Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/7erRTb1o2UwUYmXmxhc6spQu9qE.roa
File: 7erRTb1o2UwUYmXmxhc6spQu9qE.roa (raw, json)
Hash identifier: 1BlphUCgNpDlLP8uEzZAx+EALGz46ZcWf5fVlqDQdbA=
Subject key identifier: ED:EA:D1:4D:BD:68:D9:4C:14:62:65:E6:C6:17:3A:B2:94:2E:F6:A1
Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial: 01877ADC77CC8DD1E963B4CF8B0A5F7E859C
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/7erRTb1o2UwUYmXmxhc6spQu9qE.roa
Signing time: Thu 13 Apr 2023 13:44:41 +0000
ROA not before: Thu 13 Apr 2023 13:44:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.11.174.0/24 maxlen: 24
45.11.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 May 2023 11:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:dc:77:cc:8d:d1:e9:63:b4:cf:8b:0a:5f:7e:85:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Validity
Not Before: Apr 13 13:44:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=edead14dbd68d94c146265e6c6173ab2942ef6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:ab:47:86:81:59:07:3e:fa:0a:8f:3b:5c:
f9:0f:7f:a1:87:3b:9a:79:7d:8c:07:f1:f6:d2:16:
e6:bb:f6:97:39:47:9c:ad:93:37:e4:8b:bc:db:e9:
bd:53:61:d5:30:8a:1b:15:c9:60:81:80:5f:06:43:
76:13:d0:71:4e:19:39:95:73:12:bd:65:18:02:e5:
40:61:c0:2d:08:7a:6f:5d:96:be:86:f9:42:0f:55:
2c:eb:65:dc:91:14:ff:c4:0b:6e:6e:50:ff:d4:ff:
a5:b7:1c:6b:65:5b:a7:ee:29:7b:a7:6f:45:c0:bd:
3d:1b:cb:8b:e3:1c:ab:45:41:6b:7d:aa:6a:d0:6e:
e8:ea:cf:89:ec:65:aa:84:61:a0:d7:24:23:2d:f3:
2f:6f:24:cc:07:13:ae:20:ad:0a:20:6d:d9:ee:a9:
6b:68:4f:63:24:51:04:58:73:d1:82:59:23:a6:cc:
11:66:d0:a4:ab:73:4d:97:73:1f:8a:5f:a2:77:0f:
b7:1c:51:6e:f9:20:fa:eb:e3:45:30:b0:c9:99:5f:
6d:bf:ab:d2:43:42:1a:f8:40:8b:52:fe:96:56:c7:
d5:d1:17:19:54:8f:a2:a0:4b:2d:d2:2b:ee:95:92:
03:1a:fe:0d:0e:57:e5:fc:55:75:f8:81:76:06:95:
f1:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EA:D1:4D:BD:68:D9:4C:14:62:65:E6:C6:17:3A:B2:94:2E:F6:A1
X509v3 Authority Key Identifier:
keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/7erRTb1o2UwUYmXmxhc6spQu9qE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.174.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:89:c0:5b:cb:60:32:46:7a:8e:2c:44:43:43:7e:4a:a1:46:
88:39:89:b1:fd:41:e2:0d:5e:a1:cb:fa:5a:dd:84:9b:c3:12:
ac:64:0d:89:a8:22:5d:9b:c2:8a:7e:60:0a:29:2a:09:50:06:
02:cd:bf:85:32:a0:a4:0c:57:e3:95:90:d9:89:3e:4c:f1:5c:
9a:d6:22:dc:19:63:bc:06:d7:a4:90:1e:e3:a3:ee:dd:65:01:
94:c6:26:5e:8f:ee:b5:11:3f:40:eb:98:0f:2a:87:67:c7:e4:
95:a8:8e:29:62:81:1d:60:ae:c6:ff:ce:26:db:18:56:6b:5a:
55:3d:0b:6b:28:d2:77:02:41:d8:bb:a8:0f:6b:72:09:59:03:
04:27:33:ad:db:a6:f9:eb:12:00:16:c5:8b:ab:4f:b5:22:a3:
cf:4a:e7:ef:fb:ca:ac:55:2c:7b:ba:85:c4:52:15:f9:5f:67:
60:83:e5:bf:47:27:93:9b:e8:e6:d6:70:91:63:7a:3f:5c:2c:
c3:2f:df:1a:71:16:f6:26:a2:a3:d9:b1:2e:c1:41:a8:f5:98:
b3:3c:e9:7f:da:69:70:c4:db:86:6d:84:fa:5b:59:82:b4:ec:
a2:a0:92:c9:bd:8e:2a:c6:dc:01:8a:cc:88:68:8c:6b:ed:68:
69:8f:e6:dd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd63HfMjdHpY7TPiwpffoWcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTY5NTc4NmY4NDUwZDEwNDFkYzg4YWQ4OTJjYmI1NzBk
NTk3MmIwHhcNMjMwNDEzMTM0NDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGVhZDE0ZGJkNjhkOTRjMTQ2MjY1ZTZjNjE3M2FiMjk0MmVmNmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmSrR4aBWQc++gqPO1z5D3+hhzua
eX2MB/H20hbmu/aXOUecrZM35Iu82+m9U2HVMIobFclggYBfBkN2E9BxThk5lXMS
vWUYAuVAYcAtCHpvXZa+hvlCD1Us62XckRT/xAtublD/1P+ltxxrZVun7il7p29F
wL09G8uL4xyrRUFrfapq0G7o6s+J7GWqhGGg1yQjLfMvbyTMBxOuIK0KIG3Z7qlr
aE9jJFEEWHPRglkjpswRZtCkq3NNl3Mfil+idw+3HFFu+SD66+NFMLDJmV9tv6vS
Q0Ia+ECLUv6WVsfV0RcZVI+ioEst0ivulZIDGv4NDlfl/FV1+IF2BpXxkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO3q0U29aNlMFGJl5sYXOrKULvahMB8GA1UdIwQY
MBaAFH1WlXhvhFDRBB3IitiSy7Vw1ZcrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDIt
NjNiMzM4MDhhNmE4LzEvN2VyUlRiMW8yVXdVWW1YbXhoYzZzcFF1OXFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDItNjNiMzM4MDhhNmE4
LzEvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLQuuMA0G
CSqGSIb3DQEBCwUAA4IBAQBNicBby2AyRnqOLERDQ35KoUaIOYmx/UHiDV6hy/pa
3YSbwxKsZA2JqCJdm8KKfmAKKSoJUAYCzb+FMqCkDFfjlZDZiT5M8Vya1iLcGWO8
BtekkB7jo+7dZQGUxiZej+61ET9A65gPKodnx+SVqI4pYoEdYK7G/84m2xhWa1pV
PQtrKNJ3AkHYu6gPa3IJWQMEJzOt26b56xIAFsWLq0+1IqPPSufv+8qsVSx7uoXE
UhX5X2dgg+W/RyeTm+jm1nCRY3o/XCzDL98acRb2JqKj2bEuwUGo9ZizPOl/2mlw
xNuGbYT6W1mCtOyioJLJvY4qxtwBisyIaIxr7Whpj+bd
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:12 2024 by rpki-client on console-fra.rpki-client.org