Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/jlJyG1H4ElobdearJiA5YS7ERdU.roa
File: jlJyG1H4ElobdearJiA5YS7ERdU.roa (raw, json)
Hash identifier: ckNcff4utxKfiwlfPSwTF1dVSy/vd685PSWVPRQVFyo=
Subject key identifier: 8E:52:72:1B:51:F8:12:5A:1B:75:E6:AB:26:20:39:61:2E:C4:45:D5
Certificate issuer: /CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Certificate serial: 01856D53D5A6EDFDD6C383DB7DA662EBDD65
Authority key identifier: AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/jlJyG1H4ElobdearJiA5YS7ERdU.roa
Signing time: Sun 01 Jan 2023 12:34:48 +0000
ROA not before: Sun 01 Jan 2023 12:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208283
IP address blocks: 45.144.6.0/23 maxlen: 23
2a0e:e744::/30 maxlen: 30
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:35:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:d5:a6:ed:fd:d6:c3:83:db:7d:a6:62:eb:dd:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Validity
Not Before: Jan 1 12:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8e52721b51f8125a1b75e6ab262039612ec445d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:ab:6c:a4:56:e7:ad:8d:5e:cd:3b:be:9f:
3a:32:cb:c7:01:1c:53:34:ea:f7:0d:79:9f:c6:73:
78:75:40:90:42:fd:ac:f3:8a:8a:fd:df:25:2b:f7:
15:4c:55:f3:51:c2:de:c1:f1:8a:a1:65:f4:1c:87:
18:97:d4:09:57:e3:ac:63:3d:32:a3:23:4b:62:da:
b8:44:5b:46:29:49:b6:c2:80:e5:9b:fe:cb:5c:5b:
54:94:7d:4c:8f:fd:4b:25:22:6d:75:d0:07:ff:04:
23:26:26:33:d7:52:7e:b2:ce:39:d8:f1:2e:56:73:
05:4a:85:a8:42:ad:5e:13:dd:85:f0:d2:80:e3:e4:
02:89:27:e7:e9:56:b0:44:f1:d5:e1:dd:0b:d7:4c:
cd:00:50:14:55:6d:13:80:83:28:fc:38:8c:46:95:
a0:4e:31:4e:81:e1:8c:cb:c8:2b:a1:6f:78:2f:d8:
6d:55:d1:46:b0:2a:d8:bf:ee:17:88:99:c1:d5:67:
63:e6:49:e4:f7:34:f8:9d:f9:41:39:5a:19:10:fc:
43:25:66:b0:8a:c3:7e:8f:0d:cd:ef:83:0e:b8:97:
c4:0d:36:93:ba:0b:38:7a:78:2e:c8:fd:4d:ac:c6:
13:f0:ee:64:ab:43:dc:ec:b6:22:27:bb:29:27:97:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:52:72:1B:51:F8:12:5A:1B:75:E6:AB:26:20:39:61:2E:C4:45:D5
X509v3 Authority Key Identifier:
keyid:AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/jlJyG1H4ElobdearJiA5YS7ERdU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.6.0/23
IPv6:
2a0e:e744::/30
Signature Algorithm: sha256WithRSAEncryption
17:dc:d3:d5:00:75:e0:07:70:d3:bf:4e:9c:bd:c8:b0:26:2c:
a9:81:1d:5a:9d:09:46:80:e5:ac:f4:8d:19:8a:54:ba:60:9a:
b6:b2:4d:65:fd:48:5d:04:7a:1f:99:f9:27:51:d4:5d:1c:22:
24:5b:36:54:84:08:41:8c:8f:1b:89:8f:5a:f6:8b:95:53:4f:
bf:0a:bb:3b:f3:0c:6f:29:f0:26:a4:73:cd:17:aa:cc:44:29:
b1:9b:d0:6e:c4:3e:70:b3:bf:4b:94:8a:6d:2a:dd:19:66:5c:
75:3f:c6:a1:93:21:fc:b7:be:6a:14:9b:c0:0e:40:c6:63:1b:
d8:96:88:d5:99:d1:41:aa:3c:66:32:91:67:17:f8:84:e7:11:
3d:01:a6:aa:0b:57:c6:40:ef:ac:68:d1:c9:3f:a1:68:74:6d:
ed:bd:29:11:b1:30:c2:82:69:b0:7a:73:7e:ea:d1:9e:9b:03:
93:e0:6f:f7:29:58:11:db:2e:c6:76:8e:ea:d7:63:ed:6c:c9:
89:d0:f5:29:3e:e1:d1:86:a4:e4:d9:fd:07:f2:e9:6c:56:c8:
f0:88:b5:26:51:97:c0:50:fa:53:4b:a1:45:b4:69:8a:ad:e9:
52:b1:17:a4:a6:dd:17:fd:72:cf:62:07:f6:54:50:3f:e2:73:
83:56:ea:ee
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVtU9Wm7f3Ww4PbfaZi691lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOTc1ZGI0Mzc4ZGZjYTdjMjk1M2I4NmQzYjE4ZGM4YjIx
OGVjNmIwHhcNMjMwMTAxMTIzNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTUyNzIxYjUxZjgxMjVhMWI3NWU2YWIyNjIwMzk2MTJlYzQ0NWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulyrbKRW562NXs07vp86MsvHARxT
NOr3DXmfxnN4dUCQQv2s84qK/d8lK/cVTFXzUcLewfGKoWX0HIcYl9QJV+OsYz0y
oyNLYtq4RFtGKUm2woDlm/7LXFtUlH1Mj/1LJSJtddAH/wQjJiYz11J+ss452PEu
VnMFSoWoQq1eE92F8NKA4+QCiSfn6VawRPHV4d0L10zNAFAUVW0TgIMo/DiMRpWg
TjFOgeGMy8groW94L9htVdFGsCrYv+4XiJnB1Wdj5knk9zT4nflBOVoZEPxDJWaw
isN+jw3N74MOuJfEDTaTugs4enguyP1NrMYT8O5kq0Pc7LYiJ7spJ5dWowIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFI5SchtR+BJaG3XmqyYgOWEuxEXVMB8GA1UdIwQY
MBaAFKuXXbQ3jfynwpU7htOxjciyGOxrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTVkZHREZU5fS2ZDbFR1RzA3R055TElZN0dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xYzg2MDUtMTYzZS00MjQ1LWFmMTIt
Y2RiZDU1NmUxNzQ5LzEvamxKeUcxSDRFbG9iZGVhckppQTVZUzdFUmRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8xYzg2MDUtMTYzZS00MjQ1LWFmMTItY2RiZDU1NmUxNzQ5
LzEvcTVkZHREZU5fS2ZDbFR1RzA3R055TElZN0dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLZAGMA0E
AgACMAcDBQIqDudEMA0GCSqGSIb3DQEBCwUAA4IBAQAX3NPVAHXgB3DTv06cvciw
JiypgR1anQlGgOWs9I0ZilS6YJq2sk1l/UhdBHofmfknUdRdHCIkWzZUhAhBjI8b
iY9a9ouVU0+/Crs78wxvKfAmpHPNF6rMRCmxm9BuxD5ws79LlIptKt0ZZlx1P8ah
kyH8t75qFJvADkDGYxvYlojVmdFBqjxmMpFnF/iE5xE9AaaqC1fGQO+saNHJP6Fo
dG3tvSkRsTDCgmmwenN+6tGemwOT4G/3KVgR2y7Gdo7q12PtbMmJ0PUpPuHRhqTk
2f0H8ulsVsjwiLUmUZfAUPpTS6FFtGmKrelSsRekpt0X/XLPYgf2VFA/4nODVuru
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:57 2024 by rpki-client on console-fra.rpki-client.org