Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/rmpgWTuKagbFcPxhjkI1Bqh_img.roa
File: rmpgWTuKagbFcPxhjkI1Bqh_img.roa (raw, json)
Hash identifier: KmTeZcPj9GBrJ9W7vohw5RCugMfwGb57weAzhzozk8c=
Subject key identifier: AE:6A:60:59:3B:8A:6A:06:C5:70:FC:61:8E:42:35:06:A8:7F:8A:68
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0188D3956A0B0F87072258A95E91CB8B34F1
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/rmpgWTuKagbFcPxhjkI1Bqh_img.roa
Signing time: Mon 19 Jun 2023 12:16:04 +0000
ROA not before: Mon 19 Jun 2023 12:16:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399626
IP address blocks: 45.155.90.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d3:95:6a:0b:0f:87:07:22:58:a9:5e:91:cb:8b:34:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jun 19 12:16:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae6a60593b8a6a06c570fc618e423506a87f8a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:45:96:5c:b9:7d:e1:d1:e0:ec:2b:ec:04:69:
d4:03:2c:da:5b:f6:32:0b:8f:1f:25:8d:86:2a:d5:
94:c3:02:d2:4a:58:64:9d:75:f1:27:3c:7b:91:14:
0d:8e:e5:8f:d0:84:4f:9e:24:3b:46:41:61:9d:e7:
87:67:87:86:7e:c9:7a:c8:76:b7:6e:94:8f:2a:be:
11:ad:b3:4c:40:d4:e3:15:cd:8c:ee:45:c5:49:a4:
86:01:e9:9d:38:f0:4a:eb:cf:39:f9:27:3f:04:29:
db:27:d4:18:96:b9:5e:5a:d6:10:f0:ed:b8:a7:fa:
33:d8:2b:ce:e0:5f:ae:e0:f2:a9:c8:a8:a6:3a:a8:
76:1f:26:d5:2a:4b:1f:69:58:85:0a:6d:6c:bd:2d:
64:16:c8:30:cf:fa:a9:9f:fd:25:8d:61:d5:37:85:
4b:f0:4f:38:89:27:85:29:ed:90:6f:48:9a:86:1c:
1e:5f:42:5d:22:2a:d1:21:7b:bc:b2:92:d7:66:d9:
02:4c:ce:88:ab:1b:fe:05:23:d9:f3:a7:d7:7d:f0:
6b:b1:8c:57:f1:94:ea:7d:c0:26:dc:ef:c5:2a:52:
1e:78:c6:a1:88:1c:07:fa:76:70:43:68:66:c7:fb:
fd:9c:25:c1:9b:c7:b5:8f:ad:20:cb:6b:70:77:e9:
04:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:6A:60:59:3B:8A:6A:06:C5:70:FC:61:8E:42:35:06:A8:7F:8A:68
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/rmpgWTuKagbFcPxhjkI1Bqh_img.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.90.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:a1:eb:67:6b:c0:35:5f:2a:8a:31:6b:7b:b3:6d:5c:e1:3e:
ad:02:88:fa:9f:5e:f7:b6:99:1e:d9:fc:e8:a6:a5:2f:e3:fc:
6a:e5:0d:4d:e0:8c:93:bc:e0:7a:a7:90:83:63:83:1a:be:08:
f3:e6:1d:0e:a6:27:3a:81:f6:4f:e6:83:a0:78:19:89:26:53:
16:b3:71:f5:23:75:68:4c:8e:ce:35:d0:aa:d3:df:1f:fd:1c:
44:d3:f9:57:c2:b8:c2:e3:ba:43:51:8f:9a:6a:40:b2:06:63:
97:df:ca:c5:ed:03:3d:48:b0:5d:2e:f5:ec:b8:36:a7:b9:5c:
41:2b:58:db:e8:45:f4:b6:4b:d4:14:8b:47:0c:28:dd:08:b6:
51:d5:c9:29:6a:ad:0d:c7:1d:da:f1:1b:be:11:6b:34:ac:3e:
ff:e5:ee:a8:74:00:f3:cb:8b:dd:da:05:95:49:ee:3c:7f:e9:
49:08:0e:85:d4:88:40:9f:a0:13:99:42:2f:da:0f:15:5c:6c:
25:ec:ee:38:67:30:8d:1e:0e:bb:5b:a6:05:8f:12:36:ea:d5:
b9:bc:a1:a7:39:3b:24:aa:da:f2:36:ae:bd:07:60:04:e1:58:
16:13:61:1f:d1:17:8f:df:0b:81:f9:64:15:95:d4:84:6a:22:
06:f1:19:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjTlWoLD4cHIlipXpHLizTxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjMwNjE5MTIxNjA0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTZhNjA1OTNiOGE2YTA2YzU3MGZjNjE4ZTQyMzUwNmE4N2Y4YTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkWWXLl94dHg7CvsBGnUAyzaW/Yy
C48fJY2GKtWUwwLSSlhknXXxJzx7kRQNjuWP0IRPniQ7RkFhneeHZ4eGfsl6yHa3
bpSPKr4RrbNMQNTjFc2M7kXFSaSGAemdOPBK6885+Sc/BCnbJ9QYlrleWtYQ8O24
p/oz2CvO4F+u4PKpyKimOqh2HybVKksfaViFCm1svS1kFsgwz/qpn/0ljWHVN4VL
8E84iSeFKe2Qb0iahhweX0JdIirRIXu8spLXZtkCTM6Iqxv+BSPZ86fXffBrsYxX
8ZTqfcAm3O/FKlIeeMahiBwH+nZwQ2hmx/v9nCXBm8e1j60gy2twd+kEbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK5qYFk7imoGxXD8YY5CNQaof4poMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvcm1wZ1dUdUthZ2JGY1B4aGprSTFCcWhfaW1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZtaMA0G
CSqGSIb3DQEBCwUAA4IBAQCwoetna8A1XyqKMWt7s21c4T6tAoj6n173tpke2fzo
pqUv4/xq5Q1N4IyTvOB6p5CDY4Mavgjz5h0Opic6gfZP5oOgeBmJJlMWs3H1I3Vo
TI7ONdCq098f/RxE0/lXwrjC47pDUY+aakCyBmOX38rF7QM9SLBdLvXsuDanuVxB
K1jb6EX0tkvUFItHDCjdCLZR1ckpaq0Nxx3a8Ru+EWs0rD7/5e6odADzy4vd2gWV
Se48f+lJCA6F1IhAn6ATmUIv2g8VXGwl7O44ZzCNHg67W6YFjxI26tW5vKGnOTsk
qtryNq69B2AE4VgWE2Ef0ReP3wuB+WQVldSEaiIG8Rm1
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:00:13 2024 by rpki-client on console-ams.rpki-client.org