Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/gitAwD2_sHtjqwkc56xUf-8k-BU.roa
File: gitAwD2_sHtjqwkc56xUf-8k-BU.roa (raw, json)
Hash identifier: H0d4DVLYCUmvM2aTmfnqebLoDzhrZp1+dEx3zJLQDEY=
Subject key identifier: 82:2B:40:C0:3D:BF:B0:7B:63:AB:09:1C:E7:AC:54:7F:EF:24:F8:15
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 018D15F41506A043191B2A0FA9C2E9F511EB
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/gitAwD2_sHtjqwkc56xUf-8k-BU.roa
Signing time: Wed 17 Jan 2024 05:45:34 +0000
ROA not before: Wed 17 Jan 2024 05:45:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211056
IP address blocks: 45.81.16.0/24 maxlen: 24
45.81.17.0/24 maxlen: 24
45.81.18.0/24 maxlen: 24
45.81.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 07:39:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:15:f4:15:06:a0:43:19:1b:2a:0f:a9:c2:e9:f5:11:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Jan 17 05:45:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=822b40c03dbfb07b63ab091ce7ac547fef24f815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0c:81:b3:01:84:3c:3f:49:d0:2a:6e:a0:0c:
d9:f6:41:8f:94:69:e5:86:b0:7d:2a:3e:e2:26:0b:
4a:e7:2f:e5:66:4c:aa:4c:87:4b:8c:4d:25:39:1f:
ae:47:0c:f2:6e:db:d0:18:d2:51:fa:39:aa:81:98:
b3:4b:a5:0e:c3:bf:a2:fa:af:b5:7d:27:c4:f3:e3:
f8:78:38:b4:36:59:d3:4c:73:c4:cd:cd:67:a2:a0:
ba:2c:d9:54:12:fc:6c:c5:4b:e3:97:65:52:2c:c1:
fe:83:e9:a2:43:6d:50:f0:05:db:bd:39:5d:a3:01:
0e:7a:1c:24:a7:be:f6:70:f6:64:ef:a8:50:04:92:
02:ea:5c:48:86:5a:d6:f9:f3:22:2b:87:32:67:4d:
a1:91:14:b2:31:b7:7b:db:d7:b7:6b:63:ac:2a:e3:
9a:aa:b0:a7:ff:2e:5e:32:64:1a:50:93:20:99:5f:
f2:24:46:c7:e6:83:8e:ca:ff:8a:cc:b1:95:ee:d0:
09:5e:30:f3:c4:70:4b:c7:25:bd:e5:78:0b:b3:0c:
51:f9:52:4d:e7:43:74:b6:5e:06:1d:9f:d5:5e:aa:
ec:3b:bb:75:b2:e8:d7:da:07:21:f7:db:45:9d:0e:
83:6f:6e:6e:74:c6:b8:0f:88:e4:9c:fb:8b:03:b1:
71:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2B:40:C0:3D:BF:B0:7B:63:AB:09:1C:E7:AC:54:7F:EF:24:F8:15
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/gitAwD2_sHtjqwkc56xUf-8k-BU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.16.0/22
Signature Algorithm: sha256WithRSAEncryption
10:97:a7:19:4c:71:82:1a:d0:46:83:46:c0:5d:82:68:64:85:
8f:53:ea:94:a5:7a:cf:85:d8:61:05:8e:b6:d1:08:c8:e6:d8:
df:8e:58:0c:c9:87:4e:34:8a:63:79:a4:51:b5:ae:e6:b0:ef:
7e:9b:a0:8d:4d:e5:b1:b8:36:6f:3e:41:f0:81:8a:f6:81:ac:
ec:5b:ac:48:38:37:7c:62:33:26:d1:03:2a:41:f5:1e:fb:cd:
98:4e:f4:50:68:03:27:64:24:a8:2e:30:8e:08:20:9a:36:6b:
6d:ba:e2:01:3a:cd:25:3f:c6:40:f0:34:29:a1:ac:89:fc:72:
59:6a:c2:b1:c7:f9:48:95:0b:a4:2f:b3:b6:77:d3:f8:e0:e9:
11:bf:c7:f4:14:74:42:4d:9d:39:0e:34:33:d1:0e:4b:ab:02:
6b:8c:69:c7:b6:4f:88:65:73:cb:9b:5e:6f:6f:82:bb:7e:05:
e8:6e:9f:c0:d0:68:44:c8:74:d3:ff:83:c4:96:c2:62:1e:b8:
8f:85:f5:a3:af:db:a6:c4:aa:67:90:6c:02:1a:4b:65:dd:86:
6b:10:f9:49:e0:ad:fb:96:f1:fe:20:34:3c:1f:c9:10:bc:d9:
19:b5:b5:a9:3d:ef:b1:04:8d:0f:75:fd:de:6c:76:5a:c6:fb:
05:3b:65:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0V9BUGoEMZGyoPqcLp9RHrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNTI2NjQzNTYxN2ZhMGYxZmQyODM3ZWM4MGM2ZDgzYjBi
OWQ2MDgwHhcNMjQwMTE3MDU0NTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjJiNDBjMDNkYmZiMDdiNjNhYjA5MWNlN2FjNTQ3ZmVmMjRmODE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAyBswGEPD9J0CpuoAzZ9kGPlGnl
hrB9Kj7iJgtK5y/lZkyqTIdLjE0lOR+uRwzybtvQGNJR+jmqgZizS6UOw7+i+q+1
fSfE8+P4eDi0NlnTTHPEzc1noqC6LNlUEvxsxUvjl2VSLMH+g+miQ21Q8AXbvTld
owEOehwkp772cPZk76hQBJIC6lxIhlrW+fMiK4cyZ02hkRSyMbd729e3a2OsKuOa
qrCn/y5eMmQaUJMgmV/yJEbH5oOOyv+KzLGV7tAJXjDzxHBLxyW95XgLswxR+VJN
50N0tl4GHZ/VXqrsO7t1sujX2gch99tFnQ6Db25udMa4D4jknPuLA7FxWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIIrQMA9v7B7Y6sJHOesVH/vJPgVMB8GA1UdIwQY
MBaAFCFSZkNWF/oPH9KDfsgMbYOwudYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzIt
YmM5M2NhNjc5ZTFmLzEvZ2l0QXdEMl9zSHRqcXdrYzU2eFVmLThrLUJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS9jMDcyYWUtMTVkNy00MmE4LWJmYzItYmM5M2NhNjc5ZTFm
LzEvSVZKbVExWVgtZzhmMG9OLXlBeHRnN0M1MWdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVEQMA0G
CSqGSIb3DQEBCwUAA4IBAQAQl6cZTHGCGtBGg0bAXYJoZIWPU+qUpXrPhdhhBY62
0QjI5tjfjlgMyYdONIpjeaRRta7msO9+m6CNTeWxuDZvPkHwgYr2gazsW6xIODd8
YjMm0QMqQfUe+82YTvRQaAMnZCSoLjCOCCCaNmttuuIBOs0lP8ZA8DQpoayJ/HJZ
asKxx/lIlQukL7O2d9P44OkRv8f0FHRCTZ05DjQz0Q5LqwJrjGnHtk+IZXPLm15v
b4K7fgXobp/A0GhEyHTT/4PElsJiHriPhfWjr9umxKpnkGwCGktl3YZrEPlJ4K37
lvH+IDQ8H8kQvNkZtbWpPe+xBI0Pdf3ebHZaxvsFO2U+
-----END CERTIFICATE-----
Generated at Wed Jan 17 10:21:43 2024 by rpki-client on console-ams.rpki-client.org