Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/OXLbz8dZQLQ38R51nGxw7hi1-EE.roa
File: OXLbz8dZQLQ38R51nGxw7hi1-EE.roa (raw, json)
Hash identifier: yBomRHsrz/sh8aclZPU+NZndhflGIa0Z+EjrAyX4q0o=
Subject key identifier: 39:72:DB:CF:C7:59:40:B4:37:F1:1E:75:9C:6C:70:EE:18:B5:F8:41
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018A3C2346DAC59523B5C7D2069F711E5E17
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/OXLbz8dZQLQ38R51nGxw7hi1-EE.roa
Signing time: Mon 28 Aug 2023 12:34:19 +0000
ROA not before: Mon 28 Aug 2023 12:34:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61390
IP address blocks: 45.14.244.0/22 maxlen: 24
45.130.70.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 28 Dec 2023 15:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3c:23:46:da:c5:95:23:b5:c7:d2:06:9f:71:1e:5e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Aug 28 12:34:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3972dbcfc75940b437f11e759c6c70ee18b5f841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:85:14:4c:ef:1f:4f:bd:46:66:75:55:91:
6b:61:ad:b0:0a:45:21:ba:5c:60:9c:8c:af:f6:18:
88:e7:57:07:63:eb:6c:e1:c7:06:a5:29:44:e4:f0:
a3:4a:42:66:2e:3b:69:8f:86:6a:96:4f:a6:31:c1:
15:64:d3:25:68:b2:58:e9:bf:34:45:65:cc:ad:9b:
c3:1f:90:99:ec:63:7b:ee:2d:aa:1e:e2:3b:f9:6a:
57:4a:f0:f2:56:5c:ed:38:c7:64:7e:9a:0c:8e:b8:
d4:bc:2b:ce:63:d5:ea:a7:33:53:6a:49:1d:41:10:
76:3b:59:3a:df:0d:f6:9e:0c:5e:60:f0:7e:84:78:
63:3a:10:3c:69:65:54:58:66:e3:fd:ce:44:c6:01:
76:a4:72:cc:f4:1b:99:30:cf:e3:5e:51:92:a8:94:
21:25:e9:de:e9:ff:ea:9b:32:df:f0:25:b0:e2:22:
98:52:06:a7:35:0d:88:50:da:e1:ee:36:7e:79:33:
ef:f9:22:9a:4d:f4:2a:70:5c:f4:1e:2a:7a:45:c6:
02:94:b9:87:c1:8c:e1:b0:76:bc:ff:44:c4:e2:15:
88:02:ae:fb:04:72:d5:ba:8e:30:78:0b:75:63:ce:
37:99:c3:e7:c1:b4:4b:1a:b6:ee:8a:f4:9c:64:89:
2f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:72:DB:CF:C7:59:40:B4:37:F1:1E:75:9C:6C:70:EE:18:B5:F8:41
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/OXLbz8dZQLQ38R51nGxw7hi1-EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.244.0/22
45.130.70.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:70:89:6a:1e:e3:a8:40:5f:0b:a9:82:4a:ff:38:62:f2:66:
a9:1f:ca:1e:61:ad:6e:09:1e:b9:a1:b1:51:af:8f:10:9c:2f:
86:a7:91:7f:35:f4:7a:cb:93:07:bf:33:2d:21:be:af:35:6c:
e0:42:04:a7:9e:c4:13:48:0a:af:ca:ef:fd:92:d4:cb:e8:02:
8b:b7:d0:7e:38:fa:68:78:61:05:5a:84:6f:14:98:45:e7:a1:
5f:0f:6d:87:83:4e:f6:69:da:b5:ab:4e:ba:3f:b1:89:65:d0:
e3:4e:11:c9:c8:38:d6:db:d1:54:97:b6:0a:91:65:25:7f:39:
ee:6b:9f:be:a8:c4:6e:37:39:5f:1e:e3:b4:eb:0d:35:1e:79:
24:47:22:47:5b:4b:09:9f:94:02:7b:e7:69:40:fb:2b:84:ad:
28:9a:ed:e3:f9:ae:d2:d8:a3:da:3e:2d:c9:ae:1b:d9:7c:a2:
39:5c:e3:e6:2f:33:15:19:51:46:ab:c0:98:06:9b:3e:94:03:
af:e6:6a:af:4d:21:3e:1c:10:be:e7:a8:f8:af:f8:59:e5:ef:
f9:d4:3a:31:ff:a1:c6:64:18:bc:a8:85:1c:b2:9d:b8:ad:84:
c2:bf:7d:1a:a6:ce:11:eb:87:d9:50:f1:e1:b1:14:e5:53:c9:
aa:86:da:4f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYo8I0baxZUjtcfSBp9xHl4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjMwODI4MTIzNDE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTcyZGJjZmM3NTk0MGI0MzdmMTFlNzU5YzZjNzBlZTE4YjVmODQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCiFFEzvH0+9RmZ1VZFrYa2wCkUh
ulxgnIyv9hiI51cHY+ts4ccGpSlE5PCjSkJmLjtpj4Zqlk+mMcEVZNMlaLJY6b80
RWXMrZvDH5CZ7GN77i2qHuI7+WpXSvDyVlztOMdkfpoMjrjUvCvOY9XqpzNTakkd
QRB2O1k63w32ngxeYPB+hHhjOhA8aWVUWGbj/c5ExgF2pHLM9BuZMM/jXlGSqJQh
Jene6f/qmzLf8CWw4iKYUganNQ2IUNrh7jZ+eTPv+SKaTfQqcFz0Hip6RcYClLmH
wYzhsHa8/0TE4hWIAq77BHLVuo4weAt1Y843mcPnwbRLGrbuivScZIkvlQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDly28/HWUC0N/EedZxscO4YtfhBMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvT1hMYno4ZFpRTFEzOFI1MW5HeHc3aGkxLUVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLQ70AwQB
LYJGMA0GCSqGSIb3DQEBCwUAA4IBAQCLcIlqHuOoQF8LqYJK/zhi8mapH8oeYa1u
CR65obFRr48QnC+Gp5F/NfR6y5MHvzMtIb6vNWzgQgSnnsQTSAqvyu/9ktTL6AKL
t9B+OPpoeGEFWoRvFJhF56FfD22Hg072adq1q066P7GJZdDjThHJyDjW29FUl7YK
kWUlfznua5++qMRuNzlfHuO06w01HnkkRyJHW0sJn5QCe+dpQPsrhK0omu3j+a7S
2KPaPi3JrhvZfKI5XOPmLzMVGVFGq8CYBps+lAOv5mqvTSE+HBC+56j4r/hZ5e/5
1Dox/6HGZBi8qIUcsp24rYTCv30aps4R64fZUPHhsRTlU8mqhtpP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:38 2024 by rpki-client on console-fra.rpki-client.org