Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/545a648N339MzBawUo3_aBidCQs.roa
File: 545a648N339MzBawUo3_aBidCQs.roa (raw, json)
Hash identifier: 9ucM422JmhCh3E867lO0iTAhI3b9x9nFCL9UCeqsN4s=
Subject key identifier: E7:8E:5A:EB:8F:0D:DF:7F:4C:CC:16:B0:52:8D:FF:68:18:9D:09:0B
Certificate issuer: /CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Certificate serial: 01857822725A3A7F4C4034449E2357630EF4
Authority key identifier: 77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/545a648N339MzBawUo3_aBidCQs.roa
Signing time: Tue 03 Jan 2023 14:56:41 +0000
ROA not before: Tue 03 Jan 2023 14:56:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 87.248.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Feb 2023 12:18:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:78:22:72:5a:3a:7f:4c:40:34:44:9e:23:57:63:0e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77f61fc7c0ab41ce154e7bcb08ef962351a46784
Validity
Not Before: Jan 3 14:56:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e78e5aeb8f0ddf7f4ccc16b0528dff68189d090b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:63:e1:29:d5:d0:93:3e:e9:7f:4b:76:ad:
87:a7:4b:f2:85:40:70:6f:00:aa:3f:1c:c5:89:29:
9f:2f:84:24:fc:67:d4:7c:cc:33:f8:39:c4:4a:91:
a7:47:b1:cd:8a:4f:bb:6a:49:aa:4a:6a:bd:a7:00:
7f:76:c3:e4:9e:ae:ae:4c:65:5f:bb:e9:25:1f:a2:
73:43:5c:f1:8a:e2:16:60:00:a3:d0:43:30:04:09:
96:e6:db:1f:ef:62:33:58:86:10:58:4e:83:17:3f:
69:a2:7b:d1:15:b7:0e:f3:10:b3:c1:8d:b4:8c:38:
77:2c:0d:fd:a8:00:ee:ca:97:da:74:1c:12:7d:e7:
06:0c:0e:50:55:aa:2d:97:61:b0:c5:2a:39:13:7f:
27:e3:5a:db:2d:42:ea:27:f9:be:90:0f:bc:04:72:
a3:be:1a:8a:3f:ef:db:06:03:5e:1d:3a:ce:10:03:
bf:3a:1b:a0:f2:50:12:62:9c:c7:96:72:ba:44:be:
e0:f6:cc:a7:90:6f:47:31:c3:16:5f:01:58:51:84:
a3:ed:ff:6d:c6:74:31:4b:2c:8d:0a:d5:98:69:70:
6b:fc:52:38:fc:f7:00:05:09:27:53:e3:a9:d4:1a:
98:c4:b2:93:99:80:7a:9d:99:8c:1b:50:4c:6e:92:
07:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8E:5A:EB:8F:0D:DF:7F:4C:CC:16:B0:52:8D:FF:68:18:9D:09:0B
X509v3 Authority Key Identifier:
keyid:77:F6:1F:C7:C0:AB:41:CE:15:4E:7B:CB:08:EF:96:23:51:A4:67:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/545a648N339MzBawUo3_aBidCQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9213ec-85a9-48d6-aa69-edc9d02faf54/1/d_Yfx8CrQc4VTnvLCO-WI1GkZ4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.248.130.0/24
Signature Algorithm: sha256WithRSAEncryption
89:dc:ba:33:aa:a0:5c:7c:a0:4e:60:2a:f8:66:ba:35:c8:e5:
9e:65:89:b3:79:62:36:c1:b3:82:0c:d0:da:63:b3:b4:a7:f0:
06:53:e6:73:6a:6d:22:c8:49:2b:db:e4:ae:d0:14:f9:7c:1c:
09:e2:0f:ac:3f:b1:a8:75:de:9b:b3:a1:6c:95:5c:12:14:76:
32:c1:a1:38:44:e5:ca:12:40:e8:23:16:53:47:ae:cd:49:8e:
dd:1d:37:4a:1a:4e:42:dd:21:f4:93:0b:59:cc:0f:79:93:02:
0f:23:02:8e:78:65:c5:ac:75:2f:78:da:0b:3f:1d:7e:9b:04:
d9:5c:8f:e9:d2:62:49:e2:1a:53:fb:dd:66:99:8f:fc:01:28:
ed:f2:01:83:c8:a5:99:f2:11:f0:2d:7f:e7:2b:dd:47:f5:a1:
38:7f:6a:26:2e:f4:b5:ce:e1:57:73:e6:31:c1:41:39:a1:c5:
9c:b7:76:e0:84:4a:7c:f7:85:13:9e:47:f2:eb:84:6c:ae:00:
a5:e1:ce:73:f1:03:81:3a:fa:d2:0a:6a:86:40:ac:ba:28:72:
bb:ea:c5:f3:2c:51:89:33:d9:e9:8b:20:4f:6f:30:2f:48:0e:
a8:79:0a:ae:84:a2:5c:e6:89:99:ce:a1:0e:f7:ee:4f:a0:39:
72:ce:80:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYV4InJaOn9MQDREniNXYw70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZjYxZmM3YzBhYjQxY2UxNTRlN2JjYjA4ZWY5NjIzNTFh
NDY3ODQwHhcNMjMwMTAzMTQ1NjQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzhlNWFlYjhmMGRkZjdmNGNjYzE2YjA1MjhkZmY2ODE4OWQwOTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz1j4SnV0JM+6X9Ldq2Hp0vyhUBw
bwCqPxzFiSmfL4Qk/GfUfMwz+DnESpGnR7HNik+7akmqSmq9pwB/dsPknq6uTGVf
u+klH6JzQ1zxiuIWYACj0EMwBAmW5tsf72IzWIYQWE6DFz9ponvRFbcO8xCzwY20
jDh3LA39qADuypfadBwSfecGDA5QVaotl2GwxSo5E38n41rbLULqJ/m+kA+8BHKj
vhqKP+/bBgNeHTrOEAO/Ohug8lASYpzHlnK6RL7g9synkG9HMcMWXwFYUYSj7f9t
xnQxSyyNCtWYaXBr/FI4/PcABQknU+Op1BqYxLKTmYB6nZmMG1BMbpIHiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOeOWuuPDd9/TMwWsFKN/2gYnQkLMB8GA1UdIwQY
MBaAFHf2H8fAq0HOFU57ywjvliNRpGeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjkt
ZWRjOWQwMmZhZjU0LzEvNTQ1YTY0OE4zMzlNekJhd1VvM19hQmlkQ1FzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC85MjEzZWMtODVhOS00OGQ2LWFhNjktZWRjOWQwMmZhZjU0
LzEvZF9ZZng4Q3JRYzRWVG52TENPLVdJMUdrWjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/iCMA0G
CSqGSIb3DQEBCwUAA4IBAQCJ3LozqqBcfKBOYCr4Zro1yOWeZYmzeWI2wbOCDNDa
Y7O0p/AGU+Zzam0iyEkr2+Su0BT5fBwJ4g+sP7Godd6bs6FslVwSFHYywaE4ROXK
EkDoIxZTR67NSY7dHTdKGk5C3SH0kwtZzA95kwIPIwKOeGXFrHUveNoLPx1+mwTZ
XI/p0mJJ4hpT+91mmY/8ASjt8gGDyKWZ8hHwLX/nK91H9aE4f2omLvS1zuFXc+Yx
wUE5ocWct3bghEp894UTnkfy64RsrgCl4c5z8QOBOvrSCmqGQKy6KHK76sXzLFGJ
M9npiyBPbzAvSA6oeQquhKJc5omZzqEO9+5PoDlyzoBJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:26 2024 by rpki-client on console-ams.rpki-client.org