Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/ghkot1EeVWEI2xCB8HK6WDeSfrM.roa
File: ghkot1EeVWEI2xCB8HK6WDeSfrM.roa (raw, json)
Hash identifier: ZUA7k6FiG8oyt1oSK3bqnHLVzx0VhcxybPg9FwQG/Rk=
Subject key identifier: 82:19:28:B7:51:1E:55:61:08:DB:10:81:F0:72:BA:58:37:92:7E:B3
Certificate issuer: /CN=530841e82aa46d9959fc7811b25795c56cd50608
Certificate serial: 018570950714BF5422F416245B4CF94A840D
Authority key identifier: 53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/ghkot1EeVWEI2xCB8HK6WDeSfrM.roa
Signing time: Mon 02 Jan 2023 03:44:52 +0000
ROA not before: Mon 02 Jan 2023 03:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59780
IP address blocks: 45.12.116.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:95:07:14:bf:54:22:f4:16:24:5b:4c:f9:4a:84:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=530841e82aa46d9959fc7811b25795c56cd50608
Validity
Not Before: Jan 2 03:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=821928b7511e556108db1081f072ba5837927eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:dd:f3:94:a9:41:9a:db:6d:e2:90:3e:15:0a:
5c:6d:ee:fa:d3:5c:74:9e:e1:4d:ab:b3:76:f4:35:
e7:7a:d9:f6:12:38:00:95:df:be:85:c1:f2:b2:a2:
20:61:c4:b9:3c:53:2a:c2:0a:7b:47:99:30:37:79:
63:7b:84:c7:d4:bf:73:6e:c1:b9:de:e6:3d:96:63:
ab:6e:87:0b:41:93:0e:01:59:25:7a:ca:33:ec:c8:
0a:05:8f:b1:7e:09:f3:71:fb:bd:ee:bb:e8:63:f0:
6e:f5:4b:f5:cc:2b:3f:56:b5:cb:3c:f4:34:f1:ae:
7c:a6:14:54:66:46:9b:78:fc:43:da:80:24:40:2e:
2b:6e:91:0d:d3:b8:b0:e9:61:63:6b:2c:2b:97:67:
59:dc:09:fe:d2:f5:fb:08:a9:76:4f:9a:21:a7:cd:
a1:cb:b8:e8:f3:49:ce:27:1f:79:32:1e:e6:e0:02:
16:b7:be:be:c5:2b:ea:fd:e7:bd:d3:74:61:fd:65:
87:ec:f1:98:9c:6d:5c:b1:f7:5b:a0:da:80:d6:99:
10:27:49:0d:94:5c:f3:df:66:e3:86:43:fa:bb:b7:
94:0a:01:68:6c:1e:1d:49:90:c0:3a:29:f8:f9:61:
98:b8:51:01:8f:0e:be:a4:11:bd:26:c8:0c:aa:98:
8f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:19:28:B7:51:1E:55:61:08:DB:10:81:F0:72:BA:58:37:92:7E:B3
X509v3 Authority Key Identifier:
keyid:53:08:41:E8:2A:A4:6D:99:59:FC:78:11:B2:57:95:C5:6C:D5:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UwhB6CqkbZlZ_HgRsleVxWzVBgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/ghkot1EeVWEI2xCB8HK6WDeSfrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/afb7f2-55d2-49e5-8659-4a82cdd4b1a0/1/UwhB6CqkbZlZ_HgRsleVxWzVBgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.116.0/22
Signature Algorithm: sha256WithRSAEncryption
40:f9:78:18:80:60:64:24:fc:3a:65:17:1d:a3:15:78:9a:5b:
f7:a3:4a:0d:f1:fd:01:8d:a7:87:36:21:cc:6e:6d:d3:66:d2:
c9:62:8b:77:f0:02:20:02:c0:fd:6c:45:51:68:1d:4a:f3:bc:
6c:c2:56:9d:0f:9d:e5:26:0f:d4:3b:c0:b3:91:a6:6d:e1:60:
2e:32:d0:d3:09:c2:62:8b:0f:ba:0b:c8:ae:35:90:1f:e6:8b:
8f:3e:6d:5d:2f:8e:ab:c4:17:07:0a:75:46:5b:a3:fe:05:96:
05:0a:84:7d:0d:2a:2a:54:0f:d4:83:fd:93:86:3e:98:85:59:
2f:9f:ae:1f:eb:29:09:7c:60:4e:c7:3e:70:4f:e1:15:7f:4b:
d2:ed:2c:58:71:f2:ad:4d:e2:9d:92:bc:4c:ec:d5:06:67:7d:
dd:3f:61:88:0f:64:e3:5d:ed:19:ab:c1:83:89:b8:6c:c5:34:
db:b8:d2:ab:79:57:9c:92:25:94:f3:a9:aa:0e:cb:70:1d:4e:
07:05:91:99:49:92:d1:ad:9f:c0:30:8e:47:84:b0:a1:c7:b9:
68:a1:76:07:a5:c1:7b:a4:b5:33:02:ae:c8:1e:b0:cd:0e:33:
a0:68:7d:32:ae:4b:e8:90:10:31:ca:ee:a5:e0:1c:8d:b5:bf:
2c:29:ae:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwlQcUv1Qi9BYkW0z5SoQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMDg0MWU4MmFhNDZkOTk1OWZjNzgxMWIyNTc5NWM1NmNk
NTA2MDgwHhcNMjMwMTAyMDM0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjE5MjhiNzUxMWU1NTYxMDhkYjEwODFmMDcyYmE1ODM3OTI3ZWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N3zlKlBmttt4pA+FQpcbe7601x0
nuFNq7N29DXnetn2EjgAld++hcHysqIgYcS5PFMqwgp7R5kwN3lje4TH1L9zbsG5
3uY9lmOrbocLQZMOAVklesoz7MgKBY+xfgnzcfu97rvoY/Bu9Uv1zCs/VrXLPPQ0
8a58phRUZkabePxD2oAkQC4rbpEN07iw6WFjaywrl2dZ3An+0vX7CKl2T5ohp82h
y7jo80nOJx95Mh7m4AIWt76+xSvq/ee903Rh/WWH7PGYnG1csfdboNqA1pkQJ0kN
lFzz32bjhkP6u7eUCgFobB4dSZDAOin4+WGYuFEBjw6+pBG9JsgMqpiPAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIIZKLdRHlVhCNsQgfByulg3kn6zMB8GA1UdIwQY
MBaAFFMIQegqpG2ZWfx4EbJXlcVs1QYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXdoQjZDcWtiWmxaX0hnUnNsZVZ4V3pWQmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9hZmI3ZjItNTVkMi00OWU1LTg2NTkt
NGE4MmNkZDRiMWEwLzEvZ2hrb3QxRWVWV0VJMnhDQjhISzZXRGVTZnJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9hZmI3ZjItNTVkMi00OWU1LTg2NTktNGE4MmNkZDRiMWEw
LzEvVXdoQjZDcWtiWmxaX0hnUnNsZVZ4V3pWQmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQx0MA0G
CSqGSIb3DQEBCwUAA4IBAQBA+XgYgGBkJPw6ZRcdoxV4mlv3o0oN8f0BjaeHNiHM
bm3TZtLJYot38AIgAsD9bEVRaB1K87xswladD53lJg/UO8CzkaZt4WAuMtDTCcJi
iw+6C8iuNZAf5ouPPm1dL46rxBcHCnVGW6P+BZYFCoR9DSoqVA/Ug/2Thj6YhVkv
n64f6ykJfGBOxz5wT+EVf0vS7SxYcfKtTeKdkrxM7NUGZ33dP2GID2TjXe0Zq8GD
ibhsxTTbuNKreVeckiWU86mqDstwHU4HBZGZSZLRrZ/AMI5HhLChx7looXYHpcF7
pLUzAq7IHrDNDjOgaH0yrkvokBAxyu6l4ByNtb8sKa7i
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:31 2024 by rpki-client on console-fra.rpki-client.org