Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/J8SXcA6f3AEfkBeaUdSwlWDFAak.roa
File: J8SXcA6f3AEfkBeaUdSwlWDFAak.roa (raw, json)
Hash identifier: XEgWoqZmXeXDv5jCPik4sZJ//auQjgFQPICMq+WFuIo=
Subject key identifier: 27:C4:97:70:0E:9F:DC:01:1F:90:17:9A:51:D4:B0:95:60:C5:01:A9
Certificate issuer: /CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Certificate serial: 01856FDDC98036985DEFDD5762942AE98DAC
Authority key identifier: A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/J8SXcA6f3AEfkBeaUdSwlWDFAak.roa
Signing time: Mon 02 Jan 2023 00:24:44 +0000
ROA not before: Mon 02 Jan 2023 00:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203714
IP address blocks: 45.134.62.0/23 maxlen: 23
45.134.62.0/24 maxlen: 24
45.134.60.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:dd:c9:80:36:98:5d:ef:dd:57:62:94:2a:e9:8d:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b2f4daed7bef2a6ab4bbb9aafac5654ddc53c1
Validity
Not Before: Jan 2 00:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27c497700e9fdc011f90179a51d4b09560c501a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3a:f5:4b:62:de:29:4a:53:c0:14:12:8c:55:
14:74:6e:0d:01:c3:6c:10:cb:07:de:c7:a2:5a:ba:
e1:b5:d2:7d:bb:1c:a0:b5:5f:2d:12:f9:43:61:9f:
f0:87:5c:a1:d1:f9:75:49:0e:f8:63:e1:5b:bf:20:
e8:bb:f1:63:04:b3:dd:5e:e8:79:e4:d4:9f:d4:fd:
d7:76:3b:c8:7b:4a:29:f5:d0:3f:4b:1e:61:75:31:
23:46:43:78:66:1d:20:28:24:be:5a:82:54:57:8a:
2b:3a:f0:7c:10:ff:da:c4:a5:a4:96:d9:63:59:67:
ea:c3:34:cf:d4:b3:53:95:1b:b1:31:d4:13:04:f9:
e9:57:1a:c6:b9:18:41:72:92:4d:fa:ce:7e:a7:c8:
48:72:06:68:24:dc:21:34:98:e5:5d:3b:62:07:a1:
68:a6:83:79:29:3e:e2:69:5c:18:63:b4:ef:c7:e9:
fc:fd:aa:0a:f6:ce:50:48:0f:6a:14:5a:c7:a1:87:
c4:17:54:0a:d8:3b:cc:50:a3:b5:bc:6a:af:b4:b9:
b3:d3:cc:8e:71:3e:85:76:87:e3:f4:28:9b:6a:21:
3e:63:0f:82:fa:f6:1b:ca:89:fa:6c:9e:03:0e:a1:
7c:76:14:b9:d9:f4:b3:39:54:00:77:b5:b0:52:4e:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C4:97:70:0E:9F:DC:01:1F:90:17:9A:51:D4:B0:95:60:C5:01:A9
X509v3 Authority Key Identifier:
keyid:A3:B2:F4:DA:ED:7B:EF:2A:6A:B4:BB:B9:AA:FA:C5:65:4D:DC:53:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7L02u177ypqtLu5qvrFZU3cU8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/J8SXcA6f3AEfkBeaUdSwlWDFAak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0730d1-c67b-435e-b329-d8310db97951/1/o7L02u177ypqtLu5qvrFZU3cU8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.60.0/22
Signature Algorithm: sha256WithRSAEncryption
65:c7:56:58:35:8a:b9:cc:10:1b:5e:3b:e0:e6:41:55:02:13:
8b:69:6f:83:87:35:51:bb:d5:18:2b:62:4f:44:8c:da:79:39:
c2:fc:68:9e:e2:80:3b:38:5b:cd:7b:51:10:b8:b3:34:0d:98:
4b:77:cb:de:e0:7c:9e:9d:97:18:aa:5f:ab:fb:69:80:79:c2:
0f:67:c2:96:33:4e:75:96:5d:a6:9c:cb:15:e0:71:30:71:16:
97:11:c1:49:70:2d:64:7b:f2:47:6b:a4:dc:35:48:42:c7:cb:
22:da:0d:40:ef:75:81:0c:22:63:73:cb:3c:82:c7:5e:a1:22:
f8:72:ea:3d:fb:97:cb:ce:6d:6c:8e:27:0b:d6:cd:66:08:7a:
bf:b8:fc:58:56:c2:30:66:09:c4:e9:64:e5:f4:8d:3e:74:6b:
7e:92:38:86:79:c6:b8:ef:75:ea:fb:f5:fd:6f:78:ef:93:07:
d6:7b:96:82:b3:86:fc:f8:cd:41:a2:5a:59:8a:a5:76:f2:b4:
d4:c1:bf:b1:28:e1:44:3e:83:4f:34:6d:0c:9a:38:8a:67:dc:
a0:a9:a2:ba:51:e9:ec:92:5e:c1:c0:5b:68:9a:0f:04:15:00:
c2:bb:68:3a:a1:f7:55:05:44:76:c9:ed:4b:26:a8:f9:ce:3b:
f8:1c:28:c9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVv3cmANphd791XYpQq6Y2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzYjJmNGRhZWQ3YmVmMmE2YWI0YmJiOWFhZmFjNTY1NGRk
YzUzYzEwHhcNMjMwMTAyMDAyNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2M0OTc3MDBlOWZkYzAxMWY5MDE3OWE1MWQ0YjA5NTYwYzUwMWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTr1S2LeKUpTwBQSjFUUdG4NAcNs
EMsH3seiWrrhtdJ9uxygtV8tEvlDYZ/wh1yh0fl1SQ74Y+FbvyDou/FjBLPdXuh5
5NSf1P3XdjvIe0op9dA/Sx5hdTEjRkN4Zh0gKCS+WoJUV4orOvB8EP/axKWkltlj
WWfqwzTP1LNTlRuxMdQTBPnpVxrGuRhBcpJN+s5+p8hIcgZoJNwhNJjlXTtiB6Fo
poN5KT7iaVwYY7Tvx+n8/aoK9s5QSA9qFFrHoYfEF1QK2DvMUKO1vGqvtLmz08yO
cT6Fdofj9CibaiE+Yw+C+vYbyon6bJ4DDqF8dhS52fSzOVQAd7WwUk4nVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCfEl3AOn9wBH5AXmlHUsJVgxQGpMB8GA1UdIwQY
MBaAFKOy9Nrte+8qarS7uar6xWVN3FPBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzdMMDJ1MTc3eXBxdEx1NXF2ckZaVTNjVThFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wNzMwZDEtYzY3Yi00MzVlLWIzMjkt
ZDgzMTBkYjk3OTUxLzEvSjhTWGNBNmYzQUVma0JlYVVkU3dsV0RGQWFrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8wNzMwZDEtYzY3Yi00MzVlLWIzMjktZDgzMTBkYjk3OTUx
LzEvbzdMMDJ1MTc3eXBxdEx1NXF2ckZaVTNjVThFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYY8MA0G
CSqGSIb3DQEBCwUAA4IBAQBlx1ZYNYq5zBAbXjvg5kFVAhOLaW+DhzVRu9UYK2JP
RIzaeTnC/Gie4oA7OFvNe1EQuLM0DZhLd8ve4HyenZcYql+r+2mAecIPZ8KWM051
ll2mnMsV4HEwcRaXEcFJcC1ke/JHa6TcNUhCx8si2g1A73WBDCJjc8s8gsdeoSL4
cuo9+5fLzm1sjicL1s1mCHq/uPxYVsIwZgnE6WTl9I0+dGt+kjiGeca473Xq+/X9
b3jvkwfWe5aCs4b8+M1BolpZiqV28rTUwb+xKOFEPoNPNG0MmjiKZ9ygqaK6Uens
kl7BwFtomg8EFQDCu2g6ofdVBUR2ye1LJqj5zjv4HCjJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:59 2024 by rpki-client on console-fra.rpki-client.org