Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/G-ToEfHvtdzpBxv4Y5mHms8x_WM.roa
File: G-ToEfHvtdzpBxv4Y5mHms8x_WM.roa (raw, json)
Hash identifier: Mb7gzY9+QUpf8E0qKgE2w/rBIQVTznqQ1fAQyFNnkqs=
Subject key identifier: 1B:E4:E8:11:F1:EF:B5:DC:E9:07:1B:F8:63:99:87:9A:CF:31:FD:63
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 0185CDC875059D9C790B2F7FD4EFC17A7E96
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/G-ToEfHvtdzpBxv4Y5mHms8x_WM.roa
Signing time: Fri 20 Jan 2023 06:05:44 +0000
ROA not before: Fri 20 Jan 2023 06:05:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9335
IP address blocks: 45.150.128.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cd:c8:75:05:9d:9c:79:0b:2f:7f:d4:ef:c1:7a:7e:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 20 06:05:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1be4e811f1efb5dce9071bf86399879acf31fd63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e2:76:2f:32:90:b3:61:36:2c:2d:75:88:fa:
56:8f:8b:86:70:88:eb:aa:6a:d7:0b:17:61:f6:41:
a0:b8:76:df:3d:c8:35:06:18:bd:3d:c2:94:aa:9a:
7c:a2:7b:28:69:7a:8b:f7:5f:e9:25:cd:36:f6:b9:
54:87:7d:dc:fc:76:3e:3d:32:96:04:95:55:a4:9d:
d2:52:cd:f2:dc:d5:0b:cc:83:42:9b:3e:40:dc:44:
b2:71:f8:f9:a1:e1:46:e6:d9:3f:2a:5a:e8:53:bd:
e8:f4:2b:8c:d3:3b:a2:aa:81:a8:d4:41:15:40:6e:
9c:ba:25:f8:3c:51:f0:ef:d4:9c:2e:2d:fc:37:0b:
9c:75:32:cb:b8:0e:38:be:aa:67:dd:99:cc:be:26:
25:d6:18:08:a5:9b:92:31:92:33:58:c4:af:41:cd:
89:2b:a0:7b:a0:70:40:f4:6f:45:39:8f:81:11:6d:
8d:87:42:da:d0:0b:87:e3:db:54:dc:03:87:ab:3f:
1e:fa:4b:bb:fb:8c:44:e9:ee:6c:c0:81:5a:68:a0:
67:48:7c:e3:71:08:ad:ef:ac:13:33:40:b4:06:d4:
8d:6f:74:65:fb:2b:d3:b3:32:24:da:67:ac:21:f2:
e0:32:61:bf:f0:df:02:9f:9c:e8:17:a5:4e:23:e6:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E4:E8:11:F1:EF:B5:DC:E9:07:1B:F8:63:99:87:9A:CF:31:FD:63
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/G-ToEfHvtdzpBxv4Y5mHms8x_WM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.128.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:d1:6d:a3:b5:da:0e:c4:23:19:09:6a:f6:c9:a1:d9:5d:a5:
09:2d:13:4e:2a:0b:8b:27:29:92:b9:6b:c6:2d:2b:53:7d:77:
9d:46:dd:01:e4:b6:7c:60:f4:b4:86:41:c6:64:48:05:80:3c:
97:52:16:b1:34:6b:f6:46:bc:91:62:bf:67:58:d9:3a:62:4e:
be:38:fb:0b:94:28:22:b1:72:ef:d3:2c:86:7e:1b:f9:bb:a8:
f0:43:af:91:10:ff:f5:9d:07:b3:4d:5a:0c:da:9b:93:b3:dc:
3c:e5:f0:92:b3:14:26:b6:0d:43:62:73:ec:48:5b:82:c0:d2:
98:a4:2b:3e:09:55:58:4f:5c:ee:c1:34:61:a1:1e:7f:51:e8:
40:46:0e:17:de:2a:95:92:56:f8:3c:4f:94:8d:b5:40:e8:eb:
94:5d:db:21:c4:a8:7d:22:74:ce:38:2d:f4:b3:35:71:06:e5:
b3:59:e9:bb:5e:92:7a:55:4e:36:83:60:0e:bf:5b:6b:41:1f:
94:be:0d:bc:9f:6e:b4:1d:32:d2:4d:2f:91:ce:5f:17:60:e2:
97:58:17:0a:c2:ce:c3:24:40:7f:1a:36:e4:52:c2:3b:98:36:
8d:7d:f7:51:0b:09:8a:dd:c3:e7:aa:10:62:97:fd:db:0c:88:
1c:32:48:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXNyHUFnZx5Cy9/1O/Ben6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjMwMTIwMDYwNTQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYmU0ZTgxMWYxZWZiNWRjZTkwNzFiZjg2Mzk5ODc5YWNmMzFmZDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eJ2LzKQs2E2LC11iPpWj4uGcIjr
qmrXCxdh9kGguHbfPcg1Bhi9PcKUqpp8onsoaXqL91/pJc029rlUh33c/HY+PTKW
BJVVpJ3SUs3y3NULzINCmz5A3ESycfj5oeFG5tk/KlroU73o9CuM0zuiqoGo1EEV
QG6cuiX4PFHw79ScLi38NwucdTLLuA44vqpn3ZnMviYl1hgIpZuSMZIzWMSvQc2J
K6B7oHBA9G9FOY+BEW2Nh0La0AuH49tU3AOHqz8e+ku7+4xE6e5swIFaaKBnSHzj
cQit76wTM0C0BtSNb3Rl+yvTszIk2mesIfLgMmG/8N8Cn5zoF6VOI+aYUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBvk6BHx77Xc6Qcb+GOZh5rPMf1jMB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvRy1Ub0VmSHZ0ZHpwQnh2NFk1bUhtczh4X1dNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZaAMA0G
CSqGSIb3DQEBCwUAA4IBAQBt0W2jtdoOxCMZCWr2yaHZXaUJLRNOKguLJymSuWvG
LStTfXedRt0B5LZ8YPS0hkHGZEgFgDyXUhaxNGv2RryRYr9nWNk6Yk6+OPsLlCgi
sXLv0yyGfhv5u6jwQ6+REP/1nQezTVoM2puTs9w85fCSsxQmtg1DYnPsSFuCwNKY
pCs+CVVYT1zuwTRhoR5/UehARg4X3iqVklb4PE+UjbVA6OuUXdshxKh9InTOOC30
szVxBuWzWem7XpJ6VU42g2AOv1trQR+Uvg28n260HTLSTS+Rzl8XYOKXWBcKws7D
JEB/GjbkUsI7mDaNffdRCwmK3cPnqhBil/3bDIgcMki2
-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:00 2024 by rpki-client on console-fra.rpki-client.org