Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/FSiyj0TIGbooUihlUBG-0yNKjco.roa
File: FSiyj0TIGbooUihlUBG-0yNKjco.roa (raw, json)
Hash identifier: PC8BcVTzFohLrt/loAkoY8SvMixJY0E+xXOpmUCeTjk=
Subject key identifier: 15:28:B2:8F:44:C8:19:BA:28:52:28:65:50:11:BE:D3:23:4A:8D:CA
Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial: 018573CD0302004A99AEC91A31197FACE51E
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/FSiyj0TIGbooUihlUBG-0yNKjco.roa
Signing time: Mon 02 Jan 2023 18:44:53 +0000
ROA not before: Mon 02 Jan 2023 18:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205591
IP address blocks: 45.154.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:cd:03:02:00:4a:99:ae:c9:1a:31:19:7f:ac:e5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
Validity
Not Before: Jan 2 18:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1528b28f44c819ba285228655011bed3234a8dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c1:0a:1c:f3:a0:c0:5b:a7:60:8a:72:b7:10:
15:b2:52:a0:da:24:b6:27:35:0f:73:87:03:5e:da:
d1:8c:06:99:8f:65:3d:97:b4:f6:e6:e6:a3:6b:dd:
35:6e:34:07:ef:88:10:ec:32:3b:94:54:4b:03:49:
c9:8f:e6:ca:9a:1e:bd:b0:8b:28:03:cc:58:6e:08:
76:ec:ba:4f:8a:f8:6a:fd:93:44:27:fd:c4:02:ad:
6c:c2:d4:71:bf:10:b6:10:c9:4b:8c:e9:0e:df:61:
04:de:dc:7a:69:03:7a:44:a9:65:a3:ce:f6:c3:00:
0e:79:c5:68:95:64:11:9c:58:fe:f1:ec:07:94:66:
c3:0b:ee:dd:f1:9b:35:2b:98:e4:2d:c8:54:28:82:
e0:a7:67:ab:5d:48:b2:ce:f8:eb:c4:ce:ed:29:25:
76:b0:7c:e0:e5:b0:0b:9c:c4:7d:fc:3e:90:71:a8:
11:e7:56:92:d5:37:df:eb:f4:4f:6e:8d:d8:ff:2a:
cb:d8:15:97:f2:78:44:b1:86:e7:a0:a9:81:13:ce:
5e:57:21:3c:b8:c9:9c:ba:0d:82:e3:c0:b5:15:32:
74:8d:55:3c:7a:20:b7:f3:4e:08:87:ef:d8:4d:a9:
ba:5e:72:53:15:0f:39:d4:18:b0:b3:9e:05:c7:eb:
3a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:28:B2:8F:44:C8:19:BA:28:52:28:65:50:11:BE:D3:23:4A:8D:CA
X509v3 Authority Key Identifier:
keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/FSiyj0TIGbooUihlUBG-0yNKjco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.110.0/24
Signature Algorithm: sha256WithRSAEncryption
35:24:be:5d:6c:d7:24:b6:de:ed:59:cd:d2:f3:2c:0e:14:cf:
b7:7a:97:fe:07:84:01:b6:f4:02:49:e8:20:d1:cb:88:8d:2f:
fb:4a:4b:d1:95:eb:ec:8b:c5:06:15:0f:d8:d4:d7:72:1c:2a:
26:94:7c:99:05:3d:0b:a3:e8:22:09:8f:c1:30:9c:e3:be:ba:
60:22:d4:64:79:d1:6f:d2:01:9d:8b:2d:ce:51:c0:b6:ba:7f:
2f:bf:d0:9c:4d:23:fe:25:91:4d:f9:61:75:e6:21:5c:2e:0d:
d3:5a:3c:31:fd:ba:90:30:97:32:cf:ff:27:ec:04:11:72:27:
e5:c6:6d:fc:02:84:1f:d1:b7:a0:7f:48:ea:8a:ea:24:1b:5d:
a9:45:9f:33:9a:e3:05:2a:5f:86:55:3a:cf:ec:b9:39:ca:10:
da:1f:a0:e7:3d:bd:8f:54:bd:fb:c0:7c:4e:d1:c2:e2:d4:92:
83:cd:35:fe:c2:f5:80:b7:8e:d9:1b:dd:c0:4b:66:51:7d:2e:
0a:90:22:70:f3:f2:73:f8:45:cb:9c:a1:dd:7c:85:29:89:5c:
9e:a0:c6:24:d9:d7:23:ea:6f:6a:91:dc:b5:14:cf:ae:50:31:
98:28:d7:a8:93:be:2c:f6:10:70:12:89:62:b4:72:93:6c:08:
a1:e0:68:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzzQMCAEqZrskaMRl/rOUeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOTgwYTQ1ZmU0ODczNjZlMzg2YjYwNjRjMmM2NTI1MTlm
OWZjOTMwHhcNMjMwMTAyMTg0NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNTI4YjI4ZjQ0YzgxOWJhMjg1MjI4NjU1MDExYmVkMzIzNGE4ZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcEKHPOgwFunYIpytxAVslKg2iS2
JzUPc4cDXtrRjAaZj2U9l7T25uaja901bjQH74gQ7DI7lFRLA0nJj+bKmh69sIso
A8xYbgh27LpPivhq/ZNEJ/3EAq1swtRxvxC2EMlLjOkO32EE3tx6aQN6RKllo872
wwAOecVolWQRnFj+8ewHlGbDC+7d8Zs1K5jkLchUKILgp2erXUiyzvjrxM7tKSV2
sHzg5bALnMR9/D6QcagR51aS1Tff6/RPbo3Y/yrL2BWX8nhEsYbnoKmBE85eVyE8
uMmcug2C48C1FTJ0jVU8eiC3804Ih+/YTam6XnJTFQ851Biws54Fx+s6IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBUoso9EyBm6KFIoZVARvtMjSo3KMB8GA1UdIwQY
MBaAFNqYCkX+SHNm44a2BkwsZSUZ+fyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMt
M2YxMmFmZjI3NGRhLzEvRlNpeWowVElHYm9vVWlobFVCRy0weU5LamNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMtM2YxMmFmZjI3NGRh
LzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZpuMA0G
CSqGSIb3DQEBCwUAA4IBAQA1JL5dbNcktt7tWc3S8ywOFM+3epf+B4QBtvQCSegg
0cuIjS/7SkvRlevsi8UGFQ/Y1NdyHComlHyZBT0Lo+giCY/BMJzjvrpgItRkedFv
0gGdiy3OUcC2un8vv9CcTSP+JZFN+WF15iFcLg3TWjwx/bqQMJcyz/8n7AQRcifl
xm38AoQf0begf0jqiuokG12pRZ8zmuMFKl+GVTrP7Lk5yhDaH6DnPb2PVL37wHxO
0cLi1JKDzTX+wvWAt47ZG93AS2ZRfS4KkCJw8/Jz+EXLnKHdfIUpiVyeoMYk2dcj
6m9qkdy1FM+uUDGYKNeok74s9hBwEolitHKTbAih4GjC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:37 2024 by rpki-client on console-fra.rpki-client.org