Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/Jz8iy5Ve4D24rFZvUgUi30Nk9Jk.roa
File: Jz8iy5Ve4D24rFZvUgUi30Nk9Jk.roa (raw, json)
Hash identifier: jYOlid0jS4YuqrJNTf0t5+MaN9swnCyuQF0La2cArY0=
Subject key identifier: 27:3F:22:CB:95:5E:E0:3D:B8:AC:56:6F:52:05:22:DF:43:64:F4:99
Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial: 0188B229CBC945432CD13966B34E47549D00
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/Jz8iy5Ve4D24rFZvUgUi30Nk9Jk.roa
Signing time: Tue 13 Jun 2023 00:31:03 +0000
ROA not before: Tue 13 Jun 2023 00:31:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.11.172.0/23 maxlen: 24
45.11.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 12:05:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b2:29:cb:c9:45:43:2c:d1:39:66:b3:4e:47:54:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Validity
Not Before: Jun 13 00:31:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=273f22cb955ee03db8ac566f520522df4364f499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:49:c8:34:7c:d1:b5:28:2c:10:86:a3:65:6e:
20:ca:ff:b4:a4:02:fa:91:e6:f9:83:57:f6:0c:84:
52:2c:31:ff:3c:2a:9a:cc:38:70:24:b9:1b:84:74:
83:4d:2e:0b:f6:03:d0:7f:9b:5c:93:98:99:74:61:
ac:8d:ff:2c:9e:a3:6c:21:17:b7:18:eb:29:8d:ed:
e3:62:39:9a:82:61:df:93:e4:bc:dd:b8:cc:6f:38:
85:5a:fd:03:a4:38:dc:e2:69:31:2e:4f:5a:78:04:
90:ce:56:50:ec:85:48:de:d2:d4:a6:b3:53:b8:79:
59:20:e3:49:63:2d:85:d2:a7:73:5c:f1:dd:c0:bd:
e5:78:3d:9a:95:9b:9b:f3:d8:c7:82:2a:66:b3:3a:
b2:5d:a3:7a:a7:ba:44:07:a7:07:43:d1:cc:b8:1a:
aa:7e:6d:5f:43:2d:e8:8e:fd:76:69:97:67:01:83:
11:a8:e1:b5:73:c0:c1:46:89:b2:a3:7a:f1:1d:35:
c6:a4:97:d1:4c:8c:8f:d1:30:d3:21:87:02:67:e3:
b6:04:cc:87:b2:34:1d:8c:bc:fd:7c:8e:8f:67:9c:
29:2f:0c:9b:32:bf:56:52:d6:ab:dd:4f:a8:1f:91:
5e:83:8a:83:62:90:46:d4:c3:fe:92:36:6b:b6:73:
be:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3F:22:CB:95:5E:E0:3D:B8:AC:56:6F:52:05:22:DF:43:64:F4:99
X509v3 Authority Key Identifier:
keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/Jz8iy5Ve4D24rFZvUgUi30Nk9Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.172.0/23
45.11.175.0/24
Signature Algorithm: sha256WithRSAEncryption
09:5f:6b:8f:a8:97:c6:7c:4c:14:2f:ea:ce:87:fc:c6:16:af:
4b:8d:55:b3:57:30:ee:9c:83:ed:1b:28:ed:9b:c2:14:f9:fe:
85:6f:4c:05:87:15:23:4b:e7:97:02:30:dc:a0:1e:cc:4e:82:
7f:f6:fe:3f:06:9a:50:fb:01:23:87:6d:c5:3b:46:70:59:5e:
0d:af:b9:b9:ff:71:f8:34:1c:5e:0f:15:29:a9:06:95:0d:47:
ae:2d:dc:48:6e:85:2c:10:97:66:47:8a:3e:5a:a9:84:48:dc:
e1:39:d7:d2:bc:e8:85:90:ff:35:af:b4:3b:e8:35:2a:3b:b3:
55:54:be:d9:9e:b9:4d:52:ad:73:0d:41:6f:ad:85:e5:14:c8:
c5:60:6e:55:e3:5e:60:27:4a:ea:41:09:a1:51:04:20:74:06:
5e:0b:d4:cd:d0:24:fa:c1:88:5d:d1:8b:1b:c8:10:29:4b:6f:
fc:c2:dd:ad:f5:b6:04:68:b8:01:f2:e4:bc:d2:0a:97:dd:4b:
27:f1:7c:73:c0:33:f2:c8:c1:da:30:b3:23:25:66:65:da:80:
c7:df:99:83:6f:2c:69:c0:10:bf:f0:87:cb:e8:e6:df:1c:09:
c6:83:06:ca:5f:43:9d:64:ef:9d:e5:ac:d4:a5:89:0c:48:b0:
f7:4e:91:f5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYiyKcvJRUMs0Tlms05HVJ0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNTY5NTc4NmY4NDUwZDEwNDFkYzg4YWQ4OTJjYmI1NzBk
NTk3MmIwHhcNMjMwNjEzMDAzMTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNzNmMjJjYjk1NWVlMDNkYjhhYzU2NmY1MjA1MjJkZjQzNjRmNDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEnINHzRtSgsEIajZW4gyv+0pAL6
keb5g1f2DIRSLDH/PCqazDhwJLkbhHSDTS4L9gPQf5tck5iZdGGsjf8snqNsIRe3
GOspje3jYjmagmHfk+S83bjMbziFWv0DpDjc4mkxLk9aeASQzlZQ7IVI3tLUprNT
uHlZIONJYy2F0qdzXPHdwL3leD2alZub89jHgipmszqyXaN6p7pEB6cHQ9HMuBqq
fm1fQy3ojv12aZdnAYMRqOG1c8DBRomyo3rxHTXGpJfRTIyP0TDTIYcCZ+O2BMyH
sjQdjLz9fI6PZ5wpLwybMr9WUtar3U+oH5Feg4qDYpBG1MP+kjZrtnO+9QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCc/IsuVXuA9uKxWb1IFIt9DZPSZMB8GA1UdIwQY
MBaAFH1WlXhvhFDRBB3IitiSy7Vw1ZcrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDIt
NjNiMzM4MDhhNmE4LzEvSno4aXk1VmU0RDI0ckZadlVnVWkzME5rOUprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zMTdhYTctZTJhZC00YTg1LWIzZDItNjNiMzM4MDhhNmE4
LzEvZlZhVmVHLUVVTkVFSGNpSzJKTEx0WERWbHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLQusAwQA
LQuvMA0GCSqGSIb3DQEBCwUAA4IBAQAJX2uPqJfGfEwUL+rOh/zGFq9LjVWzVzDu
nIPtGyjtm8IU+f6Fb0wFhxUjS+eXAjDcoB7MToJ/9v4/BppQ+wEjh23FO0ZwWV4N
r7m5/3H4NBxeDxUpqQaVDUeuLdxIboUsEJdmR4o+WqmESNzhOdfSvOiFkP81r7Q7
6DUqO7NVVL7ZnrlNUq1zDUFvrYXlFMjFYG5V415gJ0rqQQmhUQQgdAZeC9TN0CT6
wYhd0YsbyBApS2/8wt2t9bYEaLgB8uS80gqX3Usn8XxzwDPyyMHaMLMjJWZl2oDH
35mDbyxpwBC/8IfL6ObfHAnGgwbKX0OdZO+d5azUpYkMSLD3TpH1
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:12 2024 by rpki-client on console-fra.rpki-client.org