Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/i47LwJjyDiuS1h61mIpVU4vWp00.roa
File: i47LwJjyDiuS1h61mIpVU4vWp00.roa (raw, json)
Hash identifier: ni7RY45Sfq46B1mdzRJ95t89pXjZlb10VlwP+cT60RY=
Subject key identifier: 8B:8E:CB:C0:98:F2:0E:2B:92:D6:1E:B5:98:8A:55:53:8B:D6:A7:4D
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 01856EA6C38967C6FB50A2D2FD65E5AD3B96
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/i47LwJjyDiuS1h61mIpVU4vWp00.roa
Signing time: Sun 01 Jan 2023 18:45:00 +0000
ROA not before: Sun 01 Jan 2023 18:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3399
IP address blocks: 45.159.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:c3:89:67:c6:fb:50:a2:d2:fd:65:e5:ad:3b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Jan 1 18:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b8ecbc098f20e2b92d61eb5988a55538bd6a74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1f:9d:d6:52:6f:f2:41:57:13:60:d6:ce:6d:
42:5b:9a:fd:85:e9:00:87:3f:32:b5:b5:9e:5a:c0:
4a:be:21:13:1c:3a:3a:62:f0:23:75:5f:37:17:93:
85:91:21:8a:52:e8:d5:6a:7a:b8:a5:51:0a:9e:e7:
62:8e:59:c7:8e:1a:c2:af:a6:14:e8:3b:69:be:70:
ef:62:ce:ab:4c:e3:60:64:15:b6:5d:af:46:c4:aa:
30:85:58:98:98:12:8c:70:75:63:23:e5:c3:89:01:
83:0c:3d:64:f2:4a:f3:44:34:e8:07:46:17:50:d4:
95:c0:f9:c6:72:c0:32:c3:88:8f:3f:40:e5:a5:a5:
02:11:5e:f9:00:7b:cc:a3:59:85:76:09:ac:f0:01:
b1:31:55:b1:73:89:7d:6b:76:8b:d7:61:9f:24:70:
80:69:e5:dc:75:69:a9:03:f4:f2:cf:e4:4d:83:a6:
c7:cf:31:9f:db:72:9a:2c:50:7d:e8:a6:02:5c:72:
52:ff:9d:d3:74:f3:b3:5a:0c:d8:a2:af:6e:4b:01:
e0:cb:98:73:f6:58:50:82:a3:f6:70:ca:ff:98:8f:
b8:4c:fb:7d:d6:39:3e:ed:02:bb:1b:61:68:5d:cc:
e6:39:06:4b:7a:3b:1a:00:6a:3a:5f:4e:54:d8:fe:
61:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8E:CB:C0:98:F2:0E:2B:92:D6:1E:B5:98:8A:55:53:8B:D6:A7:4D
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/i47LwJjyDiuS1h61mIpVU4vWp00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.13.0/24
Signature Algorithm: sha256WithRSAEncryption
11:35:fe:4a:ff:a0:60:c9:d7:bf:db:2a:dc:21:1f:ef:f3:5c:
7b:16:6a:46:e7:33:17:4e:f1:2c:fd:07:7e:6f:3c:5d:93:bb:
dd:1d:43:af:d9:f6:30:95:b8:e8:ba:6f:e6:97:5a:fa:bf:9b:
43:c2:51:66:e4:c8:6d:3d:f5:eb:a1:c6:34:d2:d3:f3:5d:ff:
91:66:60:d0:8d:e6:9d:8f:0f:57:8f:0a:74:d8:fc:a4:09:59:
16:30:f2:fb:81:75:18:8e:97:60:1d:78:43:f8:d7:72:82:9b:
a9:e2:8a:3b:08:91:f4:db:2d:10:34:5d:42:96:b8:26:b7:31:
39:33:e0:ef:94:8e:e1:9e:0f:e6:9f:a0:55:5f:f5:27:1a:f4:
f4:71:c9:de:b4:d4:30:3f:e4:9f:ea:93:bf:31:98:6c:be:e5:
f8:29:ec:f9:51:1f:78:12:7d:7f:15:1e:61:06:e8:64:88:25:
5c:74:2f:24:fd:4b:3e:0e:3d:c8:7a:56:56:5c:37:df:ff:48:
c4:a0:c3:8b:a7:1f:f7:7e:df:e5:11:dd:6c:03:6f:71:c2:7e:
93:b6:20:35:f8:29:b8:9b:62:aa:ac:08:50:83:a3:1b:de:6e:
8d:fd:ef:47:f3:9f:ab:37:4b:49:f1:f1:f0:88:9f:51:81:d2:
ed:bc:1e:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVupsOJZ8b7UKLS/WXlrTuWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0
NDNiZDQwHhcNMjMwMTAxMTg0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjhlY2JjMDk4ZjIwZTJiOTJkNjFlYjU5ODhhNTU1MzhiZDZhNzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh+d1lJv8kFXE2DWzm1CW5r9hekA
hz8ytbWeWsBKviETHDo6YvAjdV83F5OFkSGKUujVanq4pVEKnudijlnHjhrCr6YU
6DtpvnDvYs6rTONgZBW2Xa9GxKowhViYmBKMcHVjI+XDiQGDDD1k8krzRDToB0YX
UNSVwPnGcsAyw4iPP0DlpaUCEV75AHvMo1mFdgms8AGxMVWxc4l9a3aL12GfJHCA
aeXcdWmpA/Tyz+RNg6bHzzGf23KaLFB96KYCXHJS/53TdPOzWgzYoq9uSwHgy5hz
9lhQgqP2cMr/mI+4TPt91jk+7QK7G2FoXczmOQZLejsaAGo6X05U2P5hmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIuOy8CY8g4rktYetZiKVVOL1qdNMB8GA1UdIwQY
MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct
Y2RhNWMzNzY2ZjAzLzEvaTQ3THdKanlEaXVTMWg2MW1JcFZVNHZXcDAwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz
LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ8NMA0G
CSqGSIb3DQEBCwUAA4IBAQARNf5K/6Bgyde/2yrcIR/v81x7FmpG5zMXTvEs/Qd+
bzxdk7vdHUOv2fYwlbjoum/ml1r6v5tDwlFm5MhtPfXrocY00tPzXf+RZmDQjead
jw9Xjwp02PykCVkWMPL7gXUYjpdgHXhD+Ndygpup4oo7CJH02y0QNF1ClrgmtzE5
M+DvlI7hng/mn6BVX/UnGvT0ccnetNQwP+Sf6pO/MZhsvuX4Kez5UR94En1/FR5h
BuhkiCVcdC8k/Us+Dj3IelZWXDff/0jEoMOLpx/3ft/lEd1sA29xwn6TtiA1+Cm4
m2KqrAhQg6Mb3m6N/e9H85+rN0tJ8fHwiJ9RgdLtvB6k
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:01 2024 by rpki-client on console-ams.rpki-client.org