Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/payuWfjq_MLdx2tJqMe4ahkwOzw.roa
File: payuWfjq_MLdx2tJqMe4ahkwOzw.roa (raw, json)
Hash identifier: JBO/u3UgGs5z1veoE+0jnDt1Ot3d9fvJtqRiQb3RU88=
Subject key identifier: A5:AC:AE:59:F8:EA:FC:C2:DD:C7:6B:49:A8:C7:B8:6A:19:30:3B:3C
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 01882A4A06F18B0BCC8AD13E6EEAE9184E4A
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/payuWfjq_MLdx2tJqMe4ahkwOzw.roa
Signing time: Wed 17 May 2023 15:17:54 +0000
ROA not before: Wed 17 May 2023 15:17:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 45.157.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Jun 2023 18:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:2a:4a:06:f1:8b:0b:cc:8a:d1:3e:6e:ea:e9:18:4e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: May 17 15:17:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5acae59f8eafcc2ddc76b49a8c7b86a19303b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d3:c2:7a:c4:0b:e0:8f:b0:55:40:8c:73:b3:
a4:ed:3c:fa:59:ce:ff:f3:aa:a1:ee:1a:8e:84:9d:
5f:91:78:20:f8:37:76:a4:53:14:78:8e:d1:a2:36:
23:04:21:b6:2d:43:b5:78:0b:01:a1:30:21:7a:d4:
35:b1:29:cf:5f:91:ff:20:d2:de:c7:82:3a:92:b7:
04:50:76:a4:f0:80:08:87:51:f9:12:36:06:bc:8e:
44:b5:c1:f5:4b:c6:d3:8d:04:02:e0:14:8f:91:95:
5c:e1:fb:c8:e4:89:c8:9a:97:73:e4:8c:07:4a:bc:
42:b8:a0:ba:e3:ae:eb:e4:db:70:ec:f3:67:8f:e9:
8f:a3:ef:1b:07:03:83:5e:af:7b:ab:e8:3c:7b:46:
bc:1f:9e:73:57:84:f4:22:3a:41:4c:09:57:4b:fc:
da:78:bf:b9:92:de:1e:66:de:9b:33:51:34:d7:4b:
f5:c3:2b:7a:69:3c:f1:19:c0:61:de:e7:f1:b1:4d:
af:12:e2:6d:2c:ad:0b:43:40:ce:06:18:f2:19:78:
89:fb:b3:b6:97:f4:d1:18:33:96:2d:be:25:58:d6:
a5:4b:ac:da:44:8d:5d:d3:e1:84:e1:3e:f1:5e:d3:
fd:53:22:d6:82:41:4b:50:c3:39:e3:b3:1e:97:b6:
49:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AC:AE:59:F8:EA:FC:C2:DD:C7:6B:49:A8:C7:B8:6A:19:30:3B:3C
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/payuWfjq_MLdx2tJqMe4ahkwOzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.209.0/24
Signature Algorithm: sha256WithRSAEncryption
50:38:15:de:0e:ea:b4:f6:25:4c:89:80:d8:b4:a6:b0:bf:f3:
27:39:e0:f3:67:6d:02:d5:1a:86:db:44:6d:98:b2:d4:c0:38:
89:0b:94:66:0c:0f:da:64:36:6e:1b:e8:81:7b:3e:92:6c:71:
ac:00:54:2e:1c:d0:20:97:e6:73:38:2d:6a:2c:14:32:cb:1e:
b6:c9:51:2a:89:57:45:9c:23:89:ff:43:13:45:11:36:80:bd:
0c:0c:32:ad:e7:45:07:24:09:b0:cf:bf:44:36:81:95:c2:44:
d3:eb:7f:8e:61:a8:8f:e1:9f:67:5a:59:f8:58:2b:91:20:c7:
13:82:b6:9b:74:fa:fe:16:c9:6d:e7:ed:bc:fd:07:27:d1:f0:
b9:06:c1:f7:f7:79:9b:48:ed:f7:fb:f8:a9:d3:c5:7c:c0:39:
0d:10:3a:cf:e9:23:15:5c:73:46:b3:c6:fa:51:43:33:7f:e1:
25:07:7c:a3:2f:65:36:41:32:36:39:e1:f5:39:08:b5:c8:ae:
23:e4:f6:d6:8f:2a:b1:b4:1b:c4:ab:73:2a:a5:55:8d:97:4d:
12:66:23:b6:c9:ec:2e:7c:b5:7e:a5:6a:08:62:b0:bf:24:ed:
09:2f:6f:89:7b:61:85:3b:b6:34:c0:4e:2f:d2:b0:db:af:a9:
1a:0a:0a:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgqSgbxiwvMitE+burpGE5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OGJmYjhhNWVlZTQ5MDgyZWE2MjhkZjI1YTRhNWQ1MGYz
YWE5YjMwHhcNMjMwNTE3MTUxNzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWFjYWU1OWY4ZWFmY2MyZGRjNzZiNDlhOGM3Yjg2YTE5MzAzYjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNPCesQL4I+wVUCMc7Ok7Tz6Wc7/
86qh7hqOhJ1fkXgg+Dd2pFMUeI7RojYjBCG2LUO1eAsBoTAhetQ1sSnPX5H/INLe
x4I6krcEUHak8IAIh1H5EjYGvI5EtcH1S8bTjQQC4BSPkZVc4fvI5InImpdz5IwH
SrxCuKC6467r5Ntw7PNnj+mPo+8bBwODXq97q+g8e0a8H55zV4T0IjpBTAlXS/za
eL+5kt4eZt6bM1E010v1wyt6aTzxGcBh3ufxsU2vEuJtLK0LQ0DOBhjyGXiJ+7O2
l/TRGDOWLb4lWNalS6zaRI1d0+GE4T7xXtP9UyLWgkFLUMM547Mel7ZJwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKWsrln46vzC3cdrSajHuGoZMDs8MB8GA1UdIwQY
MBaAFDaL+4pe7kkILqYo3yWkpdUPOqmzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUt
MGFlMmU5MjJhMjkyLzEvcGF5dVdmanFfTUxkeDJ0SnFNZTRhaGt3T3p3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9hYTU4YzMtZTcwNi00YTQ5LWE3YzUtMGFlMmU5MjJhMjky
LzEvTm92N2lsN3VTUWd1cGlqZkphU2wxUTg2cWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ3RMA0G
CSqGSIb3DQEBCwUAA4IBAQBQOBXeDuq09iVMiYDYtKawv/MnOeDzZ20C1RqG20Rt
mLLUwDiJC5RmDA/aZDZuG+iBez6SbHGsAFQuHNAgl+ZzOC1qLBQyyx62yVEqiVdF
nCOJ/0MTRRE2gL0MDDKt50UHJAmwz79ENoGVwkTT63+OYaiP4Z9nWln4WCuRIMcT
grabdPr+Fslt5+28/Qcn0fC5BsH393mbSO33+/ip08V8wDkNEDrP6SMVXHNGs8b6
UUMzf+ElB3yjL2U2QTI2OeH1OQi1yK4j5PbWjyqxtBvEq3MqpVWNl00SZiO2yewu
fLV+pWoIYrC/JO0JL2+Je2GFO7Y0wE4v0rDbr6kaCgrq
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:36 2024 by rpki-client on console-ams.rpki-client.org