Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/Cwv2iyp5h1BDQdXBEO-ugZjP89E.roa
File: Cwv2iyp5h1BDQdXBEO-ugZjP89E.roa (raw, json)
Hash identifier: yvInHtz3wVnOWSUYGvkLTe7Zs23zofYaP9KOYGyBHVg=
Subject key identifier: 0B:0B:F6:8B:2A:79:87:50:43:41:D5:C1:10:EF:AE:81:98:CF:F3:D1
Certificate issuer: /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial: 01857079A272CC5FB918902520CE338D1036
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/Cwv2iyp5h1BDQdXBEO-ugZjP89E.roa
Signing time: Mon 02 Jan 2023 03:14:57 +0000
ROA not before: Mon 02 Jan 2023 03:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209733
IP address blocks: 45.82.62.0/24 maxlen: 24
45.82.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:a2:72:cc:5f:b9:18:90:25:20:ce:33:8d:10:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Validity
Not Before: Jan 2 03:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b0bf68b2a7987504341d5c110efae8198cff3d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b1:0a:d5:82:24:8b:19:07:58:1d:c4:53:e1:
64:6d:d4:5a:39:55:2a:7d:9e:12:19:83:94:18:a5:
00:5f:6f:d2:70:0d:f6:66:1f:6c:58:92:11:b8:a6:
ca:b9:03:c6:89:6a:df:ff:06:f3:e7:09:9a:09:74:
e5:e4:d7:19:af:e1:3c:3f:6b:0e:18:2f:a9:88:19:
6a:fb:5e:21:d8:3f:87:2d:ad:a9:ad:06:69:1f:53:
e1:8b:a2:6c:5a:a0:86:8b:0f:4d:36:0a:01:a7:bc:
64:8c:6c:94:f9:68:b1:0b:ad:1f:5b:1e:da:d4:90:
4f:ca:8c:af:a1:29:1a:2f:bc:99:1d:82:0e:16:6a:
41:2e:a2:0f:81:c3:15:67:e6:f4:0c:a1:70:c8:df:
19:98:3f:49:28:15:c3:d0:0a:0c:85:d1:87:3d:a4:
09:46:29:0d:d3:85:59:78:d7:51:63:8e:71:e1:91:
03:0d:b3:48:b6:41:1a:0b:f2:ac:1d:f5:88:61:f8:
84:8a:48:35:dc:50:16:a7:14:4b:54:85:0d:b4:66:
27:60:04:ab:c7:b9:61:8d:55:0f:c0:c7:eb:e9:ba:
53:68:59:17:c8:73:59:35:cd:1e:4a:6d:b4:a4:f8:
b1:8a:90:ca:58:fc:dd:73:7b:34:e0:1e:b9:c0:32:
6d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0B:F6:8B:2A:79:87:50:43:41:D5:C1:10:EF:AE:81:98:CF:F3:D1
X509v3 Authority Key Identifier:
keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/Cwv2iyp5h1BDQdXBEO-ugZjP89E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.61.0-45.82.62.255
Signature Algorithm: sha256WithRSAEncryption
40:6a:f6:72:12:fe:e9:81:30:27:04:3c:f6:ee:ee:43:80:3b:
b6:48:fc:19:55:d2:7d:84:59:8f:2b:6e:69:d6:eb:31:64:60:
57:6f:7f:db:d8:c1:2b:dc:ee:03:eb:48:09:c6:f5:66:52:5a:
52:16:d7:5d:01:39:70:3f:5d:8d:b6:22:7e:d3:e8:94:09:6f:
6e:bc:62:fd:52:a9:67:21:af:9a:83:bc:05:d0:ab:86:a5:cc:
9d:d3:7f:12:42:23:29:a1:e1:98:05:5e:da:49:e4:fb:77:43:
65:ad:a8:22:d8:98:bf:cd:58:38:26:96:a0:8f:6b:6d:e2:29:
b9:f3:fd:25:d6:6e:c7:ee:bc:85:cb:0a:c5:cd:41:14:a4:b6:
f4:48:b2:13:5f:4b:af:76:4c:00:d9:76:91:12:c8:68:05:5f:
57:15:7e:bf:88:af:1e:b9:84:59:d0:63:c2:ab:62:5c:59:88:
d7:80:b0:94:21:17:af:75:4c:82:0c:e7:45:b1:2c:29:6d:21:
43:e5:cd:d0:e2:c6:51:dc:e5:6a:3d:a3:0f:c7:89:dd:2c:f4:
26:3b:8a:3f:52:4a:1d:f3:81:69:45:93:67:63:c3:62:1d:ed:
8b:87:d5:61:b1:ea:74:2e:80:42:53:23:de:ed:10:b5:8e:a3:
2f:ff:82:df
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVweaJyzF+5GJAlIM4zjRA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZjVmY2VkYmRiODRkZDUyZmM2NzcwZDdjY2ZkM2ZjNjY4
NGZhNDEwHhcNMjMwMTAyMDMxNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjBiZjY4YjJhNzk4NzUwNDM0MWQ1YzExMGVmYWU4MTk4Y2ZmM2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbEK1YIkixkHWB3EU+FkbdRaOVUq
fZ4SGYOUGKUAX2/ScA32Zh9sWJIRuKbKuQPGiWrf/wbz5wmaCXTl5NcZr+E8P2sO
GC+piBlq+14h2D+HLa2prQZpH1Phi6JsWqCGiw9NNgoBp7xkjGyU+WixC60fWx7a
1JBPyoyvoSkaL7yZHYIOFmpBLqIPgcMVZ+b0DKFwyN8ZmD9JKBXD0AoMhdGHPaQJ
RikN04VZeNdRY45x4ZEDDbNItkEaC/KsHfWIYfiEikg13FAWpxRLVIUNtGYnYASr
x7lhjVUPwMfr6bpTaFkXyHNZNc0eSm20pPixipDKWPzdc3s04B65wDJtfQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFAsL9osqeYdQQ0HVwRDvroGYz/PRMB8GA1UdIwQY
MBaAFJH1/O29uE3VL8Z3DXzP0/xmhPpBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMt
OGNjOTgzMzYxMWU2LzEvQ3d2Mml5cDVoMUJEUWRYQkVPLXVnWmpQODlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85YTA5ODEtMGFkOC00OGE1LWJmZWMtOGNjOTgzMzYxMWU2
LzEva2ZYODdiMjRUZFV2eG5jTmZNX1RfR2FFLWtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtUj0D
BAAtUj4wDQYJKoZIhvcNAQELBQADggEBAEBq9nIS/umBMCcEPPbu7kOAO7ZI/BlV
0n2EWY8rbmnW6zFkYFdvf9vYwSvc7gPrSAnG9WZSWlIW110BOXA/XY22In7T6JQJ
b268Yv1SqWchr5qDvAXQq4alzJ3TfxJCIymh4ZgFXtpJ5Pt3Q2WtqCLYmL/NWDgm
lqCPa23iKbnz/SXWbsfuvIXLCsXNQRSktvRIshNfS692TADZdpESyGgFX1cVfr+I
rx65hFnQY8KrYlxZiNeAsJQhF691TIIM50WxLCltIUPlzdDixlHc5Wo9ow/Hid0s
9CY7ij9SSh3zgWlFk2djw2Id7YuH1WGx6nQugEJTI97tELWOoy//gt8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:28 2024 by rpki-client on console-fra.rpki-client.org