Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/PzoEh9FBWC32a-8jx10Tr9gsg-U.roa
File: PzoEh9FBWC32a-8jx10Tr9gsg-U.roa (raw, json)
Hash identifier: JLOXBb5sxoiP017IQpRyui5y95iPIvphWMylqHEtfSQ=
Subject key identifier: 3F:3A:04:87:D1:41:58:2D:F6:6B:EF:23:C7:5D:13:AF:D8:2C:83:E5
Certificate issuer: /CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Certificate serial: 01889ABB9E657405B424BFE45D882B9F854D
Authority key identifier: D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/PzoEh9FBWC32a-8jx10Tr9gsg-U.roa
Signing time: Thu 08 Jun 2023 11:19:27 +0000
ROA not before: Thu 08 Jun 2023 11:19:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201193
IP address blocks: 45.143.84.0/22 maxlen: 24
45.143.84.0/24 maxlen: 24
45.143.84.0/23 maxlen: 24
45.143.85.0/24 maxlen: 24
45.143.87.0/24 maxlen: 24
45.143.86.0/24 maxlen: 24
45.143.86.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 27 Jul 2023 10:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9a:bb:9e:65:74:05:b4:24:bf:e4:5d:88:2b:9f:85:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d94284b94325f5060f8a0e87c1be2827788f18f9
Validity
Not Before: Jun 8 11:19:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f3a0487d141582df66bef23c75d13afd82c83e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:90:96:a2:30:87:b8:c3:c3:ff:d6:a0:2d:85:
6e:d4:c8:37:a7:36:67:21:ef:17:3f:b0:13:0e:10:
ca:ab:78:ed:ff:48:9f:ee:79:4f:f9:2d:0a:1d:10:
35:9a:ed:c8:ee:7a:d7:40:9b:4e:5e:a7:a6:3a:a5:
34:1d:23:bc:fa:e8:9a:d6:ed:a4:c7:60:60:11:f8:
f4:83:ca:7b:c7:e2:2a:54:4b:36:05:b1:0d:80:0b:
45:df:b0:5f:ed:00:9c:65:61:a2:cd:72:a4:36:c6:
ea:58:06:0f:87:03:d3:79:29:a3:69:86:ca:07:f5:
7d:f9:17:17:ca:95:55:c7:23:32:b3:ee:b1:d7:d8:
28:d2:64:19:de:76:b4:58:b2:27:fe:8f:5b:03:a9:
1d:84:89:db:67:11:9d:15:f8:66:5b:56:ea:fb:58:
1a:05:69:08:92:5d:63:93:3e:66:f6:fe:f5:3e:86:
70:80:54:8e:af:48:4c:c3:12:f2:2e:d7:25:f6:9c:
f9:67:e0:97:d6:93:af:c9:66:c7:a0:01:7e:90:c7:
67:eb:a7:d7:c3:8c:fc:3e:81:9f:5b:67:32:72:21:
63:2b:dd:97:11:91:8c:74:e3:ec:73:76:f0:c1:10:
4c:55:79:66:7f:41:b7:2c:1f:a6:d5:a7:5f:89:b7:
cf:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3A:04:87:D1:41:58:2D:F6:6B:EF:23:C7:5D:13:AF:D8:2C:83:E5
X509v3 Authority Key Identifier:
keyid:D9:42:84:B9:43:25:F5:06:0F:8A:0E:87:C1:BE:28:27:78:8F:18:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/PzoEh9FBWC32a-8jx10Tr9gsg-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/a24095-0908-4884-9244-95d59465e9a8/1/2UKEuUMl9QYPig6Hwb4oJ3iPGPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.84.0/22
Signature Algorithm: sha256WithRSAEncryption
09:91:34:13:ac:b3:31:e2:3f:fa:7f:16:32:dd:08:0c:6e:41:
43:3b:9c:dd:6e:4b:4d:d3:3c:0a:41:a3:78:30:b9:04:1c:c9:
38:cc:af:92:87:d6:8b:33:19:ff:2f:c2:8b:cc:f8:49:cf:88:
90:06:d8:c3:c9:92:e4:42:d3:f2:ad:a0:41:a6:53:c4:5f:d8:
cb:98:6b:d3:7b:51:3f:f2:02:0d:4a:f9:e6:5f:f2:bc:17:d1:
3e:48:f3:8b:ed:46:1e:ff:23:6f:e8:21:21:43:0a:c0:df:5c:
4b:39:85:d5:09:61:45:13:18:64:4a:79:64:6a:c8:4f:8d:49:
75:60:9b:ad:a6:17:19:86:f1:1e:b9:73:e9:52:ac:57:d5:96:
00:22:a3:9b:6b:82:98:8b:60:4e:70:ba:bf:04:34:bb:64:f3:
67:37:19:e6:d4:25:77:b6:7f:03:91:bd:5a:80:5e:fa:0d:fe:
ad:ae:70:37:b1:03:51:d6:05:7e:fd:49:fa:22:e0:b9:63:eb:
bf:7c:aa:4e:ce:16:4f:71:f3:8a:58:01:47:b8:de:9a:8a:bc:
fb:e8:33:15:04:49:93:88:f5:3c:e3:79:e6:74:4d:9e:c2:44:
85:f6:df:6e:87:58:52:bb:d7:8a:ee:68:12:4d:8f:1f:7a:03:
1e:69:35:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYiau55ldAW0JL/kXYgrn4VNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NDI4NGI5NDMyNWY1MDYwZjhhMGU4N2MxYmUyODI3Nzg4
ZjE4ZjkwHhcNMjMwNjA4MTExOTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjNhMDQ4N2QxNDE1ODJkZjY2YmVmMjNjNzVkMTNhZmQ4MmM4M2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5CWojCHuMPD/9agLYVu1Mg3pzZn
Ie8XP7ATDhDKq3jt/0if7nlP+S0KHRA1mu3I7nrXQJtOXqemOqU0HSO8+uia1u2k
x2BgEfj0g8p7x+IqVEs2BbENgAtF37Bf7QCcZWGizXKkNsbqWAYPhwPTeSmjaYbK
B/V9+RcXypVVxyMys+6x19go0mQZ3na0WLIn/o9bA6kdhInbZxGdFfhmW1bq+1ga
BWkIkl1jkz5m9v71PoZwgFSOr0hMwxLyLtcl9pz5Z+CX1pOvyWbHoAF+kMdn66fX
w4z8PoGfW2cyciFjK92XEZGMdOPsc3bwwRBMVXlmf0G3LB+m1adfibfPFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD86BIfRQVgt9mvvI8ddE6/YLIPlMB8GA1UdIwQY
MBaAFNlChLlDJfUGD4oOh8G+KCd4jxj5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hMjQwOTUtMDkwOC00ODg0LTkyNDQt
OTVkNTk0NjVlOWE4LzEvUHpvRWg5RkJXQzMyYS04angxMFRyOWdzZy1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9hMjQwOTUtMDkwOC00ODg0LTkyNDQtOTVkNTk0NjVlOWE4
LzEvMlVLRXVVTWw5UVlQaWc2SHdiNG9KM2lQR1BrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY9UMA0G
CSqGSIb3DQEBCwUAA4IBAQAJkTQTrLMx4j/6fxYy3QgMbkFDO5zdbktN0zwKQaN4
MLkEHMk4zK+Sh9aLMxn/L8KLzPhJz4iQBtjDyZLkQtPyraBBplPEX9jLmGvTe1E/
8gINSvnmX/K8F9E+SPOL7UYe/yNv6CEhQwrA31xLOYXVCWFFExhkSnlkashPjUl1
YJutphcZhvEeuXPpUqxX1ZYAIqOba4KYi2BOcLq/BDS7ZPNnNxnm1CV3tn8Dkb1a
gF76Df6trnA3sQNR1gV+/Un6IuC5Y+u/fKpOzhZPcfOKWAFHuN6airz76DMVBEmT
iPU843nmdE2ewkSF9t9uh1hSu9eK7mgSTY8fegMeaTVI
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:41 2024 by rpki-client on console-ams.rpki-client.org