Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/rJvkpmGqVIXLYsNzL4v_1yitck0.roa
File: rJvkpmGqVIXLYsNzL4v_1yitck0.roa (raw, json)
Hash identifier: q81HD+k9l9B5jqppd8/m+E+nQPL+DeKlEDOzKSl4JS4=
Subject key identifier: AC:9B:E4:A6:61:AA:54:85:CB:62:C3:73:2F:8B:FF:D7:28:AD:72:4D
Certificate issuer: /CN=78356c6a831680e9b8b7c95514953007a9407e87
Certificate serial: 0188FCF8B0496AA5A09A615594FD71B4415E
Authority key identifier: 78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/rJvkpmGqVIXLYsNzL4v_1yitck0.roa
Signing time: Tue 27 Jun 2023 13:08:56 +0000
ROA not before: Tue 27 Jun 2023 13:08:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34997
IP address blocks: 45.87.156.0/23 maxlen: 24
45.87.156.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:f8:b0:49:6a:a5:a0:9a:61:55:94:fd:71:b4:41:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78356c6a831680e9b8b7c95514953007a9407e87
Validity
Not Before: Jun 27 13:08:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac9be4a661aa5485cb62c3732f8bffd728ad724d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:30:c9:8a:23:6c:4e:06:a5:cc:b8:37:67:d7:
2a:cc:45:8c:89:27:5b:6e:1c:23:dc:ee:a6:a2:c7:
0f:a9:32:33:6a:d4:62:e2:9d:85:7d:9e:34:65:ed:
66:ca:f5:ca:07:0a:f9:0b:5a:13:d0:53:2d:37:a8:
17:ab:59:e1:f4:44:10:3f:24:36:79:80:0e:af:a1:
f8:86:7d:0c:1a:a9:3d:11:ca:f3:92:f3:fc:2b:19:
1c:fc:35:88:9f:03:05:d2:90:4d:3a:37:9c:5e:c3:
3a:2f:ab:c7:fa:8f:81:b4:fc:7c:0e:44:bf:4b:a1:
2e:cb:66:ef:81:12:70:23:0a:9f:8f:c1:0a:13:5c:
36:6d:fe:1d:4e:08:91:be:62:77:1a:45:70:8e:6f:
75:54:3c:9a:11:d6:74:4e:84:ea:ff:90:e8:e2:a3:
13:55:03:1e:99:e5:15:a3:d1:31:27:01:89:bd:d4:
3c:8c:c3:d2:39:57:a3:5e:e2:37:64:fd:76:27:94:
ae:db:22:dc:90:36:49:4c:de:d1:93:53:e3:46:9d:
1d:28:96:f6:e8:7d:d5:3d:26:d6:ac:28:dd:41:dd:
07:35:62:73:61:51:7d:4c:ec:05:9f:c7:94:97:0d:
39:b2:e8:0d:88:a9:46:2c:82:92:c2:ea:e7:ab:2d:
10:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9B:E4:A6:61:AA:54:85:CB:62:C3:73:2F:8B:FF:D7:28:AD:72:4D
X509v3 Authority Key Identifier:
keyid:78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/rJvkpmGqVIXLYsNzL4v_1yitck0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.156.0/22
Signature Algorithm: sha256WithRSAEncryption
ae:a5:f7:0d:9b:9c:0d:b9:56:aa:d6:98:2c:65:b2:9f:c9:69:
14:8f:cf:c3:47:35:95:03:36:99:77:ca:5f:c7:3c:b3:28:30:
48:aa:1f:39:72:9c:48:b2:cb:31:0a:b1:ca:16:60:de:0c:69:
a8:47:c2:f8:ca:c3:ed:74:18:e7:7b:30:f8:8d:29:71:38:92:
de:ed:d2:3a:1f:10:f1:e2:4b:36:ef:e6:42:d5:64:1d:d2:c1:
68:84:23:65:0e:1b:a6:7c:ae:5d:2c:d6:75:30:43:c1:5f:b6:
55:5c:88:3c:95:e6:9c:54:13:ca:02:9d:6a:3e:37:ba:94:b4:
d7:36:f6:e8:c7:5f:6b:8e:6d:b5:61:8c:4e:80:d3:8f:98:91:
c1:a4:f9:39:cf:8f:8b:a9:25:e0:63:bf:70:55:64:8a:19:03:
e3:21:c5:4b:d0:c1:ba:89:e1:17:04:0f:48:a5:e2:56:32:39:
ed:a7:65:fe:38:93:a6:e8:37:19:ea:3f:32:1e:f6:f0:3b:c8:
06:4c:06:db:c1:5b:2f:3d:cd:84:99:bd:84:f3:92:d3:a2:38:
21:57:dc:4b:cd:12:c6:f9:4a:95:7b:d1:ce:14:bf:c4:09:5c:
bb:ef:54:d5:82:50:3b:59:02:ba:63:4b:34:fc:d8:ab:c4:21:
a5:c0:a7:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYj8+LBJaqWgmmFVlP1xtEFeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4MzU2YzZhODMxNjgwZTliOGI3Yzk1NTE0OTUzMDA3YTk0
MDdlODcwHhcNMjMwNjI3MTMwODU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzliZTRhNjYxYWE1NDg1Y2I2MmMzNzMyZjhiZmZkNzI4YWQ3MjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTDJiiNsTgalzLg3Z9cqzEWMiSdb
bhwj3O6moscPqTIzatRi4p2FfZ40Ze1myvXKBwr5C1oT0FMtN6gXq1nh9EQQPyQ2
eYAOr6H4hn0MGqk9EcrzkvP8Kxkc/DWInwMF0pBNOjecXsM6L6vH+o+BtPx8DkS/
S6Euy2bvgRJwIwqfj8EKE1w2bf4dTgiRvmJ3GkVwjm91VDyaEdZ0ToTq/5Do4qMT
VQMemeUVo9ExJwGJvdQ8jMPSOVejXuI3ZP12J5Su2yLckDZJTN7Rk1PjRp0dKJb2
6H3VPSbWrCjdQd0HNWJzYVF9TOwFn8eUlw05sugNiKlGLIKSwurnqy0QaQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKyb5KZhqlSFy2LDcy+L/9corXJNMB8GA1UdIwQY
MBaAFHg1bGqDFoDpuLfJVRSVMAepQH6HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZURWc2FvTVdnT200dDhsVkZKVXdCNmxBZm9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC84ZDkxMzYtMWNiMi00MzQ5LWFiODYt
NWRjMzkyZGU2MzdiLzEvckp2a3BtR3FWSVhMWXNOekw0dl8xeWl0Y2swLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC84ZDkxMzYtMWNiMi00MzQ5LWFiODYtNWRjMzkyZGU2Mzdi
LzEvZURWc2FvTVdnT200dDhsVkZKVXdCNmxBZm9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVecMA0G
CSqGSIb3DQEBCwUAA4IBAQCupfcNm5wNuVaq1pgsZbKfyWkUj8/DRzWVAzaZd8pf
xzyzKDBIqh85cpxIsssxCrHKFmDeDGmoR8L4ysPtdBjnezD4jSlxOJLe7dI6HxDx
4ks27+ZC1WQd0sFohCNlDhumfK5dLNZ1MEPBX7ZVXIg8leacVBPKAp1qPje6lLTX
Nvbox19rjm21YYxOgNOPmJHBpPk5z4+LqSXgY79wVWSKGQPjIcVL0MG6ieEXBA9I
peJWMjntp2X+OJOm6DcZ6j8yHvbwO8gGTAbbwVsvPc2Emb2E85LTojghV9xLzRLG
+UqVe9HOFL/ECVy771TVglA7WQK6Y0s0/NirxCGlwKct
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:24 2024 by rpki-client on console-fra.rpki-client.org