:57:f6:c1:04:3f:
82:04:79:c2:23:d5:74:01:64:43:1d:9b:95:23:19:9b:2f:19:
a6:80:bb:de
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYuwSGMco9M3zp8uwXMjZKBaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy
MzQxMmYwHhcNMjMxMTA4MTg1MzM1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjllNzExZTIzYWRjNmU4NGEyN2ViNTA4N2Y2YTMzMjhlYzBjZGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieGUg19OJyV7WKBw4kO1QBzoJhTj
9YPOwz4OqaCPVD/AUPCBgqWER/21gMraiHqL3ZLTpeYg/DVZmhM6nxV7l+Z+/9Im
UZIAW25wTWn5rHO6Su5/HAJbyuvP4pxIjn4PTakMC1b/OFtIL+DRi0VeJh0XfEw1
h8h6ixJ6Y4wAi86+4H7wgbs0MJcPqDUjVKy5KJmnxaiO4jmHUup18Qzk3UaFu6eX
lgNm0oFTN7qnqj9FMqiFQWavf3RIpJmtZSA/7mds5yq2jJk/OcQhHYhZ6nw1h+x+
xE3QJeyRTnkptKI/wZ1NNroosx7tS8G2AOaW9cmX6u6o45uO6mcjvYOM9QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEKecR4jrcboSifrUIf2ozKOwM2sMB8GA1UdIwQY
MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt
MWUwNDY1NTEzYjYzLzEvUXA1eEhpT3R4dWhLSi10UWhfYWpNbzdBemF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz
LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtXjUD
BAAtXjYwDQYJKoZIhvcNAQELBQADggEBAD/H0Jk5eEeeOIggeLAiHpGFOYHgbj4X
ZRcCQCGdX1nWEt9qea3h/8iU3WHsFbZ8tczD/VJ4X2OXOCHSSFsSDp/cR/YL3rbw
1f7ZUYmoHl6MpR6VURuuQ/fde51gEx3w1CU7si3iAxKXmNqKXByWub3jsM3wpjde
vjg+Iq8xDOfQN+qhH9Qa+u5wSVcdgOyFjF/9nvhaXLC/OzIZz3mayymic3GckmWJ
dBRD8j/uVN8d/5qYDd/1AFR2kFS4WmiwO5qiQQHd5rnWbvI6jnKmZpKkbL90up/M
Tt4yx2BwI5XTrWOZzjNX9sEEP4IEecIj1XQBZEMdm5UjGZsvGaaAu94=
-----END CERTIFICATE-----
Generated at Mon Nov 20 19:07:26 2023 by rpki-client on console-ams.rpki-client.org