Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/2EdveDs0tt1-phg-gWI860J5iqg.roa
File: 2EdveDs0tt1-phg-gWI860J5iqg.roa (raw, json)
Hash identifier: u3st5qLiIhVSG+KK5oYpWg2vzx4sfQm+1hYhzkOHyOA=
Subject key identifier: D8:47:6F:78:3B:34:B6:DD:7E:A6:18:3E:81:62:3C:EB:42:79:8A:A8
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0188C39BC23DF638954B6EEB6B4E7BEADD36
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/2EdveDs0tt1-phg-gWI860J5iqg.roa
Signing time: Fri 16 Jun 2023 09:49:04 +0000
ROA not before: Fri 16 Jun 2023 09:49:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 45.157.208.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 23:12:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:9b:c2:3d:f6:38:95:4b:6e:eb:6b:4e:7b:ea:dd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jun 16 09:49:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8476f783b34b6dd7ea6183e81623ceb42798aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fd:eb:50:6f:60:e3:6e:c7:49:fc:11:f7:b1:
36:34:9a:a5:2b:58:7c:8f:d6:54:93:db:10:0c:1f:
f0:20:06:12:13:59:52:a7:3c:6b:ee:05:48:05:6a:
a9:08:ee:c5:86:8e:49:b9:46:f0:5d:e9:a8:24:8d:
23:56:6b:b1:fd:25:12:94:84:bd:17:fe:ec:a2:8c:
d4:d5:f0:1b:72:f7:ee:de:78:39:d3:61:12:fc:d6:
46:55:a9:0c:ac:70:69:8a:a4:f9:7d:22:38:59:b0:
f2:f8:48:08:47:74:25:a1:ac:b8:43:11:23:d4:63:
3b:d5:fd:8e:d2:c8:30:50:a9:fd:6b:48:9c:67:3c:
df:0d:15:07:42:b0:9d:c7:35:84:36:50:51:b7:e8:
1d:86:8b:1e:80:df:ca:75:60:e6:00:e6:ef:1c:66:
c4:e9:4c:7a:b9:9e:a4:c3:1f:c4:3f:a9:95:6f:89:
2f:ae:46:64:cf:0d:ed:d7:80:7d:9d:6a:84:fe:e3:
cc:91:3d:9c:22:dc:2a:83:68:a0:bc:7c:98:65:dc:
15:81:1e:1e:26:ea:5b:16:cf:0f:d5:89:53:45:17:
e0:2a:21:f2:32:18:dd:e5:6f:3a:8b:01:c5:ef:90:
9e:2d:f6:1f:85:50:b5:88:93:e7:b1:51:1d:01:fc:
e5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:47:6F:78:3B:34:B6:DD:7E:A6:18:3E:81:62:3C:EB:42:79:8A:A8
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/2EdveDs0tt1-phg-gWI860J5iqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.208.0/24
Signature Algorithm: sha256WithRSAEncryption
18:75:35:22:34:f5:ff:c4:ef:c3:df:3c:44:73:31:f6:b2:b9:
b3:3b:32:45:36:cd:9f:00:da:d6:cf:64:06:77:14:e3:4f:24:
ee:d3:dc:65:a1:1f:7e:6b:e2:a2:71:77:4d:ad:e6:ea:6e:17:
44:ce:23:2f:44:ef:82:b3:d3:0f:3e:aa:9e:77:f6:ac:a4:8f:
a9:ed:33:b2:45:88:0d:8f:a2:f9:33:fa:6a:3f:fc:0e:14:94:
06:b5:19:19:7f:4a:81:dc:3c:f9:e7:8a:5e:a2:39:93:19:f4:
ae:69:5a:fb:44:1a:01:8b:46:39:19:03:10:95:9f:54:18:9b:
68:16:4b:04:4e:33:09:22:b1:af:17:ec:92:03:fa:a8:82:d7:
27:af:5a:90:62:d3:89:f7:f6:76:a9:8d:30:82:9d:95:b3:7f:
f2:a1:f7:e6:49:ff:f7:3c:c4:e7:7b:28:08:58:48:69:a3:f9:
36:e3:01:86:09:1f:63:1c:0b:a9:2d:c3:de:82:34:bb:e0:00:
b1:86:38:2d:43:2b:b9:0b:28:64:84:61:34:32:ee:ad:e3:d2:
f6:11:0e:ce:dd:2a:09:e9:1b:c4:4f:c0:54:3b:82:58:f7:cd:
94:41:55:ba:7b:d0:67:46:08:0b:4b:05:50:84:0d:a3:09:b7:
2f:a4:3e:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjDm8I99jiVS27ra0576t02MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjMwNjE2MDk0OTA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODQ3NmY3ODNiMzRiNmRkN2VhNjE4M2U4MTYyM2NlYjQyNzk4YWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjv3rUG9g427HSfwR97E2NJqlK1h8
j9ZUk9sQDB/wIAYSE1lSpzxr7gVIBWqpCO7Fho5JuUbwXemoJI0jVmux/SUSlIS9
F/7soozU1fAbcvfu3ng502ES/NZGVakMrHBpiqT5fSI4WbDy+EgIR3Qloay4QxEj
1GM71f2O0sgwUKn9a0icZzzfDRUHQrCdxzWENlBRt+gdhosegN/KdWDmAObvHGbE
6Ux6uZ6kwx/EP6mVb4kvrkZkzw3t14B9nWqE/uPMkT2cItwqg2igvHyYZdwVgR4e
JupbFs8P1YlTRRfgKiHyMhjd5W86iwHF75CeLfYfhVC1iJPnsVEdAfzluwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNhHb3g7NLbdfqYYPoFiPOtCeYqoMB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvMkVkdmVEczB0dDEtcGhnLWdXSTg2MEo1aXFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ3QMA0G
CSqGSIb3DQEBCwUAA4IBAQAYdTUiNPX/xO/D3zxEczH2srmzOzJFNs2fANrWz2QG
dxTjTyTu09xloR9+a+KicXdNrebqbhdEziMvRO+Cs9MPPqqed/aspI+p7TOyRYgN
j6L5M/pqP/wOFJQGtRkZf0qB3Dz554peojmTGfSuaVr7RBoBi0Y5GQMQlZ9UGJto
FksETjMJIrGvF+ySA/qogtcnr1qQYtOJ9/Z2qY0wgp2Vs3/yoffmSf/3PMTneygI
WEhpo/k24wGGCR9jHAupLcPegjS74ACxhjgtQyu5CyhkhGE0Mu6t49L2EQ7O3SoJ
6RvET8BUO4JY982UQVW6e9BnRggLSwVQhA2jCbcvpD6q
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:34 2024 by rpki-client on console-ams.rpki-client.org