Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/b6NndhxqGhDzLX7tdL8E4qIfXGU.roa
File: b6NndhxqGhDzLX7tdL8E4qIfXGU.roa (raw, json)
Hash identifier: A7YyksJv2SW96kk9qvTmStGUR3V/wRTQPCsmWd3AL/c=
Subject key identifier: 6F:A3:67:76:1C:6A:1A:10:F3:2D:7E:ED:74:BF:04:E2:A2:1F:5C:65
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 018A03BD7D18AE9DC5A450D515AF1ADEC513
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/b6NndhxqGhDzLX7tdL8E4qIfXGU.roa
Signing time: Thu 17 Aug 2023 13:44:24 +0000
ROA not before: Thu 17 Aug 2023 13:44:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199614
IP address blocks: 45.15.104.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:03:bd:7d:18:ae:9d:c5:a4:50:d5:15:af:1a:de:c5:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Aug 17 13:44:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6fa367761c6a1a10f32d7eed74bf04e2a21f5c65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:79:5e:17:35:96:f1:45:eb:00:81:f9:47:22:
11:e7:80:27:fd:d3:d4:2b:08:70:be:8f:7a:8f:2f:
c6:96:83:26:80:1c:96:34:15:4b:7e:16:9d:ea:28:
88:60:fa:21:22:a8:11:c9:49:af:0e:7f:7d:49:12:
3c:18:51:e2:0b:b2:d8:ea:44:85:ac:1d:32:34:37:
a6:5f:d0:60:4d:b8:88:90:9a:e4:86:a8:e0:e9:13:
24:0e:91:b7:71:8b:95:d1:ef:04:05:8f:f1:9e:7b:
f4:11:48:0d:dc:b6:65:8b:35:3a:69:b8:80:7c:e8:
4d:1b:e7:86:47:42:93:c6:22:9c:dc:63:c7:58:8f:
4a:ca:a7:62:fb:0d:61:e3:cf:3e:d4:a6:ba:f6:8a:
cd:c3:89:1a:2b:bf:74:3b:96:3c:4f:d2:54:ce:3b:
80:be:22:58:ff:0b:d9:a7:98:88:f5:57:3f:81:32:
05:90:ed:ba:75:e4:3e:57:d7:14:68:69:81:0e:88:
6b:f3:26:d7:76:be:9a:ad:f6:32:0f:9e:22:5e:6b:
62:8f:50:dd:1d:b7:dc:14:97:db:b0:81:5d:12:07:
81:73:bd:57:e2:ad:4e:c9:54:9f:b7:a5:00:02:9f:
12:80:18:02:42:47:de:b6:8c:87:73:82:34:3e:eb:
b5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A3:67:76:1C:6A:1A:10:F3:2D:7E:ED:74:BF:04:E2:A2:1F:5C:65
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/b6NndhxqGhDzLX7tdL8E4qIfXGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.104.0/23
Signature Algorithm: sha256WithRSAEncryption
21:5e:fe:f9:e4:e4:d0:5d:35:e1:dc:ea:f6:93:c2:1b:c2:21:
86:fc:54:b6:46:a2:48:9b:11:72:1b:a9:cd:e8:52:07:f5:d1:
53:d4:0e:03:10:a2:5f:eb:ef:01:fa:92:35:bd:42:96:c6:3f:
ed:8a:ac:a5:eb:fc:40:e8:02:ce:17:00:2a:fc:77:ed:29:7e:
69:64:59:b9:9c:1e:02:32:10:b3:9d:76:7a:ca:12:87:57:cc:
60:4a:a5:1a:10:38:0a:13:c3:9c:46:33:fa:bb:7f:a3:42:0a:
84:ec:83:40:17:61:9a:df:59:5c:05:48:65:b7:a4:e6:2a:52:
9e:fc:38:d4:ea:bb:19:9b:ad:2f:c6:eb:31:a4:77:b2:c6:40:
04:ac:17:ec:eb:16:91:22:0a:71:b4:57:49:02:19:ec:67:e4:
8e:43:8c:7a:58:d0:e2:dd:34:0c:51:0f:37:81:17:94:77:68:
6d:62:e3:a2:b8:9a:e8:a4:d6:13:96:5b:8f:e4:47:af:fe:de:
45:30:06:6f:e0:c6:d4:24:09:0a:78:e7:34:b9:09:f1:a6:46:
91:02:89:bd:7a:48:40:9f:e5:9b:1e:7b:5e:58:eb:78:a8:0d:
e1:09:4a:2b:02:1b:ed:c7:83:b9:86:37:70:f3:a2:7a:23:2f:
4e:1f:4a:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYoDvX0Yrp3FpFDVFa8a3sUTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlOGQwN2I0NWY3ZDgzMTI0YzlmOGMwZmFjMDNiZWMwMjQ2
OGIzN2UwHhcNMjMwODE3MTM0NDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmEzNjc3NjFjNmExYTEwZjMyZDdlZWQ3NGJmMDRlMmEyMWY1YzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nleFzWW8UXrAIH5RyIR54An/dPU
Kwhwvo96jy/GloMmgByWNBVLfhad6iiIYPohIqgRyUmvDn99SRI8GFHiC7LY6kSF
rB0yNDemX9BgTbiIkJrkhqjg6RMkDpG3cYuV0e8EBY/xnnv0EUgN3LZlizU6abiA
fOhNG+eGR0KTxiKc3GPHWI9Kyqdi+w1h488+1Ka69orNw4kaK790O5Y8T9JUzjuA
viJY/wvZp5iI9Vc/gTIFkO26deQ+V9cUaGmBDohr8ybXdr6arfYyD54iXmtij1Dd
HbfcFJfbsIFdEgeBc71X4q1OyVSft6UAAp8SgBgCQkfetoyHc4I0Puu18wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG+jZ3YcahoQ8y1+7XS/BOKiH1xlMB8GA1UdIwQY
MBaAFF6NB7RffYMSTJ+MD6wDvsAkaLN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQt
NmM4ZmQ4NGJiNWY1LzEvYjZObmRoeHFHaER6TFg3dGRMOEU0cUlmWEdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQtNmM4ZmQ4NGJiNWY1
LzEvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQ9oMA0G
CSqGSIb3DQEBCwUAA4IBAQAhXv755OTQXTXh3Or2k8IbwiGG/FS2RqJImxFyG6nN
6FIH9dFT1A4DEKJf6+8B+pI1vUKWxj/tiqyl6/xA6ALOFwAq/HftKX5pZFm5nB4C
MhCznXZ6yhKHV8xgSqUaEDgKE8OcRjP6u3+jQgqE7INAF2Ga31lcBUhlt6TmKlKe
/DjU6rsZm60vxusxpHeyxkAErBfs6xaRIgpxtFdJAhnsZ+SOQ4x6WNDi3TQMUQ83
gReUd2htYuOiuJropNYTlluP5Eev/t5FMAZv4MbUJAkKeOc0uQnxpkaRAom9ekhA
n+WbHnteWOt4qA3hCUorAhvtx4O5hjdw86J6Iy9OH0oY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:52 2024 by rpki-client on console-fra.rpki-client.org