Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/jWfBfvTydhK3XkiGNAyw9J6kZsE.roa
File: jWfBfvTydhK3XkiGNAyw9J6kZsE.roa (raw, json)
Hash identifier: Qpa+Qp0iKbQW4HxE5OHs3YMu8uxTvO5mnf7Zs9ZRMFU=
Subject key identifier: 8D:67:C1:7E:F4:F2:76:12:B7:5E:48:86:34:0C:B0:F4:9E:A4:66:C1
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01856CAF076C1E4BA9E2B0FAEC7392E89453
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/jWfBfvTydhK3XkiGNAyw9J6kZsE.roa
Signing time: Sun 01 Jan 2023 09:34:48 +0000
ROA not before: Sun 01 Jan 2023 09:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 132335
IP address blocks: 45.84.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:07:6c:1e:4b:a9:e2:b0:fa:ec:73:92:e8:94:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 1 09:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d67c17ef4f27612b75e4886340cb0f49ea466c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:49:13:09:9f:e7:0e:8c:25:c1:68:9a:97:e5:
27:90:bf:37:df:c1:a0:b2:32:6e:ad:89:6a:dd:0e:
d5:bf:37:9d:47:35:d6:c4:13:d4:1d:c4:4d:fd:26:
68:e7:7e:20:99:d9:0d:29:e8:b4:63:6b:11:82:ac:
df:4d:6d:8d:f4:51:05:d8:68:7b:29:28:6c:40:83:
fa:ee:9d:74:97:e7:b9:d1:14:d3:5f:09:a8:e1:9c:
95:9f:7f:cf:d1:48:54:cb:89:21:88:14:30:b7:13:
fe:90:37:d0:52:71:f8:f0:81:3a:0c:03:68:43:54:
9d:7b:50:34:8f:68:d6:5c:0f:78:d2:10:2e:83:49:
bd:5c:41:26:2f:39:68:da:c5:f0:92:4a:8d:98:81:
86:97:14:22:f6:2c:f7:09:c6:26:b2:88:9b:36:89:
56:ec:3f:c0:05:ef:de:60:f0:55:9d:fd:d1:d6:3c:
d5:9f:39:d1:27:9e:94:84:7a:60:ff:3c:d4:c5:c8:
82:d9:a5:c5:a3:3c:b1:db:a7:35:fb:95:fa:d5:d3:
a8:95:53:92:e1:18:13:16:c6:52:42:c4:9c:c9:1d:
0d:c4:c0:df:16:34:71:e5:8f:bf:bb:98:af:6a:44:
78:9b:6f:b7:1c:7e:7e:ce:f8:bd:2e:b5:59:f6:c7:
03:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:67:C1:7E:F4:F2:76:12:B7:5E:48:86:34:0C:B0:F4:9E:A4:66:C1
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/jWfBfvTydhK3XkiGNAyw9J6kZsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.240.0/24
Signature Algorithm: sha256WithRSAEncryption
43:78:36:80:ab:74:cb:4f:8e:4e:8f:ef:d6:fb:0c:1a:74:4b:
bb:fa:fd:f8:ce:63:dc:c8:1e:00:62:3f:48:a6:4c:dc:d3:8f:
63:07:f7:e6:c3:78:8e:30:44:b9:1b:bd:4f:c6:7e:83:23:b9:
4f:e4:0b:f5:30:e0:e3:67:9c:26:78:1a:d2:35:07:59:6b:60:
59:64:e4:22:43:c4:7b:a1:cc:55:cf:a4:5d:53:bc:a2:8b:b0:
49:df:76:9e:a6:5a:9a:c3:aa:b8:03:45:f0:5a:75:4a:85:48:
22:62:8e:46:6e:7a:9e:7f:d4:63:cf:8e:0d:d9:ce:03:33:0a:
33:c1:57:b4:94:cb:e4:90:93:ee:48:bf:56:8f:8e:9a:2f:d5:
52:91:45:6f:2a:65:bf:0f:4f:ac:8d:66:5a:6c:a5:61:04:30:
2f:2c:93:d7:40:c0:c4:ca:48:50:25:95:b7:bc:19:9d:a9:84:
b0:b7:a2:f6:dc:0f:80:80:ea:c7:c5:5c:0d:04:b1:db:45:e0:
ad:9b:79:cd:ee:b6:ed:ea:79:92:58:64:4b:fa:15:79:ec:70:
54:92:8b:3d:c4:d3:e6:5a:5a:c5:81:13:b6:28:dd:db:e6:70:
62:7a:b4:22:71:d0:f2:42:94:50:bb:d9:24:08:1a:88:4a:54:
13:c3:4e:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsrwdsHkup4rD67HOS6JRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy
NzJiYTYwHhcNMjMwMTAxMDkzNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDY3YzE3ZWY0ZjI3NjEyYjc1ZTQ4ODYzNDBjYjBmNDllYTQ2NmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEkTCZ/nDowlwWial+UnkL8338Gg
sjJurYlq3Q7VvzedRzXWxBPUHcRN/SZo534gmdkNKei0Y2sRgqzfTW2N9FEF2Gh7
KShsQIP67p10l+e50RTTXwmo4ZyVn3/P0UhUy4khiBQwtxP+kDfQUnH48IE6DANo
Q1Sde1A0j2jWXA940hAug0m9XEEmLzlo2sXwkkqNmIGGlxQi9iz3CcYmsoibNolW
7D/ABe/eYPBVnf3R1jzVnznRJ56UhHpg/zzUxciC2aXFozyx26c1+5X61dOolVOS
4RgTFsZSQsScyR0NxMDfFjRx5Y+/u5ivakR4m2+3HH5+zvi9LrVZ9scDeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI1nwX708nYSt15IhjQMsPSepGbBMB8GA1UdIwQY
MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt
MDc3OWY0OGVjZWEwLzEvaldmQmZ2VHlkaEszWGtpR05BeXc5SjZrWnNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw
LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVTwMA0G
CSqGSIb3DQEBCwUAA4IBAQBDeDaAq3TLT45Oj+/W+wwadEu7+v34zmPcyB4AYj9I
pkzc049jB/fmw3iOMES5G71Pxn6DI7lP5Av1MODjZ5wmeBrSNQdZa2BZZOQiQ8R7
ocxVz6RdU7yii7BJ33aeplqaw6q4A0XwWnVKhUgiYo5Gbnqef9Rjz44N2c4DMwoz
wVe0lMvkkJPuSL9Wj46aL9VSkUVvKmW/D0+sjWZabKVhBDAvLJPXQMDEykhQJZW3
vBmdqYSwt6L23A+AgOrHxVwNBLHbReCtm3nN7rbt6nmSWGRL+hV57HBUkos9xNPm
WlrFgRO2KN3b5nBierQicdDyQpRQu9kkCBqISlQTw07l
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:36 2024 by rpki-client on console-ams.rpki-client.org