Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/veZnUG04odKYur0I3c1F-R2M1Gs.roa
File: veZnUG04odKYur0I3c1F-R2M1Gs.roa (raw, json)
Hash identifier: muPAJsDqlo4V5fqCK+39IpA+iTf9opUPXObZUiLgKks=
Subject key identifier: BD:E6:67:50:6D:38:A1:D2:98:BA:BD:08:DD:CD:45:F9:1D:8C:D4:6B
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0188E72C8E86102AD4CCB92DFB5C989197DE
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/veZnUG04odKYur0I3c1F-R2M1Gs.roa
Signing time: Fri 23 Jun 2023 07:33:56 +0000
ROA not before: Fri 23 Jun 2023 07:33:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197071
IP address blocks: 45.65.115.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:2c:8e:86:10:2a:d4:cc:b9:2d:fb:5c:98:91:97:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jun 23 07:33:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bde667506d38a1d298babd08ddcd45f91d8cd46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:12:1d:08:3f:b1:50:c0:b2:48:38:fb:eb:d2:
1c:aa:0a:84:fa:91:e4:0d:b3:61:de:e6:e4:05:62:
48:69:fb:de:19:c5:28:e8:70:63:44:84:3d:39:ba:
d0:65:46:90:8d:01:82:ab:6f:d6:28:3e:ce:55:77:
c5:ef:73:13:66:6f:44:0f:9d:1e:fd:59:22:57:15:
d4:be:1c:39:d9:68:1d:5f:68:ab:e8:a8:69:90:6c:
b1:84:bd:b5:df:4a:3b:1a:67:35:3d:87:5d:86:42:
fd:34:32:46:e7:03:ce:d5:d1:79:23:41:32:af:67:
23:16:85:65:a4:42:5c:44:a4:54:2c:0d:84:47:f9:
f5:62:78:64:e9:39:a3:97:e8:b6:65:5b:e6:35:25:
d2:a6:72:bb:6d:a9:ae:f9:12:8c:91:f8:91:8f:cf:
2b:be:cc:14:15:99:63:84:85:86:1c:7a:b2:1c:b4:
f8:25:12:b1:c0:49:d1:b3:c3:02:f6:05:e5:bd:08:
2f:e6:ba:19:50:26:a7:98:b0:e6:78:cc:6e:35:23:
66:84:7f:ae:24:82:59:f0:dc:db:18:8c:57:64:04:
74:b3:66:9a:fe:57:67:75:71:a3:85:63:6b:b2:3e:
1c:93:0a:c1:cd:d3:aa:79:eb:ab:d7:f5:01:e9:65:
9e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E6:67:50:6D:38:A1:D2:98:BA:BD:08:DD:CD:45:F9:1D:8C:D4:6B
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/veZnUG04odKYur0I3c1F-R2M1Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.115.0/24
Signature Algorithm: sha256WithRSAEncryption
35:01:4f:85:7b:cd:0b:b4:ed:76:77:b4:8e:7e:0f:a2:11:35:
9c:82:85:64:df:61:b7:3a:a4:3d:0b:e0:26:21:fc:a7:5f:a7:
30:6f:e6:94:33:ac:e1:4a:97:90:4f:f9:46:5a:42:9c:5f:26:
63:43:06:ba:dd:53:02:1a:32:b6:84:e9:ff:eb:d9:e8:f3:9a:
ae:97:53:72:2a:80:06:16:3f:47:41:ed:b9:63:2e:17:2f:ba:
90:55:f3:04:dd:59:27:94:e6:cc:40:b1:86:46:30:40:12:7c:
8f:65:80:9b:69:68:ab:29:51:03:98:3d:c7:d5:69:41:ce:9a:
6a:4c:71:2e:33:bb:6b:32:ea:28:d4:d8:a8:a1:21:13:3d:f7:
33:fe:93:62:5f:f0:ae:d5:9c:23:c4:d4:56:1b:b3:96:cc:4f:
bd:1a:0d:d0:63:4a:4d:a8:2c:98:03:e1:53:82:4b:00:94:4a:
64:33:6e:d2:cc:bd:32:20:60:00:52:0f:a8:b4:aa:a4:43:e1:
ea:c1:eb:70:76:0e:30:77:84:d3:88:70:7d:63:99:74:21:ad:
5f:f8:7c:9c:03:49:6c:95:43:90:d0:0e:bc:d7:c9:68:34:f2:
bd:df:a1:81:3d:4a:d4:56:1f:37:2a:85:18:eb:f6:58:42:24:
fa:9e:59:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjnLI6GECrUzLkt+1yYkZfeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjMwNjIzMDczMzU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGU2Njc1MDZkMzhhMWQyOThiYWJkMDhkZGNkNDVmOTFkOGNkNDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxIdCD+xUMCySDj769IcqgqE+pHk
DbNh3ubkBWJIafveGcUo6HBjRIQ9ObrQZUaQjQGCq2/WKD7OVXfF73MTZm9ED50e
/VkiVxXUvhw52WgdX2ir6KhpkGyxhL2130o7Gmc1PYddhkL9NDJG5wPO1dF5I0Ey
r2cjFoVlpEJcRKRULA2ER/n1Ynhk6Tmjl+i2ZVvmNSXSpnK7bamu+RKMkfiRj88r
vswUFZljhIWGHHqyHLT4JRKxwEnRs8MC9gXlvQgv5roZUCanmLDmeMxuNSNmhH+u
JIJZ8NzbGIxXZAR0s2aa/ldndXGjhWNrsj4ckwrBzdOqeeur1/UB6WWekwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL3mZ1BtOKHSmLq9CN3NRfkdjNRrMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvdmVablVHMDRvZEtZdXIwSTNjMUYtUjJNMUdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUFzMA0G
CSqGSIb3DQEBCwUAA4IBAQA1AU+Fe80LtO12d7SOfg+iETWcgoVk32G3OqQ9C+Am
IfynX6cwb+aUM6zhSpeQT/lGWkKcXyZjQwa63VMCGjK2hOn/69no85qul1NyKoAG
Fj9HQe25Yy4XL7qQVfME3VknlObMQLGGRjBAEnyPZYCbaWirKVEDmD3H1WlBzppq
THEuM7trMuoo1NiooSETPfcz/pNiX/Cu1ZwjxNRWG7OWzE+9Gg3QY0pNqCyYA+FT
gksAlEpkM27SzL0yIGAAUg+otKqkQ+Hqwetwdg4wd4TTiHB9Y5l0Ia1f+HycA0ls
lUOQ0A6818loNPK936GBPUrUVh83KoUY6/ZYQiT6nllV
-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:08 2024 by rpki-client on console-ams.rpki-client.org