Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/_G9tGEV07Ih9R4Xlsh2xBTXzi-A.roa
File: _G9tGEV07Ih9R4Xlsh2xBTXzi-A.roa (raw, json)
Hash identifier: pePAz99jm5jF3yS4eptsyU2jzY3qaTA/guIXcq3a7/o=
Subject key identifier: FC:6F:6D:18:45:74:EC:88:7D:47:85:E5:B2:1D:B1:05:35:F3:8B:E0
Certificate issuer: /CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Certificate serial: 0187CE504EA77D71EBCC991E101CFD2E6AEC
Authority key identifier: 49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/_G9tGEV07Ih9R4Xlsh2xBTXzi-A.roa
Signing time: Sat 29 Apr 2023 18:39:41 +0000
ROA not before: Sat 29 Apr 2023 18:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51889
IP address blocks: 45.147.76.0/24 maxlen: 24
45.147.77.0/24 maxlen: 24
45.147.78.0/23 maxlen: 23
45.147.78.0/24 maxlen: 24
45.147.76.0/22 maxlen: 22
45.147.76.0/23 maxlen: 23
45.147.79.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ce:50:4e:a7:7d:71:eb:cc:99:1e:10:1c:fd:2e:6a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fe5b282b1c7db00f67bb4a13d9f79520508b7
Validity
Not Before: Apr 29 18:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc6f6d184574ec887d4785e5b21db10535f38be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:91:cb:40:09:bc:68:13:22:63:93:6f:68:
af:32:74:17:51:74:1c:d4:e0:38:c9:b8:02:58:30:
54:d0:14:92:d9:ec:2c:89:36:da:ef:50:cb:84:08:
22:d3:e1:27:15:86:1b:ef:c3:3d:cd:e0:42:fa:40:
7e:a2:ae:80:aa:70:bb:31:10:ad:f8:3a:ab:f6:e8:
67:94:7e:9d:ed:90:71:63:3e:f2:0e:56:9d:09:a1:
cb:fd:f1:58:3a:92:75:2e:88:c1:ce:5a:af:2f:0a:
31:2a:ec:eb:43:38:a6:ef:d7:b1:40:f8:e6:a8:33:
ec:4e:3e:6c:74:1b:ff:43:e4:82:58:bf:61:1f:2d:
f7:d1:b1:97:30:90:72:cf:50:41:26:4a:9d:a0:7a:
1e:ae:4f:63:5e:13:51:7b:b4:5d:ba:2a:49:3c:aa:
c0:3c:71:e5:ee:34:97:5f:16:02:18:13:38:75:61:
f9:04:cc:15:e5:78:79:63:fb:c2:a3:82:5e:df:09:
46:c9:58:cc:19:fb:f4:25:b3:a5:0b:b5:ac:29:e7:
cb:57:e7:c6:6c:52:6c:48:8e:8f:4f:31:a5:d4:cb:
b2:c6:37:93:32:a5:57:a9:43:ef:6d:ae:75:8d:91:
a2:d3:4b:ea:c0:12:d7:c0:72:39:b8:c4:b1:83:e9:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6F:6D:18:45:74:EC:88:7D:47:85:E5:B2:1D:B1:05:35:F3:8B:E0
X509v3 Authority Key Identifier:
keyid:49:8F:E5:B2:82:B1:C7:DB:00:F6:7B:B4:A1:3D:9F:79:52:05:08:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_lsoKxx9sA9nu0oT2feVIFCLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/_G9tGEV07Ih9R4Xlsh2xBTXzi-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/384f29-fd4d-436a-b85b-00403b64055a/1/SY_lsoKxx9sA9nu0oT2feVIFCLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.76.0/22
Signature Algorithm: sha256WithRSAEncryption
11:69:1d:cf:a5:55:67:b5:ef:84:b0:34:02:13:14:6a:68:17:
39:e6:e1:e9:68:63:f7:b6:20:64:42:56:02:c2:48:20:af:5e:
3a:5b:8f:c1:b7:70:03:e7:fd:d4:24:9a:a0:4a:c6:78:6e:b4:
5d:25:c5:96:63:04:13:39:cc:b2:bb:ef:9b:78:ab:ad:a8:a6:
dd:5e:10:54:8d:7a:05:ae:06:aa:d4:23:c1:9e:25:c6:bb:dd:
aa:04:23:4d:de:dc:16:b4:c6:59:ac:6f:22:27:19:eb:03:40:
a5:40:dc:a1:aa:7f:c1:af:4e:92:d2:cf:9e:f5:2f:24:bb:0e:
94:d3:81:ed:ec:ee:66:ca:36:3e:64:d3:54:97:cb:8b:7c:d2:
58:0b:ac:aa:f2:3a:a5:92:ec:93:54:76:06:01:4e:87:68:c5:
4d:9e:c9:de:2f:90:ca:b7:01:ff:01:52:ea:05:4b:f8:22:94:
66:c4:b0:5d:12:76:af:95:11:3b:5f:9e:66:77:09:7c:3f:ce:
40:69:f8:78:8c:b4:32:2e:ef:e4:b9:8b:52:e6:a2:ca:d0:b8:
0c:28:8f:52:6a:fa:77:25:cc:93:83:54:2c:8a:c5:80:8f:d0:
e9:3d:d9:7d:06:3c:ed:a5:9c:f1:61:04:aa:9b:11:c6:b0:c9:
08:fb:59:d2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfOUE6nfXHrzJkeEBz9LmrsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OGZlNWIyODJiMWM3ZGIwMGY2N2JiNGExM2Q5Zjc5NTIw
NTA4YjcwHhcNMjMwNDI5MTgzOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzZmNmQxODQ1NzRlYzg4N2Q0Nzg1ZTViMjFkYjEwNTM1ZjM4YmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhmRy0AJvGgTImOTb2ivMnQXUXQc
1OA4ybgCWDBU0BSS2ewsiTba71DLhAgi0+EnFYYb78M9zeBC+kB+oq6AqnC7MRCt
+Dqr9uhnlH6d7ZBxYz7yDladCaHL/fFYOpJ1LojBzlqvLwoxKuzrQzim79exQPjm
qDPsTj5sdBv/Q+SCWL9hHy330bGXMJByz1BBJkqdoHoerk9jXhNRe7RduipJPKrA
PHHl7jSXXxYCGBM4dWH5BMwV5Xh5Y/vCo4Je3wlGyVjMGfv0JbOlC7WsKefLV+fG
bFJsSI6PTzGl1MuyxjeTMqVXqUPvba51jZGi00vqwBLXwHI5uMSxg+nHBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPxvbRhFdOyIfUeF5bIdsQU184vgMB8GA1UdIwQY
MBaAFEmP5bKCscfbAPZ7tKE9n3lSBQi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWIt
MDA0MDNiNjQwNTVhLzEvX0c5dEdFVjA3SWg5UjRYbHNoMnhCVFh6aS1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8zODRmMjktZmQ0ZC00MzZhLWI4NWItMDA0MDNiNjQwNTVh
LzEvU1lfbHNvS3h4OXNBOW51MG9UMmZlVklGQ0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZNMMA0G
CSqGSIb3DQEBCwUAA4IBAQARaR3PpVVnte+EsDQCExRqaBc55uHpaGP3tiBkQlYC
wkggr146W4/Bt3AD5/3UJJqgSsZ4brRdJcWWYwQTOcyyu++beKutqKbdXhBUjXoF
rgaq1CPBniXGu92qBCNN3twWtMZZrG8iJxnrA0ClQNyhqn/Br06S0s+e9S8kuw6U
04Ht7O5myjY+ZNNUl8uLfNJYC6yq8jqlkuyTVHYGAU6HaMVNnsneL5DKtwH/AVLq
BUv4IpRmxLBdEnavlRE7X55mdwl8P85Aafh4jLQyLu/kuYtS5qLK0LgMKI9Savp3
JcyTg1QsisWAj9DpPdl9BjztpZzxYQSqmxHGsMkI+1nS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:23 2024 by rpki-client on console-ams.rpki-client.org