Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/N20u26bhr5bpitEnxG1JKTEf618.roa
File: N20u26bhr5bpitEnxG1JKTEf618.roa (raw, json)
Hash identifier: afkqQ5TFedfIuP8GiSfonnvajOJEuugM42PDpwF+eKI=
Subject key identifier: 37:6D:2E:DB:A6:E1:AF:96:E9:8A:D1:27:C4:6D:49:29:31:1F:EB:5F
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01856BDCA050284FC70F54D962AFEBD411B5
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/N20u26bhr5bpitEnxG1JKTEf618.roa
Signing time: Sun 01 Jan 2023 05:44:58 +0000
ROA not before: Sun 01 Jan 2023 05:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 45.151.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:a0:50:28:4f:c7:0f:54:d9:62:af:eb:d4:11:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 1 05:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=376d2edba6e1af96e98ad127c46d4929311feb5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a9:13:29:a3:1b:d2:8e:f3:ae:7f:2e:03:eb:
8f:bf:50:42:7b:7a:4c:a5:94:a3:a1:fb:0b:58:e2:
62:dc:bc:b0:62:a7:37:a2:90:8c:23:c4:55:63:a2:
3a:7e:ed:da:80:57:0d:26:de:d4:21:43:63:76:8e:
67:00:a3:51:44:8d:b0:46:d1:12:f0:3d:ec:7c:b8:
5c:74:29:64:7c:45:55:d8:25:e2:20:3e:23:3e:7b:
ff:aa:c0:da:14:99:0e:b0:9c:71:eb:5d:a4:c8:90:
a3:25:19:a7:d6:85:86:92:47:52:5f:1b:87:03:f0:
06:85:61:05:9c:61:b5:9c:41:e9:92:71:22:7d:a2:
11:1b:98:33:7c:e3:89:a0:f1:50:75:be:f9:68:b8:
74:af:fa:6e:dd:c3:72:1d:15:bd:3a:31:90:ce:7a:
22:ce:99:57:d2:af:3d:38:8f:e6:48:4f:b8:2f:9f:
ab:fa:8f:c4:77:e7:d6:31:a2:52:bc:61:92:2a:f3:
44:bd:e5:54:e1:32:f3:74:1c:91:35:3b:56:f6:e7:
d5:4e:23:04:c4:a6:f7:3b:8a:ec:22:b1:55:5e:2e:
43:7e:0b:be:f5:52:82:db:ea:0a:02:3b:9e:03:76:
f7:ee:83:64:60:48:14:1b:a0:4b:51:0d:59:f8:c4:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6D:2E:DB:A6:E1:AF:96:E9:8A:D1:27:C4:6D:49:29:31:1F:EB:5F
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/N20u26bhr5bpitEnxG1JKTEf618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.70.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:cb:03:74:28:6f:71:0f:43:13:aa:49:cf:65:bb:9f:fc:4e:
2e:2d:39:49:e1:eb:63:4b:c4:e0:5c:30:8e:b8:0d:4a:19:f2:
23:36:14:f2:68:4f:b5:68:a8:ed:5a:d4:ae:fb:30:a4:69:94:
e5:ff:84:62:6b:cf:c9:b3:ad:a8:e6:7c:62:03:94:a8:7e:30:
a8:2c:fc:d0:f2:0d:36:76:7e:5a:c7:5a:a8:78:d8:f3:fd:b3:
29:2c:21:c2:77:4e:5b:60:32:ae:67:54:06:52:1d:c2:a9:08:
f8:16:13:57:0e:02:91:2e:34:8b:5e:f2:7c:27:f2:93:90:4a:
56:bd:f1:64:43:5a:e1:d6:93:ac:5c:71:5b:0f:94:6a:2b:d0:
86:42:c9:59:a5:bf:35:01:db:88:64:ed:94:5b:84:96:6c:07:
18:b9:bf:5c:2e:99:36:39:9b:f1:1b:6f:7e:68:0d:44:8d:24:
10:eb:b5:5d:2b:95:ab:f9:b4:f2:03:69:78:aa:51:eb:2d:a7:
78:3f:ce:a7:db:45:84:73:9c:a7:40:09:43:65:72:39:07:6f:
f9:f1:69:c1:7b:20:82:0c:86:66:3b:9e:3f:13:49:39:3e:0f:
3b:2c:13:a8:bc:ba:d5:44:08:3c:04:6f:8d:d7:a7:02:90:f1:
1e:91:8c:d6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVr3KBQKE/HD1TZYq/r1BG1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjMwMTAxMDU0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzZkMmVkYmE2ZTFhZjk2ZTk4YWQxMjdjNDZkNDkyOTMxMWZlYjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqakTKaMb0o7zrn8uA+uPv1BCe3pM
pZSjofsLWOJi3LywYqc3opCMI8RVY6I6fu3agFcNJt7UIUNjdo5nAKNRRI2wRtES
8D3sfLhcdClkfEVV2CXiID4jPnv/qsDaFJkOsJxx612kyJCjJRmn1oWGkkdSXxuH
A/AGhWEFnGG1nEHpknEifaIRG5gzfOOJoPFQdb75aLh0r/pu3cNyHRW9OjGQznoi
zplX0q89OI/mSE+4L5+r+o/Ed+fWMaJSvGGSKvNEveVU4TLzdByRNTtW9ufVTiME
xKb3O4rsIrFVXi5Dfgu+9VKC2+oKAjueA3b37oNkYEgUG6BLUQ1Z+MT0MwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDdtLtum4a+W6YrRJ8RtSSkxH+tfMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvTjIwdTI2YmhyNWJwaXRFbnhHMUpLVEVmNjE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZdGMA0G
CSqGSIb3DQEBCwUAA4IBAQB7ywN0KG9xD0MTqknPZbuf/E4uLTlJ4etjS8TgXDCO
uA1KGfIjNhTyaE+1aKjtWtSu+zCkaZTl/4Ria8/Js62o5nxiA5SofjCoLPzQ8g02
dn5ax1qoeNjz/bMpLCHCd05bYDKuZ1QGUh3CqQj4FhNXDgKRLjSLXvJ8J/KTkEpW
vfFkQ1rh1pOsXHFbD5RqK9CGQslZpb81AduIZO2UW4SWbAcYub9cLpk2OZvxG29+
aA1EjSQQ67VdK5Wr+bTyA2l4qlHrLad4P86n20WEc5ynQAlDZXI5B2/58WnBeyCC
DIZmO54/E0k5Pg87LBOovLrVRAg8BG+N16cCkPEekYzW
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:56:50 2023 by rpki-client on console-fra.rpki-client.org