Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/d24Rz7jR8moH71vzolRE1QedUtY.roa
File: d24Rz7jR8moH71vzolRE1QedUtY.roa (raw, json)
Hash identifier: yV3ynvVjEAY9DeV47ZvUMm/hna8dJU5Yw6wF8wrkiPs=
Subject key identifier: 77:6E:11:CF:B8:D1:F2:6A:07:EF:5B:F3:A2:54:44:D5:07:9D:52:D6
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01896A6B0BA07571DD1FE760A89895B63252
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/d24Rz7jR8moH71vzolRE1QedUtY.roa
Signing time: Tue 18 Jul 2023 19:12:27 +0000
ROA not before: Tue 18 Jul 2023 19:12:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 188.209.128.0/22 maxlen: 22
45.65.112.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jul 2023 14:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6a:6b:0b:a0:75:71:dd:1f:e7:60:a8:98:95:b6:32:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jul 18 19:12:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=776e11cfb8d1f26a07ef5bf3a25444d5079d52d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a3:bd:a3:fa:9c:97:82:10:5f:4e:6d:af:af:
ed:f4:a9:4d:d5:aa:34:1e:9f:f1:16:93:8e:a3:a7:
45:d4:86:5d:92:32:2d:0a:f1:8e:74:f2:df:df:37:
b5:71:99:e7:64:17:63:9e:ea:f6:84:d3:98:31:25:
69:fc:f4:33:2a:c6:52:4f:f2:f4:d6:b4:44:10:cf:
58:db:6c:6a:61:35:7f:08:56:ab:84:d4:e6:5d:e3:
28:a6:f9:62:ee:79:c9:3f:6c:f3:5c:ba:7e:d6:2d:
55:74:3d:e9:71:88:3b:89:50:0d:43:66:39:74:21:
15:77:ad:cd:aa:af:d1:96:ab:2b:f0:9e:f2:de:22:
c5:62:10:c8:be:dd:8c:9b:a2:9b:2f:6f:70:87:89:
71:dd:28:f6:70:f3:fc:9c:1c:c9:ff:e0:76:2c:6b:
2d:18:bb:0a:43:4c:ea:02:41:74:d4:25:1c:c6:92:
83:66:23:4e:5a:85:ee:af:b2:ba:c8:bc:29:43:63:
c1:c4:e4:03:c4:a7:e9:59:73:ef:8e:ae:11:4e:d9:
1f:32:68:89:f2:9a:65:b3:83:71:e9:d5:dd:f5:e0:
3e:f2:10:90:08:08:62:dc:be:45:ae:42:5f:71:ad:
a0:9c:78:82:03:88:aa:59:aa:d4:4e:48:3a:ac:55:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:6E:11:CF:B8:D1:F2:6A:07:EF:5B:F3:A2:54:44:D5:07:9D:52:D6
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/d24Rz7jR8moH71vzolRE1QedUtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.112.0/24
188.209.128.0/22
Signature Algorithm: sha256WithRSAEncryption
08:c2:35:fe:c8:32:a3:e8:98:3d:a5:0c:74:ec:8b:eb:aa:6b:
b3:dc:24:01:2a:07:b6:5c:10:6a:5b:2f:87:b0:cd:ad:fe:2c:
a9:27:75:6f:b0:9a:35:8d:3d:2d:92:d4:e1:b7:73:b0:aa:9d:
99:9f:0c:4d:11:66:5d:a3:ba:82:46:e8:58:43:dd:d8:a9:82:
0f:8b:7d:95:0b:6d:3b:ab:ad:69:de:a4:3a:7a:4e:41:23:b6:
ea:52:8e:bf:8c:35:51:77:fc:81:39:60:5a:d8:2a:ff:57:f2:
d4:fc:5a:36:87:c9:c8:61:1c:2a:3d:12:86:0f:d6:5c:ef:cc:
26:ad:20:3a:2c:87:dd:83:b9:f0:37:f8:87:a1:a8:30:9b:04:
e3:4f:95:63:da:e5:23:53:eb:60:70:c6:1b:eb:7e:a1:9c:66:
8c:a4:cb:27:30:c4:d2:5a:a6:55:88:52:aa:73:ec:b2:94:7b:
50:f7:71:04:76:86:86:f5:0b:99:10:f7:37:38:c5:8b:4f:93:
01:da:4c:04:1b:5f:37:fb:05:0f:f4:a0:3c:2c:49:69:c3:20:
7a:00:fc:af:cd:c9:5c:fc:31:4c:ff:4d:95:62:20:00:c7:53:
e9:3d:38:08:4c:a5:2c:52:9a:32:d9:43:41:9e:68:30:58:40:
92:5c:a0:49
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYlqawugdXHdH+dgqJiVtjJSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjMwNzE4MTkxMjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzZlMTFjZmI4ZDFmMjZhMDdlZjViZjNhMjU0NDRkNTA3OWQ1MmQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqO9o/qcl4IQX05tr6/t9KlN1ao0
Hp/xFpOOo6dF1IZdkjItCvGOdPLf3ze1cZnnZBdjnur2hNOYMSVp/PQzKsZST/L0
1rREEM9Y22xqYTV/CFarhNTmXeMopvli7nnJP2zzXLp+1i1VdD3pcYg7iVANQ2Y5
dCEVd63Nqq/Rlqsr8J7y3iLFYhDIvt2Mm6KbL29wh4lx3Sj2cPP8nBzJ/+B2LGst
GLsKQ0zqAkF01CUcxpKDZiNOWoXur7K6yLwpQ2PBxOQDxKfpWXPvjq4RTtkfMmiJ
8ppls4Nx6dXd9eA+8hCQCAhi3L5FrkJfca2gnHiCA4iqWarUTkg6rFXwtwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHduEc+40fJqB+9b86JURNUHnVLWMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvZDI0Uno3alI4bW9INzF2em9sUkUxUWVkVXRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALUFwAwQC
vNGAMA0GCSqGSIb3DQEBCwUAA4IBAQAIwjX+yDKj6Jg9pQx07Ivrqmuz3CQBKge2
XBBqWy+HsM2t/iypJ3VvsJo1jT0tktTht3Owqp2ZnwxNEWZdo7qCRuhYQ93YqYIP
i32VC207q61p3qQ6ek5BI7bqUo6/jDVRd/yBOWBa2Cr/V/LU/Fo2h8nIYRwqPRKG
D9Zc78wmrSA6LIfdg7nwN/iHoagwmwTjT5Vj2uUjU+tgcMYb636hnGaMpMsnMMTS
WqZViFKqc+yylHtQ93EEdoaG9QuZEPc3OMWLT5MB2kwEG183+wUP9KA8LElpwyB6
APyvzclc/DFM/02VYiAAx1PpPTgITKUsUpoy2UNBnmgwWECSXKBJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:41 2024 by rpki-client on console-fra.rpki-client.org