Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/OyFVZn20UNqx5cMBsR72aw_G0t4.roa
File: OyFVZn20UNqx5cMBsR72aw_G0t4.roa (raw, json)
Hash identifier: QC5f/qmK8Hsj9+wy7gORu8ojJjoWAxLslzVH0jTtdIg=
Subject key identifier: 3B:21:55:66:7D:B4:50:DA:B1:E5:C3:01:B1:1E:F6:6B:0F:C6:D2:DE
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 018CC64B85E4BD1CB7632BC2A1C217E6F3E0
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/OyFVZn20UNqx5cMBsR72aw_G0t4.roa
Signing time: Mon 01 Jan 2024 18:31:27 +0000
ROA not before: Mon 01 Jan 2024 18:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5404
IP address blocks: 45.89.163.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 12:59:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:85:e4:bd:1c:b7:63:2b:c2:a1:c2:17:e6:f3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Jan 1 18:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b2155667db450dab1e5c301b11ef66b0fc6d2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:71:ef:4b:2e:99:62:1e:f3:fc:f8:71:66:e3:
9b:07:2c:2c:c3:27:a0:0b:48:5d:26:b2:ec:01:3e:
ba:09:26:07:b0:91:78:20:2a:a1:ee:86:8c:58:48:
8d:02:16:3e:f8:11:6d:0e:ca:ad:ca:6a:ef:7c:fa:
f4:ba:ed:cf:80:26:7d:5e:44:54:ce:b3:7d:f6:43:
27:55:25:da:f3:a5:d5:b3:16:24:94:8f:52:5f:e5:
8b:c1:1a:de:91:0c:23:d3:cc:ba:0a:a4:4d:ae:85:
ae:b8:c9:a7:25:8e:5e:4e:7e:84:0e:71:7d:98:ad:
82:7d:fb:30:69:aa:13:91:8c:e9:9b:07:d8:47:58:
b7:ce:1a:f8:6e:da:10:10:28:73:bd:e2:78:c2:4c:
1c:bd:47:a7:bb:7c:96:a6:1a:d5:6f:55:a8:45:d7:
dc:0d:7d:52:fe:23:ab:9f:f3:34:57:bd:e8:df:17:
78:e9:fd:00:b5:67:62:85:9b:8e:74:50:74:29:00:
65:d1:29:60:51:a0:33:7a:45:40:5a:42:eb:8b:d1:
dc:61:e3:18:d1:d3:ff:0b:a2:10:ab:df:58:15:dd:
32:e1:c6:2f:9c:2c:71:ae:d6:2f:67:4e:b8:51:bb:
ca:be:ed:4b:a4:b5:4f:f0:fc:c8:9e:a2:7a:63:b4:
73:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:21:55:66:7D:B4:50:DA:B1:E5:C3:01:B1:1E:F6:6B:0F:C6:D2:DE
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/OyFVZn20UNqx5cMBsR72aw_G0t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.163.0/24
Signature Algorithm: sha256WithRSAEncryption
05:9b:44:ad:16:3b:88:a0:d5:fe:3a:59:a7:e9:b2:fa:ca:6b:
a9:9f:7c:1e:e6:6e:cf:d2:2d:6a:7c:e9:71:83:af:94:02:ce:
d0:1d:36:2e:95:7f:db:f3:4a:6f:20:f5:e8:c5:af:22:55:3e:
61:dd:d2:04:9b:63:25:5a:70:9a:9f:b7:7a:25:46:fa:30:9b:
c5:43:9a:a5:17:21:35:1b:39:3c:02:15:54:40:af:83:5c:7f:
72:a5:c3:12:49:1f:f1:84:65:a7:1f:dd:68:58:50:4e:84:7d:
bd:bd:f3:0d:56:c6:7b:a0:7b:60:ce:c1:6b:25:08:ad:8c:c1:
f5:c5:d2:da:15:76:07:72:67:31:ea:4b:0a:29:3e:fd:29:0c:
86:bc:e4:51:1e:a7:5f:93:a1:e4:e9:c5:3e:79:08:a7:a4:ff:
1d:2f:2a:29:e4:5c:45:f5:a3:36:98:59:3d:6b:c5:6a:d7:9d:
41:cb:bf:fb:e5:2c:1e:20:af:1d:39:5a:b9:bc:ae:39:6d:50:
09:b4:57:c1:36:ae:0f:d0:b4:fa:3d:5f:17:f9:25:d0:05:f3:
c2:2c:2b:68:d2:e1:50:39:35:71:0c:b9:96:bc:1e:3a:6a:77:
9d:1f:db:2f:e5:03:dd:be:a1:9f:09:4a:41:66:b3:19:2d:2a:
e8:09:3c:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGS4XkvRy3YyvCocIX5vPgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MDYwOTY2OTVmN2U2NjEwYjE5YjA4ZTFkN2ZkOWM0ZDkx
NGE0ZjAwHhcNMjQwMTAxMTgzMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjIxNTU2NjdkYjQ1MGRhYjFlNWMzMDFiMTFlZjY2YjBmYzZkMmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3HvSy6ZYh7z/PhxZuObBywswyeg
C0hdJrLsAT66CSYHsJF4ICqh7oaMWEiNAhY++BFtDsqtymrvfPr0uu3PgCZ9XkRU
zrN99kMnVSXa86XVsxYklI9SX+WLwRrekQwj08y6CqRNroWuuMmnJY5eTn6EDnF9
mK2CffswaaoTkYzpmwfYR1i3zhr4btoQEChzveJ4wkwcvUenu3yWphrVb1WoRdfc
DX1S/iOrn/M0V73o3xd46f0AtWdihZuOdFB0KQBl0SlgUaAzekVAWkLri9HcYeMY
0dP/C6IQq99YFd0y4cYvnCxxrtYvZ064UbvKvu1LpLVP8PzInqJ6Y7RzJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDshVWZ9tFDaseXDAbEe9msPxtLeMB8GA1UdIwQY
MBaAFGUGCWaV9+ZhCxmwjh1/2cTZFKTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgt
YTQxNTI1NThkMThjLzEvT3lGVlpuMjBVTnF4NWNNQnNSNzJhd19HMHQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgtYTQxNTI1NThkMThj
LzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVmjMA0G
CSqGSIb3DQEBCwUAA4IBAQAFm0StFjuIoNX+Olmn6bL6ymupn3we5m7P0i1qfOlx
g6+UAs7QHTYulX/b80pvIPXoxa8iVT5h3dIEm2MlWnCan7d6JUb6MJvFQ5qlFyE1
Gzk8AhVUQK+DXH9ypcMSSR/xhGWnH91oWFBOhH29vfMNVsZ7oHtgzsFrJQitjMH1
xdLaFXYHcmcx6ksKKT79KQyGvORRHqdfk6Hk6cU+eQinpP8dLyop5FxF9aM2mFk9
a8Vq151By7/75SweIK8dOVq5vK45bVAJtFfBNq4P0LT6PV8X+SXQBfPCLCto0uFQ
OTVxDLmWvB46anedH9sv5QPdvqGfCUpBZrMZLSroCTyt
-----END CERTIFICATE-----
Generated at Wed Jan 17 15:50:41 2024 by rpki-client on console-ams.rpki-client.org