Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/vXRr-bI4S2CwRqzxB_P_mNszd6M.roa
File: vXRr-bI4S2CwRqzxB_P_mNszd6M.roa (raw, json)
Hash identifier: vejMNqhJAsOMh96mU2AAUkDX2OKYwmRPIIuVC4m+UX4=
Subject key identifier: BD:74:6B:F9:B2:38:4B:60:B0:46:AC:F1:07:F3:FF:98:DB:33:77:A3
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01856F4B624910AABF4E3F1A98C2B7858908
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/vXRr-bI4S2CwRqzxB_P_mNszd6M.roa
Signing time: Sun 01 Jan 2023 21:44:49 +0000
ROA not before: Sun 01 Jan 2023 21:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3215
IP address blocks: 45.139.230.0/24 maxlen: 24
45.139.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 27 Jan 2023 11:26:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:62:49:10:aa:bf:4e:3f:1a:98:c2:b7:85:89:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 21:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd746bf9b2384b60b046acf107f3ff98db3377a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:14:4b:98:83:3b:f3:cb:88:7a:8a:7e:25:
14:11:ff:1f:95:a8:02:ed:ad:20:33:06:c9:e6:ab:
b1:72:0b:55:a7:ec:c0:01:01:91:5a:2c:8d:74:75:
f3:2a:6b:04:f8:a8:c1:32:2e:71:09:dd:94:05:b8:
93:41:8f:28:65:6d:10:ff:d0:66:30:4c:5b:b3:ec:
05:93:93:3b:18:02:41:56:5f:9c:04:43:69:b7:cf:
8b:9d:23:31:58:11:b2:fc:62:70:dc:ce:bd:81:08:
c8:7d:01:fc:3c:78:88:76:59:9c:dd:1d:87:0b:0c:
30:8e:c9:33:51:0e:e0:1f:14:ff:d9:60:af:3e:a4:
d9:43:53:a7:2a:f5:30:e7:e5:cf:be:57:4f:31:57:
2f:c7:cc:2d:76:62:ae:92:02:c0:7f:2e:90:df:f7:
0b:91:71:87:06:bd:5b:42:cf:ea:71:87:6c:3f:f2:
ee:3d:60:7e:ba:10:6b:1e:21:94:ac:88:83:4b:02:
d5:1e:31:7b:a0:9a:3a:ba:9c:44:64:1a:68:d1:00:
a7:fa:40:1b:1e:ca:03:7c:05:6d:7e:72:4d:89:26:
0d:af:bb:1d:fd:c5:33:ac:8c:2b:5a:d7:44:38:b3:
f5:90:2d:ec:00:dd:aa:1e:9c:5d:a0:d0:82:53:1e:
87:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:74:6B:F9:B2:38:4B:60:B0:46:AC:F1:07:F3:FF:98:DB:33:77:A3
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/vXRr-bI4S2CwRqzxB_P_mNszd6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.228.0/24
45.139.230.0/24
Signature Algorithm: sha256WithRSAEncryption
08:4a:c1:d0:09:5e:8d:bc:47:17:35:d7:02:8b:34:bd:b9:bd:
93:c0:37:39:02:c2:fd:56:0c:53:8d:b3:cc:85:13:eb:f1:36:
86:ed:94:fe:f0:7d:7a:98:ed:81:e0:73:2d:cd:03:30:b8:8a:
a8:4f:d6:ba:53:dc:3c:e0:8e:03:37:fd:43:bb:7f:fc:99:29:
5f:ab:ad:ce:02:95:10:09:55:18:78:de:8f:a0:1e:4d:5b:85:
57:23:62:bf:9b:25:1c:de:f4:27:a2:c0:05:35:14:de:a4:1f:
8d:46:23:06:9d:97:14:18:45:ce:90:cf:b4:f2:8b:49:24:62:
27:2f:30:0a:f5:c9:c6:1b:2d:0a:52:cf:4b:a1:7a:61:14:3e:
bf:5c:8d:7c:a4:3e:a6:2a:09:dc:a1:aa:bf:82:35:a6:ea:41:
e0:f4:75:75:35:3f:58:7f:83:2c:b9:48:5e:39:a0:6d:98:ea:
30:8a:52:c8:d6:b8:b3:e5:eb:f2:2f:da:e4:35:4a:96:8e:4b:
ee:35:b4:39:84:e8:ca:35:6d:b3:ff:71:ac:04:30:70:15:8b:
2b:96:44:f2:75:11:16:f9:f7:b2:29:fd:5b:ec:f1:00:5d:03:
5a:95:db:67:79:0c:ef:15:d4:79:1b:18:db:1d:91:d8:45:a0:
15:97:26:3d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvS2JJEKq/Tj8amMK3hYkIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl
MTdjMjcwHhcNMjMwMTAxMjE0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDc0NmJmOWIyMzg0YjYwYjA0NmFjZjEwN2YzZmY5OGRiMzM3N2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAIUS5iDO/PLiHqKfiUUEf8flagC
7a0gMwbJ5quxcgtVp+zAAQGRWiyNdHXzKmsE+KjBMi5xCd2UBbiTQY8oZW0Q/9Bm
MExbs+wFk5M7GAJBVl+cBENpt8+LnSMxWBGy/GJw3M69gQjIfQH8PHiIdlmc3R2H
CwwwjskzUQ7gHxT/2WCvPqTZQ1OnKvUw5+XPvldPMVcvx8wtdmKukgLAfy6Q3/cL
kXGHBr1bQs/qcYdsP/LuPWB+uhBrHiGUrIiDSwLVHjF7oJo6upxEZBpo0QCn+kAb
HsoDfAVtfnJNiSYNr7sd/cUzrIwrWtdEOLP1kC3sAN2qHpxdoNCCUx6H2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL10a/myOEtgsEas8Qfz/5jbM3ejMB8GA1UdIwQY
MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It
ZDc4ZDU2MzFkN2Y2LzEvdlhSci1iSTRTMkN3UnF6eEJfUF9tTnN6ZDZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2
LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYvkAwQA
LYvmMA0GCSqGSIb3DQEBCwUAA4IBAQAISsHQCV6NvEcXNdcCizS9ub2TwDc5AsL9
VgxTjbPMhRPr8TaG7ZT+8H16mO2B4HMtzQMwuIqoT9a6U9w84I4DN/1Du3/8mSlf
q63OApUQCVUYeN6PoB5NW4VXI2K/myUc3vQnosAFNRTepB+NRiMGnZcUGEXOkM+0
8otJJGInLzAK9cnGGy0KUs9LoXphFD6/XI18pD6mKgncoaq/gjWm6kHg9HV1NT9Y
f4MsuUheOaBtmOowilLI1riz5evyL9rkNUqWjkvuNbQ5hOjKNW2z/3GsBDBwFYsr
lkTydREW+feyKf1b7PEAXQNaldtneQzvFdR5GxjbHZHYRaAVlyY9
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:55 2024 by rpki-client on console-fra.rpki-client.org