Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/8kVbrpdBxvqi-zRuurRQ0Zc8z5U.roa
File: 8kVbrpdBxvqi-zRuurRQ0Zc8z5U.roa (raw, json)
Hash identifier: XO2hLUpLlfJnpmDE/qlwCsjsV+Bxns6b6oGxyHF4Msw=
Subject key identifier: F2:45:5B:AE:97:41:C6:FA:A2:FB:34:6E:BA:B4:50:D1:97:3C:CF:95
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0187AB53975457EF125E5431D682E6230E66
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/8kVbrpdBxvqi-zRuurRQ0Zc8z5U.roa
Signing time: Sat 22 Apr 2023 23:36:34 +0000
ROA not before: Sat 22 Apr 2023 23:36:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47154
IP address blocks: 45.155.91.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ab:53:97:54:57:ef:12:5e:54:31:d6:82:e6:23:0e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Apr 22 23:36:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2455bae9741c6faa2fb346ebab450d1973ccf95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d2:09:b4:d4:f3:ac:a0:c2:ab:fa:a9:f6:49:
40:ae:77:82:0f:29:bf:d7:ad:19:13:1c:99:a5:73:
47:5e:ee:8b:30:38:61:d8:2b:c1:57:cc:3b:47:da:
80:db:20:a0:e7:00:cd:9b:05:c9:cc:55:66:3f:05:
61:62:1e:73:c1:7f:03:b4:90:7b:b3:84:df:1c:e5:
0b:6b:1f:c0:6d:96:f1:e2:50:06:3e:6e:60:1a:58:
7a:61:e3:38:2c:67:16:d3:f8:bd:5d:ca:d3:1f:af:
00:72:9f:e1:8e:de:dd:dd:6b:bf:a3:ee:98:c6:d7:
4e:95:83:9f:51:01:b9:b1:5f:d3:4d:c6:97:e4:75:
83:dd:a4:41:89:5f:19:c4:71:d2:e3:73:23:19:aa:
26:23:13:5b:5e:38:e8:a0:1c:01:de:7d:42:ed:8a:
25:5c:40:46:a5:29:f6:5a:c0:05:67:40:74:83:0f:
8e:41:b9:72:03:11:59:80:fc:1c:82:d9:50:b7:4a:
8e:cd:b1:31:f4:93:01:f3:98:c0:58:a9:6e:53:e0:
d3:43:0a:fa:08:54:f5:83:04:d4:b5:bb:11:60:2a:
ea:7c:c1:cc:60:56:3b:9b:b4:56:dc:4a:b7:9d:59:
7e:0c:ec:6d:3e:62:5a:95:1e:0e:ad:da:5c:80:40:
75:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:45:5B:AE:97:41:C6:FA:A2:FB:34:6E:BA:B4:50:D1:97:3C:CF:95
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/8kVbrpdBxvqi-zRuurRQ0Zc8z5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.91.0/24
Signature Algorithm: sha256WithRSAEncryption
85:0c:8c:f9:25:7d:01:5b:b1:48:fa:83:cc:fc:06:88:91:38:
ba:0b:41:fd:25:22:fb:b5:33:72:61:91:dd:f9:a8:c3:33:95:
75:9c:bd:4b:6c:a0:5a:2a:0f:e1:0b:d3:e7:32:2d:96:83:69:
f1:dd:36:b6:d0:3c:4c:fd:85:3e:1e:e8:42:18:33:6b:50:07:
09:f6:3f:96:79:92:07:1a:b4:7d:60:d9:15:26:88:80:7f:35:
13:a8:42:4c:20:c8:7d:38:05:97:a8:0c:c0:49:80:68:e1:12:
e4:c0:fa:bb:d1:25:15:f8:96:9d:02:75:56:ad:a4:9b:8c:f6:
e7:01:40:bc:a4:55:1c:4e:32:01:e7:ed:36:a9:ad:d6:7f:53:
39:19:91:c6:08:7d:bd:e6:73:7d:30:ed:f4:0b:f0:3d:59:42:
f1:38:83:f9:2d:e9:40:8e:5b:04:4d:13:7f:b8:80:0a:67:ca:
b5:d7:b7:f4:53:90:aa:b5:07:c6:e5:46:28:6f:33:7e:b3:b9:
51:b6:2f:53:c8:5a:09:f0:df:d6:7e:63:7f:ef:d0:fc:45:ae:
ef:2a:c2:37:22:39:4c:9f:89:00:f8:c1:a5:98:41:ab:bb:30:
af:ca:55:fa:ee:78:b1:e4:93:54:70:6c:4f:51:24:34:03:5b:
92:b8:f6:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYerU5dUV+8SXlQx1oLmIw5mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjMwNDIyMjMzNjM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMjQ1NWJhZTk3NDFjNmZhYTJmYjM0NmViYWI0NTBkMTk3M2NjZjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidIJtNTzrKDCq/qp9klArneCDym/
160ZExyZpXNHXu6LMDhh2CvBV8w7R9qA2yCg5wDNmwXJzFVmPwVhYh5zwX8DtJB7
s4TfHOULax/AbZbx4lAGPm5gGlh6YeM4LGcW0/i9XcrTH68Acp/hjt7d3Wu/o+6Y
xtdOlYOfUQG5sV/TTcaX5HWD3aRBiV8ZxHHS43MjGaomIxNbXjjooBwB3n1C7Yol
XEBGpSn2WsAFZ0B0gw+OQblyAxFZgPwcgtlQt0qOzbEx9JMB85jAWKluU+DTQwr6
CFT1gwTUtbsRYCrqfMHMYFY7m7RW3Eq3nVl+DOxtPmJalR4OrdpcgEB1lQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPJFW66XQcb6ovs0brq0UNGXPM+VMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvOGtWYnJwZEJ4dnFpLXpSdXVyUlEwWmM4ejVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZtbMA0G
CSqGSIb3DQEBCwUAA4IBAQCFDIz5JX0BW7FI+oPM/AaIkTi6C0H9JSL7tTNyYZHd
+ajDM5V1nL1LbKBaKg/hC9PnMi2Wg2nx3Ta20DxM/YU+HuhCGDNrUAcJ9j+WeZIH
GrR9YNkVJoiAfzUTqEJMIMh9OAWXqAzASYBo4RLkwPq70SUV+JadAnVWraSbjPbn
AUC8pFUcTjIB5+02qa3Wf1M5GZHGCH295nN9MO30C/A9WULxOIP5LelAjlsETRN/
uIAKZ8q117f0U5CqtQfG5UYobzN+s7lRti9TyFoJ8N/WfmN/79D8Ra7vKsI3IjlM
n4kA+MGlmEGruzCvylX67nix5JNUcGxPUSQ0A1uSuPY9
-----END CERTIFICATE-----
Generated at Tue Aug 15 09:06:13 2023 by rpki-client on console-ams.rpki-client.org