Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/Tscwo1I0tRvYdEjmUNaGmkhCvTU.roa
File: Tscwo1I0tRvYdEjmUNaGmkhCvTU.roa (raw, json)
Hash identifier: kL70DnndW4cds7dO3UAqFDziZXB1138ACONAGkX+wjE=
Subject key identifier: 4E:C7:30:A3:52:34:B5:1B:D8:74:48:E6:50:D6:86:9A:48:42:BD:35
Certificate issuer: /CN=5871720a8884167fef82a49267661fb346d7561a
Certificate serial: 018570671E531084F0DC1F75A29DB0B6E550
Authority key identifier: 58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/Tscwo1I0tRvYdEjmUNaGmkhCvTU.roa
Signing time: Mon 02 Jan 2023 02:54:44 +0000
ROA not before: Mon 02 Jan 2023 02:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208070
IP address blocks: 45.159.169.0/24 maxlen: 24
45.159.168.0/24 maxlen: 24
45.159.171.0/24 maxlen: 24
45.159.170.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:1e:53:10:84:f0:dc:1f:75:a2:9d:b0:b6:e5:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5871720a8884167fef82a49267661fb346d7561a
Validity
Not Before: Jan 2 02:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ec730a35234b51bd87448e650d6869a4842bd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d0:cf:98:e2:ae:82:ba:e5:ce:06:77:c6:31:
ae:f7:68:66:b7:51:4a:46:7e:fd:f0:62:64:15:6d:
07:d8:c0:09:e9:a9:5e:31:80:01:3f:0b:77:53:78:
60:9c:6f:e8:8a:0d:93:9a:e0:08:b6:e0:70:44:b2:
c5:a5:86:fe:86:9b:b2:86:86:9b:a5:7e:bd:28:16:
64:8b:84:d3:a6:12:33:26:c2:44:e2:37:6d:29:ee:
4f:40:30:8a:7f:89:5c:dd:b7:cc:36:00:2c:c1:5b:
c6:13:1d:3a:03:30:13:03:7d:c4:8f:6d:90:f8:27:
60:ee:29:94:ab:3d:5c:b1:10:7d:0b:6a:5c:74:4b:
67:c6:13:f6:14:d4:4e:9e:3f:e5:b0:98:87:57:b8:
39:6d:5a:f3:6d:11:e5:fa:33:45:29:d7:1a:58:4f:
03:3c:b7:1f:48:1d:4c:b5:92:2e:d0:7c:ec:44:d8:
bf:ec:a7:7f:d8:75:56:9b:b4:51:f1:c7:d5:83:ce:
ab:cd:dd:29:de:ce:50:37:75:b7:e6:fc:1e:e0:ce:
18:3d:ec:2b:7a:62:09:11:69:a8:31:07:a6:4f:3c:
ee:28:36:44:ab:1d:4b:a4:d5:e5:00:78:e6:7d:71:
97:ad:8e:84:4c:d5:a9:ad:18:0c:d2:9f:69:36:4d:
5a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C7:30:A3:52:34:B5:1B:D8:74:48:E6:50:D6:86:9A:48:42:BD:35
X509v3 Authority Key Identifier:
keyid:58:71:72:0A:88:84:16:7F:EF:82:A4:92:67:66:1F:B3:46:D7:56:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/Tscwo1I0tRvYdEjmUNaGmkhCvTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/0fa602-f6b8-47ae-bf06-7da89cda9f71/1/WHFyCoiEFn_vgqSSZ2Yfs0bXVho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.168.0/22
Signature Algorithm: sha256WithRSAEncryption
24:cf:08:01:7b:62:3d:02:aa:27:d8:67:37:25:ea:5b:6f:fd:
5f:27:4f:43:4f:00:75:ec:cf:a4:a1:7b:b3:b8:e0:79:48:9d:
6e:66:47:08:7d:ba:12:32:4a:9f:e3:5a:fb:8b:fd:e0:5b:ef:
c4:f4:af:18:3c:ee:85:f5:ce:8c:2c:9d:fe:0a:5b:28:eb:3b:
3c:22:2f:eb:91:44:a8:04:f9:39:f1:14:62:12:04:f3:c2:37:
6e:6e:0b:03:7e:8f:5a:c8:33:04:34:c6:43:10:6b:c9:87:0c:
8b:dc:22:1b:72:e4:3e:15:e8:cf:ea:c6:fa:36:7b:4c:48:aa:
28:8b:f2:a8:82:59:e3:c0:2b:ef:71:b7:ee:a4:2b:6b:6e:7e:
7a:e0:3b:c9:52:e9:6f:61:dc:fa:0c:e0:cc:b9:98:00:a7:d0:
f1:92:95:9a:ba:dd:54:fb:65:2c:ba:77:88:5b:dc:08:c1:b9:
07:46:bc:e2:75:cd:48:a9:e8:ff:d7:89:2f:e4:90:ea:30:91:
1f:52:59:e2:c6:af:d4:ad:97:94:2c:59:a3:3b:1d:5b:52:b0:
c1:08:2c:6a:80:6a:e1:8a:25:13:b8:31:61:92:40:b3:36:61:
f2:06:fc:1e:af:82:ea:cf:35:5a:fe:38:1f:ee:91:ba:c0:20:
73:3c:af:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZx5TEITw3B91op2wtuVQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NzE3MjBhODg4NDE2N2ZlZjgyYTQ5MjY3NjYxZmIzNDZk
NzU2MWEwHhcNMjMwMTAyMDI1NDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWM3MzBhMzUyMzRiNTFiZDg3NDQ4ZTY1MGQ2ODY5YTQ4NDJiZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9DPmOKugrrlzgZ3xjGu92hmt1FK
Rn798GJkFW0H2MAJ6aleMYABPwt3U3hgnG/oig2TmuAItuBwRLLFpYb+hpuyhoab
pX69KBZki4TTphIzJsJE4jdtKe5PQDCKf4lc3bfMNgAswVvGEx06AzATA33Ej22Q
+Cdg7imUqz1csRB9C2pcdEtnxhP2FNROnj/lsJiHV7g5bVrzbRHl+jNFKdcaWE8D
PLcfSB1MtZIu0HzsRNi/7Kd/2HVWm7RR8cfVg86rzd0p3s5QN3W35vwe4M4YPewr
emIJEWmoMQemTzzuKDZEqx1LpNXlAHjmfXGXrY6ETNWprRgM0p9pNk1aaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE7HMKNSNLUb2HRI5lDWhppIQr01MB8GA1UdIwQY
MBaAFFhxcgqIhBZ/74KkkmdmH7NG11YaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8wZmE2MDItZjZiOC00N2FlLWJmMDYt
N2RhODljZGE5ZjcxLzEvVHNjd28xSTB0UnZZZEVqbVVOYUdta2hDdlRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8wZmE2MDItZjZiOC00N2FlLWJmMDYtN2RhODljZGE5Zjcx
LzEvV0hGeUNvaUVGbl92Z3FTU1oyWWZzMGJYVmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ+oMA0G
CSqGSIb3DQEBCwUAA4IBAQAkzwgBe2I9Aqon2Gc3Jepbb/1fJ09DTwB17M+koXuz
uOB5SJ1uZkcIfboSMkqf41r7i/3gW+/E9K8YPO6F9c6MLJ3+Clso6zs8Ii/rkUSo
BPk58RRiEgTzwjdubgsDfo9ayDMENMZDEGvJhwyL3CIbcuQ+FejP6sb6NntMSKoo
i/KoglnjwCvvcbfupCtrbn564DvJUulvYdz6DODMuZgAp9DxkpWaut1U+2UsuneI
W9wIwbkHRrzidc1Iqej/14kv5JDqMJEfUlnixq/UrZeULFmjOx1bUrDBCCxqgGrh
iiUTuDFhkkCzNmHyBvwer4LqzzVa/jgf7pG6wCBzPK+R
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:19 2024 by rpki-client on console-fra.rpki-client.org