Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/eODT0uin_KIEzh4_4SGwDJ3yHBg.roa
File: eODT0uin_KIEzh4_4SGwDJ3yHBg.roa (raw, json)
Hash identifier: IB8ElMSDv4Ct7wwxWHAQbu2w5dqTLlPuPpD90N1v1wU=
Subject key identifier: 78:E0:D3:D2:E8:A7:FC:A2:04:CE:1E:3F:E1:21:B0:0C:9D:F2:1C:18
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018D0D77A2CE44FD651EAA3D49D73FEE1026
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/eODT0uin_KIEzh4_4SGwDJ3yHBg.roa
Signing time: Mon 15 Jan 2024 14:12:40 +0000
ROA not before: Mon 15 Jan 2024 14:12:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215789
IP address blocks: 147.45.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jan 2024 17:12:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:77:a2:ce:44:fd:65:1e:aa:3d:49:d7:3f:ee:10:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 15 14:12:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78e0d3d2e8a7fca204ce1e3fe121b00c9df21c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:21:60:29:3f:31:f7:72:ad:02:aa:ac:32:8f:
63:22:9a:e7:76:30:79:da:85:ca:5a:31:c3:7a:08:
13:f0:f6:64:44:42:53:44:a5:ed:61:d1:99:46:05:
a9:2b:03:33:16:02:15:e2:6f:37:06:84:f0:86:d9:
01:3f:be:6d:a7:b2:23:0a:69:23:09:3e:10:2d:a5:
42:ca:5f:29:60:00:68:fc:e8:a9:00:90:d5:a0:be:
ef:a1:62:7b:9b:b4:07:2a:22:06:ae:9c:b4:6d:4d:
68:75:64:ce:72:0a:fe:40:74:14:c4:60:72:e7:12:
41:64:6a:b3:74:02:57:e2:1c:ff:0e:18:6c:eb:3b:
b8:0d:dc:6c:27:63:66:65:1e:da:d4:59:45:6d:65:
7f:49:5d:27:d8:87:53:55:d9:a3:e4:18:ea:1a:e6:
95:39:6e:19:d1:4c:98:a6:1a:a8:3c:b2:81:50:4b:
69:ab:22:f4:d3:c5:1d:88:cb:77:a4:3d:75:23:24:
78:ed:1f:46:e4:ae:9a:bb:a1:77:49:18:86:c1:df:
8e:2b:55:5f:83:23:d5:05:ab:c3:92:f3:af:24:ae:
d5:c6:3e:c8:eb:a2:0d:f1:41:b6:e0:c7:33:ef:d2:
05:ab:63:c1:e6:15:92:92:00:ae:8e:de:7c:1a:0d:
a8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E0:D3:D2:E8:A7:FC:A2:04:CE:1E:3F:E1:21:B0:0C:9D:F2:1C:18
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/eODT0uin_KIEzh4_4SGwDJ3yHBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.44.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:4d:f5:7d:b6:94:94:4a:45:35:22:2b:a8:5d:ce:a0:49:2d:
89:1b:e1:6b:67:9b:4a:39:87:f6:ae:71:48:9e:5f:cb:ef:af:
84:40:92:b0:9b:3f:d2:fb:a6:57:3e:cd:4b:e4:e4:7f:e2:4f:
52:a0:4c:9d:37:cd:23:79:20:0a:c2:21:45:4b:c3:7a:f3:26:
3c:c1:74:6f:9b:2a:d0:29:ff:6e:24:05:42:f4:81:dc:d5:44:
51:bc:8e:32:be:f6:2d:67:24:f8:21:fc:70:ac:2e:41:0e:d8:
d5:de:9a:2f:6b:67:a9:4d:d4:c7:5e:a3:dd:1d:be:b3:98:a7:
83:60:67:09:eb:e2:66:4b:d0:72:2d:1f:3b:fb:f1:56:0e:c4:
35:b7:07:c1:ee:a7:09:44:54:db:fd:43:7a:c4:86:35:c0:d3:
24:89:c0:53:ae:6f:16:a4:b1:24:a3:f0:42:05:7f:03:5a:dd:
ee:c5:2d:03:4f:30:17:37:76:69:ec:17:54:34:8c:06:af:57:
44:51:dc:43:1f:a0:9a:28:a9:bf:65:c3:67:8d:74:b8:b1:d8:
98:0e:c7:23:91:bc:a8:f6:50:14:87:4e:9d:ce:d1:36:d0:1c:
e1:20:bc:ad:3e:f3:54:0f:e5:68:4d:ad:c0:7f:2c:90:68:56:
22:15:c5:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0Nd6LORP1lHqo9Sdc/7hAmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjQwMTE1MTQxMjQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGUwZDNkMmU4YTdmY2EyMDRjZTFlM2ZlMTIxYjAwYzlkZjIxYzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCFgKT8x93KtAqqsMo9jIprndjB5
2oXKWjHDeggT8PZkREJTRKXtYdGZRgWpKwMzFgIV4m83BoTwhtkBP75tp7IjCmkj
CT4QLaVCyl8pYABo/OipAJDVoL7voWJ7m7QHKiIGrpy0bU1odWTOcgr+QHQUxGBy
5xJBZGqzdAJX4hz/Dhhs6zu4DdxsJ2NmZR7a1FlFbWV/SV0n2IdTVdmj5BjqGuaV
OW4Z0UyYphqoPLKBUEtpqyL008UdiMt3pD11IyR47R9G5K6au6F3SRiGwd+OK1Vf
gyPVBavDkvOvJK7Vxj7I66IN8UG24Mcz79IFq2PB5hWSkgCujt58Gg2o8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHjg09Lop/yiBM4eP+EhsAyd8hwYMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvZU9EVDB1aW5fS0lFemg0XzRTR3dESjN5SEJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAky0sMA0G
CSqGSIb3DQEBCwUAA4IBAQAsTfV9tpSUSkU1IiuoXc6gSS2JG+FrZ5tKOYf2rnFI
nl/L76+EQJKwmz/S+6ZXPs1L5OR/4k9SoEydN80jeSAKwiFFS8N68yY8wXRvmyrQ
Kf9uJAVC9IHc1URRvI4yvvYtZyT4IfxwrC5BDtjV3pova2epTdTHXqPdHb6zmKeD
YGcJ6+JmS9ByLR87+/FWDsQ1twfB7qcJRFTb/UN6xIY1wNMkicBTrm8WpLEko/BC
BX8DWt3uxS0DTzAXN3Zp7BdUNIwGr1dEUdxDH6CaKKm/ZcNnjXS4sdiYDscjkbyo
9lAUh06dztE20BzhILytPvNUD+VoTa3AfyyQaFYiFcV8
-----END CERTIFICATE-----
Generated at Fri Jan 26 21:38:58 2024 by rpki-client on console-ams.rpki-client.org