Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/0JtZ7EjvwOvBazAzTsh5p1ijLAE.roa
File: 0JtZ7EjvwOvBazAzTsh5p1ijLAE.roa (raw, json)
Hash identifier: vdPKTAGfMi08/8txCtKJKQeo/5lEFBUYbO95nNhWHyM=
Subject key identifier: D0:9B:59:EC:48:EF:C0:EB:C1:6B:30:33:4E:C8:79:A7:58:A3:2C:01
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 0188072ADC3507FC77538440CAB37C5B8EBA
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/0JtZ7EjvwOvBazAzTsh5p1ijLAE.roa
Signing time: Wed 10 May 2023 19:37:09 +0000
ROA not before: Wed 10 May 2023 19:37:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62068
IP address blocks: 45.151.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:07:2a:dc:35:07:fc:77:53:84:40:ca:b3:7c:5b:8e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: May 10 19:37:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d09b59ec48efc0ebc16b30334ec879a758a32c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:c6:1a:73:74:d0:b8:3b:af:42:b5:63:e3:
37:4f:d9:6e:9e:05:64:7b:0b:b8:9e:bc:35:15:68:
70:c7:79:66:02:2e:35:9e:f3:29:ef:0f:bd:0c:0b:
44:d1:a3:70:7b:f6:24:93:7c:f7:16:b8:f7:72:a5:
4e:7d:13:0a:0e:6e:b4:bd:be:cb:84:7c:53:b6:34:
e0:19:4a:71:d6:c9:e2:45:74:41:f1:38:18:7f:19:
a4:b6:61:38:76:eb:a3:e2:21:66:96:69:56:24:86:
01:56:14:63:60:26:d3:83:3b:64:23:32:e2:87:f3:
68:9a:c0:bf:cb:dd:c3:4d:c7:ea:ab:58:3a:af:29:
88:3f:93:03:af:02:92:7f:51:48:dc:90:3b:1d:af:
23:13:ee:a3:a2:db:9d:b1:bd:f2:04:01:bc:3e:0f:
53:b4:e3:16:00:6c:b3:85:fc:ae:ec:ca:34:3d:e3:
69:ef:73:cb:a2:79:bd:07:70:3d:24:cc:9b:27:b5:
e3:1a:f6:f5:76:ae:a7:2d:c8:f7:e1:83:8b:40:84:
0e:0a:fb:2c:e7:37:b3:d5:30:9b:db:79:12:4b:39:
4c:19:f8:ac:ca:61:46:42:80:0c:3d:55:bd:21:7c:
72:f9:1c:8c:40:17:a6:1c:c4:78:2b:77:ce:71:bd:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9B:59:EC:48:EF:C0:EB:C1:6B:30:33:4E:C8:79:A7:58:A3:2C:01
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/0JtZ7EjvwOvBazAzTsh5p1ijLAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.70.0/24
Signature Algorithm: sha256WithRSAEncryption
05:70:99:17:5a:e8:f4:a4:75:91:e5:4a:96:b3:41:90:d9:4e:
36:9b:26:69:3d:68:98:aa:7a:28:02:c4:06:8b:1e:17:fc:49:
be:2d:6c:26:d1:1e:09:47:0e:73:01:e8:90:9a:19:7d:73:a8:
b6:60:12:4f:d8:0e:04:1a:44:aa:6e:ce:35:c2:28:32:ed:2a:
df:18:1e:d5:7c:57:37:8f:59:26:5f:30:71:66:a3:49:2e:ac:
35:ec:49:2a:bb:eb:6b:e4:88:3b:90:7e:7c:bc:30:f4:e7:20:
42:b4:03:a2:a0:51:af:f6:e2:13:48:9c:27:e2:1e:b3:23:57:
20:51:0e:aa:f1:5e:84:d7:a9:72:c4:9e:36:7d:ee:7e:34:6d:
2d:b9:40:d4:1b:33:e4:1c:53:55:0c:5b:ce:c5:80:05:aa:c4:
53:99:a8:70:b4:7a:3c:4d:ea:1e:c6:cd:23:74:29:b2:76:00:
d2:b9:2a:db:d7:f7:e0:8a:91:49:2c:6f:40:bd:9c:5a:e1:02:
1f:c7:c0:35:ef:11:25:fb:2f:4f:17:46:fc:30:c1:b6:fa:28:
b6:b2:ad:4b:1a:35:00:25:9c:7e:81:63:3f:dc:da:d4:44:ae:
9f:77:ca:30:47:7c:dd:96:ba:ec:e7:94:6e:f2:37:65:cb:81:
a8:d6:68:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgHKtw1B/x3U4RAyrN8W466MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjMwNTEwMTkzNzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDliNTllYzQ4ZWZjMGViYzE2YjMwMzM0ZWM4NzlhNzU4YTMyYzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8HGGnN00Lg7r0K1Y+M3T9lungVk
ewu4nrw1FWhwx3lmAi41nvMp7w+9DAtE0aNwe/Ykk3z3Frj3cqVOfRMKDm60vb7L
hHxTtjTgGUpx1sniRXRB8TgYfxmktmE4duuj4iFmlmlWJIYBVhRjYCbTgztkIzLi
h/NomsC/y93DTcfqq1g6rymIP5MDrwKSf1FI3JA7Ha8jE+6jotudsb3yBAG8Pg9T
tOMWAGyzhfyu7Mo0PeNp73PLonm9B3A9JMybJ7XjGvb1dq6nLcj34YOLQIQOCvss
5zez1TCb23kSSzlMGfisymFGQoAMPVW9IXxy+RyMQBemHMR4K3fOcb09zQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNCbWexI78DrwWswM07IeadYoywBMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvMEp0WjdFanZ3T3ZCYXpBelRzaDVwMWlqTEFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZdGMA0G
CSqGSIb3DQEBCwUAA4IBAQAFcJkXWuj0pHWR5UqWs0GQ2U42myZpPWiYqnooAsQG
ix4X/Em+LWwm0R4JRw5zAeiQmhl9c6i2YBJP2A4EGkSqbs41wigy7SrfGB7VfFc3
j1kmXzBxZqNJLqw17Ekqu+tr5Ig7kH58vDD05yBCtAOioFGv9uITSJwn4h6zI1cg
UQ6q8V6E16lyxJ42fe5+NG0tuUDUGzPkHFNVDFvOxYAFqsRTmahwtHo8Teoexs0j
dCmydgDSuSrb1/fgipFJLG9AvZxa4QIfx8A17xEl+y9PF0b8MMG2+ii2sq1LGjUA
JZx+gWM/3NrURK6fd8owR3zdlrrs55Ru8jdly4Go1mgQ
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org