Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/LIupUw_yab2ECAk_P2O4mJfZ-9M.roa
File: LIupUw_yab2ECAk_P2O4mJfZ-9M.roa (raw, json)
Hash identifier: 3drgPRzuZ1z4QCnPf5fw0tZZUun13Fk1Ff1GSkEsQJU=
Subject key identifier: 2C:8B:A9:53:0F:F2:69:BD:84:08:09:3F:3F:63:B8:98:97:D9:FB:D3
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018572035FBBED0C0C65E2D1A68448F07F7A
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/LIupUw_yab2ECAk_P2O4mJfZ-9M.roa
Signing time: Mon 02 Jan 2023 10:25:01 +0000
ROA not before: Mon 02 Jan 2023 10:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44094
IP address blocks: 45.84.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:5f:bb:ed:0c:0c:65:e2:d1:a6:84:48:f0:7f:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Jan 2 10:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2c8ba9530ff269bd8408093f3f63b89897d9fbd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4c:2d:1f:39:53:a7:f9:5a:f2:09:5a:89:24:
0b:34:96:9c:54:70:de:e3:70:c2:0a:2f:78:21:98:
50:31:cf:c9:2c:dc:b0:e2:6f:e7:e5:e6:b5:73:a5:
26:8d:bd:ec:14:37:39:85:65:9b:8e:59:95:c6:c1:
26:77:8b:bb:91:57:33:93:d5:94:1f:03:19:11:78:
c3:51:b0:d0:82:da:f7:df:e9:ae:69:44:1d:69:35:
2c:2e:96:d0:ad:a3:4d:74:99:42:d3:f5:cb:34:39:
46:f8:b1:1e:78:65:95:3a:54:c0:64:b0:92:38:1a:
c5:71:66:15:f9:50:c1:6f:67:d5:3e:2e:1d:04:25:
04:b3:0e:3f:76:6c:b2:18:52:33:a2:0e:fb:6a:b6:
45:97:08:17:6f:82:ee:f6:42:80:c9:2e:bf:1f:83:
b3:67:94:3a:f8:b1:0e:b8:6c:80:76:8c:11:e9:02:
5f:bb:2f:11:7e:7b:9f:0e:b4:40:b1:ec:bd:21:4d:
fd:88:ec:de:54:a1:85:16:ab:63:75:b5:b8:70:f0:
57:ab:ad:83:ba:ba:9c:e8:cc:3d:84:59:67:ed:bd:
50:e0:99:d6:e1:f0:af:c6:2e:9b:2e:d7:60:64:f7:
87:4d:ea:d9:33:94:99:bf:55:0c:32:77:2e:26:f6:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8B:A9:53:0F:F2:69:BD:84:08:09:3F:3F:63:B8:98:97:D9:FB:D3
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/LIupUw_yab2ECAk_P2O4mJfZ-9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.1.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:6d:bb:54:55:df:e9:43:5c:3f:79:d4:2a:99:2e:9b:f4:af:
44:bc:cb:ad:4e:9e:a8:7b:e3:0b:4a:14:84:0c:5e:98:72:a4:
0f:6a:3e:ff:1b:54:59:36:6b:42:1f:32:92:de:38:f3:79:9e:
12:b5:16:7c:a0:42:1c:96:2a:df:50:00:0f:36:b4:ce:e4:f9:
1f:c7:e1:f8:17:79:18:01:8e:9f:32:eb:cc:01:b7:a5:c8:a5:
6c:68:b0:6f:a6:56:15:a4:da:33:21:51:bc:22:2e:98:ae:97:
81:a6:24:c2:7a:9a:b7:00:ad:11:34:1c:2c:5f:9a:bd:2b:d9:
30:ca:f3:ef:8d:e6:25:0f:ec:c0:89:c2:26:c9:f6:e2:71:1c:
d0:4b:fc:a3:44:3f:57:2b:15:20:fe:bd:66:c3:67:f4:ab:d6:
c9:8b:a4:e2:62:64:5e:8b:28:b8:fb:84:32:06:a2:6d:96:fd:
95:12:b4:63:15:14:08:04:63:44:26:26:48:25:e9:45:4f:d1:
57:fe:e4:30:b0:21:b1:c9:85:5e:cd:ac:8b:18:e7:d5:ee:07:
78:e7:ac:e8:ce:d6:bd:e1:f4:c2:37:76:78:b8:53:34:12:db:
47:4b:2c:64:ee:c5:99:69:b7:01:b6:d4:b7:c5:fe:3c:e2:11:
f5:57:0e:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyA1+77QwMZeLRpoRI8H96MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjMwMTAyMTAyNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzhiYTk1MzBmZjI2OWJkODQwODA5M2YzZjYzYjg5ODk3ZDlmYmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0wtHzlTp/la8glaiSQLNJacVHDe
43DCCi94IZhQMc/JLNyw4m/n5ea1c6Umjb3sFDc5hWWbjlmVxsEmd4u7kVczk9WU
HwMZEXjDUbDQgtr33+muaUQdaTUsLpbQraNNdJlC0/XLNDlG+LEeeGWVOlTAZLCS
OBrFcWYV+VDBb2fVPi4dBCUEsw4/dmyyGFIzog77arZFlwgXb4Lu9kKAyS6/H4Oz
Z5Q6+LEOuGyAdowR6QJfuy8RfnufDrRAsey9IU39iOzeVKGFFqtjdbW4cPBXq62D
urqc6Mw9hFln7b1Q4JnW4fCvxi6bLtdgZPeHTerZM5SZv1UMMncuJvYEswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCyLqVMP8mm9hAgJPz9juJiX2fvTMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvTEl1cFV3X3lhYjJFQ0FrX1AyTzRtSmZaLTlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVQBMA0G
CSqGSIb3DQEBCwUAA4IBAQCqbbtUVd/pQ1w/edQqmS6b9K9EvMutTp6oe+MLShSE
DF6YcqQPaj7/G1RZNmtCHzKS3jjzeZ4StRZ8oEIclirfUAAPNrTO5Pkfx+H4F3kY
AY6fMuvMAbelyKVsaLBvplYVpNozIVG8Ii6YrpeBpiTCepq3AK0RNBwsX5q9K9kw
yvPvjeYlD+zAicImyfbicRzQS/yjRD9XKxUg/r1mw2f0q9bJi6TiYmReiyi4+4Qy
BqJtlv2VErRjFRQIBGNEJiZIJelFT9FX/uQwsCGxyYVezayLGOfV7gd456zozta9
4fTCN3Z4uFM0EttHSyxk7sWZabcBttS3xf484hH1Vw4n
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:17 2024 by rpki-client on console-ams.rpki-client.org