Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/vCMXZ8SVtw_bcDWp_YwunLesxsQ.roa
File: vCMXZ8SVtw_bcDWp_YwunLesxsQ.roa (raw, json)
Hash identifier: wboEDhOzEEfbMkgVRNjJdQHbNOnbyOFKluhmnL186jI=
Subject key identifier: BC:23:17:67:C4:95:B7:0F:DB:70:35:A9:FD:8C:2E:9C:B7:AC:C6:C4
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01884D69075EEA14A3A8DF6AFF73506FD713
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/vCMXZ8SVtw_bcDWp_YwunLesxsQ.roa
Signing time: Wed 24 May 2023 10:58:28 +0000
ROA not before: Wed 24 May 2023 10:58:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.84.242.0/23 maxlen: 23
85.208.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 May 2023 17:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4d:69:07:5e:ea:14:a3:a8:df:6a:ff:73:50:6f:d7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: May 24 10:58:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc231767c495b70fdb7035a9fd8c2e9cb7acc6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5d:74:c4:a9:35:b3:37:8e:86:5e:21:82:9d:
cb:f6:f4:6b:79:74:3d:34:df:1b:30:65:f1:2e:b2:
46:34:be:78:42:9a:32:80:ad:db:51:fa:be:5e:de:
ee:0c:cb:0e:54:e8:9c:dc:2e:80:ef:17:55:b0:9a:
6e:51:8b:b5:24:9a:16:cd:56:00:74:2e:1c:dd:20:
47:08:d7:50:97:4d:70:1a:c0:f9:34:b6:b1:25:2d:
f6:64:7b:29:98:d4:7d:5f:56:94:03:c9:c2:76:13:
9f:70:2e:88:7a:63:53:ef:4d:73:fa:fc:61:b9:01:
15:f6:aa:db:83:08:b2:34:de:13:1e:73:7c:1a:99:
25:b7:92:89:ed:b1:47:ae:7f:ec:66:ae:e3:a5:81:
58:6f:3e:80:1d:9c:f2:85:16:d6:ee:15:d8:fb:f5:
65:f4:d5:e7:30:0c:4e:06:82:a6:08:32:78:a0:6b:
4c:23:c3:09:aa:b2:c7:d6:60:51:b0:38:a8:92:63:
ac:82:19:e3:e2:0e:7a:4f:45:0a:7d:3b:9e:31:0f:
77:4b:51:d1:57:01:02:2e:b2:15:25:50:51:c9:75:
8f:74:4b:26:a0:cc:4a:e1:31:fb:18:6e:11:28:0b:
1a:9d:d3:95:76:0e:82:76:99:fc:03:a2:40:4e:80:
95:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:23:17:67:C4:95:B7:0F:DB:70:35:A9:FD:8C:2E:9C:B7:AC:C6:C4
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/vCMXZ8SVtw_bcDWp_YwunLesxsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.242.0/23
85.208.44.0/24
Signature Algorithm: sha256WithRSAEncryption
58:a2:48:ae:39:69:6a:30:7c:fb:35:c3:14:38:f0:5a:bf:7f:
73:e0:75:2b:d2:7d:37:06:3c:0c:e6:1d:2d:fb:52:a7:29:90:
80:6c:25:31:2f:fc:2d:94:4a:fc:4d:b4:25:4f:4f:0c:f0:cc:
71:ae:9b:70:d6:b3:a1:de:03:e7:61:76:8b:77:3a:1d:92:88:
3b:f7:40:43:d8:c9:f8:83:01:9d:71:65:1e:89:f6:c0:6a:b4:
be:dd:25:af:bc:00:ba:a9:09:c5:fc:25:c1:a9:57:4b:65:7b:
49:65:b7:78:8c:69:46:1f:93:4b:fd:ee:a9:84:52:88:12:7a:
1d:2e:2d:55:6b:c7:18:78:11:36:8c:30:63:0b:06:82:30:5d:
c2:43:3f:e5:ba:8f:4d:2d:14:e7:43:8e:db:00:0d:e0:34:81:
28:f9:54:6d:7f:04:83:4a:5b:c4:10:ad:98:ce:2b:2f:cc:dd:
81:c3:4b:2b:07:67:4c:9a:c0:ff:0e:f7:5a:53:13:c3:54:2d:
0c:99:62:e1:62:be:a0:91:ef:e4:c8:9e:e4:11:e8:c1:89:53:
a7:c8:50:f0:23:85:2a:f2:f5:7c:58:da:81:b7:9c:91:de:3e:
53:10:2a:11:95:e0:d9:96:70:a4:99:2b:14:ca:4e:17:06:38:
43:cc:20:98
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYhNaQde6hSjqN9q/3NQb9cTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy
NzJiYTYwHhcNMjMwNTI0MTA1ODI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzIzMTc2N2M0OTViNzBmZGI3MDM1YTlmZDhjMmU5Y2I3YWNjNmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV10xKk1szeOhl4hgp3L9vRreXQ9
NN8bMGXxLrJGNL54QpoygK3bUfq+Xt7uDMsOVOic3C6A7xdVsJpuUYu1JJoWzVYA
dC4c3SBHCNdQl01wGsD5NLaxJS32ZHspmNR9X1aUA8nCdhOfcC6IemNT701z+vxh
uQEV9qrbgwiyNN4THnN8Gpklt5KJ7bFHrn/sZq7jpYFYbz6AHZzyhRbW7hXY+/Vl
9NXnMAxOBoKmCDJ4oGtMI8MJqrLH1mBRsDiokmOsghnj4g56T0UKfTueMQ93S1HR
VwECLrIVJVBRyXWPdEsmoMxK4TH7GG4RKAsandOVdg6Cdpn8A6JAToCVBwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLwjF2fElbcP23A1qf2MLpy3rMbEMB8GA1UdIwQY
MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt
MDc3OWY0OGVjZWEwLzEvdkNNWFo4U1Z0d19iY0RXcF9Zd3VuTGVzeHNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw
LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLVTyAwQA
VdAsMA0GCSqGSIb3DQEBCwUAA4IBAQBYokiuOWlqMHz7NcMUOPBav39z4HUr0n03
BjwM5h0t+1KnKZCAbCUxL/wtlEr8TbQlT08M8Mxxrptw1rOh3gPnYXaLdzodkog7
90BD2Mn4gwGdcWUeifbAarS+3SWvvAC6qQnF/CXBqVdLZXtJZbd4jGlGH5NL/e6p
hFKIEnodLi1Va8cYeBE2jDBjCwaCMF3CQz/luo9NLRTnQ47bAA3gNIEo+VRtfwSD
SlvEEK2YzisvzN2Bw0srB2dMmsD/DvdaUxPDVC0MmWLhYr6gke/kyJ7kEejBiVOn
yFDwI4Uq8vV8WNqBt5yR3j5TECoRleDZlnCkmSsUyk4XBjhDzCCY
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:23 2024 by rpki-client on console-ams.rpki-client.org