Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/kofGII7e8xNvqqxGxmw4w-RS77A.roa
File: kofGII7e8xNvqqxGxmw4w-RS77A.roa (raw, json)
Hash identifier: Ifi+TlArEhYjDc6wKklP1BueVodc6U7AQhD01c7+nPk=
Subject key identifier: 92:87:C6:20:8E:DE:F3:13:6F:AA:AC:46:C6:6C:38:C3:E4:52:EF:B0
Certificate issuer: /CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
Certificate serial: 018CC4930DCAAE4416D2F6104F8D25A1895A
Authority key identifier: 6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/kofGII7e8xNvqqxGxmw4w-RS77A.roa
Signing time: Mon 01 Jan 2024 10:30:20 +0000
ROA not before: Mon 01 Jan 2024 10:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.145.122.0/23 maxlen: 24
45.145.120.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 16:42:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0d:ca:ae:44:16:d2:f6:10:4f:8d:25:a1:89:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
Validity
Not Before: Jan 1 10:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9287c6208edef3136faaac46c66c38c3e452efb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c5:c1:d1:3d:ad:06:8c:ff:e1:94:4d:2c:33:
d2:3b:a1:ec:d3:b2:db:cd:6c:5d:1a:43:1f:31:c7:
03:72:77:aa:12:75:b2:46:a9:c1:da:da:f8:c6:2c:
c0:a0:86:ca:3a:96:12:2e:ce:31:db:c9:2b:b6:ef:
49:bc:97:13:dc:fa:58:fb:9e:7e:e2:8a:ef:6a:8e:
8c:5c:ba:48:aa:bd:4f:99:e1:3d:ce:ee:70:8d:85:
00:ca:cc:f4:a1:a7:34:1d:f2:3b:24:cc:a1:24:cc:
ce:b4:3e:b7:83:27:b0:43:d8:83:82:b8:c8:c4:f1:
92:dc:18:91:7c:9a:b2:fb:01:a2:15:bf:61:90:8d:
79:03:dc:0c:59:06:65:7f:5d:03:88:c0:4d:a5:8d:
49:fe:29:75:2b:e3:da:f3:f5:d1:b6:6d:e4:2a:74:
06:52:0c:f4:e2:f0:2c:41:b3:a7:5f:5b:6c:f0:76:
ab:f5:c8:03:36:58:a0:66:7f:67:fb:85:b4:6e:37:
ab:7f:73:00:1f:27:e3:e4:f1:c9:ee:41:a2:d0:2b:
f8:2a:7c:fa:23:ba:2c:93:12:6f:63:8a:46:6b:f3:
e9:ed:52:dc:9e:d7:42:2d:b7:75:3a:38:bf:64:42:
a6:0e:fe:27:76:51:e0:74:6d:1b:4e:ca:c7:43:03:
50:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:87:C6:20:8E:DE:F3:13:6F:AA:AC:46:C6:6C:38:C3:E4:52:EF:B0
X509v3 Authority Key Identifier:
keyid:6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/kofGII7e8xNvqqxGxmw4w-RS77A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/ag9YMNvEu6u2gnd-vThD11BInsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.120.0/22
Signature Algorithm: sha256WithRSAEncryption
01:3b:0f:b2:51:ca:97:ed:0a:65:68:31:87:4c:9e:d9:3e:4a:
18:56:01:bd:04:dc:9a:ed:c3:2e:41:c7:ba:94:a7:e4:9d:54:
d8:ed:c3:57:53:74:b2:90:95:e2:4f:3b:e9:e8:9a:ff:e0:64:
50:9f:05:1b:73:9b:40:e9:d3:5a:cc:46:13:fa:f8:1a:6c:0e:
27:7e:e3:e6:97:c9:f2:80:49:8a:fc:92:fd:b4:44:f4:c7:9c:
6d:77:13:01:d6:5f:98:6d:41:1b:e7:5b:28:dc:85:a7:81:ef:
44:10:e5:ea:d2:68:38:d5:8b:ec:b4:80:a0:04:2b:dc:87:e1:
28:19:28:26:2c:28:c4:e8:c7:3b:43:c4:74:ac:bf:22:19:8b:
63:e4:25:d3:5c:dd:7d:e8:f0:34:48:f3:9f:73:76:e7:01:42:
89:16:97:2e:7d:82:00:33:74:40:46:d7:ce:2b:89:e8:29:fb:
e8:c4:da:eb:81:4f:6b:48:c1:9f:ec:dd:49:57:07:81:69:80:
58:a7:67:80:a7:84:6d:85:aa:90:e0:7f:ab:52:cf:6a:18:f0:
ed:c0:99:48:6b:d2:2d:7c:8a:5a:83:83:46:b8:f3:09:6b:8a:
67:6c:17:8a:47:bc:89:fd:12:45:04:6e:58:d8:95:33:37:e1:
ff:ba:88:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkw3KrkQW0vYQT40loYlaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMGY1ODMwZGJjNGJiYWJiNjgyNzc3ZWJkMzg0M2Q3NTA0
ODllYzgwHhcNMjQwMTAxMTAzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Mjg3YzYyMDhlZGVmMzEzNmZhYWFjNDZjNjZjMzhjM2U0NTJlZmIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8XB0T2tBoz/4ZRNLDPSO6Hs07Lb
zWxdGkMfMccDcneqEnWyRqnB2tr4xizAoIbKOpYSLs4x28krtu9JvJcT3PpY+55+
4orvao6MXLpIqr1PmeE9zu5wjYUAysz0oac0HfI7JMyhJMzOtD63gyewQ9iDgrjI
xPGS3BiRfJqy+wGiFb9hkI15A9wMWQZlf10DiMBNpY1J/il1K+Pa8/XRtm3kKnQG
Ugz04vAsQbOnX1ts8Har9cgDNligZn9n+4W0bjerf3MAHyfj5PHJ7kGi0Cv4Knz6
I7oskxJvY4pGa/Pp7VLcntdCLbd1Oji/ZEKmDv4ndlHgdG0bTsrHQwNQeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJKHxiCO3vMTb6qsRsZsOMPkUu+wMB8GA1UdIwQY
MBaAFGoPWDDbxLurtoJ3fr04Q9dQSJ7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWc5WU1OdkV1NnUyZ25kLXZUaEQxMUJJbnNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84YTMwYjgtMWMxZC00MWMyLTk5NGUt
NTY2NmMyODNiMzA2LzEva29mR0lJN2U4eE52cXF4R3htdzR3LVJTNzdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84YTMwYjgtMWMxZC00MWMyLTk5NGUtNTY2NmMyODNiMzA2
LzEvYWc5WU1OdkV1NnUyZ25kLXZUaEQxMUJJbnNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZF4MA0G
CSqGSIb3DQEBCwUAA4IBAQABOw+yUcqX7QplaDGHTJ7ZPkoYVgG9BNya7cMuQce6
lKfknVTY7cNXU3SykJXiTzvp6Jr/4GRQnwUbc5tA6dNazEYT+vgabA4nfuPml8ny
gEmK/JL9tET0x5xtdxMB1l+YbUEb51so3IWnge9EEOXq0mg41YvstICgBCvch+Eo
GSgmLCjE6Mc7Q8R0rL8iGYtj5CXTXN196PA0SPOfc3bnAUKJFpcufYIAM3RARtfO
K4noKfvoxNrrgU9rSMGf7N1JVweBaYBYp2eAp4RthaqQ4H+rUs9qGPDtwJlIa9It
fIpag4NGuPMJa4pnbBeKR7yJ/RJFBG5Y2JUzN+H/uoj8
-----END CERTIFICATE-----
Generated at Mon Jan 8 20:35:25 2024 by rpki-client on console-ams.rpki-client.org