Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/iBHYYpURf2Y6pRvmNqQO81Rk39I.roa
File: iBHYYpURf2Y6pRvmNqQO81Rk39I.roa (raw, json)
Hash identifier: xqyzJGOJqnrhQ852sTA+O2GV8LZ7NyhC2ODuFrONxF0=
Subject key identifier: 88:11:D8:62:95:11:7F:66:3A:A5:1B:E6:36:A4:0E:F3:54:64:DF:D2
Certificate issuer: /CN=121a37282dd992d88658160559e048392798c84b
Certificate serial: 01874CF408EFD492E95C0DB22F390FCFD359
Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/iBHYYpURf2Y6pRvmNqQO81Rk39I.roa
Signing time: Tue 04 Apr 2023 15:47:54 +0000
ROA not before: Tue 04 Apr 2023 15:47:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44092
IP address blocks: 45.13.130.0/24 maxlen: 24
45.13.131.0/24 maxlen: 24
45.13.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4c:f4:08:ef:d4:92:e9:5c:0d:b2:2f:39:0f:cf:d3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=121a37282dd992d88658160559e048392798c84b
Validity
Not Before: Apr 4 15:47:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8811d86295117f663aa51be636a40ef35464dfd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:e0:f5:2c:49:07:e3:5c:e4:fb:b6:d3:3b:34:
fc:7a:a6:e9:36:a2:b2:a6:86:09:dd:ee:9e:d4:81:
7c:50:42:0b:44:6c:68:a9:0a:6d:da:d3:ba:3b:97:
ec:30:16:86:1f:37:58:f1:de:62:6b:c4:31:58:e6:
8b:cf:fa:6c:72:85:65:59:66:81:28:91:e9:b4:72:
02:b1:43:33:82:ad:1c:06:5f:6b:58:0f:c1:9f:10:
d4:05:91:85:d0:5f:7c:6a:d2:0a:dd:b7:3a:8d:1d:
55:a5:0a:3a:cf:f5:08:d0:10:54:be:a5:fb:c0:18:
77:70:98:91:b5:0d:10:e2:85:90:96:90:0e:e1:dc:
c3:5a:ea:73:e5:ed:6b:b1:ba:67:31:3e:14:b0:4e:
5f:01:bb:f7:cf:cb:f5:68:24:af:ae:80:59:dd:46:
b3:78:48:02:71:20:4e:02:09:9e:d5:01:49:a4:1c:
b7:6d:87:25:30:67:70:3d:74:61:86:c5:09:86:73:
83:94:42:48:77:f9:7f:2d:6f:67:c3:00:d6:a4:7e:
7b:9d:ae:bd:bf:2c:85:44:f4:e8:63:e1:05:b1:0e:
d8:ab:14:f4:04:20:8d:56:25:4e:bd:66:81:96:b4:
c8:4f:d2:75:45:be:10:4c:6f:a6:38:cc:2f:bd:1d:
24:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:11:D8:62:95:11:7F:66:3A:A5:1B:E6:36:A4:0E:F3:54:64:DF:D2
X509v3 Authority Key Identifier:
keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/iBHYYpURf2Y6pRvmNqQO81Rk39I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.129.0-45.13.131.255
Signature Algorithm: sha256WithRSAEncryption
90:3b:8e:6f:f0:70:4d:2f:aa:9f:3a:de:79:b1:a6:1f:8b:ed:
e8:64:f0:ff:0e:41:80:36:79:c9:ba:cf:cf:a0:0b:6f:4d:46:
7c:07:55:97:7f:ad:f8:2f:62:d4:8a:ec:c6:e4:01:f6:72:67:
41:48:8e:13:c2:46:3b:b5:6f:a1:b8:45:9c:54:f2:5d:e1:24:
c5:5d:71:e3:e8:aa:be:01:a6:ad:75:95:9d:50:01:7d:20:6d:
51:8d:e8:e8:45:5b:47:7b:e3:25:e4:ec:41:bd:59:0d:51:2a:
57:0c:23:fe:d8:a8:e6:9a:87:21:95:78:c5:f8:db:aa:85:c6:
41:30:c8:85:e8:88:57:5d:d4:65:c2:15:91:45:48:50:27:98:
85:bd:f3:6a:0b:eb:84:ea:cf:c9:dc:35:01:55:04:71:f0:4f:
52:6d:0c:82:4b:ec:94:13:12:b0:49:94:b5:c0:4c:f1:64:7d:
91:37:43:7d:fd:b1:cd:e4:4c:7f:fd:42:44:d1:cd:ae:66:95:
0b:ac:e2:ca:fb:0f:c4:c9:0f:12:08:6e:c5:09:9d:b3:c4:b5:
8b:0f:e0:22:60:63:71:b9:f3:d7:40:43:0b:b6:c3:ff:ed:0f:
32:35:78:2e:e0:1b:9b:7a:eb:4f:2a:96:3e:d6:2d:b8:ce:91:
37:3b:aa:2b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYdM9Ajv1JLpXA2yLzkPz9NZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMWEzNzI4MmRkOTkyZDg4NjU4MTYwNTU5ZTA0ODM5Mjc5
OGM4NGIwHhcNMjMwNDA0MTU0NzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODExZDg2Mjk1MTE3ZjY2M2FhNTFiZTYzNmE0MGVmMzU0NjRkZmQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+D1LEkH41zk+7bTOzT8eqbpNqKy
poYJ3e6e1IF8UEILRGxoqQpt2tO6O5fsMBaGHzdY8d5ia8QxWOaLz/pscoVlWWaB
KJHptHICsUMzgq0cBl9rWA/BnxDUBZGF0F98atIK3bc6jR1VpQo6z/UI0BBUvqX7
wBh3cJiRtQ0Q4oWQlpAO4dzDWupz5e1rsbpnMT4UsE5fAbv3z8v1aCSvroBZ3Uaz
eEgCcSBOAgme1QFJpBy3bYclMGdwPXRhhsUJhnODlEJId/l/LW9nwwDWpH57na69
vyyFRPToY+EFsQ7YqxT0BCCNViVOvWaBlrTIT9J1Rb4QTG+mOMwvvR0kZQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIgR2GKVEX9mOqUb5jakDvNUZN/SMB8GA1UdIwQY
MBaAFBIaNygt2ZLYhlgWBVngSDknmMhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZWQxMzEtZjlkNy00MWIyLWI4YmMt
MDgyYjFmN2YwZGIyLzEvaUJIWVlwVVJmMlk2cFJ2bU5xUU84MVJrMzlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mZWQxMzEtZjlkNy00MWIyLWI4YmMtMDgyYjFmN2YwZGIy
LzEvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtDYED
BAItDYAwDQYJKoZIhvcNAQELBQADggEBAJA7jm/wcE0vqp863nmxph+L7ehk8P8O
QYA2ecm6z8+gC29NRnwHVZd/rfgvYtSK7MbkAfZyZ0FIjhPCRju1b6G4RZxU8l3h
JMVdcePoqr4Bpq11lZ1QAX0gbVGN6OhFW0d74yXk7EG9WQ1RKlcMI/7YqOaahyGV
eMX426qFxkEwyIXoiFdd1GXCFZFFSFAnmIW982oL64Tqz8ncNQFVBHHwT1JtDIJL
7JQTErBJlLXATPFkfZE3Q339sc3kTH/9QkTRza5mlQus4sr7D8TJDxIIbsUJnbPE
tYsP4CJgY3G589dAQwu2w//tDzI1eC7gG5t6608qlj7WLbjOkTc7qis=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:27 2023 by rpki-client on console-ams.rpki-client.org