Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/9GCfPIBQYUJ4gu_UXYyqpTS6ZYE.roa
File: 9GCfPIBQYUJ4gu_UXYyqpTS6ZYE.roa (raw, json)
Hash identifier: tHpsGnhcguK3ludzMulugGGEN+svNfL5OJrImByAfig=
Subject key identifier: F4:60:9F:3C:80:50:61:42:78:82:EF:D4:5D:8C:AA:A5:34:BA:65:81
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0185715E52E0A9902E2964E4C3A9A12335AB
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/9GCfPIBQYUJ4gu_UXYyqpTS6ZYE.roa
Signing time: Mon 02 Jan 2023 07:24:44 +0000
ROA not before: Mon 02 Jan 2023 07:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49999
IP address blocks: 45.140.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:52:e0:a9:90:2e:29:64:e4:c3:a9:a1:23:35:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 2 07:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4609f3c805061427882efd45d8caaa534ba6581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ea:40:17:62:2b:ab:05:3f:ed:c5:03:66:47:
4d:0c:1a:40:04:c9:ab:12:d7:fe:f0:61:5a:85:e9:
17:1f:28:e5:e0:9f:7b:77:4f:66:f4:92:65:aa:07:
c1:0a:d5:d0:52:33:19:0a:9a:3a:59:6e:a0:b8:db:
3b:70:2e:12:5d:6a:07:b1:2c:de:a6:0e:e1:82:2b:
2d:17:bb:d1:4b:e5:c7:31:68:c6:30:d0:8b:e9:9b:
d2:12:35:e3:1f:4f:0f:0a:a9:f1:36:6a:cf:10:2e:
0d:dd:51:b8:3f:4c:80:24:e0:52:bd:2e:c6:2e:b0:
9f:18:2f:4b:b9:c5:06:2f:b3:b4:f0:fb:79:ae:6d:
13:de:fc:1e:b9:86:fc:51:a1:d1:62:97:d0:1f:a8:
08:4a:f7:5f:69:8f:b1:20:df:20:64:85:bf:b4:ee:
45:50:d9:b7:80:cd:6c:6f:61:dd:79:52:ce:ec:15:
71:6c:a9:5a:2c:62:51:b5:b3:79:2f:76:f3:19:a2:
d6:60:a6:89:89:3a:f0:d5:35:1f:0f:24:1d:17:59:
c8:d1:b0:53:7f:42:8c:60:d2:6b:a8:f4:76:08:67:
3a:a2:78:54:b4:4d:ef:e3:0c:b9:93:40:59:08:d2:
87:14:43:3b:63:a8:e4:ee:dc:ce:57:a9:83:cc:a4:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:60:9F:3C:80:50:61:42:78:82:EF:D4:5D:8C:AA:A5:34:BA:65:81
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/9GCfPIBQYUJ4gu_UXYyqpTS6ZYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.247.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:a8:36:0f:40:2d:c6:fa:82:ac:1d:50:3c:11:96:9f:02:dc:
5d:1b:aa:fa:f2:9c:31:93:67:29:db:56:73:15:e1:e5:ed:da:
73:6c:f0:12:fb:a4:13:b0:4a:d6:e5:55:88:66:79:7c:73:f4:
11:e7:e1:06:9c:71:9e:8a:b6:5b:86:59:01:d3:52:f2:1a:bf:
c1:d7:49:71:b1:9b:13:f0:36:8a:eb:8c:5f:06:99:57:2d:65:
4b:cb:04:07:86:a2:6e:fb:43:3b:e7:27:91:cb:38:b5:2e:0a:
13:1b:69:cd:50:37:0e:01:37:b1:ec:f2:6f:2f:23:3e:92:63:
03:85:1b:d3:4a:70:06:a4:3a:e8:07:86:d8:15:db:fa:6d:d0:
a3:36:37:21:12:50:51:8e:74:2e:14:d3:af:9d:46:16:e3:a6:
f1:53:9d:08:fc:10:b9:88:7a:4a:35:a9:2f:56:e1:a7:8c:2a:
01:23:1e:7e:e2:3a:38:b3:00:a5:dc:86:76:b7:85:89:8b:44:
3a:5a:c4:b2:ab:55:3e:ca:fe:31:2b:57:c5:dc:a5:78:b7:bb:
14:6d:ea:2b:d6:f5:b7:c3:77:da:51:d1:43:a6:5a:12:e5:6c:
8b:6c:2b:d0:8c:77:9c:22:3d:2f:55:57:b8:80:60:5e:e2:a9:
85:8f:55:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxXlLgqZAuKWTkw6mhIzWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk
MjI0YjEwHhcNMjMwMTAyMDcyNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDYwOWYzYzgwNTA2MTQyNzg4MmVmZDQ1ZDhjYWFhNTM0YmE2NTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+pAF2IrqwU/7cUDZkdNDBpABMmr
Etf+8GFahekXHyjl4J97d09m9JJlqgfBCtXQUjMZCpo6WW6guNs7cC4SXWoHsSze
pg7hgistF7vRS+XHMWjGMNCL6ZvSEjXjH08PCqnxNmrPEC4N3VG4P0yAJOBSvS7G
LrCfGC9LucUGL7O08Pt5rm0T3vweuYb8UaHRYpfQH6gISvdfaY+xIN8gZIW/tO5F
UNm3gM1sb2HdeVLO7BVxbKlaLGJRtbN5L3bzGaLWYKaJiTrw1TUfDyQdF1nI0bBT
f0KMYNJrqPR2CGc6onhUtE3v4wy5k0BZCNKHFEM7Y6jk7tzOV6mDzKSinwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPRgnzyAUGFCeILv1F2MqqU0umWBMB8GA1UdIwQY
MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct
NGY0YzliMzQzZTkwLzEvOUdDZlBJQlFZVUo0Z3VfVVhZeXFwVFM2WllFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw
LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYz3MA0G
CSqGSIb3DQEBCwUAA4IBAQB8qDYPQC3G+oKsHVA8EZafAtxdG6r68pwxk2cp21Zz
FeHl7dpzbPAS+6QTsErW5VWIZnl8c/QR5+EGnHGeirZbhlkB01LyGr/B10lxsZsT
8DaK64xfBplXLWVLywQHhqJu+0M75yeRyzi1LgoTG2nNUDcOATex7PJvLyM+kmMD
hRvTSnAGpDroB4bYFdv6bdCjNjchElBRjnQuFNOvnUYW46bxU50I/BC5iHpKNakv
VuGnjCoBIx5+4jo4swCl3IZ2t4WJi0Q6WsSyq1U+yv4xK1fF3KV4t7sUbeor1vW3
w3faUdFDploS5WyLbCvQjHecIj0vVVe4gGBe4qmFj1XG
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:48 2023 by rpki-client on console-fra.rpki-client.org