Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/nKUyI7li5RuqUtHI_zosU4DZpRI.roa
File: nKUyI7li5RuqUtHI_zosU4DZpRI.roa (raw, json)
Hash identifier: ownXwRvl21x/yVhlAI1hq30E0Vxm9+qx8JROibTklLc=
Subject key identifier: 9C:A5:32:23:B9:62:E5:1B:AA:52:D1:C8:FF:3A:2C:53:80:D9:A5:12
Certificate issuer: /CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Certificate serial: 01857227E931607E55F441CFEA9698DF442D
Authority key identifier: A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/nKUyI7li5RuqUtHI_zosU4DZpRI.roa
Signing time: Mon 02 Jan 2023 11:04:56 +0000
ROA not before: Mon 02 Jan 2023 11:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60456
IP address blocks: 45.81.204.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:27:e9:31:60:7e:55:f4:41:cf:ea:96:98:df:44:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a375369b2d4bb2e2dede668645313e344e6f1cc0
Validity
Not Before: Jan 2 11:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ca53223b962e51baa52d1c8ff3a2c5380d9a512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:77:9a:c4:09:4b:e0:99:b0:22:cb:b7:4a:48:
e5:d0:09:82:d6:4d:d2:d9:f1:dc:ed:98:fe:24:1e:
74:1e:0e:6f:1a:50:69:1b:a9:d6:7f:b2:e7:19:80:
6f:45:f4:fe:1c:a5:dc:d5:50:14:30:56:50:da:85:
e1:73:1c:e6:6b:ac:c3:94:94:fe:b3:28:17:e3:c1:
b5:3b:cf:04:eb:e8:18:ea:7f:a7:e7:f2:ed:58:87:
01:0b:1d:b7:c2:58:03:8b:22:d0:76:32:36:fe:8f:
90:63:64:33:11:8a:e2:de:ce:7f:dd:42:2f:46:f6:
e7:b2:37:c9:ee:80:f8:8d:ea:0e:18:f0:bb:25:7d:
41:10:32:be:de:4b:26:fd:07:4d:09:d8:45:95:35:
31:b6:b0:ca:b1:1d:14:0f:bf:8d:25:f5:b0:61:9e:
0c:ef:04:67:b5:36:1d:65:6b:fe:ac:ca:11:62:84:
9c:8e:aa:a7:65:7d:15:23:10:8b:cb:cf:49:e0:ab:
a3:05:cd:11:ac:c3:59:db:53:76:6b:e3:11:39:d7:
fe:cb:2b:56:35:03:3f:3d:cd:ed:66:47:9c:0e:5e:
e9:b2:39:50:68:4b:bc:9c:f0:9b:28:50:49:a7:08:
63:75:c6:fd:72:40:f8:8d:87:9b:43:c3:50:cf:ea:
54:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A5:32:23:B9:62:E5:1B:AA:52:D1:C8:FF:3A:2C:53:80:D9:A5:12
X509v3 Authority Key Identifier:
keyid:A3:75:36:9B:2D:4B:B2:E2:DE:DE:66:86:45:31:3E:34:4E:6F:1C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o3U2my1LsuLe3maGRTE-NE5vHMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/nKUyI7li5RuqUtHI_zosU4DZpRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ec6905-b0f7-424f-8a84-28bec7b99929/1/o3U2my1LsuLe3maGRTE-NE5vHMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.204.0/22
Signature Algorithm: sha256WithRSAEncryption
cb:ad:0c:e1:a9:85:7b:73:32:2a:01:31:9f:f6:ae:b0:bb:43:
fa:be:3a:03:4e:45:c3:62:7a:a2:3b:f9:11:4b:45:30:77:cf:
07:eb:ac:5e:e7:9f:fc:85:e5:11:49:52:7a:e0:c8:b4:a3:2d:
30:d2:78:ba:d5:12:7b:26:cc:38:59:38:e9:21:57:4e:b3:e9:
91:8b:e9:5f:c6:e1:47:d1:5f:2f:a1:19:23:2e:2e:7b:ab:f8:
23:12:3b:07:11:4e:cd:c4:f9:26:f6:7d:78:c8:fa:49:6e:fe:
e1:49:9b:f2:b5:8d:89:c6:88:c2:9e:cc:05:d9:54:b9:86:01:
3d:c5:b8:dc:6c:ef:e1:97:09:6c:34:06:3c:d1:1a:ee:65:3a:
9a:28:47:0f:16:ff:32:16:e2:dd:90:41:85:e6:35:a4:0f:4e:
5c:12:ca:5f:16:a5:12:9f:48:e7:b4:47:da:6c:80:e2:85:2c:
7b:5e:5f:40:37:e5:7b:c5:12:0a:ff:3d:40:e3:44:f7:7a:d2:
26:83:a6:96:aa:d6:45:ae:17:c9:f0:e3:bb:10:ca:c6:4a:38:
48:1d:e3:6a:4c:9a:f8:44:f3:95:41:be:83:8b:d7:b0:bc:83:
d0:67:ab:f0:68:78:17:ec:d1:2b:1a:a3:44:c7:00:b7:e5:4e:
7e:55:73:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyJ+kxYH5V9EHP6paY30QtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNzUzNjliMmQ0YmIyZTJkZWRlNjY4NjQ1MzEzZTM0NGU2
ZjFjYzAwHhcNMjMwMTAyMTEwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2E1MzIyM2I5NjJlNTFiYWE1MmQxYzhmZjNhMmM1MzgwZDlhNTEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHeaxAlL4JmwIsu3Skjl0AmC1k3S
2fHc7Zj+JB50Hg5vGlBpG6nWf7LnGYBvRfT+HKXc1VAUMFZQ2oXhcxzma6zDlJT+
sygX48G1O88E6+gY6n+n5/LtWIcBCx23wlgDiyLQdjI2/o+QY2QzEYri3s5/3UIv
RvbnsjfJ7oD4jeoOGPC7JX1BEDK+3ksm/QdNCdhFlTUxtrDKsR0UD7+NJfWwYZ4M
7wRntTYdZWv+rMoRYoScjqqnZX0VIxCLy89J4KujBc0RrMNZ21N2a+MROdf+yytW
NQM/Pc3tZkecDl7psjlQaEu8nPCbKFBJpwhjdcb9ckD4jYebQ8NQz+pUfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJylMiO5YuUbqlLRyP86LFOA2aUSMB8GA1UdIwQY
MBaAFKN1NpstS7Li3t5mhkUxPjRObxzAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lYzY5MDUtYjBmNy00MjRmLThhODQt
MjhiZWM3Yjk5OTI5LzEvbktVeUk3bGk1UnVxVXRISV96b3NVNERacFJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lYzY5MDUtYjBmNy00MjRmLThhODQtMjhiZWM3Yjk5OTI5
LzEvbzNVMm15MUxzdUxlM21hR1JURS1ORTV2SE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVHMMA0G
CSqGSIb3DQEBCwUAA4IBAQDLrQzhqYV7czIqATGf9q6wu0P6vjoDTkXDYnqiO/kR
S0Uwd88H66xe55/8heURSVJ64Mi0oy0w0ni61RJ7Jsw4WTjpIVdOs+mRi+lfxuFH
0V8voRkjLi57q/gjEjsHEU7NxPkm9n14yPpJbv7hSZvytY2JxojCnswF2VS5hgE9
xbjcbO/hlwlsNAY80RruZTqaKEcPFv8yFuLdkEGF5jWkD05cEspfFqUSn0jntEfa
bIDihSx7Xl9AN+V7xRIK/z1A40T3etImg6aWqtZFrhfJ8OO7EMrGSjhIHeNqTJr4
RPOVQb6Di9ewvIPQZ6vwaHgX7NErGqNExwC35U5+VXP2
-----END CERTIFICATE-----
Generated at Wed Oct 18 14:11:13 2023 by rpki-client on console-fra.rpki-client.org