Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/6B44MDCPEF7QcGyV035W9vdNz84.roa
File: 6B44MDCPEF7QcGyV035W9vdNz84.roa (raw, json)
Hash identifier: UyMt9uV4TqyLHflYMvbmlKYSLceSLKR82EJL8ZXrgVU=
Subject key identifier: E8:1E:38:30:30:8F:10:5E:D0:70:6C:95:D3:7E:56:F6:F7:4D:CF:CE
Certificate issuer: /CN=47c6df6a7c23e6d5597ea941e2abbd16aa8239d2
Certificate serial: 018570B97FA774FD4A312325F2061B15E301
Authority key identifier: 47:C6:DF:6A:7C:23:E6:D5:59:7E:A9:41:E2:AB:BD:16:AA:82:39:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8bfanwj5tVZfqlB4qu9FqqCOdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/6B44MDCPEF7QcGyV035W9vdNz84.roa
Signing time: Mon 02 Jan 2023 04:24:43 +0000
ROA not before: Mon 02 Jan 2023 04:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24904
IP address blocks: 45.83.228.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:b9:7f:a7:74:fd:4a:31:23:25:f2:06:1b:15:e3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c6df6a7c23e6d5597ea941e2abbd16aa8239d2
Validity
Not Before: Jan 2 04:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e81e3830308f105ed0706c95d37e56f6f74dcfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:53:37:87:a6:9f:e9:be:6d:be:31:bb:60:e9:
2b:c1:eb:92:8e:f4:dd:2a:b3:12:d2:a0:ca:4f:af:
fa:9c:dd:69:fd:d9:e1:f2:f7:36:cf:60:8b:1f:a6:
31:30:ba:72:b2:0e:76:d1:ec:68:0c:b1:aa:af:2a:
31:3d:c0:63:50:ed:8e:20:df:08:64:55:0b:53:16:
c6:fe:66:6e:5b:ca:29:99:3a:90:9c:0c:ef:81:d8:
5d:e6:8e:0a:35:d1:71:57:ed:e5:33:d5:5b:5e:37:
b1:ae:6a:31:10:7b:a7:19:08:b2:06:e9:d7:bd:16:
b5:18:40:83:ea:08:67:3d:43:a3:08:71:2d:6c:66:
cb:ba:1d:79:fc:f8:2c:41:40:ce:1f:03:62:32:02:
5c:04:c8:b6:76:c9:5e:5c:41:4d:08:3a:2d:75:9e:
c8:9f:8f:bf:5c:50:66:ab:24:11:84:1f:48:71:c0:
36:09:80:a5:3c:f0:2e:59:9a:1b:7a:ca:4e:c3:06:
d7:36:fa:a2:dc:ce:9e:cf:a7:85:9d:45:78:72:95:
57:43:95:1a:99:ab:db:84:f5:52:1c:59:e1:ae:46:
b0:c5:c8:4b:e8:5d:47:1a:a7:8d:3d:0d:ae:c8:2b:
61:d6:b6:ae:77:b3:9d:a0:cd:12:2e:9e:89:2a:44:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1E:38:30:30:8F:10:5E:D0:70:6C:95:D3:7E:56:F6:F7:4D:CF:CE
X509v3 Authority Key Identifier:
keyid:47:C6:DF:6A:7C:23:E6:D5:59:7E:A9:41:E2:AB:BD:16:AA:82:39:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8bfanwj5tVZfqlB4qu9FqqCOdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/6B44MDCPEF7QcGyV035W9vdNz84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/593065-bab4-4b6d-959a-45dae6fedc33/1/R8bfanwj5tVZfqlB4qu9FqqCOdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.228.0/22
Signature Algorithm: sha256WithRSAEncryption
53:a2:19:5d:d1:e9:71:dc:76:67:5c:e6:54:79:27:16:55:16:
3d:b3:3c:9e:d3:a7:d4:8e:69:59:ef:d6:00:0c:dc:78:70:af:
11:7a:d3:0e:86:03:ea:17:10:e7:2d:a9:12:53:ea:eb:02:cf:
bc:d5:a9:97:4d:a7:1a:2d:f1:22:6b:c2:0f:68:1b:34:33:5c:
eb:2f:6a:ff:9d:97:ce:88:e5:7e:47:11:8b:3d:ba:06:c2:bc:
93:8c:27:90:6c:46:14:66:54:7f:f6:48:94:8a:1f:01:e3:68:
7c:a7:3e:5b:08:38:54:40:0f:fb:69:b4:b0:11:4d:e7:84:7d:
17:6d:98:b5:e5:a4:5d:55:aa:52:56:34:97:0f:a5:2a:57:66:
52:95:ec:f2:bf:f8:a4:3f:09:7b:17:76:58:e7:5a:5d:ca:fc:
bd:4c:13:ba:dc:cc:60:03:88:4a:88:2e:ca:67:cc:40:03:eb:
ba:d3:46:d7:f8:46:c0:07:23:e2:f6:a2:ec:da:e5:87:a8:41:
e1:39:e8:ed:52:82:fd:b8:3f:f9:f2:d2:99:5b:2c:7c:1b:8d:
5d:fb:94:b6:b2:c8:77:00:14:2a:2a:49:77:dd:55:e8:cf:7a:
33:ca:2e:55:df:e8:5a:8d:e2:b1:f9:a0:46:b7:88:be:67:19:
f5:2d:ec:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwuX+ndP1KMSMl8gYbFeMBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YzZkZjZhN2MyM2U2ZDU1OTdlYTk0MWUyYWJiZDE2YWE4
MjM5ZDIwHhcNMjMwMTAyMDQyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODFlMzgzMDMwOGYxMDVlZDA3MDZjOTVkMzdlNTZmNmY3NGRjZmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFM3h6af6b5tvjG7YOkrweuSjvTd
KrMS0qDKT6/6nN1p/dnh8vc2z2CLH6YxMLpysg520exoDLGqryoxPcBjUO2OIN8I
ZFULUxbG/mZuW8opmTqQnAzvgdhd5o4KNdFxV+3lM9VbXjexrmoxEHunGQiyBunX
vRa1GECD6ghnPUOjCHEtbGbLuh15/PgsQUDOHwNiMgJcBMi2dsleXEFNCDotdZ7I
n4+/XFBmqyQRhB9IccA2CYClPPAuWZobespOwwbXNvqi3M6ez6eFnUV4cpVXQ5Ua
mavbhPVSHFnhrkawxchL6F1HGqeNPQ2uyCth1raud7OdoM0SLp6JKkQ9hwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOgeODAwjxBe0HBsldN+Vvb3Tc/OMB8GA1UdIwQY
MBaAFEfG32p8I+bVWX6pQeKrvRaqgjnSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjhiZmFud2o1dFZaZnFsQjRxdTlGcXFDT2RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi81OTMwNjUtYmFiNC00YjZkLTk1OWEt
NDVkYWU2ZmVkYzMzLzEvNkI0NE1EQ1BFRjdRY0d5VjAzNVc5dmROejg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi81OTMwNjUtYmFiNC00YjZkLTk1OWEtNDVkYWU2ZmVkYzMz
LzEvUjhiZmFud2o1dFZaZnFsQjRxdTlGcXFDT2RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVPkMA0G
CSqGSIb3DQEBCwUAA4IBAQBTohld0elx3HZnXOZUeScWVRY9szye06fUjmlZ79YA
DNx4cK8RetMOhgPqFxDnLakSU+rrAs+81amXTacaLfEia8IPaBs0M1zrL2r/nZfO
iOV+RxGLPboGwryTjCeQbEYUZlR/9kiUih8B42h8pz5bCDhUQA/7abSwEU3nhH0X
bZi15aRdVapSVjSXD6UqV2ZSlezyv/ikPwl7F3ZY51pdyvy9TBO63MxgA4hKiC7K
Z8xAA+u600bX+EbAByPi9qLs2uWHqEHhOejtUoL9uD/58tKZWyx8G41d+5S2ssh3
ABQqKkl33VXoz3ozyi5V3+hajeKx+aBGt4i+Zxn1Lexp
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:40 2024 by rpki-client on console-fra.rpki-client.org