Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/AjOx2XOfC1daRBRb5-as94Z09FE.roa
File: AjOx2XOfC1daRBRb5-as94Z09FE.roa (raw, json)
Hash identifier: 0zzTO1PbER8xgULSMNR1Z18TsQXqvVHDUJiOHs6j5fE=
Subject key identifier: 02:33:B1:D9:73:9F:0B:57:5A:44:14:5B:E7:E6:AC:F7:86:74:F4:51
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01856ED4BF400E74C1D4806807C4BC2DD564
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/AjOx2XOfC1daRBRb5-as94Z09FE.roa
Signing time: Sun 01 Jan 2023 19:35:14 +0000
ROA not before: Sun 01 Jan 2023 19:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 45.65.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:bf:40:0e:74:c1:d4:80:68:07:c4:bc:2d:d5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 19:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0233b1d9739f0b575a44145be7e6acf78674f451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:a6:57:6b:28:68:dc:9a:ce:9a:a9:db:eb:
f7:d0:f6:a5:14:74:16:68:c9:1f:dc:4e:0c:73:03:
41:af:0b:37:1d:09:29:91:c5:29:79:46:40:bd:49:
11:13:3c:52:c9:08:a5:3e:04:d6:67:d3:c7:4f:b0:
c7:b3:03:c5:53:8e:2d:5f:8a:4e:ee:e1:4e:50:c4:
a1:82:f5:86:92:a9:ac:1e:f1:49:39:35:7a:34:1d:
25:a5:60:7d:93:1c:11:2a:27:ff:22:5a:d4:4c:8d:
a3:c0:82:ed:17:db:f7:f7:18:97:ed:ba:b5:ca:09:
aa:e2:09:3d:ee:af:e4:7f:c9:b6:07:cb:57:cd:3d:
5e:d8:54:f7:a7:cf:b9:6c:52:83:fd:22:79:46:f3:
9d:f3:29:b0:e8:a2:b0:33:88:40:59:a5:a4:69:c5:
4c:15:3e:50:72:03:33:ac:ff:e5:78:0f:af:a4:2f:
66:b1:89:7c:04:4d:31:58:d0:4f:09:5b:e1:02:22:
06:84:3f:8e:07:7e:99:4b:f9:00:41:4e:d9:77:e7:
6f:a1:fb:3b:1a:98:6e:41:60:18:4f:96:e9:38:87:
0a:18:47:56:1d:0b:49:40:9f:2e:37:5e:b2:28:1d:
06:e4:da:ab:78:93:74:36:19:6f:93:6f:92:80:b5:
6d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:33:B1:D9:73:9F:0B:57:5A:44:14:5B:E7:E6:AC:F7:86:74:F4:51
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/AjOx2XOfC1daRBRb5-as94Z09FE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.113.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e1:6c:ce:b1:fc:00:36:81:e3:84:5e:f9:c4:d3:25:ce:20:
e0:b8:2b:5e:7b:89:87:63:a8:d1:92:8f:d0:cf:2f:80:f3:ad:
aa:d0:e5:1c:75:0e:d3:2d:2e:9f:00:b8:ca:91:28:8b:1d:bf:
0f:df:2f:24:2b:ba:3f:97:da:76:16:57:db:2f:e2:89:4d:4e:
32:2e:4a:5b:bc:2b:e6:f0:77:43:49:b6:0c:56:eb:e2:2a:5a:
81:24:b2:f3:c0:ae:b4:3c:76:a8:f2:31:a5:90:9f:b6:7a:ac:
e1:fa:c6:f4:84:8c:11:62:57:e5:38:c7:c0:4b:32:98:dc:8e:
5a:1b:f9:57:1f:51:a9:3a:03:41:a8:bf:72:e4:97:86:a3:f9:
e5:5d:07:de:40:76:02:6d:0b:21:9e:7d:61:56:15:bb:e1:95:
f4:38:52:5f:94:20:5e:82:fd:79:13:9a:a5:ed:bb:0f:59:f9:
4e:af:5d:0a:29:f7:b9:36:8d:05:6e:6d:86:6a:eb:b9:44:19:
a3:d0:14:29:3a:bc:9e:23:92:63:ce:76:ab:01:2f:c0:2a:77:
24:fa:14:81:55:b5:1d:21:6f:01:e0:a0:ff:e7:e1:ab:3b:22:
7f:ff:52:07:56:5a:b6:62:82:35:e6:f0:8a:22:e8:69:5e:38:
be:74:92:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1L9ADnTB1IBoB8S8LdVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjMwMTAxMTkzNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjMzYjFkOTczOWYwYjU3NWE0NDE0NWJlN2U2YWNmNzg2NzRmNDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj+mV2soaNyazpqp2+v30PalFHQW
aMkf3E4McwNBrws3HQkpkcUpeUZAvUkREzxSyQilPgTWZ9PHT7DHswPFU44tX4pO
7uFOUMShgvWGkqmsHvFJOTV6NB0lpWB9kxwRKif/IlrUTI2jwILtF9v39xiX7bq1
ygmq4gk97q/kf8m2B8tXzT1e2FT3p8+5bFKD/SJ5RvOd8ymw6KKwM4hAWaWkacVM
FT5QcgMzrP/leA+vpC9msYl8BE0xWNBPCVvhAiIGhD+OB36ZS/kAQU7Zd+dvofs7
GphuQWAYT5bpOIcKGEdWHQtJQJ8uN16yKB0G5NqreJN0Nhlvk2+SgLVtNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAIzsdlznwtXWkQUW+fmrPeGdPRRMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvQWpPeDJYT2ZDMWRhUkJSYjUtYXM5NFowOUZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUFxMA0G
CSqGSIb3DQEBCwUAA4IBAQCQ4WzOsfwANoHjhF75xNMlziDguCtee4mHY6jRko/Q
zy+A862q0OUcdQ7TLS6fALjKkSiLHb8P3y8kK7o/l9p2FlfbL+KJTU4yLkpbvCvm
8HdDSbYMVuviKlqBJLLzwK60PHao8jGlkJ+2eqzh+sb0hIwRYlflOMfASzKY3I5a
G/lXH1GpOgNBqL9y5JeGo/nlXQfeQHYCbQshnn1hVhW74ZX0OFJflCBegv15E5ql
7bsPWflOr10KKfe5No0Fbm2Gauu5RBmj0BQpOryeI5JjznarAS/AKnck+hSBVbUd
IW8B4KD/5+GrOyJ//1IHVlq2YoI15vCKIuhpXji+dJLL
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:13 2023 by rpki-client on console-fra.rpki-client.org