Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/n9GC5vlfPivXE0VcZdC6M5sucGw.roa
File: n9GC5vlfPivXE0VcZdC6M5sucGw.roa (raw, json)
Hash identifier: p/IK2zs0F2vCtlhK0BkinULD7kitiPryGjyuKPkiFNk=
Subject key identifier: 9F:D1:82:E6:F9:5F:3E:2B:D7:13:45:5C:65:D0:BA:33:9B:2E:70:6C
Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial: 018571B0D8B302DB88D6D5AEE6821A2E2A91
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/n9GC5vlfPivXE0VcZdC6M5sucGw.roa
Signing time: Mon 02 Jan 2023 08:54:53 +0000
ROA not before: Mon 02 Jan 2023 08:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50302
IP address blocks: 45.133.92.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:d8:b3:02:db:88:d6:d5:ae:e6:82:1a:2e:2a:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Validity
Not Before: Jan 2 08:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9fd182e6f95f3e2bd713455c65d0ba339b2e706c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7a:ae:9d:bc:b0:d4:bd:43:39:6a:5e:3f:ea:
83:39:5d:c9:82:11:16:49:59:2c:e5:77:78:60:56:
f0:2e:8f:c8:1c:25:02:64:30:d7:f3:c6:d3:62:e1:
23:84:70:3f:51:be:3f:98:77:a0:0d:ca:14:f5:3e:
de:a3:37:bf:b4:00:b9:cd:ff:fb:c9:63:2b:55:53:
42:ef:f5:58:79:a1:3a:8c:15:6b:bf:6d:fc:46:85:
20:29:8a:2a:92:89:ef:7d:32:69:ac:d9:81:c4:02:
16:36:17:a4:a1:dd:e5:9d:7f:f1:8f:f7:7f:05:31:
88:5e:7c:aa:24:b2:72:86:1b:86:10:55:82:04:72:
ce:57:92:a9:6e:56:52:28:6c:0f:4e:91:1d:b5:ab:
12:33:a4:bd:e1:4e:41:8c:fd:a4:47:78:66:55:7e:
d5:75:1d:50:36:38:fe:c5:c7:24:b8:20:47:10:f1:
1d:0c:1d:01:7f:be:19:2d:49:a8:2d:25:38:6a:f5:
76:04:95:86:7a:2f:e3:38:ab:0a:99:9d:4d:33:47:
36:da:3b:54:7d:97:36:3c:3f:2a:c7:fc:d7:9d:8e:
4f:70:2a:d4:56:3c:38:95:22:fa:2f:c8:1c:b7:61:
22:a1:79:a9:53:6e:62:c7:27:bd:9e:ae:33:55:34:
99:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D1:82:E6:F9:5F:3E:2B:D7:13:45:5C:65:D0:BA:33:9B:2E:70:6C
X509v3 Authority Key Identifier:
keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/n9GC5vlfPivXE0VcZdC6M5sucGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.92.0/22
Signature Algorithm: sha256WithRSAEncryption
26:4d:07:d3:ba:30:1a:f8:13:fd:8d:0d:5a:0a:dc:c9:88:56:
02:aa:30:b1:a5:16:ca:da:8b:38:f7:29:b8:5f:bd:78:e1:8e:
99:59:e4:79:bd:cc:a9:31:bc:3a:06:9e:fe:e8:ce:95:f3:47:
4c:f5:a7:d1:91:13:66:2a:02:02:f8:33:b7:ab:e5:97:60:83:
87:d0:1e:0e:5d:ad:9a:e7:df:52:a3:96:39:fb:69:c7:49:62:
75:a4:53:e9:db:25:c9:c5:3a:c5:ef:bb:49:17:52:ef:6a:2b:
81:17:a4:2b:0d:79:6c:82:74:c0:f6:94:10:e4:69:94:91:16:
d4:80:19:bc:ff:ca:f5:f8:97:ab:fb:aa:8d:3c:52:38:43:5c:
3d:bc:17:42:94:57:a0:fd:58:6a:e0:61:f2:cd:6e:2b:1f:c7:
b9:f0:17:b5:f0:28:7e:a5:90:8d:1d:51:19:98:70:53:a7:3f:
15:6e:1d:b4:7e:86:88:b6:bb:c3:a9:52:a0:d3:e7:c4:95:ec:
6c:b5:50:29:43:64:0b:bf:7a:4d:66:ea:96:e7:9d:5b:f4:15:
a2:63:38:6d:66:69:d0:a6:7e:07:d0:1f:ad:73:d7:9a:46:5a:
03:3d:fb:1a:0e:a8:1b:72:00:e5:ae:66:78:cc:38:d7:4f:9a:
1b:7c:b3:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxsNizAtuI1tWu5oIaLiqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMWNlMWQxMzViZjJjZjhlOGMxM2YzM2VjMTFjODUyMzcw
M2RjNzUwHhcNMjMwMTAyMDg1NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmQxODJlNmY5NWYzZTJiZDcxMzQ1NWM2NWQwYmEzMzliMmU3MDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3qunbyw1L1DOWpeP+qDOV3JghEW
SVks5Xd4YFbwLo/IHCUCZDDX88bTYuEjhHA/Ub4/mHegDcoU9T7eoze/tAC5zf/7
yWMrVVNC7/VYeaE6jBVrv238RoUgKYoqkonvfTJprNmBxAIWNhekod3lnX/xj/d/
BTGIXnyqJLJyhhuGEFWCBHLOV5KpblZSKGwPTpEdtasSM6S94U5BjP2kR3hmVX7V
dR1QNjj+xcckuCBHEPEdDB0Bf74ZLUmoLSU4avV2BJWGei/jOKsKmZ1NM0c22jtU
fZc2PD8qx/zXnY5PcCrUVjw4lSL6L8gct2EioXmpU25ixye9nq4zVTSZ3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ/Rgub5Xz4r1xNFXGXQujObLnBsMB8GA1UdIwQY
MBaAFIoc4dE1vyz46ME/M+wRyFI3A9x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9kYWY5NjAtZDA2MC00OWZjLWFmNDIt
ZGVlMjkyZWE4N2EzLzEvbjlHQzV2bGZQaXZYRTBWY1pkQzZNNXN1Y0d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9kYWY5NjAtZDA2MC00OWZjLWFmNDItZGVlMjkyZWE4N2Ez
LzEvaWh6aDBUV19MUGpvd1Q4ejdCSElVamNEM0hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYVcMA0G
CSqGSIb3DQEBCwUAA4IBAQAmTQfTujAa+BP9jQ1aCtzJiFYCqjCxpRbK2os49ym4
X7144Y6ZWeR5vcypMbw6Bp7+6M6V80dM9afRkRNmKgIC+DO3q+WXYIOH0B4OXa2a
599So5Y5+2nHSWJ1pFPp2yXJxTrF77tJF1LvaiuBF6QrDXlsgnTA9pQQ5GmUkRbU
gBm8/8r1+Jer+6qNPFI4Q1w9vBdClFeg/Vhq4GHyzW4rH8e58Be18Ch+pZCNHVEZ
mHBTpz8Vbh20foaItrvDqVKg0+fElexstVApQ2QLv3pNZuqW551b9BWiYzhtZmnQ
pn4H0B+tc9eaRloDPfsaDqgbcgDlrmZ4zDjXT5obfLNa
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:35 2024 by rpki-client on console-ams.rpki-client.org