Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/_XJwFFvQ5Aot-fx6gahCrGtfNqk.roa
File: _XJwFFvQ5Aot-fx6gahCrGtfNqk.roa (raw, json)
Hash identifier: 6bw2/3UjAeo46azZ/61j739G5IE6rAEN8MrCrG6v1mE=
Subject key identifier: FD:72:70:14:5B:D0:E4:0A:2D:F9:FC:7A:81:A8:42:AC:6B:5F:36:A9
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 0185E2EA31886808916EFAD6365D72B45A5D
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/_XJwFFvQ5Aot-fx6gahCrGtfNqk.roa
Signing time: Tue 24 Jan 2023 08:34:36 +0000
ROA not before: Tue 24 Jan 2023 08:34:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59651
IP address blocks: 45.155.165.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Jan 2023 09:04:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e2:ea:31:88:68:08:91:6e:fa:d6:36:5d:72:b4:5a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jan 24 08:34:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd7270145bd0e40a2df9fc7a81a842ac6b5f36a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:41:a3:0f:c2:0e:f9:db:44:b7:f9:f1:e2:
14:61:67:f7:8b:0a:18:34:58:c5:6f:9c:05:8b:0d:
13:71:51:3c:8a:42:83:e8:51:73:27:65:7a:68:e0:
f0:3e:52:86:47:d7:31:82:39:1c:98:96:91:17:b7:
bb:19:6f:e9:4d:1a:c0:2f:a5:36:13:94:1c:17:f0:
33:d6:69:3b:39:d8:b4:35:e9:ac:82:f7:bc:fe:00:
98:d9:15:b8:4c:d0:1c:1e:bb:0b:4d:a8:9a:c1:91:
82:a8:d6:b4:90:90:67:25:58:bc:78:74:9a:57:3e:
1c:84:9a:4c:a8:0d:14:4f:9c:46:a3:fd:10:34:bd:
81:3e:2d:08:97:04:7d:98:db:71:a4:ff:e1:cd:45:
44:a4:53:43:7b:d3:84:4a:26:14:58:b1:22:cf:dd:
a1:9d:a6:1f:02:c9:42:99:97:e3:b6:57:f2:f7:4f:
f0:03:19:a1:0b:56:00:26:c2:ee:6a:27:3d:a6:24:
3c:86:3d:09:34:ff:a3:9e:df:5c:e5:8d:38:07:b6:
c5:1b:8d:40:cb:24:6f:de:0f:a7:50:3b:da:1e:e9:
33:8c:8e:52:55:7f:b8:61:07:01:81:37:67:fd:73:
f6:cf:d0:8a:95:48:d7:58:11:ea:46:62:f1:1a:8b:
e4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:72:70:14:5B:D0:E4:0A:2D:F9:FC:7A:81:A8:42:AC:6B:5F:36:A9
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/_XJwFFvQ5Aot-fx6gahCrGtfNqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.165.0/24
Signature Algorithm: sha256WithRSAEncryption
55:33:8b:f1:b5:9d:db:83:2d:86:fb:25:d0:51:25:7b:e1:54:
fe:5a:61:f4:72:4d:77:62:1d:c2:0b:5a:03:a4:40:ab:bc:a0:
89:b6:90:e1:79:27:47:41:3a:02:15:47:d6:68:7a:72:c2:bc:
8d:47:6d:38:ae:52:d9:77:c0:9b:3e:47:49:be:9a:c7:f6:6c:
d6:d5:e4:ab:32:e2:5f:4a:2b:97:90:51:0b:ef:dc:39:86:ae:
ca:ba:44:5c:4a:09:d5:7f:54:1d:6e:ec:72:0c:96:3d:3b:42:
b8:57:c9:27:aa:65:c7:23:bc:06:f9:52:45:48:c5:fb:7a:d4:
7c:75:ee:e7:22:5f:16:0b:c8:b0:47:cc:89:e7:1b:d9:b6:7f:
04:34:a0:81:b6:fe:e4:55:26:9c:9f:89:bf:f2:aa:79:2d:63:
b4:b2:2c:e5:fa:16:73:d9:f9:72:ad:fb:95:99:cb:1c:bf:7c:
ac:e0:8a:d4:a1:4b:76:19:b1:e7:c1:41:d8:07:bb:0a:0f:e6:
3b:5a:8c:8d:13:69:c6:af:16:e5:e6:c2:11:06:d3:c5:36:f8:
a5:e8:29:b2:dc:d3:cd:db:4e:e7:f8:fa:cd:90:19:15:49:6c:
c9:1d:11:c2:f8:6b:17:4c:45:2a:48:d4:a5:75:68:dc:8d:34:
1d:bf:e1:89
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYXi6jGIaAiRbvrWNl1ytFpdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3
Y2Q0MjMwHhcNMjMwMTI0MDgzNDM2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDcyNzAxNDViZDBlNDBhMmRmOWZjN2E4MWE4NDJhYzZiNWYzNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvtBow/CDvnbRLf58eIUYWf3iwoY
NFjFb5wFiw0TcVE8ikKD6FFzJ2V6aODwPlKGR9cxgjkcmJaRF7e7GW/pTRrAL6U2
E5QcF/Az1mk7Odi0Nemsgve8/gCY2RW4TNAcHrsLTaiawZGCqNa0kJBnJVi8eHSa
Vz4chJpMqA0UT5xGo/0QNL2BPi0IlwR9mNtxpP/hzUVEpFNDe9OESiYUWLEiz92h
naYfAslCmZfjtlfy90/wAxmhC1YAJsLuaic9piQ8hj0JNP+jnt9c5Y04B7bFG41A
yyRv3g+nUDvaHukzjI5SVX+4YQcBgTdn/XP2z9CKlUjXWBHqRmLxGovk3wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFP1ycBRb0OQKLfn8eoGoQqxrXzapMB8GA1UdIwQY
MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli
LWExYjdjZWVmYTE2Yy8xL19YSndGRnZRNUFvdC1meDZnYWhDckd0Zk5xay5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjliLWExYjdjZWVmYTE2
Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtm6Uw
DQYJKoZIhvcNAQELBQADggEBAFUzi/G1nduDLYb7JdBRJXvhVP5aYfRyTXdiHcIL
WgOkQKu8oIm2kOF5J0dBOgIVR9ZoenLCvI1HbTiuUtl3wJs+R0m+msf2bNbV5Ksy
4l9KK5eQUQvv3DmGrsq6RFxKCdV/VB1u7HIMlj07QrhXySeqZccjvAb5UkVIxft6
1Hx17uciXxYLyLBHzInnG9m2fwQ0oIG2/uRVJpyfib/yqnktY7SyLOX6FnPZ+XKt
+5WZyxy/fKzgitShS3YZsefBQdgHuwoP5jtajI0TacavFuXmwhEG08U2+KXoKbLc
083bTuf4+s2QGRVJbMkdEcL4axdMRSpI1KV1aNyNNB2/4Yk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:55 2024 by rpki-client on console-fra.rpki-client.org