Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/laM33xH-P8yVkr5wEqi8Tx9EZT8.roa
File: laM33xH-P8yVkr5wEqi8Tx9EZT8.roa (raw, json)
Hash identifier: iWIgA6tJh9QM20kTUXZmJgTx12wD+XaqWlmyVPrlrsQ=
Subject key identifier: 95:A3:37:DF:11:FE:3F:CC:95:92:BE:70:12:A8:BC:4F:1F:44:65:3F
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 018B3C80A9065D470D67A0641536FDD1AB3E
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/laM33xH-P8yVkr5wEqi8Tx9EZT8.roa
Signing time: Tue 17 Oct 2023 07:19:06 +0000
ROA not before: Tue 17 Oct 2023 07:19:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 45.89.28.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:80:a9:06:5d:47:0d:67:a0:64:15:36:fd:d1:ab:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Oct 17 07:19:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=95a337df11fe3fcc9592be7012a8bc4f1f44653f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:31:a3:43:9f:20:20:72:1b:6c:e0:15:2c:63:
e5:93:14:da:8b:1d:74:08:46:d7:1f:a8:18:32:20:
03:e6:63:4a:b7:f0:bf:bc:13:4c:c8:c8:a1:6a:dd:
68:fb:92:8a:b2:30:57:f4:7f:0f:ec:18:07:3c:dc:
92:43:81:2c:d6:91:38:79:3a:d5:df:32:b1:e7:eb:
97:f9:50:49:12:01:8c:98:f0:05:55:01:0b:0c:7f:
f9:2a:87:94:74:58:0b:e8:51:41:bf:38:df:ed:52:
f0:2a:70:73:b0:ea:2c:8a:5e:65:9e:53:63:17:04:
91:28:17:e0:b9:a5:38:94:bb:91:a9:cc:9f:23:f0:
ad:65:a1:c0:2f:76:4c:62:c1:9e:72:ac:8d:f2:df:
ff:f9:59:85:4b:5f:c8:61:7a:2f:c7:28:8d:d1:b5:
b6:d3:48:47:9a:d6:20:e8:b6:f2:e9:64:45:31:75:
2c:cb:23:8f:df:a6:31:83:03:f7:bd:db:02:57:b3:
c2:dc:b9:e4:a9:0c:56:e0:ea:5e:2a:02:c0:4b:3a:
79:bf:b5:35:b4:cd:01:a3:2d:d6:de:80:30:93:12:
8c:83:38:2d:6b:86:8a:31:aa:8c:0a:c0:88:51:83:
7b:8a:5f:bc:91:f9:06:04:63:26:ee:75:07:60:ea:
c7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A3:37:DF:11:FE:3F:CC:95:92:BE:70:12:A8:BC:4F:1F:44:65:3F
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/laM33xH-P8yVkr5wEqi8Tx9EZT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.28.0/24
Signature Algorithm: sha256WithRSAEncryption
09:58:ae:b3:39:86:ac:66:4b:93:6f:ca:8e:38:35:5f:82:fb:
9f:af:ea:0d:78:d2:ec:c7:1c:9b:b0:06:d7:ac:a3:4a:de:0b:
33:7d:bb:10:9e:2e:0e:71:ce:f1:e2:2f:ee:5a:42:ca:56:fa:
30:9d:84:4d:45:43:d9:85:ef:8d:5b:a5:ba:a7:96:7d:9c:0b:
71:91:ad:5c:8b:46:40:fe:78:c7:b7:2d:2c:cc:54:f9:de:f2:
12:9a:42:72:6a:15:d3:df:0b:8d:7c:f9:c5:22:d3:d5:a9:3b:
d9:e7:54:48:68:5e:31:26:2d:d1:44:ae:a0:96:5b:5f:f5:f6:
73:eb:9d:b9:27:70:29:9f:2d:01:88:52:f9:61:00:ef:19:94:
bb:a2:f3:d2:7b:ad:68:fe:5b:3e:24:76:f8:b3:f1:ef:52:dc:
2a:1b:fd:f5:d4:f5:da:62:ce:e5:a4:5f:e9:3a:93:d4:92:37:
d4:5e:58:fe:e6:c7:82:31:07:05:ba:d9:47:8a:7f:18:68:ed:
c6:44:3a:9e:1e:ac:67:40:16:11:1f:1f:a2:18:4b:65:2c:37:
37:d8:0b:c3:b3:7e:e7:05:8a:a6:2b:31:de:94:51:a1:9c:a9:
7e:57:dc:f0:8a:2d:19:08:33:6c:15:ce:02:4e:48:ea:d0:7c:
86:9c:2f:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYs8gKkGXUcNZ6BkFTb90as+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz
NjliYTQwHhcNMjMxMDE3MDcxOTA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NWEzMzdkZjExZmUzZmNjOTU5MmJlNzAxMmE4YmM0ZjFmNDQ2NTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDGjQ58gIHIbbOAVLGPlkxTaix10
CEbXH6gYMiAD5mNKt/C/vBNMyMihat1o+5KKsjBX9H8P7BgHPNySQ4Es1pE4eTrV
3zKx5+uX+VBJEgGMmPAFVQELDH/5KoeUdFgL6FFBvzjf7VLwKnBzsOosil5lnlNj
FwSRKBfguaU4lLuRqcyfI/CtZaHAL3ZMYsGecqyN8t//+VmFS1/IYXovxyiN0bW2
00hHmtYg6Lby6WRFMXUsyyOP36YxgwP3vdsCV7PC3LnkqQxW4OpeKgLASzp5v7U1
tM0Boy3W3oAwkxKMgzgta4aKMaqMCsCIUYN7il+8kfkGBGMm7nUHYOrHIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJWjN98R/j/MlZK+cBKovE8fRGU/MB8GA1UdIwQY
MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt
ZGRjMjY2NTY0NmNjLzEvbGFNMzN4SC1QOHlWa3I1d0VxaThUeDlFWlQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj
LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVkcMA0G
CSqGSIb3DQEBCwUAA4IBAQAJWK6zOYasZkuTb8qOODVfgvufr+oNeNLsxxybsAbX
rKNK3gszfbsQni4Occ7x4i/uWkLKVvownYRNRUPZhe+NW6W6p5Z9nAtxka1ci0ZA
/njHty0szFT53vISmkJyahXT3wuNfPnFItPVqTvZ51RIaF4xJi3RRK6glltf9fZz
6525J3Apny0BiFL5YQDvGZS7ovPSe61o/ls+JHb4s/HvUtwqG/311PXaYs7lpF/p
OpPUkjfUXlj+5seCMQcFutlHin8YaO3GRDqeHqxnQBYRHx+iGEtlLDc32AvDs37n
BYqmKzHelFGhnKl+V9zwii0ZCDNsFc4CTkjq0HyGnC9G
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:38 2024 by rpki-client on console-ams.rpki-client.org