Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/JCQWGx8Y2W8CyejBbaWWPsTeXK0.roa
File: JCQWGx8Y2W8CyejBbaWWPsTeXK0.roa (raw, json)
Hash identifier: r2Tj9cMDEsoO8NJLe2p0fHqKVrDnRwkPePQamplkoAE=
Subject key identifier: 24:24:16:1B:1F:18:D9:6F:02:C9:E8:C1:6D:A5:96:3E:C4:DE:5C:AD
Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial: 01856DE667FFBBB0354AD7049AA722F16532
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/JCQWGx8Y2W8CyejBbaWWPsTeXK0.roa
Signing time: Sun 01 Jan 2023 15:14:54 +0000
ROA not before: Sun 01 Jan 2023 15:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 45.80.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:67:ff:bb:b0:35:4a:d7:04:9a:a7:22:f1:65:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Validity
Not Before: Jan 1 15:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2424161b1f18d96f02c9e8c16da5963ec4de5cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:55:69:42:20:db:ef:72:ea:9e:87:9f:a0:a8:
85:77:44:a0:57:43:c5:de:76:75:3f:ee:b3:3f:ad:
9e:2d:88:71:03:e2:37:83:4b:b8:a4:b7:a4:f0:82:
27:cd:90:82:73:1d:1e:f4:65:24:eb:5d:21:6b:ea:
d4:71:9d:3f:89:0f:2b:9d:fa:0b:53:43:a0:60:76:
23:39:98:23:3c:63:a9:f3:b8:64:6c:d7:97:dc:af:
78:ac:cb:89:29:89:1b:f3:2b:f1:64:59:e8:bd:17:
e9:78:74:81:09:b5:8e:cd:60:c3:57:4d:1b:8b:38:
5e:48:7b:c2:61:61:43:bf:1c:bd:e8:67:ae:2f:4e:
37:f0:50:07:48:0a:e8:b9:e9:3a:04:41:c4:f8:82:
4d:31:a9:f9:d3:1f:ac:a9:28:14:da:d7:c3:ca:d6:
49:45:b0:71:60:20:90:4f:c3:f6:c0:32:73:0c:b0:
db:eb:4e:6f:12:24:e6:3d:99:68:55:fc:70:31:4e:
30:e0:34:23:20:9b:dd:2a:57:ff:d4:97:50:8f:77:
1c:c0:ed:78:6d:f8:27:f2:8f:a1:89:c9:69:0c:a2:
82:b1:a6:50:c2:db:d1:dc:2c:e1:bc:9a:16:b1:08:
fa:aa:1b:c5:c2:28:33:02:8b:2f:43:e2:bb:a1:99:
18:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:24:16:1B:1F:18:D9:6F:02:C9:E8:C1:6D:A5:96:3E:C4:DE:5C:AD
X509v3 Authority Key Identifier:
keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/JCQWGx8Y2W8CyejBbaWWPsTeXK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.48.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e7:1d:6b:59:28:f3:31:ed:14:52:5f:09:69:c3:cb:c5:c7:
fb:76:9b:4e:22:b5:7c:cb:cf:4f:31:4d:d6:dc:26:27:c9:fc:
9d:37:9d:f9:74:bc:ac:1f:ea:ea:b5:fa:a5:71:52:f7:9d:a2:
51:11:96:12:a8:6b:fd:19:1c:b0:9b:82:4d:43:d1:b7:4f:31:
bd:e5:ac:bd:97:32:69:12:b2:e0:1c:74:a8:f4:eb:21:f1:b4:
36:ed:d4:2e:cc:d3:5e:13:49:a0:75:ef:e4:49:7e:72:ee:3e:
4b:33:05:c0:bc:5a:dc:fb:bd:c1:de:9c:fd:ac:a4:ed:dd:9f:
cd:9e:26:77:06:3c:0d:da:a1:95:c6:69:f5:f0:cc:19:11:c1:
02:27:23:b5:15:e9:3a:d1:7f:03:6a:0a:04:85:b1:07:d4:21:
8d:9a:56:43:44:38:a3:41:96:84:1a:17:28:35:76:5d:e4:91:
58:99:5a:6c:f0:11:19:47:e3:18:cb:94:12:f9:43:c7:43:6b:
89:b7:ac:38:06:c7:b1:e6:e6:24:5b:a5:32:f5:95:9b:68:3c:
f3:0e:84:92:19:65:43:ad:bb:e5:36:ca:1f:b5:9a:1e:86:4a:
52:42:ec:1a:4f:3b:17:7d:13:45:53:63:3d:b9:5b:3d:c1:47:
60:6c:87:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVt5mf/u7A1StcEmqci8WUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZTI4MTQ3NWI3YmY4ZDBmYTFmNjY5ZDVhZDJkZTE2MzVl
OGMwNGYwHhcNMjMwMTAxMTUxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDI0MTYxYjFmMThkOTZmMDJjOWU4YzE2ZGE1OTYzZWM0ZGU1Y2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlVpQiDb73LqnoefoKiFd0SgV0PF
3nZ1P+6zP62eLYhxA+I3g0u4pLek8IInzZCCcx0e9GUk610ha+rUcZ0/iQ8rnfoL
U0OgYHYjOZgjPGOp87hkbNeX3K94rMuJKYkb8yvxZFnovRfpeHSBCbWOzWDDV00b
izheSHvCYWFDvxy96GeuL0438FAHSArouek6BEHE+IJNMan50x+sqSgU2tfDytZJ
RbBxYCCQT8P2wDJzDLDb605vEiTmPZloVfxwMU4w4DQjIJvdKlf/1JdQj3ccwO14
bfgn8o+hiclpDKKCsaZQwtvR3CzhvJoWsQj6qhvFwigzAosvQ+K7oZkYLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCQkFhsfGNlvAsnowW2llj7E3lytMB8GA1UdIwQY
MBaAFBPigUdbe/jQ+h9mnVrS3hY16MBPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8wNWI1ZDgtNDU0MS00OGE5LThjMGEt
NDRmZDA0MzkzZTJiLzEvSkNRV0d4OFkyVzhDeWVqQmJhV1dQc1RlWEswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS8wNWI1ZDgtNDU0MS00OGE5LThjMGEtNDRmZDA0MzkzZTJi
LzEvRS1LQlIxdDctTkQ2SDJhZFd0TGVGalhvd0U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVAwMA0G
CSqGSIb3DQEBCwUAA4IBAQBg5x1rWSjzMe0UUl8JacPLxcf7dptOIrV8y89PMU3W
3CYnyfydN535dLysH+rqtfqlcVL3naJREZYSqGv9GRywm4JNQ9G3TzG95ay9lzJp
ErLgHHSo9Osh8bQ27dQuzNNeE0mgde/kSX5y7j5LMwXAvFrc+73B3pz9rKTt3Z/N
niZ3BjwN2qGVxmn18MwZEcECJyO1Fek60X8DagoEhbEH1CGNmlZDRDijQZaEGhco
NXZd5JFYmVps8BEZR+MYy5QS+UPHQ2uJt6w4Bsex5uYkW6Uy9ZWbaDzzDoSSGWVD
rbvlNsoftZoehkpSQuwaTzsXfRNFU2M9uVs9wUdgbIc+
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:51 2024 by rpki-client on console-ams.rpki-client.org