Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/aaQwPCVxTswb7NR9X0ElcUvSKGY.roa
File: aaQwPCVxTswb7NR9X0ElcUvSKGY.roa (raw, json)
Hash identifier: zDjX+SZOi3m37+ZKooZAtGJ34Tl/lkLx7WlkC8kpPnw=
Subject key identifier: 69:A4:30:3C:25:71:4E:CC:1B:EC:D4:7D:5F:41:25:71:4B:D2:28:66
Certificate issuer: /CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Certificate serial: 01856EB8F3361BFE7A61085B2E7153C421C1
Authority key identifier: 94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/aaQwPCVxTswb7NR9X0ElcUvSKGY.roa
Signing time: Sun 01 Jan 2023 19:04:52 +0000
ROA not before: Sun 01 Jan 2023 19:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209064
IP address blocks: 45.8.38.0/24 maxlen: 24
45.8.37.0/24 maxlen: 24
45.8.36.0/24 maxlen: 24
45.8.36.0/22 maxlen: 22
45.8.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:b8:f3:36:1b:fe:7a:61:08:5b:2e:71:53:c4:21:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94282a6078ba98fb4a6e343e7603a960e7a63442
Validity
Not Before: Jan 1 19:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69a4303c25714ecc1becd47d5f4125714bd22866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:88:4a:00:97:99:12:ed:8a:a6:76:12:06:24:
b8:46:cf:9e:5f:41:42:41:34:f8:88:d7:45:b4:12:
c2:fd:64:7e:69:f4:2c:3a:e8:ac:e5:87:ca:a4:bc:
c4:b5:36:c5:fe:17:b3:ba:91:8d:b7:2d:cb:4f:21:
f0:06:dd:7f:e4:56:9f:40:d4:84:10:44:5a:da:b5:
13:96:3d:eb:24:6d:4a:60:c2:9c:3d:63:7c:56:1c:
4b:b2:cf:f4:71:6f:a6:6d:63:9d:46:d4:92:b3:38:
03:41:fd:34:80:be:08:58:0b:47:57:06:b9:6a:ee:
6a:8b:d7:35:17:a5:ed:f2:1d:4f:32:e3:25:f4:bb:
2d:d7:12:95:3a:f8:dd:b4:ae:cb:97:a7:a1:f0:71:
bc:49:5a:04:0b:d3:1b:79:48:b5:5c:ea:a0:9e:55:
7e:8f:e9:f2:cf:59:56:e0:83:4d:c5:d8:a8:0b:b4:
7a:c8:23:22:2c:56:e4:4c:7c:95:0f:1b:cf:45:32:
3a:95:2c:23:d4:8d:8b:55:f8:5a:ae:37:19:f7:f9:
23:29:7a:23:0e:45:ed:76:36:97:d3:10:61:c8:a7:
be:30:7b:f6:50:14:c1:08:80:b0:1c:fd:d3:26:51:
a8:01:7a:a3:78:cb:23:fa:e0:05:14:6b:37:ad:61:
50:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A4:30:3C:25:71:4E:CC:1B:EC:D4:7D:5F:41:25:71:4B:D2:28:66
X509v3 Authority Key Identifier:
keyid:94:28:2A:60:78:BA:98:FB:4A:6E:34:3E:76:03:A9:60:E7:A6:34:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCgqYHi6mPtKbjQ-dgOpYOemNEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/aaQwPCVxTswb7NR9X0ElcUvSKGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2a96b8-046d-4ac3-b23d-d819794a32a3/1/lCgqYHi6mPtKbjQ-dgOpYOemNEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.36.0/22
Signature Algorithm: sha256WithRSAEncryption
75:8c:f8:15:64:b9:e5:d9:67:95:26:cb:6c:2b:08:56:43:a9:
14:bd:54:e2:32:54:b8:29:63:70:05:bc:81:b3:38:1f:32:96:
94:93:c9:9f:f6:95:8d:36:ea:2c:48:72:ed:47:6b:6f:df:43:
06:75:86:25:ca:5e:a2:fc:a0:5b:76:b6:15:3d:4e:25:58:4e:
66:09:84:26:44:df:4a:67:3f:86:7d:fe:14:81:65:29:83:8c:
1c:19:dd:4d:cf:f8:57:a7:32:de:81:f2:9b:c8:1d:4d:a6:c8:
a1:78:d7:27:b1:14:a6:c6:8a:d2:1c:4e:8e:05:69:6a:74:13:
0c:76:3d:95:c4:ac:d8:9a:d9:4b:d8:c9:8c:2b:f8:75:25:ca:
e9:f9:c2:99:ee:dc:de:a1:17:20:0b:17:e2:63:5a:84:51:74:
ca:4e:88:36:fb:b1:f2:d8:af:3e:3f:51:09:80:b0:88:31:c2:
85:10:a9:0d:02:2e:fa:a5:b7:0e:cf:e3:53:cf:b9:34:b5:a9:
1b:27:67:64:f1:fc:20:73:14:b1:77:2d:65:36:f3:ea:e8:9b:
ca:80:85:2a:b9:89:cc:fa:ef:22:b1:64:eb:34:60:51:77:d9:
0e:e4:c7:c3:87:70:a3:8d:4a:55:4b:cd:57:98:8d:84:00:48:
5c:10:bf:e6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuuPM2G/56YQhbLnFTxCHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjgyYTYwNzhiYTk4ZmI0YTZlMzQzZTc2MDNhOTYwZTdh
NjM0NDIwHhcNMjMwMTAxMTkwNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWE0MzAzYzI1NzE0ZWNjMWJlY2Q0N2Q1ZjQxMjU3MTRiZDIyODY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYhKAJeZEu2KpnYSBiS4Rs+eX0FC
QTT4iNdFtBLC/WR+afQsOuis5YfKpLzEtTbF/hezupGNty3LTyHwBt1/5FafQNSE
EERa2rUTlj3rJG1KYMKcPWN8VhxLss/0cW+mbWOdRtSSszgDQf00gL4IWAtHVwa5
au5qi9c1F6Xt8h1PMuMl9Lst1xKVOvjdtK7Ll6eh8HG8SVoEC9MbeUi1XOqgnlV+
j+nyz1lW4INNxdioC7R6yCMiLFbkTHyVDxvPRTI6lSwj1I2LVfharjcZ9/kjKXoj
DkXtdjaX0xBhyKe+MHv2UBTBCICwHP3TJlGoAXqjeMsj+uAFFGs3rWFQHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGmkMDwlcU7MG+zUfV9BJXFL0ihmMB8GA1UdIwQY
MBaAFJQoKmB4upj7Sm40PnYDqWDnpjRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yYTk2YjgtMDQ2ZC00YWMzLWIyM2Qt
ZDgxOTc5NGEzMmEzLzEvYWFRd1BDVnhUc3diN05SOVgwRWxjVXZTS0dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yYTk2YjgtMDQ2ZC00YWMzLWIyM2QtZDgxOTc5NGEzMmEz
LzEvbENncVlIaTZtUHRLYmpRLWRnT3BZT2VtTkVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQgkMA0G
CSqGSIb3DQEBCwUAA4IBAQB1jPgVZLnl2WeVJstsKwhWQ6kUvVTiMlS4KWNwBbyB
szgfMpaUk8mf9pWNNuosSHLtR2tv30MGdYYlyl6i/KBbdrYVPU4lWE5mCYQmRN9K
Zz+Gff4UgWUpg4wcGd1Nz/hXpzLegfKbyB1NpsiheNcnsRSmxorSHE6OBWlqdBMM
dj2VxKzYmtlL2MmMK/h1Jcrp+cKZ7tzeoRcgCxfiY1qEUXTKTog2+7Hy2K8+P1EJ
gLCIMcKFEKkNAi76pbcOz+NTz7k0takbJ2dk8fwgcxSxdy1lNvPq6JvKgIUquYnM
+u8isWTrNGBRd9kO5MfDh3CjjUpVS81XmI2EAEhcEL/m
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:06 2024 by rpki-client on console-fra.rpki-client.org