Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/d_lBCU9CKnYJ1QFpUMs7UfMuQ20.roa
File: d_lBCU9CKnYJ1QFpUMs7UfMuQ20.roa (raw, json)
Hash identifier: ICcLrIXFciY3vgh52Pe4+dMWhNl3awxvQ5M2SqLyRV8=
Subject key identifier: 77:F9:41:09:4F:42:2A:76:09:D5:01:69:50:CB:3B:51:F3:2E:43:6D
Certificate issuer: /CN=76670236cd0e038684a33194bde7d4b95adc66f7
Certificate serial: 018A5F80B3550D674CA60A81E4A0DCAA42CF
Authority key identifier: 76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/d_lBCU9CKnYJ1QFpUMs7UfMuQ20.roa
Signing time: Mon 04 Sep 2023 09:23:04 +0000
ROA not before: Mon 04 Sep 2023 09:23:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39238
IP address blocks: 45.153.72.0/23 maxlen: 23
185.183.160.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:5f:80:b3:55:0d:67:4c:a6:0a:81:e4:a0:dc:aa:42:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76670236cd0e038684a33194bde7d4b95adc66f7
Validity
Not Before: Sep 4 09:23:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77f941094f422a7609d5016950cb3b51f32e436d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:92:b4:75:87:ba:3a:0f:c1:c3:5c:1d:b0:
66:bd:af:1a:c3:1a:bb:19:bc:37:60:49:69:d3:bf:
5a:a7:a3:51:78:27:c2:e6:9d:e0:d0:6f:23:b2:ff:
25:21:48:c8:c7:d2:2d:66:d9:4b:06:6f:50:7e:31:
99:5d:9b:f7:0c:cb:d7:3b:c0:f9:f1:aa:dc:68:19:
a1:74:bf:62:b7:f6:ef:ed:e5:88:ff:a7:18:da:a6:
60:65:fe:b4:1f:42:ce:ea:5d:e5:e6:d5:07:dd:97:
4a:09:a5:00:96:96:d8:13:39:07:7d:a3:79:45:ab:
07:ca:d2:61:f9:36:fa:bb:0e:6e:a8:17:21:66:3a:
2c:d3:98:06:f2:25:38:9f:5d:68:f8:39:a8:62:7b:
5d:c2:cb:87:8e:cb:c4:33:0c:2e:d8:13:5b:fd:1e:
4b:d4:5d:3b:60:33:8b:ca:0f:17:8b:ab:fb:21:f0:
1d:36:40:97:66:a5:c9:da:24:18:07:28:c0:f5:3a:
00:cf:d0:bf:a2:a7:14:e8:dd:5a:28:3f:14:a9:40:
f7:90:38:47:68:8d:e5:81:d8:98:3d:1b:ad:1c:89:
ef:ab:8e:c4:04:4f:8d:82:00:c3:c8:7f:ba:8a:d0:
9b:3a:37:4a:02:b0:57:57:f9:1d:7a:6e:be:3f:ea:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F9:41:09:4F:42:2A:76:09:D5:01:69:50:CB:3B:51:F3:2E:43:6D
X509v3 Authority Key Identifier:
keyid:76:67:02:36:CD:0E:03:86:84:A3:31:94:BD:E7:D4:B9:5A:DC:66:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dmcCNs0OA4aEozGUvefUuVrcZvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/d_lBCU9CKnYJ1QFpUMs7UfMuQ20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1809da-1c6f-44db-aa28-ba4fc234683e/1/dmcCNs0OA4aEozGUvefUuVrcZvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.72.0/23
185.183.160.0/22
Signature Algorithm: sha256WithRSAEncryption
08:84:c4:59:54:45:6f:d8:42:d4:aa:39:0f:6f:14:a6:05:ca:
f6:2b:29:5f:de:da:ac:42:a4:a5:33:96:cf:37:41:44:ee:94:
b9:8a:ca:5b:c9:43:39:d2:0d:e8:1f:5f:70:23:83:2b:4d:be:
59:e5:c3:48:78:7d:6c:80:90:34:ce:c2:e6:3e:c4:2e:66:9c:
8d:97:31:de:7d:57:60:b5:73:47:fa:7a:25:6e:1e:30:02:94:
bf:ff:3c:b1:c6:e3:64:1d:b4:a6:d1:0d:75:b2:2c:de:cd:5d:
cc:51:c7:4c:e1:8c:36:59:ce:12:3f:b9:84:14:3d:ff:11:c4:
00:bf:a5:79:d3:7f:b5:db:b9:22:56:74:d5:31:34:69:4b:cb:
02:56:22:ea:69:76:62:c0:b2:f3:c1:22:26:fd:93:c3:d2:56:
e3:47:b4:64:7d:42:0d:8e:58:7a:4c:b7:39:73:9d:97:e8:5a:
b9:d1:d1:da:55:53:4e:35:5a:f2:23:86:08:5c:77:62:b2:43:
07:ef:bf:de:c2:a6:77:7a:e1:89:3e:73:13:5a:35:89:41:4e:
f3:9d:ca:21:b3:f6:63:db:a8:10:96:0e:83:6b:2a:f0:60:6f:
2f:b1:a1:ad:32:03:9d:95:e7:4c:0e:24:51:7e:c7:1c:04:bf:
16:a6:1d:53
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYpfgLNVDWdMpgqB5KDcqkLPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NjcwMjM2Y2QwZTAzODY4NGEzMzE5NGJkZTdkNGI5NWFk
YzY2ZjcwHhcNMjMwOTA0MDkyMzA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2Y5NDEwOTRmNDIyYTc2MDlkNTAxNjk1MGNiM2I1MWYzMmU0MzZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHOStHWHujoPwcNcHbBmva8awxq7
Gbw3YElp079ap6NReCfC5p3g0G8jsv8lIUjIx9ItZtlLBm9QfjGZXZv3DMvXO8D5
8arcaBmhdL9it/bv7eWI/6cY2qZgZf60H0LO6l3l5tUH3ZdKCaUAlpbYEzkHfaN5
RasHytJh+Tb6uw5uqBchZjos05gG8iU4n11o+DmoYntdwsuHjsvEMwwu2BNb/R5L
1F07YDOLyg8Xi6v7IfAdNkCXZqXJ2iQYByjA9ToAz9C/oqcU6N1aKD8UqUD3kDhH
aI3lgdiYPRutHInvq47EBE+NggDDyH+6itCbOjdKArBXV/kdem6+P+rxjwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHf5QQlPQip2CdUBaVDLO1HzLkNtMB8GA1UdIwQY
MBaAFHZnAjbNDgOGhKMxlL3n1Lla3Gb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgt
YmE0ZmMyMzQ2ODNlLzEvZF9sQkNVOUNLbllKMVFGcFVNczdVZk11UTIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8xODA5ZGEtMWM2Zi00NGRiLWFhMjgtYmE0ZmMyMzQ2ODNl
LzEvZG1jQ05zME9BNGFFb3pHVXZlZlV1VnJjWnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZlIAwQC
ubegMA0GCSqGSIb3DQEBCwUAA4IBAQAIhMRZVEVv2ELUqjkPbxSmBcr2Kylf3tqs
QqSlM5bPN0FE7pS5ispbyUM50g3oH19wI4MrTb5Z5cNIeH1sgJA0zsLmPsQuZpyN
lzHefVdgtXNH+nolbh4wApS//zyxxuNkHbSm0Q11sizezV3MUcdM4Yw2Wc4SP7mE
FD3/EcQAv6V503+127kiVnTVMTRpS8sCViLqaXZiwLLzwSIm/ZPD0lbjR7RkfUIN
jlh6TLc5c52X6Fq50dHaVVNONVryI4YIXHdiskMH77/ewqZ3euGJPnMTWjWJQU7z
ncohs/Zj26gQlg6DayrwYG8vsaGtMgOdledMDiRRfsccBL8Wph1T
-----END CERTIFICATE-----
Generated at Mon Sep 4 10:15:33 2023 by rpki-client on console-ams.rpki-client.org