Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/sS7FwtntZjNBdGlyLJKBGYKuxmA.roa
File: sS7FwtntZjNBdGlyLJKBGYKuxmA.roa (raw, json)
Hash identifier: J2Ptwr+3ZtAibGuXNO0yMk2znkbPOjAqXirG7oFT0hM=
Subject key identifier: B1:2E:C5:C2:D9:ED:66:33:41:74:69:72:2C:92:81:19:82:AE:C6:60
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 018C9156DEB5E6BE2F63222A9B8746EDE374
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/sS7FwtntZjNBdGlyLJKBGYKuxmA.roa
Signing time: Fri 22 Dec 2023 11:43:58 +0000
ROA not before: Fri 22 Dec 2023 11:43:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30781
IP address blocks: 45.12.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:91:56:de:b5:e6:be:2f:63:22:2a:9b:87:46:ed:e3:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Dec 22 11:43:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b12ec5c2d9ed6633417469722c92811982aec660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:98:2a:1b:69:75:42:b2:5f:da:a1:28:94:
5f:04:85:34:2a:3d:af:99:dc:54:11:cf:d5:c0:d8:
e0:d0:04:ac:ec:1e:db:4e:bb:de:3d:79:ee:5c:4d:
d7:13:8f:63:12:a3:0c:67:19:18:07:83:5e:6c:2e:
e7:44:3e:75:82:bf:db:38:e7:68:a3:4e:f4:3d:a6:
0e:2a:a2:57:7e:ff:e1:c4:81:1e:cc:06:f3:d7:ea:
fb:5a:5d:c6:69:dd:84:5a:fb:ed:9a:3c:fe:dd:10:
e9:c2:5f:2e:dd:37:94:8c:dc:e2:4d:5d:16:f8:57:
86:5c:40:ef:8d:31:65:a8:42:6e:10:6e:0c:1b:13:
83:22:95:f7:72:09:61:db:7d:17:4a:66:b8:a6:3f:
85:b2:b9:13:b2:f5:24:51:eb:89:2c:c8:60:ac:ea:
6d:29:9e:33:83:91:74:c6:40:37:81:b2:07:ba:13:
6a:99:77:f0:ff:43:31:d1:d9:5b:12:86:1a:af:6a:
42:98:58:9d:38:9f:98:41:86:98:b7:07:2a:ab:66:
64:f8:a4:24:b2:8b:98:9e:68:6c:d0:bd:cb:d4:da:
0d:f3:8d:c6:e8:f1:e2:a9:23:5c:23:0f:8b:38:c0:
26:6d:98:77:77:45:9b:8e:43:97:19:1d:5e:48:f9:
a1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2E:C5:C2:D9:ED:66:33:41:74:69:72:2C:92:81:19:82:AE:C6:60
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/sS7FwtntZjNBdGlyLJKBGYKuxmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.185.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:3b:4d:9d:eb:44:b7:b0:90:0c:18:82:5b:cb:b2:66:58:e1:
7b:d5:df:68:38:a7:dd:0c:3f:02:73:a6:7e:37:0c:e5:42:ba:
53:db:31:14:f3:1a:a9:01:99:a0:4b:98:69:01:b9:32:31:0d:
d4:d1:08:df:e0:3a:fb:1b:c8:7f:b4:50:e9:fa:a1:d4:39:42:
1b:37:d0:38:1a:f3:96:5d:32:8d:3f:ca:c1:35:ad:ea:fe:c6:
a8:ac:ed:b5:43:40:22:0f:fa:f7:0d:3c:57:b8:3c:76:a8:6c:
de:4d:ad:62:07:ea:a6:d1:e0:92:b0:9b:14:30:55:b1:79:fd:
80:cb:a6:aa:07:e7:d9:c8:4f:20:21:ce:3f:fb:8c:f4:b9:1f:
4b:fa:e7:65:b4:48:08:c6:ea:8a:28:f1:5c:ac:81:69:d2:5d:
8d:42:e4:a8:d2:e2:03:93:fb:da:3e:7d:ea:02:4f:a4:7c:a4:
0b:c5:40:26:a2:b6:50:33:10:a6:f3:70:9f:2c:0f:36:95:fa:
ca:84:58:91:c1:ad:be:ca:20:33:58:b0:c6:a5:77:70:cd:ff:
f9:3d:d4:a7:16:82:4a:29:24:d6:d2:1d:ed:10:66:b3:c0:76:
6b:6d:70:83:44:54:64:63:7d:13:7d:75:a6:c6:f4:bd:a3:75:
6c:f7:a4:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyRVt615r4vYyIqm4dG7eN0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzBiNjM1ZDM1NzQ2OGQ3ZjkzMmQzZTFmNTlkNTM3M2Nm
OWY0NjUwHhcNMjMxMjIyMTE0MzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTJlYzVjMmQ5ZWQ2NjMzNDE3NDY5NzIyYzkyODExOTgyYWVjNjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnz6YKhtpdUKyX9qhKJRfBIU0Kj2v
mdxUEc/VwNjg0ASs7B7bTrvePXnuXE3XE49jEqMMZxkYB4NebC7nRD51gr/bOOdo
o070PaYOKqJXfv/hxIEezAbz1+r7Wl3Gad2EWvvtmjz+3RDpwl8u3TeUjNziTV0W
+FeGXEDvjTFlqEJuEG4MGxODIpX3cglh230XSma4pj+FsrkTsvUkUeuJLMhgrOpt
KZ4zg5F0xkA3gbIHuhNqmXfw/0Mx0dlbEoYar2pCmFidOJ+YQYaYtwcqq2Zk+KQk
souYnmhs0L3L1NoN843G6PHiqSNcIw+LOMAmbZh3d0WbjkOXGR1eSPmhlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLEuxcLZ7WYzQXRpciySgRmCrsZgMB8GA1UdIwQY
MBaAFAowtjXTV0aNf5MtPh9Z1Tc8+fRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjIt
NmRlZjM5OGNlNWM5LzEvc1M3Rnd0bnRaak5CZEdseUxKS0JHWUt1eG1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjItNmRlZjM5OGNlNWM5
LzEvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQy5MA0G
CSqGSIb3DQEBCwUAA4IBAQBvO02d60S3sJAMGIJby7JmWOF71d9oOKfdDD8Cc6Z+
NwzlQrpT2zEU8xqpAZmgS5hpAbkyMQ3U0Qjf4Dr7G8h/tFDp+qHUOUIbN9A4GvOW
XTKNP8rBNa3q/saorO21Q0AiD/r3DTxXuDx2qGzeTa1iB+qm0eCSsJsUMFWxef2A
y6aqB+fZyE8gIc4/+4z0uR9L+udltEgIxuqKKPFcrIFp0l2NQuSo0uIDk/vaPn3q
Ak+kfKQLxUAmorZQMxCm83CfLA82lfrKhFiRwa2+yiAzWLDGpXdwzf/5PdSnFoJK
KSTW0h3tEGazwHZrbXCDRFRkY30TfXWmxvS9o3Vs96TE
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:12 2024 by rpki-client on console-fra.rpki-client.org