Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/SLjCmY1VryWRXXCsKamOP4aY7RM.roa
File: SLjCmY1VryWRXXCsKamOP4aY7RM.roa (raw, json)
Hash identifier: dPwWjEJWObyf9XBUHnKj+I4zVsKfWD4Hw35eXGsCtWs=
Subject key identifier: 48:B8:C2:99:8D:55:AF:25:91:5D:70:AC:29:A9:8E:3F:86:98:ED:13
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018A0E8FE0EB7EA6FA06A815E474109677A9
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/SLjCmY1VryWRXXCsKamOP4aY7RM.roa
Signing time: Sat 19 Aug 2023 16:10:24 +0000
ROA not before: Sat 19 Aug 2023 16:10:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59692
IP address blocks: 45.135.239.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:0e:8f:e0:eb:7e:a6:fa:06:a8:15:e4:74:10:96:77:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Aug 19 16:10:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48b8c2998d55af25915d70ac29a98e3f8698ed13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:14:9f:bb:99:68:d0:d6:47:86:c2:ce:b9:
a1:19:7c:17:09:88:7f:2c:dc:3e:1d:0f:c8:5f:d9:
f6:f0:e3:9f:c5:e4:46:a0:9e:f1:9e:b1:61:b9:6a:
4a:25:b8:bf:a9:b6:04:43:9e:c1:1c:48:19:48:0e:
1b:0c:f2:56:8f:64:2d:a9:48:d2:73:44:8f:4b:d9:
f6:49:fe:16:5a:c1:36:28:aa:f6:40:e7:24:1e:4d:
9b:ed:b7:3b:8d:1a:a8:e8:07:63:77:b9:b9:64:00:
57:cd:57:ea:5f:c5:5a:2b:f2:45:c1:7e:a6:57:3a:
1b:4a:92:16:e4:0c:34:48:88:8a:b9:c0:d7:1c:ad:
f6:6c:dd:cd:3b:68:f6:00:fb:00:90:f6:4b:df:c8:
2e:4d:29:da:83:05:4e:d6:9f:c2:6c:d0:63:d7:e9:
84:2f:39:94:b2:bc:b0:34:36:dd:e7:8e:58:22:86:
a8:64:6e:d9:91:a1:15:8e:b7:88:f6:61:d1:3a:91:
dd:5f:aa:33:ca:29:79:34:0c:5b:c0:1c:2a:b7:4c:
96:e7:dd:85:c2:0d:db:f5:1e:7a:55:3e:4f:a2:ed:
22:70:78:6a:e2:79:f0:ca:05:84:db:46:24:31:30:
be:67:76:68:95:32:da:a3:de:97:06:29:9e:d8:8f:
ed:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B8:C2:99:8D:55:AF:25:91:5D:70:AC:29:A9:8E:3F:86:98:ED:13
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/SLjCmY1VryWRXXCsKamOP4aY7RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.239.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:86:af:e0:a5:7f:99:72:98:0b:e2:c6:c0:e2:10:e4:5a:30:
50:e4:8f:94:03:b4:9c:87:22:68:72:74:ee:6d:f0:0c:3c:92:
fc:fc:c6:be:c4:7f:90:e9:66:c7:e7:8d:97:8c:23:70:91:ed:
cd:25:86:bb:ec:65:fa:0c:5a:a6:29:8a:e0:7e:0a:47:95:28:
14:26:45:3c:71:b4:e4:1a:72:4b:a5:01:01:62:ac:2a:38:e7:
f5:15:83:db:be:26:89:a7:70:5d:db:49:e7:ed:af:87:ae:5a:
19:36:1f:13:8a:df:e6:a2:a9:02:5c:69:5e:ee:03:78:41:7f:
a9:ac:42:40:3f:9d:4c:bb:f6:f2:1d:0a:21:81:5e:30:34:c5:
98:4c:2c:07:40:a8:fe:da:cc:f5:53:d3:6b:31:bc:91:de:3a:
34:e5:6e:b9:bb:f4:60:4c:5a:6e:32:72:51:a8:b7:18:b5:a2:
44:02:4a:08:66:3e:1c:67:2a:1a:4d:d8:b8:de:4a:1d:35:c8:
78:01:6d:91:ac:a7:b6:e7:4f:b3:37:04:1d:06:3a:28:b6:f1:
e8:98:03:a5:9c:6e:8d:4e:f4:72:3a:f6:ae:78:6f:45:7d:25:
01:3d:8c:ea:98:1b:30:73:e1:9d:48:47:05:da:75:ce:22:73:
6a:c3:64:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYoOj+Drfqb6BqgV5HQQlnepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjMwODE5MTYxMDI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGI4YzI5OThkNTVhZjI1OTE1ZDcwYWMyOWE5OGUzZjg2OThlZDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+sUn7uZaNDWR4bCzrmhGXwXCYh/
LNw+HQ/IX9n28OOfxeRGoJ7xnrFhuWpKJbi/qbYEQ57BHEgZSA4bDPJWj2QtqUjS
c0SPS9n2Sf4WWsE2KKr2QOckHk2b7bc7jRqo6Adjd7m5ZABXzVfqX8VaK/JFwX6m
VzobSpIW5Aw0SIiKucDXHK32bN3NO2j2APsAkPZL38guTSnagwVO1p/CbNBj1+mE
LzmUsrywNDbd545YIoaoZG7ZkaEVjreI9mHROpHdX6ozyil5NAxbwBwqt0yW592F
wg3b9R56VT5Pou0icHhq4nnwygWE20YkMTC+Z3ZolTLao96XBime2I/t2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEi4wpmNVa8lkV1wrCmpjj+GmO0TMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvU0xqQ21ZMVZyeVdSWFhDc0thbU9QNGFZN1JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYfvMA0G
CSqGSIb3DQEBCwUAA4IBAQAOhq/gpX+ZcpgL4sbA4hDkWjBQ5I+UA7SchyJocnTu
bfAMPJL8/Ma+xH+Q6WbH542XjCNwke3NJYa77GX6DFqmKYrgfgpHlSgUJkU8cbTk
GnJLpQEBYqwqOOf1FYPbviaJp3Bd20nn7a+HrloZNh8Tit/moqkCXGle7gN4QX+p
rEJAP51Mu/byHQohgV4wNMWYTCwHQKj+2sz1U9NrMbyR3jo05W65u/RgTFpuMnJR
qLcYtaJEAkoIZj4cZyoaTdi43kodNch4AW2RrKe250+zNwQdBjootvHomAOlnG6N
TvRyOvaueG9FfSUBPYzqmBswc+GdSEcF2nXOInNqw2RU
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:17 2024 by rpki-client on console-fra.rpki-client.org