Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/ksFnawMtKUP38-BUly_xfl9aOVA.roa
File: ksFnawMtKUP38-BUly_xfl9aOVA.roa (raw, json)
Hash identifier: 5yg9hl0yx+o5LBkQFI3syGhPQMJGNb/mGarTDFSdeXA=
Subject key identifier: 92:C1:67:6B:03:2D:29:43:F7:F3:E0:54:97:2F:F1:7E:5F:5A:39:50
Certificate issuer: /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial: 018596C03D64FE380F711D081DA1F19839E7
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/ksFnawMtKUP38-BUly_xfl9aOVA.roa
Signing time: Mon 09 Jan 2023 13:37:39 +0000
ROA not before: Mon 09 Jan 2023 13:37:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20330131
IP address blocks: 45.8.43.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Jan 2023 08:35:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:c0:3d:64:fe:38:0f:71:1d:08:1d:a1:f1:98:39:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Validity
Not Before: Jan 9 13:37:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92c1676b032d2943f7f3e054972ff17e5f5a3950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:62:45:61:e2:9b:ea:f4:55:3f:b8:20:c2:9a:
5b:fc:bf:9f:1c:72:61:f1:45:3f:b4:15:23:7c:0d:
7f:39:83:5c:b9:99:80:ff:18:a2:48:97:8c:ae:65:
7c:68:14:90:98:70:14:14:87:1b:a7:09:eb:60:6d:
ec:7b:3b:e1:83:69:44:82:44:98:c5:05:66:6b:39:
f5:89:d3:f0:c1:bd:09:a0:3b:0c:17:5b:40:3d:a0:
50:8c:ce:51:db:fd:a6:36:ec:db:65:f2:37:e4:e7:
99:f8:08:cf:a3:1d:f7:9f:12:97:ce:ce:15:57:a1:
42:54:cd:d1:a7:fc:b4:40:f4:83:31:43:7b:c9:69:
be:1c:78:94:8b:4d:f1:b5:b9:21:40:d1:b5:90:22:
85:60:50:7a:89:05:e1:c7:00:9b:a0:e7:ef:ed:2b:
3e:6c:1c:65:5f:4b:94:23:2c:68:fa:75:aa:d3:4e:
76:c1:27:c9:17:f8:64:0c:ef:eb:d3:c4:7c:0f:0f:
67:74:a1:c2:06:28:cd:89:e3:b3:4f:0b:2f:48:b0:
2b:94:ae:21:1a:fc:b3:52:e9:ee:2f:2c:31:c9:ee:
05:4a:31:4a:94:d1:b6:ea:a5:c1:9a:17:ba:d4:d1:
43:6d:f6:ec:ec:17:d3:2e:0c:f6:da:b6:ea:e7:4e:
7c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C1:67:6B:03:2D:29:43:F7:F3:E0:54:97:2F:F1:7E:5F:5A:39:50
X509v3 Authority Key Identifier:
keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/ksFnawMtKUP38-BUly_xfl9aOVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.43.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:7b:d0:6b:91:f4:17:1b:d4:af:e2:11:60:db:d6:5d:4d:0b:
4c:4b:c9:99:30:6d:61:36:37:e8:3a:83:c9:ba:82:b2:06:3f:
fa:8e:dc:95:cf:31:95:96:8a:2f:1c:28:15:ad:14:37:26:bc:
86:03:56:e2:62:1c:5e:8d:1d:65:6f:12:a7:72:08:d3:0a:64:
27:81:54:dd:2e:b2:72:03:64:b2:c9:3b:fe:c1:51:21:17:40:
67:7d:46:7c:71:a7:ed:2e:77:13:d1:d4:bc:c2:0c:17:b3:1e:
29:7e:06:34:36:ae:1e:b5:39:61:15:e3:30:2e:ef:26:0e:21:
15:8f:4b:fd:1b:92:08:73:83:c2:cd:2d:49:69:c3:37:2a:68:
e4:a2:3d:1d:ba:da:e0:b3:5d:8e:d6:58:10:41:d6:26:6f:f2:
bf:9c:70:df:7d:3d:25:01:a8:e4:15:d3:fb:04:2c:b7:e1:85:
02:e5:ce:b1:ff:43:c7:3b:8a:07:c5:d6:cd:5b:ef:27:1b:4f:
b0:a8:a7:29:4c:c2:01:e5:e1:60:fe:fe:32:26:06:e7:a0:d6:
f4:e1:77:cd:e0:1c:21:60:44:de:07:ca:d7:3c:03:4d:5e:0e:
1e:4c:21:5a:81:9f:8b:bb:65:14:d9:42:b3:8f:0d:f7:4f:bf:
b1:26:de:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWWwD1k/jgPcR0IHaHxmDnnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTZjYTAzYThjMTM1Y2VlYWUyMzJjOTM3YzFlZTBiYWI4
N2U3ODIwHhcNMjMwMTA5MTMzNzM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmMxNjc2YjAzMmQyOTQzZjdmM2UwNTQ5NzJmZjE3ZTVmNWEzOTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWJFYeKb6vRVP7ggwppb/L+fHHJh
8UU/tBUjfA1/OYNcuZmA/xiiSJeMrmV8aBSQmHAUFIcbpwnrYG3sezvhg2lEgkSY
xQVmazn1idPwwb0JoDsMF1tAPaBQjM5R2/2mNuzbZfI35OeZ+AjPox33nxKXzs4V
V6FCVM3Rp/y0QPSDMUN7yWm+HHiUi03xtbkhQNG1kCKFYFB6iQXhxwCboOfv7Ss+
bBxlX0uUIyxo+nWq0052wSfJF/hkDO/r08R8Dw9ndKHCBijNieOzTwsvSLArlK4h
GvyzUunuLywxye4FSjFKlNG26qXBmhe61NFDbfbs7BfTLgz22rbq5058zQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJLBZ2sDLSlD9/PgVJcv8X5fWjlQMB8GA1UdIwQY
MBaAFL6mygOowTXO6uIyyTfB7gurh+eCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFiS0E2akJOYzdxNGpMSk44SHVDNnVINTRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9iYzY1ZjYtMGMzYi00MDRlLWJmYWQt
OWZhNDIyOGMwMmVhLzEva3NGbmF3TXRLVVAzOC1CVWx5X3hmbDlhT1ZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9iYzY1ZjYtMGMzYi00MDRlLWJmYWQtOWZhNDIyOGMwMmVh
LzEvdnFiS0E2akJOYzdxNGpMSk44SHVDNnVINTRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQgrMA0G
CSqGSIb3DQEBCwUAA4IBAQDCe9BrkfQXG9Sv4hFg29ZdTQtMS8mZMG1hNjfoOoPJ
uoKyBj/6jtyVzzGVloovHCgVrRQ3JryGA1biYhxejR1lbxKncgjTCmQngVTdLrJy
A2SyyTv+wVEhF0BnfUZ8caftLncT0dS8wgwXsx4pfgY0Nq4etTlhFeMwLu8mDiEV
j0v9G5IIc4PCzS1JacM3Kmjkoj0dutrgs12O1lgQQdYmb/K/nHDffT0lAajkFdP7
BCy34YUC5c6x/0PHO4oHxdbNW+8nG0+wqKcpTMIB5eFg/v4yJgbnoNb04XfN4Bwh
YETeB8rXPANNXg4eTCFagZ+Lu2UU2UKzjw33T7+xJt7f
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:22 2024 by rpki-client on console-fra.rpki-client.org