Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/UqPcozO38ywmientW6bbMyZbhtA.roa
File: UqPcozO38ywmientW6bbMyZbhtA.roa (raw, json)
Hash identifier: uSb5a6RQNieQ9DXuB1zD1nshjjjvEnjKWx/ELeCys1c=
Subject key identifier: 52:A3:DC:A3:33:B7:F3:2C:26:89:E9:ED:5B:A6:DB:33:26:5B:86:D0
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 018C15D3A7A8E8BE2B10ABF508F5908A1847
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/UqPcozO38ywmientW6bbMyZbhtA.roa
Signing time: Tue 28 Nov 2023 12:07:21 +0000
ROA not before: Tue 28 Nov 2023 12:07:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201364
IP address blocks: 45.10.56.0/24 maxlen: 24
2a0b:a280::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:15:d3:a7:a8:e8:be:2b:10:ab:f5:08:f5:90:8a:18:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Nov 28 12:07:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52a3dca333b7f32c2689e9ed5ba6db33265b86d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:d6:48:18:d6:7b:93:c9:f9:2a:b9:6d:76:
7e:28:2c:1a:62:72:10:fe:66:d6:5d:4e:57:4b:64:
b1:16:b8:ad:1a:b9:e1:d3:87:ab:44:be:ad:1f:5b:
7b:88:f1:80:89:fa:cc:b9:40:a2:7f:73:a1:84:da:
4c:99:12:f7:7d:1f:b0:e6:7e:d2:8a:2c:5c:4a:31:
b0:81:e1:19:37:a5:d3:5b:50:ca:75:52:82:88:16:
da:95:ad:39:b5:ae:38:ca:f9:d1:10:0d:a0:aa:f6:
a7:32:1e:d1:0f:b8:9a:1e:6e:49:48:82:8e:0e:d9:
f3:e9:c4:d3:d2:01:05:c4:b3:9a:36:4b:b9:1c:a8:
4b:af:6b:41:88:52:2f:6b:ee:a0:6c:5e:3c:7e:24:
7d:50:3b:69:99:8e:4b:37:80:82:72:8b:0d:41:48:
83:60:2c:d0:13:35:86:e6:7a:76:db:ec:82:b3:2a:
7a:d4:a0:bd:e4:89:f5:cf:8d:f8:14:f3:82:19:ef:
59:6f:ab:1f:87:a9:3e:dc:13:3e:98:ab:12:02:88:
39:39:2f:2c:15:31:fa:01:ce:04:12:ef:81:3d:24:
3b:e6:74:c6:d5:43:38:bc:9a:a5:e5:40:33:e4:07:
ff:b4:dd:b4:de:ca:10:c2:33:2d:35:18:f0:d1:43:
43:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A3:DC:A3:33:B7:F3:2C:26:89:E9:ED:5B:A6:DB:33:26:5B:86:D0
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/UqPcozO38ywmientW6bbMyZbhtA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.56.0/24
IPv6:
2a0b:a280::/32
Signature Algorithm: sha256WithRSAEncryption
a5:ec:34:ba:76:c8:b5:4d:53:00:e0:bd:32:9f:3b:e1:7d:44:
94:41:a3:f4:96:cd:35:4f:2c:44:20:3b:ab:d7:60:a7:de:74:
a8:a3:a1:e5:d5:1e:69:7e:ab:2c:c4:58:1d:6c:eb:1e:28:29:
af:50:1d:89:3b:3b:66:10:85:e0:07:72:16:97:d6:53:bf:a0:
d5:81:7b:73:fb:38:10:1e:a6:9c:d9:b2:eb:1f:a4:70:06:66:
94:7a:4a:63:8d:94:62:9a:b6:b0:76:0d:f9:96:ab:5e:03:ef:
d2:1a:87:56:9d:d6:f6:e0:8a:c3:22:cd:32:5c:5e:be:da:27:
7d:8f:13:c8:80:6c:95:9e:c2:27:d9:9e:c5:df:72:98:11:b7:
20:aa:fd:f4:da:9e:73:52:4b:79:6e:56:ba:23:4a:1f:c6:f0:
13:f7:65:92:d4:17:fd:09:eb:32:11:3f:5c:68:37:ae:f3:b9:
88:9c:e6:dc:69:0b:25:5e:a5:9b:c1:d0:45:0f:cc:ef:e2:05:
66:03:ef:3d:e5:2b:b5:d4:60:f7:2f:b7:bd:03:ee:d0:3c:39:
fe:2e:8e:fd:a8:ff:d6:39:4f:f4:b7:d5:14:e0:3b:d7:28:c5:
9e:a5:ed:ab:95:4a:d2:3d:f4:11:73:d3:6c:9d:be:36:a7:96:
7a:81:4d:a3
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYwV06eo6L4rEKv1CPWQihhHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz
ZWRmNGIwHhcNMjMxMTI4MTIwNzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MmEzZGNhMzMzYjdmMzJjMjY4OWU5ZWQ1YmE2ZGIzMzI2NWI4NmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMTWSBjWe5PJ+Sq5bXZ+KCwaYnIQ
/mbWXU5XS2SxFritGrnh04erRL6tH1t7iPGAifrMuUCif3OhhNpMmRL3fR+w5n7S
iixcSjGwgeEZN6XTW1DKdVKCiBbala05ta44yvnREA2gqvanMh7RD7iaHm5JSIKO
Dtnz6cTT0gEFxLOaNku5HKhLr2tBiFIva+6gbF48fiR9UDtpmY5LN4CCcosNQUiD
YCzQEzWG5np22+yCsyp61KC95In1z434FPOCGe9Zb6sfh6k+3BM+mKsSAog5OS8s
FTH6Ac4EEu+BPSQ75nTG1UM4vJql5UAz5Af/tN203soQwjMtNRjw0UNDvwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFKj3KMzt/MsJonp7Vum2zMmW4bQMB8GA1UdIwQY
MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt
OTQ0OTk1N2ZkNWE1LzEvVXFQY296TzM4eXdtaWVudFc2YmJNeVpiaHRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1
LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALQo4MA0E
AgACMAcDBQAqC6KAMA0GCSqGSIb3DQEBCwUAA4IBAQCl7DS6dsi1TVMA4L0ynzvh
fUSUQaP0ls01TyxEIDur12Cn3nSoo6Hl1R5pfqssxFgdbOseKCmvUB2JOztmEIXg
B3IWl9ZTv6DVgXtz+zgQHqac2bLrH6RwBmaUekpjjZRimrawdg35lqteA+/SGodW
ndb24IrDIs0yXF6+2id9jxPIgGyVnsIn2Z7F33KYEbcgqv302p5zUkt5bla6I0of
xvAT92WS1Bf9CesyET9caDeu87mInObcaQslXqWbwdBFD8zv4gVmA+895Su11GD3
L7e9A+7QPDn+Lo79qP/WOU/0t9UU4DvXKMWepe2rlUrSPfQRc9Nsnb42p5Z6gU2j
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:24 2024 by rpki-client on console-ams.rpki-client.org