Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/OV54HsZoO9mlVm50RLJdlxPJYwU.roa
File: OV54HsZoO9mlVm50RLJdlxPJYwU.roa (raw, json)
Hash identifier: CwHdDn7BmsDcMv0yyz3vrKHI4WhbZ56uPejM1yGLuqw=
Subject key identifier: 39:5E:78:1E:C6:68:3B:D9:A5:56:6E:74:44:B2:5D:97:13:C9:63:05
Certificate issuer: /CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Certificate serial: 0189AAB3A3B35B545228FC47C336F6CD604E
Authority key identifier: 8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/OV54HsZoO9mlVm50RLJdlxPJYwU.roa
Signing time: Mon 31 Jul 2023 06:47:26 +0000
ROA not before: Mon 31 Jul 2023 06:47:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29691
IP address blocks: 45.9.160.0/24 maxlen: 24
45.9.161.0/24 maxlen: 24
45.9.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:aa:b3:a3:b3:5b:54:52:28:fc:47:c3:36:f6:cd:60:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdac18a7ad501ba7ea13567909f17e4f7327413
Validity
Not Before: Jul 31 06:47:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=395e781ec6683bd9a5566e7444b25d9713c96305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0d:40:68:bf:bb:ea:74:4e:5a:cf:ef:19:6a:
da:36:a8:15:3e:d7:ad:3a:7b:fc:eb:37:8a:a9:09:
28:90:6e:b9:d1:a6:60:3a:67:17:e9:ff:8f:de:7b:
be:76:d3:49:32:10:e6:b4:3f:62:a6:57:1f:bc:46:
df:50:95:73:9f:7f:d4:8d:a1:62:52:56:f4:ec:97:
7a:6a:69:d0:1b:32:82:56:e6:d7:5f:4d:56:71:c7:
51:7a:c6:77:73:d3:5a:23:f3:73:67:5b:85:c9:7b:
25:bf:07:5a:96:2f:d8:d9:b3:b4:04:92:80:60:e9:
3f:6d:a1:a6:a8:f4:0a:c7:d0:d8:f8:8e:3c:13:75:
0a:a0:db:e4:9a:ef:4d:e9:90:c0:c3:72:85:18:1b:
eb:64:4e:72:e2:9d:77:a0:ef:9c:05:16:cc:88:61:
b4:a3:36:4f:77:17:19:5c:65:66:cf:c4:2c:ba:ec:
41:b0:e4:14:6d:ed:b3:b9:0b:06:3a:15:67:db:6a:
7f:da:eb:8d:e7:7c:16:6d:cd:8c:f2:29:87:1d:90:
bf:6a:14:6a:88:0e:c5:52:01:f7:8f:ff:16:f4:d9:
2c:b7:ea:e4:96:6f:af:3d:bc:83:09:19:6d:25:12:
64:d3:90:a3:e9:d8:a5:8c:99:4e:62:0c:c6:0e:65:
c0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:5E:78:1E:C6:68:3B:D9:A5:56:6E:74:44:B2:5D:97:13:C9:63:05
X509v3 Authority Key Identifier:
keyid:8B:DA:C1:8A:7A:D5:01:BA:7E:A1:35:67:90:9F:17:E4:F7:32:74:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9rBinrVAbp-oTVnkJ8X5PcydBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/OV54HsZoO9mlVm50RLJdlxPJYwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/374fd1-02c2-4671-bdc9-c3cc5de1ece9/1/i9rBinrVAbp-oTVnkJ8X5PcydBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.160.0-45.9.162.255
Signature Algorithm: sha256WithRSAEncryption
9f:e0:52:5c:6a:49:fa:4b:05:94:66:e5:9b:97:4a:f6:21:f7:
25:3e:e8:65:40:05:ff:f8:12:e2:65:a3:4a:28:36:b6:c1:98:
b2:3d:e1:37:d1:79:67:4b:e4:5b:31:75:66:5c:4d:bb:8c:ff:
a4:8d:0b:fc:17:f1:d6:f6:b3:bd:ed:2b:0b:7a:20:bb:c3:ac:
d2:04:b5:5a:ba:1e:e2:db:79:37:c5:18:92:d7:6e:6d:9c:56:
d3:4a:91:b3:13:20:13:8b:ec:d8:a1:46:f9:37:6e:1c:27:bc:
8b:e4:00:39:b2:c1:cf:27:49:8c:cf:c2:76:32:70:58:fb:2f:
2a:78:f2:5e:f7:57:92:b0:99:a9:ce:ca:f1:d4:3b:0c:1d:f7:
f3:c7:fa:24:19:ae:9f:9a:d1:5c:cb:94:f4:60:dd:13:02:46:
25:84:65:7c:a6:e8:c1:79:8b:77:88:2a:c3:c6:5c:2c:10:1f:
8a:2a:8e:d8:81:f8:5b:fc:c8:07:67:1e:3b:a3:6c:ad:57:8d:
08:92:99:b0:3d:31:56:66:fa:8a:73:03:d8:55:73:cf:0c:15:
cb:86:d1:1b:59:59:cd:ca:61:4e:c4:9a:13:3e:c4:e3:0c:ee:
52:68:47:b4:d3:8c:b8:5d:f1:39:f3:5c:36:7f:c1:e2:34:08:
40:0c:b7:2c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYmqs6OzW1RSKPxHwzb2zWBOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiZGFjMThhN2FkNTAxYmE3ZWExMzU2NzkwOWYxN2U0Zjcz
Mjc0MTMwHhcNMjMwNzMxMDY0NzI2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOTVlNzgxZWM2NjgzYmQ5YTU1NjZlNzQ0NGIyNWQ5NzEzYzk2MzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA1AaL+76nROWs/vGWraNqgVPtet
Onv86zeKqQkokG650aZgOmcX6f+P3nu+dtNJMhDmtD9iplcfvEbfUJVzn3/UjaFi
Ulb07Jd6amnQGzKCVubXX01WccdResZ3c9NaI/NzZ1uFyXslvwdali/Y2bO0BJKA
YOk/baGmqPQKx9DY+I48E3UKoNvkmu9N6ZDAw3KFGBvrZE5y4p13oO+cBRbMiGG0
ozZPdxcZXGVmz8QsuuxBsOQUbe2zuQsGOhVn22p/2uuN53wWbc2M8imHHZC/ahRq
iA7FUgH3j/8W9Nkst+rklm+vPbyDCRltJRJk05Cj6diljJlOYgzGDmXAiwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFDleeB7GaDvZpVZudESyXZcTyWMFMB8GA1UdIwQY
MBaAFIvawYp61QG6fqE1Z5CfF+T3MnQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8zNzRmZDEtMDJjMi00NjcxLWJkYzkt
YzNjYzVkZTFlY2U5LzEvT1Y1NEhzWm9POW1sVm01MFJMSmRseFBKWXdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS8zNzRmZDEtMDJjMi00NjcxLWJkYzktYzNjYzVkZTFlY2U5
LzEvaTlyQmluclZBYnAtb1RWbmtKOFg1UGN5ZEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAUtCaAD
BAAtCaIwDQYJKoZIhvcNAQELBQADggEBAJ/gUlxqSfpLBZRm5ZuXSvYh9yU+6GVA
Bf/4EuJlo0ooNrbBmLI94TfReWdL5FsxdWZcTbuM/6SNC/wX8db2s73tKwt6ILvD
rNIEtVq6HuLbeTfFGJLXbm2cVtNKkbMTIBOL7NihRvk3bhwnvIvkADmywc8nSYzP
wnYycFj7Lyp48l73V5KwmanOyvHUOwwd9/PH+iQZrp+a0VzLlPRg3RMCRiWEZXym
6MF5i3eIKsPGXCwQH4oqjtiB+Fv8yAdnHjujbK1XjQiSmbA9MVZm+opzA9hVc88M
FcuG0RtZWc3KYU7EmhM+xOMM7lJoR7TTjLhd8TnzXDZ/weI0CEAMtyw=
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:11 2024 by rpki-client on console-fra.rpki-client.org