Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/S_8lyxZ70E0tX69AQDneReE7b_M.roa
File: S_8lyxZ70E0tX69AQDneReE7b_M.roa (raw, json)
Hash identifier: C3g8RqJ1kzAy6GB+j8I2eInQPV9IB3ud3YHjApi/l5A=
Subject key identifier: 4B:FF:25:CB:16:7B:D0:4D:2D:5F:AF:40:40:39:DE:45:E1:3B:6F:F3
Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial: 018573CD045D9F426A245529CD2A145E7551
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/S_8lyxZ70E0tX69AQDneReE7b_M.roa
Signing time: Mon 02 Jan 2023 18:44:53 +0000
ROA not before: Mon 02 Jan 2023 18:44:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206499
IP address blocks: 45.154.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:cd:04:5d:9f:42:6a:24:55:29:cd:2a:14:5e:75:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
Validity
Not Before: Jan 2 18:44:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4bff25cb167bd04d2d5faf404039de45e13b6ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:5a:cd:e4:7b:d5:0c:f5:d8:12:a6:63:7f:19:
c1:69:17:ff:b7:94:ac:8c:97:c6:05:6b:13:26:60:
51:0e:4d:ac:01:c9:cb:93:ed:32:b3:6a:a5:a9:aa:
2f:f2:35:e8:5e:55:59:8d:2e:a7:11:01:6e:da:dd:
5e:4b:8a:38:3c:88:8d:91:56:a9:47:17:c8:0e:fe:
95:87:2e:91:14:92:f4:0d:69:81:3d:ff:2b:b0:42:
d7:ce:2c:f5:88:c4:6d:de:2d:a9:d0:de:05:fc:79:
37:ad:4b:41:3a:5c:77:87:85:d6:67:83:10:5a:61:
6d:fd:b8:c9:90:f3:4a:25:e6:ec:cb:fc:3f:c1:b2:
9a:b8:28:7c:25:02:0a:df:7f:36:79:11:b9:32:2b:
8c:d6:49:ee:3a:ed:03:85:b6:f9:a4:c6:09:64:8a:
f0:b8:6e:bb:5d:ce:bd:45:07:91:c0:f7:4d:87:9b:
33:c4:50:92:a2:a8:4a:ac:5c:72:17:b0:62:54:63:
01:0a:e0:20:b7:7e:cc:d9:69:49:7a:38:dc:32:69:
90:16:15:04:7e:0e:3d:94:45:27:0f:a9:f2:ed:22:
cd:e4:0a:16:dc:c4:d3:e8:96:ec:36:e3:a6:87:c9:
91:03:07:c6:a3:dd:1c:dc:0d:bf:ce:f1:eb:8d:23:
3d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FF:25:CB:16:7B:D0:4D:2D:5F:AF:40:40:39:DE:45:E1:3B:6F:F3
X509v3 Authority Key Identifier:
keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/S_8lyxZ70E0tX69AQDneReE7b_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.110.0/24
Signature Algorithm: sha256WithRSAEncryption
61:80:f9:d2:18:3a:9a:77:e1:ee:e6:39:e2:44:f4:a4:f0:74:
40:be:82:e7:3f:2f:4e:22:3c:da:6a:a6:58:8b:56:c6:f9:87:
59:d1:9c:33:d4:b4:ca:66:6d:8a:5e:64:9d:1c:a2:3a:b0:bd:
3a:0b:d2:90:f8:34:25:7b:78:b3:ef:40:1b:e0:86:45:a3:f5:
4b:70:f5:3f:87:0e:ab:88:4c:50:65:59:5d:ee:91:9f:12:8d:
31:26:da:f8:8b:53:ab:b2:7d:fa:c3:0f:53:bd:0d:b3:b5:9b:
f4:a0:b1:93:26:d3:21:4a:83:53:30:5c:dd:f2:9a:fe:98:18:
af:ae:5a:5f:f2:b3:16:e3:e9:54:ab:b0:fe:6e:7c:c2:bb:62:
99:04:87:ca:ab:8d:d1:e8:99:2e:80:78:02:da:b7:60:63:6c:
c4:71:f9:c6:86:c0:94:bb:11:01:84:05:35:a1:e0:8d:c0:fc:
07:da:96:60:cb:31:66:e4:d6:63:24:7c:d9:bd:e5:65:9c:4d:
3f:f4:fc:7a:8a:02:be:ba:8c:bb:c1:99:14:96:32:f0:c4:68:
d3:93:0f:8a:77:0b:16:ab:a8:5e:9f:d4:15:1e:35:22:7c:3e:
9c:88:19:56:6a:e9:cb:58:af:38:ef:6c:fa:ec:f0:09:a0:ef:
57:9f:31:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzzQRdn0JqJFUpzSoUXnVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhOTgwYTQ1ZmU0ODczNjZlMzg2YjYwNjRjMmM2NTI1MTlm
OWZjOTMwHhcNMjMwMTAyMTg0NDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YmZmMjVjYjE2N2JkMDRkMmQ1ZmFmNDA0MDM5ZGU0NWUxM2I2ZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFrN5HvVDPXYEqZjfxnBaRf/t5Ss
jJfGBWsTJmBRDk2sAcnLk+0ys2qlqaov8jXoXlVZjS6nEQFu2t1eS4o4PIiNkVap
RxfIDv6Vhy6RFJL0DWmBPf8rsELXziz1iMRt3i2p0N4F/Hk3rUtBOlx3h4XWZ4MQ
WmFt/bjJkPNKJebsy/w/wbKauCh8JQIK3382eRG5MiuM1knuOu0Dhbb5pMYJZIrw
uG67Xc69RQeRwPdNh5szxFCSoqhKrFxyF7BiVGMBCuAgt37M2WlJejjcMmmQFhUE
fg49lEUnD6ny7SLN5AoW3MTT6JbsNuOmh8mRAwfGo90c3A2/zvHrjSM9gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEv/JcsWe9BNLV+vQEA53kXhO2/zMB8GA1UdIwQY
MBaAFNqYCkX+SHNm44a2BkwsZSUZ+fyTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMt
M2YxMmFmZjI3NGRhLzEvU184bHl4WjcwRTB0WDY5QVFEbmVSZUU3Yl9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC80MTBlMzktYjhhNi00NmNhLWFjZGMtM2YxMmFmZjI3NGRh
LzEvMnBnS1JmNUljMmJqaHJZR1RDeGxKUm41X0pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZpuMA0G
CSqGSIb3DQEBCwUAA4IBAQBhgPnSGDqad+Hu5jniRPSk8HRAvoLnPy9OIjzaaqZY
i1bG+YdZ0Zwz1LTKZm2KXmSdHKI6sL06C9KQ+DQle3iz70Ab4IZFo/VLcPU/hw6r
iExQZVld7pGfEo0xJtr4i1Orsn36ww9TvQ2ztZv0oLGTJtMhSoNTMFzd8pr+mBiv
rlpf8rMW4+lUq7D+bnzCu2KZBIfKq43R6JkugHgC2rdgY2zEcfnGhsCUuxEBhAU1
oeCNwPwH2pZgyzFm5NZjJHzZveVlnE0/9Px6igK+uoy7wZkUljLwxGjTkw+KdwsW
q6hen9QVHjUifD6ciBlWaunLWK8472z67PAJoO9XnzEA
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:37 2024 by rpki-client on console-fra.rpki-client.org