Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/RWgaw7BBjj2vdv8g7319a3Z5EbI.roa
File: RWgaw7BBjj2vdv8g7319a3Z5EbI.roa (raw, json)
Hash identifier: 77bRVidi1jNVTnBg21VLGSK6Lpv7HyEFPGhIp67K9wA=
Subject key identifier: 45:68:1A:C3:B0:41:8E:3D:AF:76:FF:20:EF:7D:7D:6B:76:79:11:B2
Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial: 01856E8B375A8ABFDDE7B49AB61F95F3B437
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/RWgaw7BBjj2vdv8g7319a3Z5EbI.roa
Signing time: Sun 01 Jan 2023 18:14:55 +0000
ROA not before: Sun 01 Jan 2023 18:14:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209036
IP address blocks: 45.9.222.0/24 maxlen: 24
45.9.223.0/24 maxlen: 24
45.9.221.0/24 maxlen: 24
2a0e:1500::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:37:5a:8a:bf:dd:e7:b4:9a:b6:1f:95:f3:b4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Validity
Not Before: Jan 1 18:14:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45681ac3b0418e3daf76ff20ef7d7d6b767911b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6a:e6:a6:f8:fc:23:b8:42:fc:99:25:38:21:
37:32:2d:5e:3c:e3:0c:dc:10:39:55:2e:6a:13:ca:
6d:14:3e:ae:b4:d5:c9:96:d1:64:e6:eb:cc:59:0d:
29:e9:00:2b:a1:ac:ce:13:6c:0f:e6:59:a9:0a:11:
e4:b6:e6:4d:13:1d:b3:28:e9:52:9a:fb:f1:7f:4e:
dc:d9:44:fb:22:35:c0:ca:a2:a6:90:c4:6b:aa:e8:
41:79:e8:62:15:2f:ca:de:43:7b:66:27:49:2b:14:
20:b2:4f:ae:76:90:e9:d7:ef:27:10:47:bf:86:6d:
40:21:7b:28:84:61:ef:b8:29:19:49:33:52:46:03:
0e:a8:bd:60:a8:0c:0c:3b:d8:af:5e:ed:00:71:98:
f3:0f:1f:83:1f:70:47:f8:7b:9e:df:28:fc:00:42:
32:83:90:43:f8:1a:86:d6:1b:cd:61:7d:de:17:9e:
31:c2:ad:2b:9f:a9:9a:c9:ec:29:95:9b:7b:fd:27:
e5:00:ae:d3:70:07:a2:3f:7d:81:69:86:63:10:95:
48:a8:3b:e7:21:06:2d:88:a4:7e:27:59:f4:5d:1a:
e4:2c:88:2e:a9:f2:dc:16:e8:71:b2:12:94:a4:2b:
2c:91:f7:2f:c6:03:93:59:83:8c:d4:9d:96:42:89:
7d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:68:1A:C3:B0:41:8E:3D:AF:76:FF:20:EF:7D:7D:6B:76:79:11:B2
X509v3 Authority Key Identifier:
keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/RWgaw7BBjj2vdv8g7319a3Z5EbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.221.0-45.9.223.255
IPv6:
2a0e:1500::/29
Signature Algorithm: sha256WithRSAEncryption
5a:3c:b5:f5:38:23:40:2f:e8:fc:b2:99:a4:c7:ec:5f:14:fd:
67:15:98:28:52:ab:ac:f7:bd:3a:20:7f:c9:b2:75:17:9c:7a:
21:e6:07:98:1a:a0:4c:80:40:2a:03:15:50:0c:ee:28:e5:42:
7f:0c:aa:79:4d:b9:4b:a0:2c:cc:e4:96:71:f6:0d:6f:fb:ff:
38:4e:ce:5f:0f:c7:99:a2:7e:3e:f4:40:b7:98:1b:30:7f:f3:
85:3e:fb:60:b7:11:cf:b4:b2:fc:01:1e:dc:3c:ca:8f:ae:15:
55:a5:46:f7:46:f8:51:58:87:df:de:95:20:81:c0:da:3e:38:
14:6e:35:c9:f5:99:f1:11:90:f4:1c:0c:4c:87:87:e9:8b:ca:
73:4a:5f:ff:60:8d:e8:be:fd:15:4b:2e:55:c7:f1:c9:a8:a7:
7d:28:45:42:e6:74:8f:b9:76:7c:36:bb:c5:28:e4:fe:7b:d4:
cd:3a:24:cf:ef:4a:aa:80:48:50:b0:7a:f6:e4:89:bb:ea:da:
ac:d6:e0:ed:db:0b:e9:df:26:29:13:41:7f:33:d0:1b:ef:cf:
bb:1b:13:79:e5:0d:3f:00:69:61:59:16:04:c0:3d:ef:68:5e:
9d:41:12:2d:a2:10:69:26:83:af:1a:d5:86:3a:e3:3c:44:7a:
02:06:41:85
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVuizdair/d57Sath+V87Q3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZDZkNzU3NmNkMjgyNDVjNjc5ZjlhZjM1NzVjMDM1Yjhh
MjJjOWUwHhcNMjMwMTAxMTgxNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTY4MWFjM2IwNDE4ZTNkYWY3NmZmMjBlZjdkN2Q2Yjc2NzkxMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGrmpvj8I7hC/JklOCE3Mi1ePOMM
3BA5VS5qE8ptFD6utNXJltFk5uvMWQ0p6QAroazOE2wP5lmpChHktuZNEx2zKOlS
mvvxf07c2UT7IjXAyqKmkMRrquhBeehiFS/K3kN7ZidJKxQgsk+udpDp1+8nEEe/
hm1AIXsohGHvuCkZSTNSRgMOqL1gqAwMO9ivXu0AcZjzDx+DH3BH+Hue3yj8AEIy
g5BD+BqG1hvNYX3eF54xwq0rn6mayewplZt7/SflAK7TcAeiP32BaYZjEJVIqDvn
IQYtiKR+J1n0XRrkLIguqfLcFuhxshKUpCsskfcvxgOTWYOM1J2WQol9EwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFEVoGsOwQY49r3b/IO99fWt2eRGyMB8GA1UdIwQY
MBaAFK3W11ds0oJFxnn5rzV1wDW4oiyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmRiWFYyelNna1hHZWZtdk5YWEFOYmlpTEo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8wM2MwYWEtN2Y5NC00MGMxLTk3NDIt
ZGRiMDQ4NGE2ZGEyLzEvUldnYXc3QkJqajJ2ZHY4ZzczMTlhM1o1RWJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8wM2MwYWEtN2Y5NC00MGMxLTk3NDItZGRiMDQ4NGE2ZGEy
LzEvcmRiWFYyelNna1hHZWZtdk5YWEFOYmlpTEo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAAtCd0D
BAUtCcAwDQQCAAIwBwMFAyoOFQAwDQYJKoZIhvcNAQELBQADggEBAFo8tfU4I0Av
6PyymaTH7F8U/WcVmChSq6z3vTogf8mydReceiHmB5gaoEyAQCoDFVAM7ijlQn8M
qnlNuUugLMzklnH2DW/7/zhOzl8Px5mifj70QLeYGzB/84U++2C3Ec+0svwBHtw8
yo+uFVWlRvdG+FFYh9/elSCBwNo+OBRuNcn1mfERkPQcDEyHh+mLynNKX/9gjei+
/RVLLlXH8cmop30oRULmdI+5dnw2u8Uo5P571M06JM/vSqqASFCwevbkibvq2qzW
4O3bC+nfJikTQX8z0Bvvz7sbE3nlDT8AaWFZFgTAPe9oXp1BEi2iEGkmg68a1YY6
4zxEegIGQYU=
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:00 2024 by rpki-client on console-ams.rpki-client.org