Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/pYsOSZeJ1PFi6TekFCq4qYGCr-4.roa
File: pYsOSZeJ1PFi6TekFCq4qYGCr-4.roa (raw, json)
Hash identifier: oFhyAMVWxmexgowRkuIwPYTkKSOYVL0EaCh3zRn44Ek=
Subject key identifier: A5:8B:0E:49:97:89:D4:F1:62:E9:37:A4:14:2A:B8:A9:81:82:AF:EE
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 0186556784D128408E0EEB17D37D029B4625
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/pYsOSZeJ1PFi6TekFCq4qYGCr-4.roa
Signing time: Wed 15 Feb 2023 14:08:12 +0000
ROA not before: Wed 15 Feb 2023 14:08:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20454
IP address blocks: 45.131.12.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:55:67:84:d1:28:40:8e:0e:eb:17:d3:7d:02:9b:46:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Feb 15 14:08:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a58b0e499789d4f162e937a4142ab8a98182afee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:c8:fa:09:d2:63:92:2d:84:9c:92:7e:07:
40:1d:3c:38:a7:14:f1:f3:8d:32:d9:69:77:02:77:
49:e3:5b:28:df:84:2c:c6:7a:b9:fc:e5:b7:2e:04:
ad:3f:68:b1:6d:f3:b8:5f:ae:15:da:00:6e:ea:6b:
f5:1d:af:99:d2:9e:6d:00:86:b6:bb:0c:0e:79:18:
93:0d:34:39:48:b8:16:3a:ab:14:a0:1a:b1:21:ac:
80:6a:74:77:20:e5:52:b7:d9:20:59:31:ad:63:30:
eb:07:f5:52:61:6d:03:bb:61:91:b0:b7:e3:53:44:
c6:e9:fa:8c:a8:10:70:63:27:08:38:29:b0:96:7c:
4b:1d:bd:e5:3b:7b:15:2f:ac:30:ea:0e:06:7d:12:
af:fd:20:52:2e:55:cd:0f:e3:ba:e4:bb:2e:c3:1a:
82:43:95:cf:2a:24:71:df:24:b8:3e:23:bc:c3:70:
bc:78:73:6d:66:a5:d1:c8:70:86:0e:19:2f:9d:2e:
93:6d:55:93:10:9d:15:72:69:ba:3a:6c:dc:3f:6e:
30:e9:03:73:d0:2d:76:fd:c7:d0:a6:42:e3:cb:b0:
c4:30:9b:17:60:20:ba:0d:b7:0b:8a:0f:43:af:94:
54:9d:e4:e0:8d:11:52:96:17:96:57:f8:06:04:2f:
95:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8B:0E:49:97:89:D4:F1:62:E9:37:A4:14:2A:B8:A9:81:82:AF:EE
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/pYsOSZeJ1PFi6TekFCq4qYGCr-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.12.0/22
Signature Algorithm: sha256WithRSAEncryption
16:b7:b9:7d:8c:8a:7d:88:53:32:7e:56:c1:2f:fc:64:36:73:
45:81:67:98:19:82:8b:f2:ca:9f:bc:cc:e0:12:87:34:a8:74:
dc:bf:1f:a2:2d:14:4c:72:2e:cd:22:84:87:ca:33:80:63:f7:
1a:72:44:6a:64:63:4a:d8:78:74:41:3c:cb:96:ee:42:5c:52:
4e:75:69:b5:12:19:a7:b8:3c:8c:46:3e:00:18:f8:fe:16:ad:
9d:ff:41:2a:b4:7b:37:6b:f5:81:c1:ba:a0:ca:bb:1b:e1:07:
55:69:f5:85:f8:05:e7:3e:a6:e3:c6:92:cb:82:8a:79:f2:0f:
23:00:5c:53:a4:6f:00:12:b3:63:0b:ab:30:b6:cf:98:4a:3b:
e5:48:b1:35:71:c3:41:ec:f7:50:b5:87:98:59:f7:9d:24:c0:
a0:3a:ed:54:1a:d7:0f:1d:d5:b4:fd:03:a1:a4:27:8e:e1:a8:
78:02:30:59:87:1b:db:ee:5f:8d:e1:3a:7b:7c:f7:4e:e7:90:
c7:31:8c:a7:9b:71:c7:0e:16:02:c4:ff:02:27:d9:b9:85:a1:
3a:e0:cd:fa:0f:6f:b2:19:da:32:ee:73:bd:3f:06:b6:a4:e2:
96:61:05:27:0b:56:5c:de:99:95:e1:b2:8b:bf:56:3b:1d:2e:
a0:89:39:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZVZ4TRKECODusX030Cm0YlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MDQ4M2QzZDYyZjE5YzA4MzU3NDZkY2I3MjFjODgzMmMz
Yjc5MjYwHhcNMjMwMjE1MTQwODEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNThiMGU0OTk3ODlkNGYxNjJlOTM3YTQxNDJhYjhhOTgxODJhZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6jI+gnSY5IthJySfgdAHTw4pxTx
840y2Wl3AndJ41so34Qsxnq5/OW3LgStP2ixbfO4X64V2gBu6mv1Ha+Z0p5tAIa2
uwwOeRiTDTQ5SLgWOqsUoBqxIayAanR3IOVSt9kgWTGtYzDrB/VSYW0Du2GRsLfj
U0TG6fqMqBBwYycIOCmwlnxLHb3lO3sVL6ww6g4GfRKv/SBSLlXND+O65LsuwxqC
Q5XPKiRx3yS4PiO8w3C8eHNtZqXRyHCGDhkvnS6TbVWTEJ0Vcmm6OmzcP24w6QNz
0C12/cfQpkLjy7DEMJsXYCC6DbcLig9Dr5RUneTgjRFSlheWV/gGBC+VAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKWLDkmXidTxYuk3pBQquKmBgq/uMB8GA1UdIwQY
MBaAFAcEg9PWLxnAg1dG3LchyIMsO3kmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS82NDUxYzEtMmJjZC00NDYzLWE3MDAt
ZDQ0MmM0ZjllOWJkLzEvcFlzT1NaZUoxUEZpNlRla0ZDcTRxWUdDci00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS82NDUxYzEtMmJjZC00NDYzLWE3MDAtZDQ0MmM0ZjllOWJk
LzEvQndTRDA5WXZHY0NEVjBiY3R5SElneXc3ZVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYMMMA0G
CSqGSIb3DQEBCwUAA4IBAQAWt7l9jIp9iFMyflbBL/xkNnNFgWeYGYKL8sqfvMzg
Eoc0qHTcvx+iLRRMci7NIoSHyjOAY/cackRqZGNK2Hh0QTzLlu5CXFJOdWm1Ehmn
uDyMRj4AGPj+Fq2d/0EqtHs3a/WBwbqgyrsb4QdVafWF+AXnPqbjxpLLgop58g8j
AFxTpG8AErNjC6swts+YSjvlSLE1ccNB7PdQtYeYWfedJMCgOu1UGtcPHdW0/QOh
pCeO4ah4AjBZhxvb7l+N4Tp7fPdO55DHMYynm3HHDhYCxP8CJ9m5haE64M36D2+y
Gdoy7nO9Pwa2pOKWYQUnC1Zc3pmV4bKLv1Y7HS6giTnq
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:00 2024 by rpki-client on console-ams.rpki-client.org