Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/aVdYDfmt-bnzb3NPsIksLc-oFP8.roa
File: aVdYDfmt-bnzb3NPsIksLc-oFP8.roa (raw, json)
Hash identifier: sRbc1WBj32/LcpevFWMBmYS0JRcoo1RVapuAgpBheBg=
Subject key identifier: 69:57:58:0D:F9:AD:F9:B9:F3:6F:73:4F:B0:89:2C:2D:CF:A8:14:FF
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0187EA0867F0DF5C0F4A6FBFB64A8CB457F0
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/aVdYDfmt-bnzb3NPsIksLc-oFP8.roa
Signing time: Fri 05 May 2023 03:50:32 +0000
ROA not before: Fri 05 May 2023 03:50:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211975
IP address blocks: 45.65.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Jun 2023 06:14:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ea:08:67:f0:df:5c:0f:4a:6f:bf:b6:4a:8c:b4:57:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: May 5 03:50:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6957580df9adf9b9f36f734fb0892c2dcfa814ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5b:47:dc:85:d7:25:7f:4d:12:7d:f6:b1:63:
95:04:f9:10:db:17:f1:2f:3e:9e:a4:71:0f:d4:9b:
ce:5a:18:2a:7b:a8:eb:47:7a:58:44:f6:2c:6c:ca:
32:3d:22:af:9a:74:48:74:fb:da:84:c1:b9:23:6e:
d6:24:3a:c3:76:6a:7c:0d:4e:8d:83:3b:35:ef:95:
3a:99:2e:9b:62:ba:83:da:b9:0a:0d:b0:2c:f6:9a:
ab:7d:03:aa:7e:06:36:3f:04:12:5c:ed:96:c3:58:
70:95:06:82:5c:8a:d6:71:9f:f4:31:b0:48:a6:cf:
f0:58:e5:30:e1:5b:61:3c:7d:10:04:90:32:f4:6b:
72:19:09:1e:3a:18:9a:d4:6a:7c:90:95:fc:88:08:
47:4e:f7:53:f8:82:98:b1:b0:55:2b:cd:96:73:c8:
bf:64:f9:94:36:95:43:41:f7:d8:40:8b:4c:ef:83:
81:e3:69:85:3a:80:10:c0:62:75:7f:c1:85:b1:7d:
7b:d6:33:44:ea:e2:67:02:b3:6f:4d:53:76:ce:58:
5f:76:2c:1d:44:66:f6:1e:8f:27:a7:cb:a1:35:33:
51:7c:e5:fa:83:78:57:9b:a7:b1:c2:21:aa:a9:19:
b8:fd:55:08:f9:0c:7c:cb:31:72:f8:65:fd:71:8f:
fb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:57:58:0D:F9:AD:F9:B9:F3:6F:73:4F:B0:89:2C:2D:CF:A8:14:FF
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/aVdYDfmt-bnzb3NPsIksLc-oFP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.112.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:59:d7:01:d9:f3:0b:b7:1f:78:05:d2:0a:c2:67:c5:22:44:
9c:54:4f:60:27:4a:98:f9:20:e2:9a:26:a1:56:1a:6f:a7:b8:
33:ac:02:f9:4c:25:d1:61:e9:cd:14:46:c4:d8:20:af:c8:7f:
0b:23:d8:8e:41:82:dc:85:6d:1f:b0:2b:30:e6:90:67:67:70:
8c:b9:ae:a5:3c:af:b4:7f:2c:04:e3:c6:0a:f6:b6:c9:7a:e9:
8f:2f:3d:a2:fc:5f:8f:09:5a:dc:98:ee:21:fe:e4:19:00:01:
c6:7b:b6:50:5a:8b:f7:f2:35:7c:4b:dd:8e:3c:6d:0b:7d:bd:
db:f7:a9:e8:b3:31:4b:b3:2c:8a:3e:d1:ea:f9:f0:6f:dc:61:
b1:d5:12:71:b3:b1:e3:58:19:17:4a:71:a5:5b:b5:b1:3b:cf:
a1:d0:fa:e2:ed:65:cf:ef:10:96:2e:34:05:18:2c:58:d2:02:
5c:b4:59:01:bb:f8:6d:bd:e7:c9:5e:4b:d7:47:02:33:91:ac:
df:39:d4:9a:fc:59:79:2f:08:31:c9:3a:8b:9d:f4:f1:68:2f:
06:61:79:da:a0:f5:2d:30:74:2b:f7:09:e0:c1:ad:a5:02:61:
68:1b:08:cb:17:30:5f:5e:36:21:9c:7a:a0:58:f7:64:e5:05:
bc:b4:a2:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfqCGfw31wPSm+/tkqMtFfwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjMwNTA1MDM1MDMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTU3NTgwZGY5YWRmOWI5ZjM2ZjczNGZiMDg5MmMyZGNmYTgxNGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFtH3IXXJX9NEn32sWOVBPkQ2xfx
Lz6epHEP1JvOWhgqe6jrR3pYRPYsbMoyPSKvmnRIdPvahMG5I27WJDrDdmp8DU6N
gzs175U6mS6bYrqD2rkKDbAs9pqrfQOqfgY2PwQSXO2Ww1hwlQaCXIrWcZ/0MbBI
ps/wWOUw4VthPH0QBJAy9GtyGQkeOhia1Gp8kJX8iAhHTvdT+IKYsbBVK82Wc8i/
ZPmUNpVDQffYQItM74OB42mFOoAQwGJ1f8GFsX171jNE6uJnArNvTVN2zlhfdiwd
RGb2Ho8np8uhNTNRfOX6g3hXm6exwiGqqRm4/VUI+Qx8yzFy+GX9cY/7YwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGlXWA35rfm5829zT7CJLC3PqBT/MB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvYVZkWURmbXQtYm56YjNOUHNJa3NMYy1vRlA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUFwMA0G
CSqGSIb3DQEBCwUAA4IBAQCqWdcB2fMLtx94BdIKwmfFIkScVE9gJ0qY+SDimiah
Vhpvp7gzrAL5TCXRYenNFEbE2CCvyH8LI9iOQYLchW0fsCsw5pBnZ3CMua6lPK+0
fywE48YK9rbJeumPLz2i/F+PCVrcmO4h/uQZAAHGe7ZQWov38jV8S92OPG0Lfb3b
96noszFLsyyKPtHq+fBv3GGx1RJxs7HjWBkXSnGlW7WxO8+h0Pri7WXP7xCWLjQF
GCxY0gJctFkBu/htvefJXkvXRwIzkazfOdSa/Fl5LwgxyTqLnfTxaC8GYXnaoPUt
MHQr9wngwa2lAmFoGwjLFzBfXjYhnHqgWPdk5QW8tKI7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:41 2024 by rpki-client on console-fra.rpki-client.org