Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/r8ZjSNWIaEAfrvG7Q0EEDFv_Z98.roa
File: r8ZjSNWIaEAfrvG7Q0EEDFv_Z98.roa (raw, json)
Hash identifier: Ez1jc4JVDT6T8GGKM/gFpqTislXH71bj3xSBhRiK8no=
Subject key identifier: AF:C6:63:48:D5:88:68:40:1F:AE:F1:BB:43:41:04:0C:5B:FF:67:DF
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018ACC9787B344E14FFD9A92C6AB18D94643
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/r8ZjSNWIaEAfrvG7Q0EEDFv_Z98.roa
Signing time: Mon 25 Sep 2023 13:46:37 +0000
ROA not before: Mon 25 Sep 2023 13:46:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216456
IP address blocks: 45.81.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cc:97:87:b3:44:e1:4f:fd:9a:92:c6:ab:18:d9:46:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Sep 25 13:46:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=afc66348d58868401faef1bb4341040c5bff67df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ab:c3:f6:ee:5d:2b:1f:5e:e2:f6:60:fb:2b:
eb:40:70:59:8d:24:8e:22:a3:11:6c:21:e3:da:98:
70:3e:be:7e:63:9d:c8:fd:14:5f:89:5b:77:ca:5a:
a6:a1:62:ad:c4:78:4d:8f:9e:cc:e4:f3:49:86:7e:
0d:d1:61:d3:af:5b:9e:39:55:a8:69:03:cd:c4:fd:
34:5d:28:9d:b1:53:e9:24:34:f6:75:d4:e8:81:dc:
e5:ba:92:f8:5a:33:79:1b:d4:36:b5:97:2b:4c:4b:
d0:2f:ab:49:2d:57:47:50:4a:72:8d:b4:b7:29:01:
4b:a5:61:21:ac:5c:1a:05:e0:17:08:b4:7d:61:31:
9d:37:8f:a4:0b:ab:3d:b5:d3:9d:2d:62:e1:d3:f3:
93:dd:9a:0c:77:d7:2f:56:f8:c2:64:1b:87:bf:97:
b1:a6:25:b7:08:ff:07:a7:6f:21:ea:b9:d8:42:9b:
4d:af:89:93:7d:c9:09:3e:78:5e:5c:13:c0:ac:29:
1d:ed:07:ff:46:6d:20:8d:f3:67:df:05:4e:b7:f5:
b4:e4:69:0f:e3:b6:8b:f3:69:43:d0:9f:95:4d:18:
7f:ac:91:3b:68:a5:98:e9:83:25:28:64:51:ef:50:
7f:da:fc:1c:bc:77:ec:1a:22:a7:7c:70:4d:66:b3:
b0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C6:63:48:D5:88:68:40:1F:AE:F1:BB:43:41:04:0C:5B:FF:67:DF
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/r8ZjSNWIaEAfrvG7Q0EEDFv_Z98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.20.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:dd:21:22:51:27:16:0a:f8:30:14:d3:26:91:94:39:6a:ab:
04:d0:a3:17:e4:38:50:c0:c2:6d:e6:5e:4c:70:1a:9d:9e:2d:
25:09:0e:6c:3e:54:24:c0:3b:9b:b8:54:8e:c0:12:75:3a:01:
b4:c1:73:9f:2a:1a:aa:2e:72:70:06:2f:e9:3f:30:59:ef:05:
8f:35:bd:62:44:2f:dd:7d:3c:c9:8c:52:33:68:74:c2:26:58:
b9:58:fa:ce:e6:e2:66:c0:b1:d8:58:65:45:84:08:47:96:80:
5a:e9:72:21:87:f7:35:c1:6f:fe:1d:48:80:0f:11:f6:33:fb:
1f:85:c8:3e:ad:fc:ba:8d:b6:7c:0f:dd:80:68:84:3d:db:5b:
09:0e:86:8f:c4:c7:03:20:b4:97:21:e6:53:1c:d3:e9:5f:5a:
19:24:4e:55:be:2a:7c:36:17:42:df:b5:5a:e7:de:38:31:38:
b7:27:a8:9e:78:aa:f7:60:45:f7:f6:1b:78:27:d9:fb:18:b7:
04:8c:5b:b0:78:5e:6a:05:f2:3c:a5:16:94:cd:c0:1e:74:5b:
81:eb:70:fc:d2:9d:0f:31:ee:c7:12:44:0e:93:eb:d2:b6:85:
15:72:f0:2c:fa:c2:76:d4:cb:14:b3:1b:78:30:5f:5e:95:2f:
da:9f:03:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYrMl4ezROFP/ZqSxqsY2UZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjMwOTI1MTM0NjM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmM2NjM0OGQ1ODg2ODQwMWZhZWYxYmI0MzQxMDQwYzViZmY2N2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqvD9u5dKx9e4vZg+yvrQHBZjSSO
IqMRbCHj2phwPr5+Y53I/RRfiVt3ylqmoWKtxHhNj57M5PNJhn4N0WHTr1ueOVWo
aQPNxP00XSidsVPpJDT2ddTogdzlupL4WjN5G9Q2tZcrTEvQL6tJLVdHUEpyjbS3
KQFLpWEhrFwaBeAXCLR9YTGdN4+kC6s9tdOdLWLh0/OT3ZoMd9cvVvjCZBuHv5ex
piW3CP8Hp28h6rnYQptNr4mTfckJPnheXBPArCkd7Qf/Rm0gjfNn3wVOt/W05GkP
47aL82lD0J+VTRh/rJE7aKWY6YMlKGRR71B/2vwcvHfsGiKnfHBNZrOwIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK/GY0jViGhAH67xu0NBBAxb/2ffMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvcjhaalNOV0lhRUFmcnZHN1EwRUVERnZfWjk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVEUMA0G
CSqGSIb3DQEBCwUAA4IBAQA63SEiUScWCvgwFNMmkZQ5aqsE0KMX5DhQwMJt5l5M
cBqdni0lCQ5sPlQkwDubuFSOwBJ1OgG0wXOfKhqqLnJwBi/pPzBZ7wWPNb1iRC/d
fTzJjFIzaHTCJli5WPrO5uJmwLHYWGVFhAhHloBa6XIhh/c1wW/+HUiADxH2M/sf
hcg+rfy6jbZ8D92AaIQ921sJDoaPxMcDILSXIeZTHNPpX1oZJE5Vvip8NhdC37Va
5944MTi3J6ieeKr3YEX39ht4J9n7GLcEjFuweF5qBfI8pRaUzcAedFuB63D80p0P
Me7HEkQOk+vStoUVcvAs+sJ21MsUsxt4MF9elS/anwOZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:49 2024 by rpki-client on console-fra.rpki-client.org