Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/en9Z4swoO4TK6k4Aw2d13bI6vQQ.roa
File: en9Z4swoO4TK6k4Aw2d13bI6vQQ.roa (raw, json)
Hash identifier: s24V7i2PCxIddwrxU4ro1wqbUdJ9IpbGaKTT3XxMIN8=
Subject key identifier: 7A:7F:59:E2:CC:28:3B:84:CA:EA:4E:00:C3:67:75:DD:B2:3A:BD:04
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 01856C780DF4C64E62FE10CC90E7286555CB
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/en9Z4swoO4TK6k4Aw2d13bI6vQQ.roa
Signing time: Sun 01 Jan 2023 08:34:45 +0000
ROA not before: Sun 01 Jan 2023 08:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 45.81.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:0d:f4:c6:4e:62:fe:10:cc:90:e7:28:65:55:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Jan 1 08:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a7f59e2cc283b84caea4e00c36775ddb23abd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:96:08:46:7f:b0:45:63:8d:8c:7e:80:4d:d8:
5c:43:fe:c0:2d:07:5c:9c:95:21:b7:58:1d:90:68:
26:8a:2d:f0:3e:ad:a5:22:59:c2:a4:a7:5b:06:78:
79:af:c1:7a:ee:24:29:63:14:7c:0b:47:e3:63:f9:
31:d3:01:71:16:01:36:e3:96:82:8d:02:e8:6d:84:
b3:fa:81:1c:9a:89:55:21:5d:f0:91:52:95:12:f5:
00:df:30:e0:85:09:d9:59:71:4a:f7:a5:31:d3:4f:
c1:fd:03:7e:51:59:68:25:fb:ae:af:08:c1:a0:15:
cc:b4:af:d3:2e:17:fd:d5:99:95:fc:ec:cd:f8:03:
06:d1:04:83:d5:9c:f6:07:c0:68:1f:9b:cb:f1:1a:
19:02:9a:95:60:66:e4:18:d9:fe:ee:fa:d1:cc:96:
4d:53:6c:5d:4f:a0:d1:ff:11:95:12:c5:3e:0a:44:
51:03:47:4d:46:75:3c:94:10:55:20:45:23:ab:50:
4f:f6:92:e7:27:2c:63:11:14:a5:3a:e4:e8:61:13:
28:4e:f7:36:5f:2b:87:a4:19:a4:1b:d2:5b:07:59:
4f:51:5c:31:15:8a:9f:d3:77:5e:a4:ee:a4:d6:d0:
6e:78:c5:09:62:14:02:a7:a7:e0:4e:23:c6:a5:3a:
8a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7F:59:E2:CC:28:3B:84:CA:EA:4E:00:C3:67:75:DD:B2:3A:BD:04
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/en9Z4swoO4TK6k4Aw2d13bI6vQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.160.0/24
Signature Algorithm: sha256WithRSAEncryption
28:8f:e5:14:e5:f6:16:13:63:d4:e8:42:8c:ed:b0:f1:fb:89:
a3:2d:8f:fa:91:ca:40:12:20:cd:cc:c5:43:a2:8b:33:ba:52:
ea:d9:93:49:0d:5f:2c:d2:55:15:27:cf:fc:cf:ca:91:b3:a2:
bc:69:9e:4c:31:e8:9f:bb:84:c3:4e:45:f2:85:ea:9c:56:15:
31:7e:85:d5:95:fe:18:fe:f7:0b:e5:f3:cd:5c:d9:a3:c8:00:
14:5c:80:a6:dd:12:a7:44:3f:23:b5:8b:7e:64:18:c8:8c:1c:
4c:c9:24:c5:8e:69:1a:e3:b7:93:3c:08:38:ee:56:05:fb:7e:
6d:e3:da:22:e7:9b:ec:74:84:72:ed:c7:f4:7c:f3:53:6b:e8:
11:ae:11:d6:35:59:66:1c:c7:88:c2:82:35:6a:e4:52:e4:fb:
c9:c0:26:f6:d7:06:0c:00:49:ee:b7:c4:c0:a4:96:86:e1:f3:
8e:80:2e:f2:a5:c4:f4:35:88:ce:d6:82:25:69:da:2f:f9:a4:
d4:3f:28:52:d1:f3:12:ad:e1:42:44:e4:89:a0:38:2c:2f:dd:
e5:9f:ce:f9:d8:35:9a:17:63:f0:76:9d:8d:8e:d3:24:2b:c0:
9c:4d:db:7c:de:85:06:3a:71:11:c7:61:88:19:d9:5d:28:b8:
c7:8a:b0:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVseA30xk5i/hDMkOcoZVXLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz
MGJiYmEwHhcNMjMwMTAxMDgzNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTdmNTllMmNjMjgzYjg0Y2FlYTRlMDBjMzY3NzVkZGIyM2FiZDA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpYIRn+wRWONjH6ATdhcQ/7ALQdc
nJUht1gdkGgmii3wPq2lIlnCpKdbBnh5r8F67iQpYxR8C0fjY/kx0wFxFgE245aC
jQLobYSz+oEcmolVIV3wkVKVEvUA3zDghQnZWXFK96Ux00/B/QN+UVloJfuurwjB
oBXMtK/TLhf91ZmV/OzN+AMG0QSD1Zz2B8BoH5vL8RoZApqVYGbkGNn+7vrRzJZN
U2xdT6DR/xGVEsU+CkRRA0dNRnU8lBBVIEUjq1BP9pLnJyxjERSlOuToYRMoTvc2
XyuHpBmkG9JbB1lPUVwxFYqf03depO6k1tBueMUJYhQCp6fgTiPGpTqKfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHp/WeLMKDuEyupOAMNndd2yOr0EMB8GA1UdIwQY
MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt
YmU0NWYwZDJhYmJiLzEvZW45WjRzd29PNFRLNms0QXcyZDEzYkk2dlFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi
LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVGgMA0G
CSqGSIb3DQEBCwUAA4IBAQAoj+UU5fYWE2PU6EKM7bDx+4mjLY/6kcpAEiDNzMVD
ooszulLq2ZNJDV8s0lUVJ8/8z8qRs6K8aZ5MMeifu4TDTkXyheqcVhUxfoXVlf4Y
/vcL5fPNXNmjyAAUXICm3RKnRD8jtYt+ZBjIjBxMySTFjmka47eTPAg47lYF+35t
49oi55vsdIRy7cf0fPNTa+gRrhHWNVlmHMeIwoI1auRS5PvJwCb21wYMAEnut8TA
pJaG4fOOgC7ypcT0NYjO1oIladov+aTUPyhS0fMSreFCROSJoDgsL93ln8752DWa
F2Pwdp2NjtMkK8CcTdt83oUGOnERx2GIGdldKLjHirBR
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:49 2023 by rpki-client on console-fra.rpki-client.org