Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/8rFUZuOGLtb4qEW7CP-dE9EZnn8.roa
File: 8rFUZuOGLtb4qEW7CP-dE9EZnn8.roa (raw, json)
Hash identifier: xdjNC/f4CapJ/xnz5jGIb6+MgCEhApx49XE4ltEoGfo=
Subject key identifier: F2:B1:54:66:E3:86:2E:D6:F8:A8:45:BB:08:FF:9D:13:D1:19:9E:7F
Certificate issuer: /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial: 018AD602E080EB3751C5F72C37B69F5B8D9F
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/8rFUZuOGLtb4qEW7CP-dE9EZnn8.roa
Signing time: Wed 27 Sep 2023 09:40:27 +0000
ROA not before: Wed 27 Sep 2023 09:40:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43824
IP address blocks: 45.159.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d6:02:e0:80:eb:37:51:c5:f7:2c:37:b6:9f:5b:8d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Validity
Not Before: Sep 27 09:40:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2b15466e3862ed6f8a845bb08ff9d13d1199e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f2:3b:f0:4d:92:69:8c:1e:9f:5a:7a:ee:c2:
c6:ca:8a:57:c3:a0:26:fd:73:b1:6b:07:f4:11:d1:
1b:80:26:f9:cf:2a:83:35:10:88:6f:84:9e:52:46:
bb:5e:29:8b:79:69:1a:a4:b5:38:92:82:7a:3a:2d:
22:80:30:85:9a:b2:c2:99:6a:cc:71:93:7c:d7:12:
38:f5:95:bb:c6:8a:e5:d5:6f:03:16:90:da:bd:25:
49:8e:89:c6:f7:80:38:41:8d:af:ea:e9:83:18:e4:
0d:0e:bd:de:6d:5e:74:66:8f:6d:32:a4:e8:c5:c8:
34:6d:a5:f6:7f:14:35:13:f9:4b:b8:bc:68:b5:94:
9b:6a:f5:46:df:e3:c7:cf:da:64:66:48:70:19:f0:
3d:3f:e9:5b:c8:ad:57:61:3a:69:5a:ad:7a:02:a6:
b1:7b:48:2b:12:08:f9:f3:5d:94:ee:57:86:c7:c2:
67:39:66:ca:62:21:12:7d:84:ab:5e:3d:f1:0b:85:
f4:2a:c6:aa:72:0f:3f:52:39:4f:c2:e7:62:ff:10:
4d:3c:75:11:6e:cc:5d:bb:20:87:88:6c:df:1b:56:
ea:c6:5c:7d:9f:00:7a:26:54:42:4e:50:30:21:dc:
66:26:1b:34:19:bb:95:e2:25:ae:b3:8d:e5:a4:f1:
63:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B1:54:66:E3:86:2E:D6:F8:A8:45:BB:08:FF:9D:13:D1:19:9E:7F
X509v3 Authority Key Identifier:
keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/8rFUZuOGLtb4qEW7CP-dE9EZnn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.187.0/24
Signature Algorithm: sha256WithRSAEncryption
74:3e:02:82:97:8e:32:34:b9:82:27:76:4d:b1:44:a7:92:63:
af:ea:50:9e:3f:cb:54:28:b4:07:5e:d2:18:3d:97:1a:e4:66:
80:1a:f7:e3:85:fc:c8:ab:ae:d5:ec:83:97:52:da:b2:af:b5:
9e:23:83:28:e1:6c:8c:18:8f:b9:a7:27:ad:89:fd:f0:c6:1c:
02:9d:83:e7:c3:00:17:d4:e5:36:de:49:5c:e2:0c:bf:e9:b0:
0d:0b:ba:75:33:ff:1f:21:d7:bc:4d:f2:97:36:18:64:24:a6:
03:fa:77:7f:8d:cb:13:54:5e:b9:3e:03:50:79:95:94:0b:cb:
26:78:9d:99:21:4e:4e:01:92:e7:1b:3f:db:93:02:5e:c0:4a:
da:5c:a3:4c:b9:2e:35:d4:b0:0e:b0:b4:44:5d:e4:13:b9:16:
47:fe:d8:5a:7a:fc:75:72:44:4f:e4:69:bd:bd:d1:2b:7a:a9:
b0:82:75:aa:72:aa:dd:5d:35:fe:f3:ab:c6:94:5f:a1:94:fe:
a1:c4:64:62:21:5c:9d:dc:e7:be:a8:43:1b:63:be:f5:79:4e:
52:29:8c:b2:bd:2f:22:30:12:11:92:69:38:c1:dc:5f:20:ed:
fb:11:e7:b5:99:f6:23:d0:e9:59:b4:e2:88:5c:46:b5:5d:4a:
2d:2c:65:e5
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYrWAuCA6zdRxfcsN7afW42fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NTU1YTc4ODNmOTJiOWY5YmE0MjJhOTZiNGUzOTdiZjVm
YjhmYzcwHhcNMjMwOTI3MDk0MDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmIxNTQ2NmUzODYyZWQ2ZjhhODQ1YmIwOGZmOWQxM2QxMTk5ZTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPI78E2SaYwen1p67sLGyopXw6Am
/XOxawf0EdEbgCb5zyqDNRCIb4SeUka7XimLeWkapLU4koJ6Oi0igDCFmrLCmWrM
cZN81xI49ZW7xorl1W8DFpDavSVJjonG94A4QY2v6umDGOQNDr3ebV50Zo9tMqTo
xcg0baX2fxQ1E/lLuLxotZSbavVG3+PHz9pkZkhwGfA9P+lbyK1XYTppWq16Aqax
e0grEgj5812U7leGx8JnOWbKYiESfYSrXj3xC4X0Ksaqcg8/UjlPwudi/xBNPHUR
bsxduyCHiGzfG1bqxlx9nwB6JlRCTlAwIdxmJhs0GbuV4iWus43lpPFjsQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFPKxVGbjhi7W+KhFuwj/nRPRGZ5/MB8GA1UdIwQY
MBaAFPhVWniD+Sufm6QiqWtOOXv1+4/HMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GVmFlSVA1SzUtYnBDS3BhMDQ1ZV9YN2o4Yy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvODI0NDVmLWQxZDctNDZiMC1hZjRm
LTc2NmMwNmU1ZjA3NS8xLzhyRlVadU9HTHRiNHFFVzdDUC1kRTlFWm5uOC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvM2IvODI0NDVmLWQxZDctNDZiMC1hZjRmLTc2NmMwNmU1ZjA3
NS8xLzEtRlZhZUlQNUs1LWJwQ0twYTA0NWVfWDdqOGMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtn7sw
DQYJKoZIhvcNAQELBQADggEBAHQ+AoKXjjI0uYIndk2xRKeSY6/qUJ4/y1QotAde
0hg9lxrkZoAa9+OF/MirrtXsg5dS2rKvtZ4jgyjhbIwYj7mnJ62J/fDGHAKdg+fD
ABfU5TbeSVziDL/psA0LunUz/x8h17xN8pc2GGQkpgP6d3+NyxNUXrk+A1B5lZQL
yyZ4nZkhTk4BkucbP9uTAl7AStpco0y5LjXUsA6wtERd5BO5Fkf+2Fp6/HVyRE/k
ab290St6qbCCdapyqt1dNf7zq8aUX6GU/qHEZGIhXJ3c576oQxtjvvV5TlIpjLK9
LyIwEhGSaTjB3F8g7fsR57WZ9iPQ6Vm04ohcRrVdSi0sZeU=
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:35 2024 by rpki-client on console-ams.rpki-client.org