Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/rxjbcZjMChHiz_8NV8n-teCpyz8.roa
File: rxjbcZjMChHiz_8NV8n-teCpyz8.roa (raw, json)
Hash identifier: G6CLEXofMh6qI3V5bOz1zsZzlpitUnc6+ZFpiyIr5Og=
Subject key identifier: AF:18:DB:71:98:CC:0A:11:E2:CF:FF:0D:57:C9:FE:B5:E0:A9:CB:3F
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01856F4B6362CC69659CC27CA58BD018D4DE
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/rxjbcZjMChHiz_8NV8n-teCpyz8.roa
Signing time: Sun 01 Jan 2023 21:44:49 +0000
ROA not before: Sun 01 Jan 2023 21:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31122
IP address blocks: 45.139.229.0/24 maxlen: 24
45.139.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Jan 2023 13:44:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:63:62:cc:69:65:9c:c2:7c:a5:8b:d0:18:d4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 21:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af18db7198cc0a11e2cfff0d57c9feb5e0a9cb3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:47:77:2d:bf:4e:4d:3a:bc:a6:fa:0e:46:6e:
99:96:df:11:c4:10:29:5c:ec:ad:39:24:a9:96:d4:
9d:ef:82:09:f2:c8:fa:88:c9:8f:1b:75:28:0a:dc:
87:3f:ba:b8:18:93:15:94:fc:cc:57:ff:6b:78:e2:
29:51:aa:d4:8d:41:e1:40:bc:bf:0c:53:bc:af:d6:
2b:9b:07:56:a0:d7:f2:98:ea:5f:36:51:fd:b5:7d:
04:a0:23:fe:e0:13:6a:9a:c6:92:1d:4f:a3:31:78:
f8:2a:d9:c7:ad:26:f7:9e:37:10:a7:7d:9a:25:69:
9d:6c:41:1e:a4:6a:17:6c:d5:8a:53:fc:b9:ec:e9:
d5:75:49:18:fd:1b:3a:56:ac:e5:2e:cf:89:71:78:
5d:3c:24:29:22:54:bf:a1:61:b4:72:b0:6f:f7:13:
99:e8:6d:09:07:ab:42:4c:3e:07:b6:23:da:21:b5:
5e:f4:59:20:5d:3f:97:03:9d:3d:71:01:8b:52:f0:
d4:ba:bb:bc:26:40:75:cb:ef:72:4c:a8:d5:61:8d:
46:6d:ac:50:6d:1f:da:e5:90:d3:8d:e5:50:eb:ee:
24:5b:08:1d:0c:a1:6f:13:c2:21:1c:bb:b0:a7:03:
2e:a3:5d:fa:67:ae:60:61:f8:81:74:d2:fa:61:c9:
4b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:18:DB:71:98:CC:0A:11:E2:CF:FF:0D:57:C9:FE:B5:E0:A9:CB:3F
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/rxjbcZjMChHiz_8NV8n-teCpyz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.229.0/24
45.139.231.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:bc:ee:a4:ad:e1:c6:51:a1:12:dc:d0:d0:9a:df:e8:de:d1:
d9:f2:b1:1b:a0:22:a0:ee:81:3f:ab:56:02:9c:d4:f3:c0:10:
55:3a:f6:c1:3c:6b:57:78:5d:6b:f5:a6:d7:e2:bc:04:a5:cb:
82:1e:47:6f:ab:9b:94:63:52:c0:a7:9c:9c:f9:8e:05:32:50:
50:b1:b2:71:e1:c6:46:7f:47:f7:5c:f3:6b:d3:dc:82:80:31:
0e:e7:80:0c:d7:f6:4e:26:55:b2:db:6d:e6:5d:52:7b:49:3b:
82:77:ea:96:fc:b8:e6:7d:31:73:a3:8f:d7:44:49:dd:64:3b:
99:18:e5:fe:88:df:a2:d8:5f:10:7d:2a:3f:38:53:8a:41:6a:
0d:ea:cc:cf:e4:99:13:f1:ce:02:f6:29:9a:ed:bc:e7:18:2f:
79:cf:ea:8b:06:a0:a8:72:df:34:a3:5e:54:f6:a4:a0:84:c4:
fe:8e:73:c7:c0:4a:b8:62:75:d4:c8:bf:a6:d3:6a:f4:35:33:
e4:5e:22:a8:b3:43:5f:29:95:c7:a2:b9:01:cd:7b:ff:23:17:
5f:eb:32:9d:3a:b0:cd:6d:35:4c:30:34:0d:50:90:2e:7c:ca:
d2:36:c6:db:8c:b5:a0:5a:31:72:0a:c8:03:f4:5c:ed:aa:d2:
e8:1d:ae:47
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvS2NizGllnMJ8pYvQGNTeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl
MTdjMjcwHhcNMjMwMTAxMjE0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjE4ZGI3MTk4Y2MwYTExZTJjZmZmMGQ1N2M5ZmViNWUwYTljYjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUd3Lb9OTTq8pvoORm6Zlt8RxBAp
XOytOSSpltSd74IJ8sj6iMmPG3UoCtyHP7q4GJMVlPzMV/9reOIpUarUjUHhQLy/
DFO8r9YrmwdWoNfymOpfNlH9tX0EoCP+4BNqmsaSHU+jMXj4KtnHrSb3njcQp32a
JWmdbEEepGoXbNWKU/y57OnVdUkY/Rs6VqzlLs+JcXhdPCQpIlS/oWG0crBv9xOZ
6G0JB6tCTD4HtiPaIbVe9FkgXT+XA509cQGLUvDUuru8JkB1y+9yTKjVYY1GbaxQ
bR/a5ZDTjeVQ6+4kWwgdDKFvE8IhHLuwpwMuo136Z65gYfiBdNL6YclLAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFK8Y23GYzAoR4s//DVfJ/rXgqcs/MB8GA1UdIwQY
MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It
ZDc4ZDU2MzFkN2Y2LzEvcnhqYmNaak1DaEhpel84TlY4bi10ZUNweXo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2
LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYvlAwQA
LYvnMA0GCSqGSIb3DQEBCwUAA4IBAQCdvO6kreHGUaES3NDQmt/o3tHZ8rEboCKg
7oE/q1YCnNTzwBBVOvbBPGtXeF1r9abX4rwEpcuCHkdvq5uUY1LAp5yc+Y4FMlBQ
sbJx4cZGf0f3XPNr09yCgDEO54AM1/ZOJlWy223mXVJ7STuCd+qW/LjmfTFzo4/X
REndZDuZGOX+iN+i2F8QfSo/OFOKQWoN6szP5JkT8c4C9ima7bznGC95z+qLBqCo
ct80o15U9qSghMT+jnPHwEq4YnXUyL+m02r0NTPkXiKos0NfKZXHorkBzXv/Ixdf
6zKdOrDNbTVMMDQNUJAufMrSNsbbjLWgWjFyCsgD9FztqtLoHa5H
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:55 2024 by rpki-client on console-fra.rpki-client.org