Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/IJxhK5QZSmI1mo3PFfPCQOI5UHo.roa
File: IJxhK5QZSmI1mo3PFfPCQOI5UHo.roa (raw, json)
Hash identifier: 5esegGTR00t7EWI9EwnKJeBM0OmhRv660lT9Jxpurck=
Subject key identifier: 20:9C:61:2B:94:19:4A:62:35:9A:8D:CF:15:F3:C2:40:E2:39:50:7A
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018B88E9F6DFFB983CCE6EF622A67152AE9D
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/IJxhK5QZSmI1mo3PFfPCQOI5UHo.roa
Signing time: Wed 01 Nov 2023 03:25:16 +0000
ROA not before: Wed 01 Nov 2023 03:25:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 45.139.198.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:88:e9:f6:df:fb:98:3c:ce:6e:f6:22:a6:71:52:ae:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Nov 1 03:25:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=209c612b94194a62359a8dcf15f3c240e239507a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:47:83:75:c2:1f:55:e2:f9:0e:f6:c3:bb:6a:
86:ea:06:9b:4b:2a:22:3e:57:b9:0c:ec:9e:6d:b0:
a2:af:00:12:e5:f2:e7:a2:7e:3c:9f:58:5a:00:fb:
41:0c:0a:d4:c1:44:4d:37:c1:4a:ae:6d:b8:7b:75:
27:f4:8f:14:f1:85:77:51:36:9e:0e:f7:0c:f4:0d:
76:e2:6b:4b:f5:e0:7f:25:fc:01:94:73:e6:c6:f8:
cb:7d:37:71:31:a2:3c:34:e8:a3:88:68:7d:8e:b4:
79:6e:07:bf:42:87:b1:44:2f:13:62:15:16:f3:4a:
50:39:61:68:57:da:f8:50:31:45:09:ba:41:40:e7:
59:83:0c:8c:42:43:a2:10:fe:e9:95:b1:73:cb:bb:
e7:04:c7:77:98:e6:dc:aa:98:86:3c:a2:16:db:07:
71:5b:4c:4e:af:ff:e2:ec:e4:96:04:13:23:00:4a:
77:ba:8a:ab:8b:c6:30:24:7a:9e:c7:a7:eb:2a:34:
38:ff:94:11:40:9a:6c:aa:1b:96:cd:df:c4:c4:82:
68:51:59:9d:3e:c5:6f:2d:bc:c4:a3:9d:da:bf:6e:
02:c8:d7:e1:b7:cb:1a:51:a4:5f:d5:0c:d9:c8:bc:
fe:16:44:fc:f6:26:3e:0f:8a:e8:63:17:d4:c4:4e:
c0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:9C:61:2B:94:19:4A:62:35:9A:8D:CF:15:F3:C2:40:E2:39:50:7A
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/IJxhK5QZSmI1mo3PFfPCQOI5UHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.198.0/24
Signature Algorithm: sha256WithRSAEncryption
79:36:ff:9b:f5:a3:9b:96:3e:2d:79:60:f5:66:13:49:87:e3:
a0:d2:c9:e5:7e:8b:b6:2f:7b:d0:4c:57:f8:a5:48:e0:2f:4c:
4e:70:b7:64:6d:44:8f:dd:04:20:d0:99:15:cc:6d:d9:90:08:
7f:cf:a5:87:bc:e8:bb:d5:be:b7:bc:43:74:ca:98:34:94:7c:
3a:4f:f9:48:46:95:8c:8a:33:cf:9f:64:8b:40:e9:ff:4d:e3:
7a:88:5f:fa:fa:42:3e:b6:f3:8a:fe:31:55:f3:bd:6a:47:49:
f8:be:49:4b:1d:1c:47:19:20:cc:e4:a9:46:59:73:6c:20:f6:
41:06:8d:da:b1:6d:b6:f6:93:8f:c0:9f:88:49:42:30:25:e2:
0e:c3:95:bb:00:f3:b5:1e:0e:2d:0d:3c:bf:7d:9a:ff:dd:13:
db:c3:e4:26:42:46:34:9b:47:df:b9:09:b6:f9:08:05:67:8d:
cb:12:61:24:ba:64:14:46:64:8b:91:51:7a:17:22:f6:59:b2:
df:71:c9:e4:37:f6:db:a8:6f:f3:98:55:45:86:a1:ae:a3:10:
67:ed:73:ea:62:db:4f:c2:7b:e9:f3:b1:aa:d9:74:a8:7e:2d:
6c:3e:6e:14:f4:78:7f:14:23:78:c3:b3:03:9e:b2:80:37:eb:
9b:10:ec:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuI6fbf+5g8zm72IqZxUq6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjMxMTAxMDMyNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDljNjEyYjk0MTk0YTYyMzU5YThkY2YxNWYzYzI0MGUyMzk1MDdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0eDdcIfVeL5DvbDu2qG6gabSyoi
Ple5DOyebbCirwAS5fLnon48n1haAPtBDArUwURNN8FKrm24e3Un9I8U8YV3UTae
DvcM9A124mtL9eB/JfwBlHPmxvjLfTdxMaI8NOijiGh9jrR5bge/QoexRC8TYhUW
80pQOWFoV9r4UDFFCbpBQOdZgwyMQkOiEP7plbFzy7vnBMd3mObcqpiGPKIW2wdx
W0xOr//i7OSWBBMjAEp3uoqri8YwJHqex6frKjQ4/5QRQJpsqhuWzd/ExIJoUVmd
PsVvLbzEo53av24CyNfht8saUaRf1QzZyLz+FkT89iY+D4roYxfUxE7AowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCCcYSuUGUpiNZqNzxXzwkDiOVB6MB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvSUp4aEs1UVpTbUkxbW8zUEZmUENRT0k1VUhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYvGMA0G
CSqGSIb3DQEBCwUAA4IBAQB5Nv+b9aOblj4teWD1ZhNJh+Og0snlfou2L3vQTFf4
pUjgL0xOcLdkbUSP3QQg0JkVzG3ZkAh/z6WHvOi71b63vEN0ypg0lHw6T/lIRpWM
ijPPn2SLQOn/TeN6iF/6+kI+tvOK/jFV871qR0n4vklLHRxHGSDM5KlGWXNsIPZB
Bo3asW229pOPwJ+ISUIwJeIOw5W7APO1Hg4tDTy/fZr/3RPbw+QmQkY0m0ffuQm2
+QgFZ43LEmEkumQURmSLkVF6FyL2WbLfccnkN/bbqG/zmFVFhqGuoxBn7XPqYttP
wnvp87Gq2XSofi1sPm4U9Hh/FCN4w7MDnrKAN+ubEOyj
-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:49 2024 by rpki-client on console-ams.rpki-client.org