Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/pqTU_l3l_PWnzYsX72XUE27gKg4.roa
File: pqTU_l3l_PWnzYsX72XUE27gKg4.roa (raw, json)
Hash identifier: fSVo3nNiTROjL1TdE2sGdoQCFeWTpFhDQXenMteF7GM=
Subject key identifier: A6:A4:D4:FE:5D:E5:FC:F5:A7:CD:8B:17:EF:65:D4:13:6E:E0:2A:0E
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01856ED4BB95558354A025D36A76D8362FD7
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/pqTU_l3l_PWnzYsX72XUE27gKg4.roa
Signing time: Sun 01 Jan 2023 19:35:13 +0000
ROA not before: Sun 01 Jan 2023 19:35:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 45.11.190.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:bb:95:55:83:54:a0:25:d3:6a:76:d8:36:2f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 19:35:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a6a4d4fe5de5fcf5a7cd8b17ef65d4136ee02a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1d:6e:0d:40:8f:53:6a:b2:4b:73:6e:61:f3:
8d:4b:93:a3:aa:61:f0:e1:73:c1:7f:c6:84:17:1f:
5e:f2:e4:d4:9e:1f:cb:4a:85:01:e8:0c:ee:a2:a7:
ac:fc:c6:c9:8c:e4:15:20:00:40:0f:ea:d5:90:34:
bd:28:06:16:e6:9b:98:c0:23:aa:2d:9f:f7:4c:2d:
6e:61:a9:68:21:37:a1:ed:0a:28:d7:b5:cc:70:0e:
99:b0:6e:b4:43:fc:c4:92:cc:92:31:64:82:a5:00:
56:5d:cf:13:df:94:fe:0a:d2:88:3b:0e:6a:11:a5:
08:7c:be:44:2e:47:38:09:33:9e:24:20:22:ec:00:
f3:d4:18:a0:18:5f:0b:b4:52:4c:d4:77:4e:fd:1d:
f1:17:f8:d7:ab:2c:f6:37:a9:4b:ae:9a:1e:04:a9:
ef:9b:08:31:a4:f3:3d:c8:b2:13:61:0e:b7:5d:38:
50:ee:20:25:3e:0e:6c:64:03:f9:a5:e1:e7:cd:ac:
80:d7:26:e4:fb:ae:a9:7b:7d:93:5a:fb:df:ed:ce:
57:84:c5:a4:0a:f8:38:b1:b1:b2:45:3c:fc:e0:2a:
b2:12:36:ae:e2:ab:f9:59:2c:e8:56:5b:8d:4e:3d:
78:02:20:08:fb:d6:7e:9b:2e:7a:35:76:a8:58:6b:
d8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A4:D4:FE:5D:E5:FC:F5:A7:CD:8B:17:EF:65:D4:13:6E:E0:2A:0E
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/pqTU_l3l_PWnzYsX72XUE27gKg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:d0:8d:9b:41:3a:99:41:f8:3f:3d:57:14:d2:89:b7:4a:d6:
6d:5a:40:0e:cc:c4:78:d1:ca:48:75:db:f9:09:f2:28:7a:ad:
b7:de:08:08:54:0f:7d:c4:5d:3a:81:77:92:d1:26:9f:08:f0:
26:1c:42:d6:42:ac:1e:3c:02:da:63:bd:18:ec:2e:95:20:b3:
6b:2c:19:1e:0b:2c:74:bc:27:2c:03:f3:86:9d:9f:35:f0:cb:
15:aa:8c:50:32:1c:dc:5f:85:a4:cd:ec:1f:38:e8:d5:62:fb:
f3:27:07:22:32:3d:76:2c:ea:e6:e9:64:6b:f2:31:06:c6:bc:
bf:0e:36:4e:1c:5d:73:08:7f:65:d6:47:fe:87:69:8a:7c:06:
a7:50:46:e2:dc:3a:1a:6a:a1:e6:57:50:d2:4f:5b:94:ba:f1:
60:56:20:2a:f6:b8:78:5c:cd:61:74:ed:12:3b:19:bc:b3:fe:
74:56:a0:1e:c9:31:49:d7:e4:0e:52:59:b8:20:e1:2f:ad:e0:
c4:fa:4b:6e:ec:b2:3b:2d:4c:8e:0e:79:f3:b6:85:bc:a1:c7:
1c:67:00:b2:8f:7f:63:eb:aa:fc:59:9f:6b:6d:f8:56:73:8a:
89:a1:97:61:4a:1f:f5:e0:ac:de:82:87:96:5d:cf:d7:0f:66:
85:3f:5b:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu1LuVVYNUoCXTanbYNi/XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjMwMTAxMTkzNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmE0ZDRmZTVkZTVmY2Y1YTdjZDhiMTdlZjY1ZDQxMzZlZTAyYTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB1uDUCPU2qyS3NuYfONS5OjqmHw
4XPBf8aEFx9e8uTUnh/LSoUB6Azuoqes/MbJjOQVIABAD+rVkDS9KAYW5puYwCOq
LZ/3TC1uYaloITeh7Qoo17XMcA6ZsG60Q/zEksySMWSCpQBWXc8T35T+CtKIOw5q
EaUIfL5ELkc4CTOeJCAi7ADz1BigGF8LtFJM1HdO/R3xF/jXqyz2N6lLrpoeBKnv
mwgxpPM9yLITYQ63XThQ7iAlPg5sZAP5peHnzayA1ybk+66pe32TWvvf7c5XhMWk
Cvg4sbGyRTz84CqyEjau4qv5WSzoVluNTj14AiAI+9Z+my56NXaoWGvYPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKak1P5d5fz1p82LF+9l1BNu4CoOMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvcHFUVV9sM2xfUFduellzWDcyWFVFMjdnS2c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQu+MA0G
CSqGSIb3DQEBCwUAA4IBAQCu0I2bQTqZQfg/PVcU0om3StZtWkAOzMR40cpIddv5
CfIoeq233ggIVA99xF06gXeS0SafCPAmHELWQqwePALaY70Y7C6VILNrLBkeCyx0
vCcsA/OGnZ818MsVqoxQMhzcX4WkzewfOOjVYvvzJwciMj12LOrm6WRr8jEGxry/
DjZOHF1zCH9l1kf+h2mKfAanUEbi3DoaaqHmV1DST1uUuvFgViAq9rh4XM1hdO0S
Oxm8s/50VqAeyTFJ1+QOUlm4IOEvreDE+ktu7LI7LUyODnnztoW8occcZwCyj39j
66r8WZ9rbfhWc4qJoZdhSh/14KzegoeWXc/XD2aFP1sm
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:23 2024 by rpki-client on console-fra.rpki-client.org