Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/6zquOFX1Ky_glzKagI7fGdhbBM0.roa
File: 6zquOFX1Ky_glzKagI7fGdhbBM0.roa (raw, json)
Hash identifier: hGlNwrQV7NvENH8pRHpCDGazvs3pm/ns3Ky91bsGiX4=
Subject key identifier: EB:3A:AE:38:55:F5:2B:2F:E0:97:32:9A:80:8E:DF:19:D8:5B:04:CD
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 01856E1457C4E629634B68B9389F02BBF4F0
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/6zquOFX1Ky_glzKagI7fGdhbBM0.roa
Signing time: Sun 01 Jan 2023 16:05:05 +0000
ROA not before: Sun 01 Jan 2023 16:05:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212853
IP address blocks: 45.81.252.0/24 maxlen: 24
45.81.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 Feb 2023 14:41:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:57:c4:e6:29:63:4b:68:b9:38:9f:02:bb:f4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Jan 1 16:05:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb3aae3855f52b2fe097329a808edf19d85b04cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c0:9c:2f:c7:00:70:37:b9:59:45:66:a0:13:
15:65:ae:f9:51:4a:a1:a4:4f:6b:63:5d:09:08:47:
34:9a:b2:b9:61:66:7b:a3:f7:5f:75:8a:9e:54:cd:
f8:93:96:52:86:fb:27:10:e2:da:71:e7:f0:bd:72:
43:d0:14:c1:36:82:8d:c2:22:a8:32:48:71:24:b2:
c5:fe:89:77:e7:8e:ab:77:76:39:bb:11:1b:71:8c:
e0:af:4a:b7:0f:c3:35:73:47:1e:10:6a:92:c1:9a:
ff:42:7b:26:32:b8:e7:83:49:54:c8:fa:32:3f:a4:
af:db:76:41:12:6f:cd:f1:d7:46:9d:d0:5b:18:65:
33:9c:5f:07:34:56:08:13:13:f3:1d:18:5e:71:34:
89:fc:73:20:0f:35:ef:f3:51:49:7c:d9:fa:55:6e:
99:1b:0a:cc:b3:df:f7:25:85:40:d4:4c:9c:f5:bf:
3a:b3:5f:94:83:fa:80:cc:e0:06:62:4e:56:58:0c:
94:1f:d7:f7:3a:90:9e:ba:77:b9:27:31:9c:12:9c:
58:ee:39:ff:95:b0:76:ad:bc:90:24:89:2d:02:77:
75:64:48:88:20:3c:ec:1c:0d:4b:4b:a6:d3:17:96:
27:55:d8:e0:34:24:c4:c5:1f:85:fd:1b:19:7f:32:
9d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:3A:AE:38:55:F5:2B:2F:E0:97:32:9A:80:8E:DF:19:D8:5B:04:CD
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/6zquOFX1Ky_glzKagI7fGdhbBM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.252.0/24
45.81.254.0/24
Signature Algorithm: sha256WithRSAEncryption
02:5a:82:95:8a:0a:85:f7:63:7a:cb:e3:3f:f1:bc:0f:e1:9d:
38:3f:a6:2a:73:0f:3d:28:45:3d:59:8f:03:6a:e9:b6:1f:a5:
12:9c:36:b4:18:f1:c0:bc:28:73:69:70:d5:f8:c2:6d:f9:25:
c8:17:0c:af:d9:15:e8:0c:6b:e3:55:d5:01:a4:c0:63:95:20:
50:57:f7:b1:d5:b7:e5:e4:86:ea:8c:85:9d:86:21:65:73:fc:
a6:f7:87:1f:9f:c3:6a:c8:b6:71:d3:43:68:2b:de:db:f4:35:
02:fb:f7:44:f9:a9:e8:1c:0b:c9:d8:a8:ec:22:df:60:86:0b:
e0:bd:a3:11:58:1c:33:51:28:ba:8e:0f:01:9c:7b:f0:e8:20:
c6:20:23:33:4e:43:d7:6d:d3:8d:c4:3e:ee:24:37:dc:0a:85:
2c:38:81:4e:65:07:ce:3b:e9:70:ae:38:4c:d8:8d:01:fe:71:
e5:5d:8d:da:1c:c0:4a:8d:13:f0:65:b0:26:dc:74:75:c9:ef:
d4:cf:3e:2f:7f:dc:fa:e9:fa:7d:93:0e:79:50:63:c2:2e:10:
72:03:a2:21:ee:c7:1c:5d:49:b0:1b:c6:b8:3c:9f:19:03:5d:
72:e9:23:2a:65:4c:c1:10:d5:c0:c1:87:7d:73:40:23:0f:3b:
81:67:65:db
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVuFFfE5iljS2i5OJ8Cu/TwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZTY3MzNmYTIzOWM1ZmIwYzQzOGM4MmY3YzIzMGY1NWQ0
NzhjYjEwHhcNMjMwMTAxMTYwNTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjNhYWUzODU1ZjUyYjJmZTA5NzMyOWE4MDhlZGYxOWQ4NWIwNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsCcL8cAcDe5WUVmoBMVZa75UUqh
pE9rY10JCEc0mrK5YWZ7o/dfdYqeVM34k5ZShvsnEOLacefwvXJD0BTBNoKNwiKo
MkhxJLLF/ol3546rd3Y5uxEbcYzgr0q3D8M1c0ceEGqSwZr/QnsmMrjng0lUyPoy
P6Sv23ZBEm/N8ddGndBbGGUznF8HNFYIExPzHRhecTSJ/HMgDzXv81FJfNn6VW6Z
GwrMs9/3JYVA1Eyc9b86s1+Ug/qAzOAGYk5WWAyUH9f3OpCeune5JzGcEpxY7jn/
lbB2rbyQJIktAnd1ZEiIIDzsHA1LS6bTF5YnVdjgNCTExR+F/RsZfzKdPQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOs6rjhV9Ssv4JcymoCO3xnYWwTNMB8GA1UdIwQY
MBaAFNXmcz+iOcX7DEOMgvfCMPVdR4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQt
YTM4YjY3OTVmYjI0LzEvNnpxdU9GWDFLeV9nbHpLYWdJN2ZHZGhiQk0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yNWM5NWUtN2YyNy00ZDY5LTg1NmQtYTM4YjY3OTVmYjI0
LzEvMWVaelA2STV4ZnNNUTR5Qzk4SXc5VjFIakxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVH8AwQA
LVH+MA0GCSqGSIb3DQEBCwUAA4IBAQACWoKVigqF92N6y+M/8bwP4Z04P6Yqcw89
KEU9WY8Daum2H6USnDa0GPHAvChzaXDV+MJt+SXIFwyv2RXoDGvjVdUBpMBjlSBQ
V/ex1bfl5IbqjIWdhiFlc/ym94cfn8NqyLZx00NoK97b9DUC+/dE+anoHAvJ2Kjs
It9ghgvgvaMRWBwzUSi6jg8BnHvw6CDGICMzTkPXbdONxD7uJDfcCoUsOIFOZQfO
O+lwrjhM2I0B/nHlXY3aHMBKjRPwZbAm3HR1ye/Uzz4vf9z66fp9kw55UGPCLhBy
A6Ih7sccXUmwG8a4PJ8ZA11y6SMqZUzBENXAwYd9c0AjDzuBZ2Xb
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:56:35 2024 by rpki-client on console-ams.rpki-client.org