Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/jMvbFd1LcI4NhBmdnbUmPHzSYZM.roa
File: jMvbFd1LcI4NhBmdnbUmPHzSYZM.roa (raw, json)
Hash identifier: h0ZeIba2SwpTpSrHx0DVBOYYHOqkUv1VOPhouzluwHc=
Subject key identifier: 8C:CB:DB:15:DD:4B:70:8E:0D:84:19:9D:9D:B5:26:3C:7C:D2:61:93
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018CD7EE4F83B804243302DEDABC30075279
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/jMvbFd1LcI4NhBmdnbUmPHzSYZM.roa
Signing time: Fri 05 Jan 2024 04:42:48 +0000
ROA not before: Fri 05 Jan 2024 04:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.65.113.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d7:ee:4f:83:b8:04:24:33:02:de:da:bc:30:07:52:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 5 04:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ccbdb15dd4b708e0d84199d9db5263c7cd26193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:36:cc:9e:84:60:6a:f2:1e:7a:63:e6:28:db:
d5:3c:ed:ce:b5:44:85:5a:f7:8c:51:e5:53:2e:83:
47:20:70:ec:cb:c7:50:17:8a:68:04:2f:94:1f:b5:
75:f3:f7:4c:45:07:6a:d0:75:d8:4e:d9:d4:bd:ad:
2a:5c:80:c9:81:d0:e9:98:3f:da:77:9d:3d:5e:f7:
78:e6:36:62:5b:c3:5a:a7:02:54:65:99:58:6b:e7:
da:ea:c9:d1:76:59:b6:51:cd:6c:16:a0:d0:5f:a6:
d1:c6:83:b1:c5:e4:98:c9:d0:31:9b:73:0d:fa:ec:
a3:b9:f9:a1:81:92:a0:65:4d:87:b7:2f:83:f6:b6:
ef:69:aa:5c:1f:de:7e:8f:54:87:69:b8:18:6d:00:
23:cf:d4:c7:eb:19:64:e7:f8:3c:95:b3:3f:fe:95:
b0:20:ee:88:18:47:ce:a0:ae:9d:a3:4a:ac:7b:e8:
75:03:22:47:bf:81:ff:d6:65:82:23:97:9d:c6:ad:
f6:65:ad:ca:ee:59:3c:22:9c:4f:7c:cb:c7:82:5d:
11:3c:a3:33:61:a5:22:46:38:66:df:8b:d8:05:d5:
55:35:26:e3:c3:e3:c1:23:7b:18:c7:bd:8f:e0:fd:
c3:25:bc:06:35:2c:1d:f2:66:18:cb:4f:05:6c:a9:
b3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CB:DB:15:DD:4B:70:8E:0D:84:19:9D:9D:B5:26:3C:7C:D2:61:93
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/jMvbFd1LcI4NhBmdnbUmPHzSYZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.113.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:3b:8d:44:33:ef:0f:fc:b7:47:3a:5d:67:1f:c2:09:1e:1e:
62:e3:8e:6a:be:b3:da:90:d5:a6:8e:3f:e9:b3:16:4c:02:c3:
06:1c:02:54:9f:3b:65:e8:6f:86:8d:43:dc:0d:af:ef:83:d1:
c2:d2:83:49:02:be:9b:99:47:07:ff:8d:ce:5d:62:bd:56:3b:
e6:0f:bb:83:01:d8:f0:39:e9:e1:01:b4:ad:e6:ed:b3:7c:94:
f4:d2:44:35:e1:7e:10:35:0d:ce:0c:19:ce:fa:44:a7:3b:45:
6e:32:ba:30:11:57:8d:fd:e9:59:b8:65:06:01:a5:b9:72:b6:
83:80:12:87:50:d5:03:b6:0c:54:31:3b:5d:9f:97:88:aa:1f:
9d:da:08:38:1b:81:ab:dc:74:8b:99:66:4b:5a:a3:02:08:ba:
0f:d5:00:b4:2b:44:1e:31:42:d9:73:c9:56:0e:b2:a3:5c:30:
58:b9:5c:29:0c:1d:42:5e:bc:d2:3b:81:b5:20:5e:73:6a:db:
3d:99:99:a3:56:58:68:aa:98:74:81:7e:c1:9b:29:d0:33:e8:
63:16:a4:7b:fb:92:99:be:19:71:30:a3:e7:e4:f4:cb:a4:4b:
4c:db:16:07:93:6c:f4:3f:f1:75:fe:d6:21:79:5e:7e:47:65:
7d:f4:b2:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzX7k+DuAQkMwLe2rwwB1J5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjQwMTA1MDQ0MjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2NiZGIxNWRkNGI3MDhlMGQ4NDE5OWQ5ZGI1MjYzYzdjZDI2MTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjbMnoRgavIeemPmKNvVPO3OtUSF
WveMUeVTLoNHIHDsy8dQF4poBC+UH7V18/dMRQdq0HXYTtnUva0qXIDJgdDpmD/a
d509Xvd45jZiW8NapwJUZZlYa+fa6snRdlm2Uc1sFqDQX6bRxoOxxeSYydAxm3MN
+uyjufmhgZKgZU2Hty+D9rbvaapcH95+j1SHabgYbQAjz9TH6xlk5/g8lbM//pWw
IO6IGEfOoK6do0qse+h1AyJHv4H/1mWCI5edxq32Za3K7lk8IpxPfMvHgl0RPKMz
YaUiRjhm34vYBdVVNSbjw+PBI3sYx72P4P3DJbwGNSwd8mYYy08FbKmzyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIzL2xXdS3CODYQZnZ21Jjx80mGTMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvak12YkZkMUxjSTROaEJtZG5iVW1QSHpTWVpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUFxMA0G
CSqGSIb3DQEBCwUAA4IBAQCNO41EM+8P/LdHOl1nH8IJHh5i445qvrPakNWmjj/p
sxZMAsMGHAJUnztl6G+GjUPcDa/vg9HC0oNJAr6bmUcH/43OXWK9VjvmD7uDAdjw
OenhAbSt5u2zfJT00kQ14X4QNQ3ODBnO+kSnO0VuMrowEVeN/elZuGUGAaW5craD
gBKHUNUDtgxUMTtdn5eIqh+d2gg4G4Gr3HSLmWZLWqMCCLoP1QC0K0QeMULZc8lW
DrKjXDBYuVwpDB1CXrzSO4G1IF5zats9mZmjVlhoqph0gX7BmynQM+hjFqR7+5KZ
vhlxMKPn5PTLpEtM2xYHk2z0P/F1/tYheV5+R2V99LKV
-----END CERTIFICATE-----
Generated at Fri Jan 5 21:23:37 2024 by rpki-client on console-fra.rpki-client.org