Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/FVKUURHJvDoOEYAVy4k5cTu9iuA.roa
File: FVKUURHJvDoOEYAVy4k5cTu9iuA.roa (raw, json)
Hash identifier: RycNk/uzC/iUKcUZefaTcWBdCFt9V2FsQesDla/wKQw=
Subject key identifier: 15:52:94:51:11:C9:BC:3A:0E:11:80:15:CB:89:39:71:3B:BD:8A:E0
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 0185CDC8759A41014B0CF8459257E7F2480E
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/FVKUURHJvDoOEYAVy4k5cTu9iuA.roa
Signing time: Fri 20 Jan 2023 06:05:44 +0000
ROA not before: Fri 20 Jan 2023 06:05:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56309
IP address blocks: 45.150.128.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cd:c8:75:9a:41:01:4b:0c:f8:45:92:57:e7:f2:48:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 20 06:05:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1552945111c9bc3a0e118015cb8939713bbd8ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d8:fc:23:2a:0b:21:1f:d4:f4:16:fb:d0:dd:
6d:79:6a:18:7d:23:cb:98:a4:6b:2e:23:fc:88:64:
e3:23:cc:eb:49:35:5b:ba:b6:5e:cc:cf:47:db:0c:
72:c8:e4:3d:0d:25:01:da:8c:5f:af:0c:9c:dc:28:
4c:db:38:ee:35:29:b2:6e:20:87:ad:eb:d9:a3:95:
cf:1e:d9:b6:50:79:fe:a0:08:ca:67:c2:42:09:01:
76:08:c4:cf:71:a3:7e:5b:b0:b0:9b:83:12:e7:0d:
d2:87:72:54:2f:9d:93:7c:10:4e:88:28:61:03:98:
bf:70:02:2a:71:64:65:3e:44:ed:20:da:d4:b7:17:
18:23:a4:35:6d:ac:63:82:cb:d4:aa:e1:a9:21:c2:
86:4d:51:11:87:7b:fb:15:a5:40:65:3e:b3:fd:a1:
87:ec:82:7b:64:dc:be:7d:61:09:09:23:71:52:20:
03:f8:7f:99:91:96:ee:2e:39:7f:05:57:e4:5f:82:
af:c4:62:a8:dc:b8:93:be:3e:c1:21:75:be:10:53:
27:9c:c3:84:de:cc:32:09:6c:44:a6:1e:0b:38:fe:
5d:3d:72:0b:af:37:2a:16:b1:2a:a2:93:e6:60:fe:
a7:01:38:4e:01:fd:13:fc:25:dd:94:91:a1:97:b9:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:52:94:51:11:C9:BC:3A:0E:11:80:15:CB:89:39:71:3B:BD:8A:E0
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/FVKUURHJvDoOEYAVy4k5cTu9iuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.128.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:55:0a:49:6b:3b:ef:05:90:19:f6:1e:d2:6d:07:48:78:b8:
eb:ba:81:f0:d6:f6:78:ae:01:ab:66:16:32:22:30:41:da:4b:
5f:3b:af:1d:ea:ba:24:3c:e6:4b:5a:1f:dd:12:cb:69:c0:5e:
14:6b:16:6e:3b:33:a5:8e:74:20:34:a2:b2:45:dd:e0:17:c3:
77:3e:19:93:79:c3:94:db:17:0c:89:8c:33:7d:34:12:f2:f1:
23:2a:ac:3e:1a:9b:1a:82:25:83:39:c9:98:b9:d9:c1:bb:4b:
74:48:f5:94:67:85:04:87:67:9d:8f:90:2d:e6:4f:04:60:bf:
e9:2c:3e:37:18:61:ff:0d:c8:7e:68:97:7f:6f:68:47:c1:9e:
9d:72:11:70:6c:e0:c5:d1:ac:a6:8a:66:80:b8:b1:5b:82:fd:
3c:90:99:65:0f:7c:e4:bf:4b:27:0d:6f:67:74:15:32:50:df:
57:15:75:17:d0:87:7d:85:fb:6a:3d:24:ca:76:1f:2e:c2:c1:
b4:d2:07:29:18:99:6f:c7:28:fd:f5:19:40:79:64:b4:e6:3d:
b6:26:93:8b:cc:4d:9a:81:11:e3:c7:f4:21:a5:99:24:ae:8a:
94:d7:bb:ef:f4:20:89:b7:aa:ac:b0:55:7c:59:3f:b3:d3:49:
51:a9:c8:03
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXNyHWaQQFLDPhFklfn8kgOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjMwMTIwMDYwNTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTUyOTQ1MTExYzliYzNhMGUxMTgwMTVjYjg5Mzk3MTNiYmQ4YWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Nj8IyoLIR/U9Bb70N1teWoYfSPL
mKRrLiP8iGTjI8zrSTVburZezM9H2wxyyOQ9DSUB2oxfrwyc3ChM2zjuNSmybiCH
revZo5XPHtm2UHn+oAjKZ8JCCQF2CMTPcaN+W7Cwm4MS5w3Sh3JUL52TfBBOiChh
A5i/cAIqcWRlPkTtINrUtxcYI6Q1baxjgsvUquGpIcKGTVERh3v7FaVAZT6z/aGH
7IJ7ZNy+fWEJCSNxUiAD+H+ZkZbuLjl/BVfkX4KvxGKo3LiTvj7BIXW+EFMnnMOE
3swyCWxEph4LOP5dPXILrzcqFrEqopPmYP6nAThOAf0T/CXdlJGhl7nSowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBVSlFERybw6DhGAFcuJOXE7vYrgMB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvRlZLVVVSSEp2RG9PRVlBVnk0azVjVHU5aXVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZaAMA0G
CSqGSIb3DQEBCwUAA4IBAQCwVQpJazvvBZAZ9h7SbQdIeLjruoHw1vZ4rgGrZhYy
IjBB2ktfO68d6rokPOZLWh/dEstpwF4UaxZuOzOljnQgNKKyRd3gF8N3PhmTecOU
2xcMiYwzfTQS8vEjKqw+GpsagiWDOcmYudnBu0t0SPWUZ4UEh2edj5At5k8EYL/p
LD43GGH/Dch+aJd/b2hHwZ6dchFwbODF0aymimaAuLFbgv08kJllD3zkv0snDW9n
dBUyUN9XFXUX0Id9hftqPSTKdh8uwsG00gcpGJlvxyj99RlAeWS05j22JpOLzE2a
gRHjx/QhpZkkroqU17vv9CCJt6qssFV8WT+z00lRqcgD
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:18 2024 by rpki-client on console-ams.rpki-client.org