Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/VBY_Pjih4MlMOyTN4ekkmPSgI24.roa
File: VBY_Pjih4MlMOyTN4ekkmPSgI24.roa (raw, json)
Hash identifier: Zv0ablEbg/kvmMcWQiq+YzP6ejUUYSh/KHjtovJZJLA=
Subject key identifier: 54:16:3F:3E:38:A1:E0:C9:4C:3B:24:CD:E1:E9:24:98:F4:A0:23:6E
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 01856C53D43FCA9EA6BBA6D24FDB75263B41
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/VBY_Pjih4MlMOyTN4ekkmPSgI24.roa
Signing time: Sun 01 Jan 2023 07:55:11 +0000
ROA not before: Sun 01 Jan 2023 07:55:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55000
IP address blocks: 45.132.236.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:d4:3f:ca:9e:a6:bb:a6:d2:4f:db:75:26:3b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jan 1 07:55:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=54163f3e38a1e0c94c3b24cde1e92498f4a0236e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:98:7a:75:d6:9d:da:47:83:09:2f:dc:07:
2d:d7:56:57:f5:f9:2d:9d:ad:2d:4a:a0:34:66:88:
98:cf:d0:a2:88:93:27:e7:a4:3a:45:ce:64:51:b3:
3c:de:1b:20:54:ef:a4:61:7f:77:38:8f:20:ec:c6:
34:3a:55:c3:86:4f:d1:23:0a:f6:fc:28:1c:86:bd:
70:31:6f:56:92:6e:86:b1:0c:eb:aa:46:4c:af:6a:
64:09:63:9c:8d:88:fb:45:a8:1d:91:c0:3e:8f:b6:
d4:f4:27:09:57:29:75:02:65:94:cf:2d:27:9c:ae:
af:5c:9b:1e:b8:9e:ba:14:39:22:ae:f4:df:05:02:
af:cf:8e:70:f1:fc:ae:86:86:4d:75:8c:bf:5d:7a:
a3:2d:ba:0f:3c:b4:1f:63:b1:55:41:6e:61:71:e3:
99:24:db:df:52:b6:ea:0d:62:dc:4a:fe:95:3f:c8:
21:ff:de:04:1c:60:e5:d6:66:4c:b6:0b:90:6d:25:
c8:31:48:3e:1c:25:b9:a5:03:64:0d:23:7c:0d:b2:
ed:ed:4e:c4:32:fb:fe:2f:13:7b:5d:bc:73:59:e7:
5d:9e:de:0c:5a:7e:f7:da:97:33:1b:c5:3f:a6:ba:
7d:8d:9e:59:c4:e2:01:f7:92:8b:5e:d6:e4:46:ff:
f5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:16:3F:3E:38:A1:E0:C9:4C:3B:24:CD:E1:E9:24:98:F4:A0:23:6E
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/VBY_Pjih4MlMOyTN4ekkmPSgI24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.236.0/22
Signature Algorithm: sha256WithRSAEncryption
36:45:d5:54:a2:04:1d:a5:03:53:c2:f7:53:82:0f:38:82:36:
2b:ca:e4:63:04:b2:18:ac:42:18:7a:6e:ee:33:e3:a0:67:2b:
29:8b:2e:f1:b0:c8:cf:7f:ab:5e:f7:13:04:71:39:6a:d3:92:
68:68:69:07:ea:1c:5e:ae:cb:01:63:c3:b7:6b:59:90:ee:a8:
84:29:3a:6a:35:d2:70:d8:48:56:b6:7c:cc:94:ed:16:07:5a:
e7:e4:49:69:ec:5e:13:e4:e9:e1:dc:6d:87:9c:12:21:77:41:
3e:b0:46:51:3b:0e:d9:df:54:ee:74:0b:32:8e:e1:56:ca:51:
d0:d9:b1:03:27:f9:57:1c:a5:2a:08:9a:bc:43:1e:dc:95:12:
d4:8a:3f:b6:4a:04:f7:b4:92:83:d7:51:68:a7:95:14:77:df:
2e:8c:ae:34:86:2e:42:fa:ae:43:c1:29:54:0f:1f:71:7f:34:
c4:ae:1d:e6:b3:eb:ae:bf:3b:10:0e:0c:dc:da:5f:5e:a1:cf:
4d:5e:e9:db:08:bd:64:0c:54:71:34:1b:a0:8f:1a:3f:2b:68:
67:d3:a4:bf:3b:c0:1e:44:5a:9b:26:e1:43:9f:8d:90:4b:2a:
9a:5d:7f:ae:6b:67:7c:9a:c3:91:09:8c:08:d0:08:ab:6a:83:
69:ef:ef:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsU9Q/yp6mu6bST9t1JjtBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0N2I0ODc4NDhmZmY2MzUzM2Q4N2MzMjRlY2M1MWMyYzNl
YTJhZGIwHhcNMjMwMTAxMDc1NTExWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDE2M2YzZTM4YTFlMGM5NGMzYjI0Y2RlMWU5MjQ5OGY0YTAyMzZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttyYenXWndpHgwkv3Act11ZX9fkt
na0tSqA0ZoiYz9CiiJMn56Q6Rc5kUbM83hsgVO+kYX93OI8g7MY0OlXDhk/RIwr2
/Cgchr1wMW9Wkm6GsQzrqkZMr2pkCWOcjYj7RagdkcA+j7bU9CcJVyl1AmWUzy0n
nK6vXJseuJ66FDkirvTfBQKvz45w8fyuhoZNdYy/XXqjLboPPLQfY7FVQW5hceOZ
JNvfUrbqDWLcSv6VP8gh/94EHGDl1mZMtguQbSXIMUg+HCW5pQNkDSN8DbLt7U7E
Mvv+LxN7XbxzWeddnt4MWn732pczG8U/prp9jZ5ZxOIB95KLXtbkRv/1hwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFQWPz44oeDJTDskzeHpJJj0oCNuMB8GA1UdIwQY
MBaAFDR7SHhI//Y1M9h8Mk7MUcLD6irbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkh0SWVFal85alV6Mkh3eVRzeFJ3c1BxS3RzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iYzcxMjItNGQxYi00NmE3LWFlY2It
MjMwYjNiNzJhMTc1LzEvVkJZX1BqaWg0TWxNT3lUTjRla2ttUFNnSTI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iYzcxMjItNGQxYi00NmE3LWFlY2ItMjMwYjNiNzJhMTc1
LzEvTkh0SWVFal85alV6Mkh3eVRzeFJ3c1BxS3RzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYTsMA0G
CSqGSIb3DQEBCwUAA4IBAQA2RdVUogQdpQNTwvdTgg84gjYryuRjBLIYrEIYem7u
M+OgZyspiy7xsMjPf6te9xMEcTlq05JoaGkH6hxerssBY8O3a1mQ7qiEKTpqNdJw
2EhWtnzMlO0WB1rn5Elp7F4T5Onh3G2HnBIhd0E+sEZROw7Z31TudAsyjuFWylHQ
2bEDJ/lXHKUqCJq8Qx7clRLUij+2SgT3tJKD11Fop5UUd98ujK40hi5C+q5DwSlU
Dx9xfzTErh3ms+uuvzsQDgzc2l9eoc9NXunbCL1kDFRxNBugjxo/K2hn06S/O8Ae
RFqbJuFDn42QSyqaXX+ua2d8msORCYwI0AiraoNp7+/6
-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:55 2024 by rpki-client on console-ams.rpki-client.org