Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/6RgGgOgqEtpLwvLZLa5aGBW802o.roa
File: 6RgGgOgqEtpLwvLZLa5aGBW802o.roa (raw, json)
Hash identifier: 9qrPc0fKoMezl1R2+OjPCHIdocJR5Letv03DWW4JTj8=
Subject key identifier: E9:18:06:80:E8:2A:12:DA:4B:C2:F2:D9:2D:AE:5A:18:15:BC:D3:6A
Certificate issuer: /CN=b00d3d34f61e484688bfff9cc703755823775998
Certificate serial: 0185728C8AC555EBE9D307D311FCC74335AB
Authority key identifier: B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/6RgGgOgqEtpLwvLZLa5aGBW802o.roa
Signing time: Mon 02 Jan 2023 12:54:51 +0000
ROA not before: Mon 02 Jan 2023 12:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208799
IP address blocks: 45.84.16.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:8a:c5:55:eb:e9:d3:07:d3:11:fc:c7:43:35:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00d3d34f61e484688bfff9cc703755823775998
Validity
Not Before: Jan 2 12:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e9180680e82a12da4bc2f2d92dae5a1815bcd36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:db:e3:26:c8:ae:f0:34:95:20:a1:cd:76:54:
aa:ee:23:e1:b7:93:5f:8b:64:be:f5:cd:33:99:bf:
d4:0c:b8:05:87:78:32:c2:15:55:ac:86:50:cb:5b:
c3:28:82:aa:45:fc:e5:49:13:43:15:47:f9:0f:52:
f0:0a:25:d3:28:ed:a1:94:cd:a8:fb:91:e5:43:d3:
a9:c8:28:81:57:85:4e:11:42:82:69:31:38:7e:36:
00:9b:60:49:28:ce:1f:18:ef:c7:e7:65:0c:73:5c:
ad:21:d7:46:b9:68:ec:0c:59:db:d9:a1:8b:cb:eb:
a1:2e:49:36:b0:d4:7d:70:5d:52:12:17:d8:68:bf:
df:92:75:3b:ff:a1:57:04:56:a7:8c:4f:bd:93:33:
b5:66:ef:cc:69:fa:f5:2a:8a:0e:1c:bd:33:fb:b9:
b3:9a:13:07:95:5e:50:ad:69:0b:ff:4d:90:f0:f4:
bb:45:a5:28:28:63:13:4a:af:af:7d:09:74:01:01:
70:65:bf:ad:ec:27:39:3a:a3:d7:39:23:62:db:70:
50:3c:ef:88:c3:ef:1f:e7:57:c4:af:28:bc:8c:28:
da:66:4a:89:3b:4a:a7:b7:c6:a6:ca:16:1b:4c:d9:
58:cc:82:ff:eb:b8:f0:6a:15:bc:c3:0a:e9:4c:29:
e8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:18:06:80:E8:2A:12:DA:4B:C2:F2:D9:2D:AE:5A:18:15:BC:D3:6A
X509v3 Authority Key Identifier:
keyid:B0:0D:3D:34:F6:1E:48:46:88:BF:FF:9C:C7:03:75:58:23:77:59:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA09NPYeSEaIv_-cxwN1WCN3WZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/6RgGgOgqEtpLwvLZLa5aGBW802o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/3b25f5-a190-48ff-a3e1-171dc5a98474/1/sA09NPYeSEaIv_-cxwN1WCN3WZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.16.0/22
Signature Algorithm: sha256WithRSAEncryption
36:39:b8:f4:bc:5d:58:88:0f:e3:9d:42:dd:f6:00:3c:4d:c5:
01:ac:36:7a:10:5f:47:c3:f1:15:e1:e0:99:6d:4a:f9:fd:c6:
07:21:6e:bd:36:61:c3:1d:15:b5:b5:9c:53:c8:a7:39:6d:0a:
20:9b:85:10:ba:77:74:6f:ff:36:f2:0b:01:45:aa:e8:61:9e:
59:d0:06:ab:da:8c:a3:5c:cf:07:12:e4:7f:74:f4:97:9c:b5:
23:5c:2f:57:de:91:02:9f:86:53:75:cf:89:05:4e:99:c6:19:
97:fd:c0:04:f8:6a:64:dd:d7:fd:87:33:69:36:e8:7b:9a:c2:
f3:a5:7e:77:2a:21:dc:b3:07:0c:eb:3f:14:71:ab:9c:99:7d:
3c:48:96:85:5e:3d:79:41:18:ba:09:bc:b2:20:a5:20:4f:23:
3a:3f:73:69:16:fc:90:5f:d2:55:57:a7:f1:cd:f2:14:68:30:
83:e8:77:ca:01:57:54:87:0c:2c:5b:aa:0d:0e:76:d7:67:42:
ce:c2:ed:9b:35:b7:5d:60:7c:59:c0:bc:9b:62:63:2b:06:c0:
39:eb:76:75:e3:ac:e7:3e:0e:b9:ae:24:ee:6e:f6:25:b5:d4:
a2:28:5f:cc:c9:b1:73:7f:66:81:6e:e2:5a:a5:3b:0d:76:ec:
c3:53:79:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVyjIrFVevp0wfTEfzHQzWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMGQzZDM0ZjYxZTQ4NDY4OGJmZmY5Y2M3MDM3NTU4MjM3
NzU5OTgwHhcNMjMwMTAyMTI1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTE4MDY4MGU4MmExMmRhNGJjMmYyZDkyZGFlNWExODE1YmNkMzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtvjJsiu8DSVIKHNdlSq7iPht5Nf
i2S+9c0zmb/UDLgFh3gywhVVrIZQy1vDKIKqRfzlSRNDFUf5D1LwCiXTKO2hlM2o
+5HlQ9OpyCiBV4VOEUKCaTE4fjYAm2BJKM4fGO/H52UMc1ytIddGuWjsDFnb2aGL
y+uhLkk2sNR9cF1SEhfYaL/fknU7/6FXBFanjE+9kzO1Zu/Mafr1KooOHL0z+7mz
mhMHlV5QrWkL/02Q8PS7RaUoKGMTSq+vfQl0AQFwZb+t7Cc5OqPXOSNi23BQPO+I
w+8f51fEryi8jCjaZkqJO0qnt8amyhYbTNlYzIL/67jwahW8wwrpTCnoFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOkYBoDoKhLaS8Ly2S2uWhgVvNNqMB8GA1UdIwQY
MBaAFLANPTT2HkhGiL//nMcDdVgjd1mYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0EwOU5QWWVTRWFJdl8tY3h3TjFXQ04zV1pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8zYjI1ZjUtYTE5MC00OGZmLWEzZTEt
MTcxZGM1YTk4NDc0LzEvNlJnR2dPZ3FFdHBMd3ZMWkxhNWFHQlc4MDJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8zYjI1ZjUtYTE5MC00OGZmLWEzZTEtMTcxZGM1YTk4NDc0
LzEvc0EwOU5QWWVTRWFJdl8tY3h3TjFXQ04zV1pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVQQMA0G
CSqGSIb3DQEBCwUAA4IBAQA2Obj0vF1YiA/jnULd9gA8TcUBrDZ6EF9Hw/EV4eCZ
bUr5/cYHIW69NmHDHRW1tZxTyKc5bQogm4UQund0b/828gsBRaroYZ5Z0Aar2oyj
XM8HEuR/dPSXnLUjXC9X3pECn4ZTdc+JBU6ZxhmX/cAE+Gpk3df9hzNpNuh7msLz
pX53KiHcswcM6z8UcaucmX08SJaFXj15QRi6CbyyIKUgTyM6P3NpFvyQX9JVV6fx
zfIUaDCD6HfKAVdUhwwsW6oNDnbXZ0LOwu2bNbddYHxZwLybYmMrBsA563Z146zn
Pg65riTubvYltdSiKF/MybFzf2aBbuJapTsNduzDU3mX
-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:16 2024 by rpki-client on console-ams.rpki-client.org