Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/vyVdpYjHyWx-GO3FngTgIV_V79c.roa
File: vyVdpYjHyWx-GO3FngTgIV_V79c.roa (raw, json)
Hash identifier: oJ6q5oijnxaUxXtWE3lNXVaX1WNHjvQ2rh4zljcYXm0=
Subject key identifier: BF:25:5D:A5:88:C7:C9:6C:7E:18:ED:C5:9E:04:E0:21:5F:D5:EF:D7
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01862BE89A89044016D99299E223B1C63262
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/vyVdpYjHyWx-GO3FngTgIV_V79c.roa
Signing time: Tue 07 Feb 2023 12:45:09 +0000
ROA not before: Tue 07 Feb 2023 12:45:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 2.57.170.0/24 maxlen: 24
45.8.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2b:e8:9a:89:04:40:16:d9:92:99:e2:23:b1:c6:32:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Feb 7 12:45:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bf255da588c7c96c7e18edc59e04e0215fd5efd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:84:2b:b6:66:ff:2d:48:4b:73:bb:e9:fb:
42:d2:df:d1:87:6b:7c:75:27:3e:31:5e:51:2b:db:
d2:69:85:20:1f:41:e7:42:03:0d:f6:9a:47:d6:1b:
ff:a2:c4:1f:34:1c:28:aa:81:17:a9:0f:02:a7:dd:
ed:b0:53:97:65:3c:d7:f4:55:24:1c:60:2a:72:f6:
c1:b8:4d:0e:40:9b:a8:12:30:a4:ee:1e:e0:33:cf:
0e:36:ca:54:91:25:67:ae:f2:bd:61:c0:44:5c:0b:
b6:76:00:15:cf:cc:6f:f4:97:27:a5:ed:65:94:66:
2a:72:0e:27:a9:ac:cb:72:f0:05:2c:6f:12:5c:27:
c7:15:09:04:03:14:8a:a4:70:63:98:6c:b3:9d:61:
ba:fa:5e:da:f7:0f:5e:63:d0:62:02:e2:48:82:7e:
dd:bb:c8:b0:a3:3d:1a:ff:d2:1e:b2:6e:c0:d7:39:
d7:a4:dc:7c:d5:80:77:49:65:da:18:44:0e:9f:87:
4b:5a:fd:92:a3:56:4f:08:53:67:57:cc:06:ed:a1:
e1:c5:a9:c8:3a:bf:e4:70:cd:7a:fe:15:67:bb:63:
b0:8a:9e:16:40:f2:22:bc:72:98:01:5b:63:6b:e9:
10:25:b9:7f:ee:43:14:0d:df:cb:7a:8d:5c:32:6a:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:25:5D:A5:88:C7:C9:6C:7E:18:ED:C5:9E:04:E0:21:5F:D5:EF:D7
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/vyVdpYjHyWx-GO3FngTgIV_V79c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.170.0/24
45.8.19.0/24
Signature Algorithm: sha256WithRSAEncryption
42:79:ff:ac:7f:8d:af:d6:65:07:e6:ca:2c:9e:0d:91:50:dd:
47:f2:a9:f6:d0:de:e1:48:26:01:5e:82:20:60:1c:cb:c3:c5:
00:ac:52:b1:25:c2:3f:ed:81:da:4f:8b:0b:57:ec:c7:a2:52:
91:b7:80:73:60:65:8c:ec:71:dc:dd:cb:f2:c4:74:b6:78:ce:
c8:49:02:f0:c2:1a:ec:e1:fe:65:ff:c2:62:a6:ee:b8:19:26:
2c:73:03:6c:b3:98:db:eb:8c:2b:0e:74:72:36:56:a2:a5:ec:
90:93:a6:35:05:2d:b3:0a:4c:54:13:ef:14:ce:42:da:ac:96:
b5:f6:2c:e6:bc:88:06:5e:ea:24:1a:25:a9:a9:17:10:4f:2c:
ca:a1:23:b5:e2:0a:74:0a:74:2c:0e:08:2e:0d:ff:9c:2b:14:
10:6a:8e:22:a0:4a:f9:b5:38:ab:95:fc:3d:6a:62:9a:ee:5b:
35:55:2f:c2:77:3a:b5:b3:be:4b:fb:29:55:04:e6:32:f3:d8:
d3:12:2d:5c:82:39:a7:ff:90:f9:13:67:cf:03:af:f3:5f:48:
71:4f:4a:29:0c:92:92:e0:08:85:1f:46:6f:d5:30:67:73:fb:
90:9d:8a:68:33:b6:a5:83:b5:aa:ac:c6:02:97:1c:f0:97:ba:
0c:95:e3:ee
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYYr6JqJBEAW2ZKZ4iOxxjJiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2
MmU1NmUwHhcNMjMwMjA3MTI0NTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjI1NWRhNTg4YzdjOTZjN2UxOGVkYzU5ZTA0ZTAyMTVmZDVlZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAOEK7Zm/y1IS3O76ftC0t/Rh2t8
dSc+MV5RK9vSaYUgH0HnQgMN9ppH1hv/osQfNBwoqoEXqQ8Cp93tsFOXZTzX9FUk
HGAqcvbBuE0OQJuoEjCk7h7gM88ONspUkSVnrvK9YcBEXAu2dgAVz8xv9Jcnpe1l
lGYqcg4nqazLcvAFLG8SXCfHFQkEAxSKpHBjmGyznWG6+l7a9w9eY9BiAuJIgn7d
u8iwoz0a/9Iesm7A1znXpNx81YB3SWXaGEQOn4dLWv2So1ZPCFNnV8wG7aHhxanI
Or/kcM16/hVnu2Owip4WQPIivHKYAVtja+kQJbl/7kMUDd/Leo1cMmri8wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL8lXaWIx8lsfhjtxZ4E4CFf1e/XMB8GA1UdIwQY
MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt
YjBiMzVhMzRlMzg4LzEvdnlWZHBZakh5V3gtR08zRm5nVGdJVl9WNzljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4
LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjmqAwQA
LQgTMA0GCSqGSIb3DQEBCwUAA4IBAQBCef+sf42v1mUH5sosng2RUN1H8qn20N7h
SCYBXoIgYBzLw8UArFKxJcI/7YHaT4sLV+zHolKRt4BzYGWM7HHc3cvyxHS2eM7I
SQLwwhrs4f5l/8Jipu64GSYscwNss5jb64wrDnRyNlaipeyQk6Y1BS2zCkxUE+8U
zkLarJa19izmvIgGXuokGiWpqRcQTyzKoSO14gp0CnQsDgguDf+cKxQQao4ioEr5
tTirlfw9amKa7ls1VS/Cdzq1s75L+ylVBOYy89jTEi1cgjmn/5D5E2fPA6/zX0hx
T0opDJKS4AiFH0Zv1TBnc/uQnYpoM7alg7WqrMYClxzwl7oMlePu
-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:01 2024 by rpki-client on console-ams.rpki-client.org