Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/EjP7zgd7VzEprfdOM7bz0bBUNpc.roa
File: EjP7zgd7VzEprfdOM7bz0bBUNpc.roa (raw, json)
Hash identifier: +EcPnjcJ7pBkkg4fUkzfbQ1TMPm7GA1Tnii43k8dOIM=
Subject key identifier: 12:33:FB:CE:07:7B:57:31:29:AD:F7:4E:33:B6:F3:D1:B0:54:36:97
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 01856EA6C309CAD9C7F258A867961C82CA68
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/EjP7zgd7VzEprfdOM7bz0bBUNpc.roa
Signing time: Sun 01 Jan 2023 18:45:00 +0000
ROA not before: Sun 01 Jan 2023 18:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 45.159.14.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:c3:09:ca:d9:c7:f2:58:a8:67:96:1c:82:ca:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Jan 1 18:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1233fbce077b573129adf74e33b6f3d1b0543697
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:62:25:ca:21:7f:bb:5e:fb:14:1b:61:3b:77:
8c:01:97:ca:2c:7e:c8:25:a8:a1:37:b8:ef:7e:2c:
01:f0:49:6d:44:8b:de:39:80:b1:60:e7:be:a5:d4:
43:fb:ef:d3:1d:13:a2:02:ee:0f:53:13:13:9d:35:
62:4a:51:c1:d5:16:83:dd:1d:f8:12:3b:47:38:e1:
2f:e8:82:e5:08:ec:7b:68:df:fb:b2:81:96:09:b8:
f0:d3:e7:c4:cc:9b:83:b1:36:d2:b6:03:31:c2:3a:
72:ae:9e:9d:8c:3b:b4:5e:8e:c1:91:93:48:e7:c4:
bc:dd:0a:86:a0:b9:28:69:0b:79:2e:2f:2d:e7:bb:
99:c7:2f:fb:f6:02:cd:66:4f:8a:17:9e:aa:d8:8a:
e3:1f:3b:2f:48:9b:9c:84:2f:8a:14:a5:85:18:fc:
96:5b:bc:d7:dd:29:c6:41:96:70:9d:d4:2e:48:84:
f6:53:bf:91:92:f4:54:75:82:8b:e7:70:78:7f:2a:
c2:01:31:60:91:08:8e:dc:fd:fd:2d:14:cd:6e:60:
ee:8a:e8:66:54:d5:f7:ea:c7:c5:73:47:f0:fd:59:
d5:7b:85:7b:d7:95:ef:9d:b2:3a:7a:26:c1:0f:1f:
d2:d7:a9:38:0c:e8:34:d4:bd:c0:83:f7:4b:28:5f:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:33:FB:CE:07:7B:57:31:29:AD:F7:4E:33:B6:F3:D1:B0:54:36:97
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/EjP7zgd7VzEprfdOM7bz0bBUNpc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.14.0/24
Signature Algorithm: sha256WithRSAEncryption
96:59:de:ba:03:07:6f:b2:4e:45:aa:17:b3:20:a8:50:1f:2a:
32:c6:aa:8d:98:7e:ba:d3:38:85:e8:5b:6f:8f:79:d0:ed:f8:
7f:c5:3a:2b:82:36:ff:68:b2:5d:22:52:7e:8d:a2:c5:46:79:
8d:b9:53:d3:2d:b4:b6:45:36:c4:7b:1d:c5:68:22:14:bb:20:
c5:59:3f:00:b2:20:ae:ce:e8:19:dc:9b:8c:8d:49:85:d7:70:
25:50:76:6c:06:f3:6b:bb:8e:cb:2a:92:76:48:c9:8a:85:79:
30:7c:88:3b:0b:5c:16:58:59:74:ee:18:70:0a:16:b5:ea:b0:
13:24:dd:d4:ef:38:53:97:2a:02:74:11:28:04:89:c8:4a:be:
40:3c:4b:e0:33:2c:ba:96:3a:4d:cd:c3:4f:cd:10:17:8e:13:
06:41:e4:04:08:d5:fd:02:57:8d:2f:44:24:0d:d3:c4:b4:43:
ab:cb:d7:1e:ce:2c:5e:96:2b:fa:70:76:36:b8:d9:f4:bd:b0:
6a:c2:44:c6:ff:56:43:ae:93:35:67:aa:63:db:30:67:16:75:
93:6e:6f:33:6a:3d:19:10:36:43:96:16:39:a6:75:cb:af:c3:
88:58:b0:23:26:78:a1:4d:1d:38:d9:aa:f3:9c:9f:76:59:46:
f3:e0:c1:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVupsMJytnH8lioZ5YcgspoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0
NDNiZDQwHhcNMjMwMTAxMTg0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjMzZmJjZTA3N2I1NzMxMjlhZGY3NGUzM2I2ZjNkMWIwNTQzNjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWIlyiF/u177FBthO3eMAZfKLH7I
JaihN7jvfiwB8EltRIveOYCxYOe+pdRD++/THROiAu4PUxMTnTViSlHB1RaD3R34
EjtHOOEv6ILlCOx7aN/7soGWCbjw0+fEzJuDsTbStgMxwjpyrp6djDu0Xo7BkZNI
58S83QqGoLkoaQt5Li8t57uZxy/79gLNZk+KF56q2IrjHzsvSJuchC+KFKWFGPyW
W7zX3SnGQZZwndQuSIT2U7+RkvRUdYKL53B4fyrCATFgkQiO3P39LRTNbmDuiuhm
VNX36sfFc0fw/VnVe4V715XvnbI6eibBDx/S16k4DOg01L3Ag/dLKF+P+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBIz+84He1cxKa33TjO289GwVDaXMB8GA1UdIwQY
MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct
Y2RhNWMzNzY2ZjAzLzEvRWpQN3pnZDdWekVwcmZkT003YnowYkJVTnBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz
LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ8OMA0G
CSqGSIb3DQEBCwUAA4IBAQCWWd66Awdvsk5FqhezIKhQHyoyxqqNmH660ziF6Ftv
j3nQ7fh/xTorgjb/aLJdIlJ+jaLFRnmNuVPTLbS2RTbEex3FaCIUuyDFWT8AsiCu
zugZ3JuMjUmF13AlUHZsBvNru47LKpJ2SMmKhXkwfIg7C1wWWFl07hhwCha16rAT
JN3U7zhTlyoCdBEoBInISr5APEvgMyy6ljpNzcNPzRAXjhMGQeQECNX9AleNL0Qk
DdPEtEOry9cezixeliv6cHY2uNn0vbBqwkTG/1ZDrpM1Z6pj2zBnFnWTbm8zaj0Z
EDZDlhY5pnXLr8OIWLAjJnihTR042arznJ92WUbz4MHk
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:01 2024 by rpki-client on console-ams.rpki-client.org