Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/lCl7Q022NVVr7rbC-MdXn5EU_Rs.roa
File: lCl7Q022NVVr7rbC-MdXn5EU_Rs.roa (raw, json)
Hash identifier: rSjNnd6i8ENSxBUm3bG2SjAo2S/mheX1x6IyXeYimQc=
Subject key identifier: 94:29:7B:43:4D:B6:35:55:6B:EE:B6:C2:F8:C7:57:9F:91:14:FD:1B
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 018C44CD894C245BE569B4B4FB089A53A15C
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/lCl7Q022NVVr7rbC-MdXn5EU_Rs.roa
Signing time: Thu 07 Dec 2023 15:02:49 +0000
ROA not before: Thu 07 Dec 2023 15:02:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.87.161.0/24 maxlen: 24
45.87.162.0/24 maxlen: 24
45.87.163.0/24 maxlen: 24
45.87.160.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:44:cd:89:4c:24:5b:e5:69:b4:b4:fb:08:9a:53:a1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Dec 7 15:02:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94297b434db635556beeb6c2f8c7579f9114fd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d0:3d:a9:72:a1:6e:3a:60:1e:ed:5a:30:bc:
3f:99:bd:81:c4:49:a2:f3:c0:d8:76:41:b3:21:ed:
11:ec:5a:dc:93:50:38:72:a4:7d:a9:48:05:50:5b:
fe:6e:1b:ba:51:a0:e1:7d:21:e2:54:3f:ae:a0:46:
e7:71:aa:97:d6:95:a1:82:80:97:12:d0:bd:76:15:
fb:5a:ed:90:1f:74:14:07:cb:aa:7d:6f:28:0a:52:
fe:6a:7d:cf:8b:7b:f2:8d:ff:9c:b5:3b:af:79:c4:
24:a3:11:dd:7f:88:76:9c:fb:96:82:18:5c:17:20:
2e:ea:8d:64:9c:57:1e:7f:a5:5c:9c:9b:7a:c4:9c:
54:7f:b2:f6:e8:7d:4d:05:6b:46:bf:5d:7f:10:be:
0d:98:b2:85:f2:79:47:1a:45:c2:57:33:9b:92:c1:
7b:b4:9e:45:e1:ef:ac:9b:7d:54:3b:90:60:6d:30:
3f:ff:cb:e1:6a:3f:59:c2:bd:c1:e2:e3:59:37:b1:
6d:1c:5c:92:3a:24:57:3a:ad:82:37:ec:c0:e7:7f:
f7:01:97:e4:e7:fd:18:b7:db:81:9d:58:53:0e:61:
32:27:22:2c:e1:95:2c:d3:de:da:14:36:df:ae:4e:
ed:b3:d4:f6:fe:40:f6:2a:89:5c:61:87:e6:23:99:
55:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:29:7B:43:4D:B6:35:55:6B:EE:B6:C2:F8:C7:57:9F:91:14:FD:1B
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/lCl7Q022NVVr7rbC-MdXn5EU_Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.160.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:29:71:43:3c:5f:3a:9b:e9:72:09:2e:5f:06:d2:d5:fa:8d:
c9:6e:79:19:83:89:cb:95:26:f9:b3:a3:2d:01:ff:f0:4e:44:
4b:58:5c:46:2a:a9:69:45:19:5b:b6:23:a6:7a:1a:5c:13:94:
da:d3:85:8e:c2:98:d7:9d:40:6d:c8:d6:9a:e5:a4:05:6d:47:
e0:de:92:e3:cf:ab:50:e0:4d:0e:36:2f:a3:b2:a9:63:5d:78:
ad:77:c4:3c:5d:3b:cc:c2:b0:4f:64:f4:d2:c7:1b:68:e7:be:
40:67:2c:bb:ae:9b:8e:5c:67:af:58:99:e6:a3:3c:fb:fb:ea:
4a:76:22:0d:6a:98:bc:e9:79:5a:1f:dd:f0:f4:e4:17:dc:ab:
1c:03:f2:c4:20:09:27:0a:82:37:19:b7:e0:4b:b0:cf:1e:2e:
7f:8f:76:15:38:8c:31:8d:8d:24:da:3f:b1:f1:38:dd:50:9e:
f5:50:0a:5f:4b:d7:24:e5:e3:de:84:48:2e:78:26:29:f3:c5:
8f:19:40:e5:86:5a:be:eb:43:11:eb:87:f6:b0:24:f2:ff:f8:
bd:83:37:6b:f2:a3:d7:89:e8:3f:bf:5e:2a:c2:84:25:c3:fe:
5e:b6:ad:f0:18:54:fc:13:b9:80:dc:c4:2b:ad:e5:2e:35:5a:
5f:e7:4f:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYxEzYlMJFvlabS0+wiaU6FcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1
MTNhMGYwHhcNMjMxMjA3MTUwMjQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDI5N2I0MzRkYjYzNTU1NmJlZWI2YzJmOGM3NTc5ZjkxMTRmZDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttA9qXKhbjpgHu1aMLw/mb2BxEmi
88DYdkGzIe0R7Frck1A4cqR9qUgFUFv+bhu6UaDhfSHiVD+uoEbncaqX1pWhgoCX
EtC9dhX7Wu2QH3QUB8uqfW8oClL+an3Pi3vyjf+ctTuvecQkoxHdf4h2nPuWghhc
FyAu6o1knFcef6VcnJt6xJxUf7L26H1NBWtGv11/EL4NmLKF8nlHGkXCVzObksF7
tJ5F4e+sm31UO5BgbTA//8vhaj9Zwr3B4uNZN7FtHFySOiRXOq2CN+zA53/3AZfk
5/0Yt9uBnVhTDmEyJyIs4ZUs097aFDbfrk7ts9T2/kD2KolcYYfmI5lVywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJQpe0NNtjVVa+62wvjHV5+RFP0bMB8GA1UdIwQY
MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt
MWQyMWQxYmNlM2ZlLzEvbENsN1EwMjJOVlZyN3JiQy1NZFhuNUVVX1JzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl
LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVegMA0G
CSqGSIb3DQEBCwUAA4IBAQC6KXFDPF86m+lyCS5fBtLV+o3JbnkZg4nLlSb5s6Mt
Af/wTkRLWFxGKqlpRRlbtiOmehpcE5Ta04WOwpjXnUBtyNaa5aQFbUfg3pLjz6tQ
4E0ONi+jsqljXXitd8Q8XTvMwrBPZPTSxxto575AZyy7rpuOXGevWJnmozz7++pK
diINapi86XlaH93w9OQX3KscA/LEIAknCoI3GbfgS7DPHi5/j3YVOIwxjY0k2j+x
8TjdUJ71UApfS9ck5ePehEgueCYp88WPGUDlhlq+60MR64f2sCTy//i9gzdr8qPX
ieg/v14qwoQlw/5etq3wGFT8E7mA3MQrreUuNVpf5083
-----END CERTIFICATE-----
Generated at Fri Dec 8 12:35:31 2023 by rpki-client on console-ams.rpki-client.org