Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/7aSMstnHNgZWBp7UvxN4BTMPP2w.roa
File: 7aSMstnHNgZWBp7UvxN4BTMPP2w.roa (raw, json)
Hash identifier: wjDCuKtV+3yZodqIV9/V6d/hrhK4J56PAdNV4UWYEJc=
Subject key identifier: ED:A4:8C:B2:D9:C7:36:06:56:06:9E:D4:BF:13:78:05:33:0F:3F:6C
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 018A9A56BC63D6F7A420E1BF37441D9718D6
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/7aSMstnHNgZWBp7UvxN4BTMPP2w.roa
Signing time: Fri 15 Sep 2023 19:34:50 +0000
ROA not before: Fri 15 Sep 2023 19:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47377
IP address blocks: 45.144.128.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9a:56:bc:63:d6:f7:a4:20:e1:bf:37:44:1d:97:18:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Sep 15 19:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eda48cb2d9c7360656069ed4bf137805330f3f6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:54:86:ef:fa:85:87:c3:45:52:4d:6e:f9:
98:03:9c:b4:49:b6:7c:5d:5b:09:51:59:74:6c:fd:
c8:be:f1:42:a8:47:71:17:07:c3:f2:7a:1a:06:1f:
4b:c7:a8:01:5f:64:34:06:46:da:67:ed:93:22:3b:
94:e4:3d:38:b1:d1:4f:87:a4:66:dc:ce:f4:bb:48:
f1:16:d5:e6:b3:da:82:83:97:57:54:31:c1:c3:a2:
e4:19:2c:be:62:79:41:27:eb:a7:b8:43:fd:98:cd:
e6:6c:a7:6e:63:65:c9:f3:d1:51:d8:6c:b4:0c:51:
f3:0c:a4:dc:7c:d5:87:9a:23:88:0b:1d:08:9c:6a:
83:77:d0:00:c0:a8:e8:0e:17:12:d9:a6:fb:c0:7c:
81:f8:86:fd:5a:96:55:32:d1:bc:fb:a4:c6:92:e3:
75:6b:9d:74:08:14:c9:0e:ac:ac:c9:09:26:8e:fe:
ab:de:0d:1e:42:9a:d2:0f:48:bc:7d:b5:50:58:1d:
12:b9:ec:89:0c:6a:ea:52:01:3a:33:b7:ef:22:0e:
53:00:e9:b1:54:c9:8f:42:70:80:0d:07:c3:b3:13:
95:37:9a:cf:7e:ea:7d:6c:dc:22:bb:20:75:08:a5:
f4:76:63:2e:b7:7e:e8:4d:d8:c7:79:c4:70:76:1a:
63:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A4:8C:B2:D9:C7:36:06:56:06:9E:D4:BF:13:78:05:33:0F:3F:6C
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/7aSMstnHNgZWBp7UvxN4BTMPP2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.128.0/22
Signature Algorithm: sha256WithRSAEncryption
56:99:09:5a:6e:dd:89:9f:68:ae:fd:1a:15:b5:c7:4a:92:f0:
e5:47:73:51:4d:dc:01:c6:28:a2:eb:8c:5c:01:33:cd:79:52:
24:2c:32:81:35:02:b3:49:71:a6:f4:1f:7f:d9:6c:94:7e:21:
95:22:2c:23:97:77:da:fa:69:ce:c3:07:4a:7e:98:05:c1:13:
60:55:de:f7:b0:ec:44:ba:69:76:87:65:5e:f7:5c:67:27:79:
34:75:16:18:27:e9:45:c5:9f:01:71:af:58:ba:e7:2e:f4:b4:
09:4d:ef:a1:67:5a:84:8a:a8:8e:a1:ce:f4:c1:94:60:6e:b8:
30:2d:07:2b:c1:a4:8b:d2:3b:a4:27:f2:de:d8:0a:cc:2d:8d:
aa:d5:09:57:d0:bf:a9:52:d4:d3:d8:c9:5b:31:bb:c3:0a:80:
2a:69:c4:1e:16:29:1f:e5:c9:e2:52:a6:49:d2:72:18:ca:2b:
27:e0:a5:6f:fa:7c:13:bb:82:44:be:64:1c:21:89:d5:14:d9:
8c:fe:08:75:e9:f2:ba:2c:c9:8f:dd:e1:a0:fe:4b:bf:cc:33:
be:94:2a:37:fd:bf:ea:15:31:80:3a:29:d9:43:e6:d5:5c:f9:
ae:b7:f6:45:73:4e:80:96:9e:83:64:d1:00:38:e2:bf:4c:fa:
2d:08:8a:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqaVrxj1vekIOG/N0QdlxjWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMDc0MzQ5NmM3ZmYzZWZmYjg3MDYwMTEzOWNhZDlkMmYy
NzFlMTAwHhcNMjMwOTE1MTkzNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGE0OGNiMmQ5YzczNjA2NTYwNjllZDRiZjEzNzgwNTMzMGYzZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVNUhu/6hYfDRVJNbvmYA5y0SbZ8
XVsJUVl0bP3IvvFCqEdxFwfD8noaBh9Lx6gBX2Q0BkbaZ+2TIjuU5D04sdFPh6Rm
3M70u0jxFtXms9qCg5dXVDHBw6LkGSy+YnlBJ+unuEP9mM3mbKduY2XJ89FR2Gy0
DFHzDKTcfNWHmiOICx0InGqDd9AAwKjoDhcS2ab7wHyB+Ib9WpZVMtG8+6TGkuN1
a510CBTJDqysyQkmjv6r3g0eQprSD0i8fbVQWB0SueyJDGrqUgE6M7fvIg5TAOmx
VMmPQnCADQfDsxOVN5rPfup9bNwiuyB1CKX0dmMut37oTdjHecRwdhpjVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO2kjLLZxzYGVgae1L8TeAUzDz9sMB8GA1UdIwQY
MBaAFJ8HQ0lsf/Pv+4cGAROcrZ0vJx4QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2Mt
NjM0MTEzNjdkOTBhLzEvN2FTTXN0bkhOZ1pXQnA3VXZ4TjRCVE1QUDJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS8yMmI3YWItZmMxMS00MDdhLWJkM2MtNjM0MTEzNjdkOTBh
LzEvbndkRFNXeF84LV83aHdZQkU1eXRuUzhuSGhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZCAMA0G
CSqGSIb3DQEBCwUAA4IBAQBWmQlabt2Jn2iu/RoVtcdKkvDlR3NRTdwBxiii64xc
ATPNeVIkLDKBNQKzSXGm9B9/2WyUfiGVIiwjl3fa+mnOwwdKfpgFwRNgVd73sOxE
uml2h2Ve91xnJ3k0dRYYJ+lFxZ8Bca9Yuucu9LQJTe+hZ1qEiqiOoc70wZRgbrgw
LQcrwaSL0jukJ/Le2ArMLY2q1QlX0L+pUtTT2MlbMbvDCoAqacQeFikf5cniUqZJ
0nIYyisn4KVv+nwTu4JEvmQcIYnVFNmM/gh16fK6LMmP3eGg/ku/zDO+lCo3/b/q
FTGAOinZQ+bVXPmut/ZFc06Alp6DZNEAOOK/TPotCIqi
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:31 2024 by rpki-client on console-fra.rpki-client.org