Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/eo7vPbzw1G0zqjBOfLs0UqbHNvc.roa
File: eo7vPbzw1G0zqjBOfLs0UqbHNvc.roa (raw, json)
Hash identifier: bE5TZ4zPsiBgeuFlLa9UOEwJKzgxfVVHKAgl9v3voRU=
Subject key identifier: 7A:8E:EF:3D:BC:F0:D4:6D:33:AA:30:4E:7C:BB:34:52:A6:C7:36:F7
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 018A6980426185DFB99D90D2CADF63418EC3
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/eo7vPbzw1G0zqjBOfLs0UqbHNvc.roa
Signing time: Wed 06 Sep 2023 07:58:47 +0000
ROA not before: Wed 06 Sep 2023 07:58:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.153.220.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:69:80:42:61:85:df:b9:9d:90:d2:ca:df:63:41:8e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Sep 6 07:58:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a8eef3dbcf0d46d33aa304e7cbb3452a6c736f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:d1:51:c1:3e:4d:12:89:cb:bd:3d:e4:7b:
d1:67:a1:80:79:28:c6:76:7d:0f:5d:eb:df:03:49:
01:6a:13:f1:ab:68:01:08:46:7b:d2:32:0b:88:f3:
b4:d4:de:c3:75:2a:04:88:e2:e1:25:0b:0d:0f:37:
07:90:02:48:d3:12:10:2e:32:9f:41:ef:ee:c3:fe:
4c:08:1f:63:29:2e:a3:cf:ad:24:bf:14:d5:22:2a:
ee:ab:d7:53:34:38:a1:bb:58:99:12:f9:70:a4:dd:
b5:39:28:c0:e3:95:a2:51:ff:f5:4b:1d:38:fe:0e:
e4:2e:ab:77:68:e7:b6:9b:30:d7:e2:c0:94:ff:1f:
e8:4b:6c:f3:54:fa:98:c7:f0:b3:2f:b9:83:9b:4e:
7f:a3:3c:ab:12:34:b1:b2:a2:59:0c:41:7b:01:11:
b4:12:f6:a9:d6:22:00:11:f9:5a:17:fd:06:80:b4:
2c:57:a0:b2:98:33:5a:80:58:01:d6:8d:f2:1c:c6:
3e:aa:f4:5b:e5:58:b9:fb:69:51:68:cd:04:65:03:
b2:e3:e9:77:59:4c:3d:25:42:6b:fa:d5:ff:64:c3:
1c:88:b8:48:7a:1a:df:da:bc:d3:b9:66:c2:51:0b:
1d:d2:23:78:78:90:40:4d:71:ea:4a:f6:ad:a4:09:
2a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8E:EF:3D:BC:F0:D4:6D:33:AA:30:4E:7C:BB:34:52:A6:C7:36:F7
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/eo7vPbzw1G0zqjBOfLs0UqbHNvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.220.0/22
Signature Algorithm: sha256WithRSAEncryption
37:00:82:35:f7:30:ee:d7:8f:9d:2b:1f:47:d3:e0:a1:e0:01:
d9:82:24:23:34:96:55:bb:ef:2a:ad:58:ce:97:20:60:46:6b:
ad:25:72:1f:4c:33:0c:d6:08:9a:02:76:ae:4b:ac:49:3a:cf:
42:ab:10:d7:0d:c1:b7:15:cf:48:13:6c:58:1f:26:c2:b7:bf:
bb:c5:e6:af:1c:6f:69:99:f2:3a:cd:b6:59:d7:71:74:bf:19:
50:9c:13:d2:65:7a:34:6c:7a:9c:73:6a:0a:66:98:49:e4:fd:
96:5e:53:1f:a4:d2:b3:c7:63:d8:b1:75:58:ef:99:24:d6:35:
22:af:59:14:52:b2:9d:9c:e1:3c:be:3a:a7:75:c9:83:24:da:
32:c9:82:e2:a9:71:f8:5b:9f:9a:bc:79:73:66:93:58:70:35:
20:75:c1:d1:41:9f:cc:e5:63:07:30:ab:d0:47:9c:84:95:67:
cf:76:2e:a1:6e:91:16:9e:fa:6c:be:99:18:65:c4:e6:1f:e3:
2c:0b:03:60:b8:a0:ee:17:1c:a6:8b:0a:3e:ad:9b:07:9f:7c:
73:09:f6:c1:fb:26:c2:aa:8f:d4:bf:08:f4:15:3c:3b:58:22:
4a:42:fa:6f:b9:c4:32:a8:c8:93:f0:c1:19:6f:8e:58:c4:50:
46:e3:91:e1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYppgEJhhd+5nZDSyt9jQY7DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjMwOTA2MDc1ODQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YThlZWYzZGJjZjBkNDZkMzNhYTMwNGU3Y2JiMzQ1MmE2YzczNmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEXRUcE+TRKJy7095HvRZ6GAeSjG
dn0PXevfA0kBahPxq2gBCEZ70jILiPO01N7DdSoEiOLhJQsNDzcHkAJI0xIQLjKf
Qe/uw/5MCB9jKS6jz60kvxTVIiruq9dTNDihu1iZEvlwpN21OSjA45WiUf/1Sx04
/g7kLqt3aOe2mzDX4sCU/x/oS2zzVPqYx/CzL7mDm05/ozyrEjSxsqJZDEF7ARG0
Evap1iIAEflaF/0GgLQsV6CymDNagFgB1o3yHMY+qvRb5Vi5+2lRaM0EZQOy4+l3
WUw9JUJr+tX/ZMMciLhIehrf2rzTuWbCUQsd0iN4eJBATXHqSvatpAkq6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHqO7z288NRtM6owTny7NFKmxzb3MB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvZW83dlBiencxRzB6cWpCT2ZMczBVcWJITnZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZncMA0G
CSqGSIb3DQEBCwUAA4IBAQA3AII19zDu14+dKx9H0+Ch4AHZgiQjNJZVu+8qrVjO
lyBgRmutJXIfTDMM1giaAnauS6xJOs9CqxDXDcG3Fc9IE2xYHybCt7+7xeavHG9p
mfI6zbZZ13F0vxlQnBPSZXo0bHqcc2oKZphJ5P2WXlMfpNKzx2PYsXVY75kk1jUi
r1kUUrKdnOE8vjqndcmDJNoyyYLiqXH4W5+avHlzZpNYcDUgdcHRQZ/M5WMHMKvQ
R5yElWfPdi6hbpEWnvpsvpkYZcTmH+MsCwNguKDuFxymiwo+rZsHn3xzCfbB+ybC
qo/Uvwj0FTw7WCJKQvpvucQyqMiT8MEZb45YxFBG45Hh
-----END CERTIFICATE-----
Generated at Wed Sep 6 09:06:49 2023 by rpki-client on console-ams.rpki-client.org