Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/m0qt3dp6NX9Vq0Wh6rHpCV-mQEk.roa
File: m0qt3dp6NX9Vq0Wh6rHpCV-mQEk.roa (raw, json)
Hash identifier: ah7XP0+kt00Uzcahl2w6gwXThvL7pEa1OEiBQmfsPBY=
Subject key identifier: 9B:4A:AD:DD:DA:7A:35:7F:55:AB:45:A1:EA:B1:E9:09:5F:A6:40:49
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01856ED4BFFAE9F25B5644AC5283BA8FD8A6
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/m0qt3dp6NX9Vq0Wh6rHpCV-mQEk.roa
Signing time: Sun 01 Jan 2023 19:35:14 +0000
ROA not before: Sun 01 Jan 2023 19:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212335
IP address blocks: 45.11.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:bf:fa:e9:f2:5b:56:44:ac:52:83:ba:8f:d8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 19:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b4aadddda7a357f55ab45a1eab1e9095fa64049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:39:e5:78:b0:26:31:4a:65:96:d2:c6:9a:
9e:5a:82:7b:13:d3:1a:29:6f:73:3a:f5:67:67:61:
04:ff:3b:9f:a2:7c:51:92:9d:4c:e9:72:e4:60:da:
d7:61:6b:1c:27:b6:24:e4:ad:d4:2c:1a:8d:02:68:
f7:0a:82:07:61:d1:e0:bd:6f:34:4c:ea:89:4c:1f:
0b:18:3d:48:92:1f:cf:5a:20:2a:15:06:03:46:90:
dd:21:ac:54:4b:e8:aa:6e:cb:c1:bd:8b:73:af:1a:
70:b7:16:dc:de:60:fd:2d:02:1e:11:88:c9:d0:5e:
74:2c:d7:51:cd:62:78:31:b2:11:a5:7e:e3:b5:b8:
c9:af:c4:5c:e0:a2:f3:97:6d:2f:d2:44:e9:91:e6:
b5:0d:3d:9f:9b:b9:d5:8d:79:cf:46:65:ae:19:01:
ce:62:2d:8a:b1:7b:f5:8f:c3:7e:63:02:80:12:be:
d6:25:aa:e6:1b:68:ca:51:8f:b4:80:d2:11:cf:aa:
51:76:4e:df:2b:fd:48:48:cf:bc:b2:95:8a:04:1e:
a2:04:ad:bc:ee:39:71:a5:5b:24:43:70:77:73:83:
82:a2:fa:a6:93:94:58:2c:21:0c:44:f3:73:5a:7f:
44:9a:6a:bb:e9:e8:13:2b:56:a7:d2:30:1c:07:96:
0d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4A:AD:DD:DA:7A:35:7F:55:AB:45:A1:EA:B1:E9:09:5F:A6:40:49
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/m0qt3dp6NX9Vq0Wh6rHpCV-mQEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.188.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:42:2e:d4:2e:71:0d:28:09:07:89:5b:37:15:f2:c7:c6:f7:
ea:6f:c7:30:cb:04:16:df:b4:51:fd:3c:52:cf:bf:f2:ca:2f:
ef:37:97:a4:18:92:bd:92:08:0a:d2:44:6d:6e:5d:b4:ff:b0:
9c:c1:f6:f4:81:da:25:db:62:cd:30:56:27:e1:65:63:53:8e:
70:e2:b3:4c:8e:fc:ed:a0:e8:f4:e7:7c:fb:d1:d7:a2:7d:d8:
cb:c1:57:1b:af:f2:15:cf:b3:1b:07:47:56:ab:d2:c3:9c:b1:
74:13:d5:6b:0a:2d:54:39:1f:d5:9a:e2:9b:fe:76:30:1b:6b:
06:2c:f9:bd:7f:16:f2:91:23:bc:f9:bf:c8:ea:15:aa:57:21:
dd:f5:f7:0d:49:aa:57:a2:e0:c2:c3:91:b1:2f:4e:37:48:f6:
ae:8a:79:fa:ca:51:b9:9c:a6:32:33:cf:0f:72:5e:4a:8b:99:
49:8e:c8:7f:28:fd:03:b9:60:7d:34:72:dd:ee:71:6b:b3:04:
d1:68:17:60:73:2b:f2:1e:c9:9e:5d:73:d4:25:50:c3:6b:dc:
a3:1c:1f:e9:ab:d9:0e:22:a0:f3:62:cd:e4:ff:46:a5:63:be:
18:7e:50:f9:15:60:66:a3:94:40:49:ad:65:2b:14:b7:ce:15:
c3:df:a0:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1L/66fJbVkSsUoO6j9imMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjMwMTAxMTkzNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjRhYWRkZGRhN2EzNTdmNTVhYjQ1YTFlYWIxZTkwOTVmYTY0MDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvys55XiwJjFKZZbSxpqeWoJ7E9Ma
KW9zOvVnZ2EE/zufonxRkp1M6XLkYNrXYWscJ7Yk5K3ULBqNAmj3CoIHYdHgvW80
TOqJTB8LGD1Ikh/PWiAqFQYDRpDdIaxUS+iqbsvBvYtzrxpwtxbc3mD9LQIeEYjJ
0F50LNdRzWJ4MbIRpX7jtbjJr8Rc4KLzl20v0kTpkea1DT2fm7nVjXnPRmWuGQHO
Yi2KsXv1j8N+YwKAEr7WJarmG2jKUY+0gNIRz6pRdk7fK/1ISM+8spWKBB6iBK28
7jlxpVskQ3B3c4OCovqmk5RYLCEMRPNzWn9Emmq76egTK1an0jAcB5YNqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJtKrd3aejV/VatFoeqx6QlfpkBJMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvbTBxdDNkcDZOWDlWcTBXaDZySHBDVi1tUUVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQu8MA0G
CSqGSIb3DQEBCwUAA4IBAQB8Qi7ULnENKAkHiVs3FfLHxvfqb8cwywQW37RR/TxS
z7/yyi/vN5ekGJK9kggK0kRtbl20/7Ccwfb0gdol22LNMFYn4WVjU45w4rNMjvzt
oOj053z70deifdjLwVcbr/IVz7MbB0dWq9LDnLF0E9VrCi1UOR/VmuKb/nYwG2sG
LPm9fxbykSO8+b/I6hWqVyHd9fcNSapXouDCw5GxL043SPauinn6ylG5nKYyM88P
cl5Ki5lJjsh/KP0DuWB9NHLd7nFrswTRaBdgcyvyHsmeXXPUJVDDa9yjHB/pq9kO
IqDzYs3k/0alY74YflD5FWBmo5RASa1lKxS3zhXD36CX
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:59 2023 by rpki-client on console-ams.rpki-client.org