Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/cCzLMLfCryJE-98a-nqv89U_2go.roa
File: cCzLMLfCryJE-98a-nqv89U_2go.roa (raw, json)
Hash identifier: dd+iJV1u/J3O6qpuZv3FEqcK4znaUW8JdxVlJY9x/tg=
Subject key identifier: 70:2C:CB:30:B7:C2:AF:22:44:FB:DF:1A:FA:7A:AF:F3:D5:3F:DA:0A
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018A18333B697EAD1E9AD91BC7CB48D9FB07
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/cCzLMLfCryJE-98a-nqv89U_2go.roa
Signing time: Mon 21 Aug 2023 13:05:25 +0000
ROA not before: Mon 21 Aug 2023 13:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 151668
IP address blocks: 45.141.170.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Sep 2023 07:17:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:18:33:3b:69:7e:ad:1e:9a:d9:1b:c7:cb:48:d9:fb:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Aug 21 13:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=702ccb30b7c2af2244fbdf1afa7aaff3d53fda0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c6:41:86:67:cc:68:fd:de:37:4f:99:20:88:
3e:f8:43:93:16:8a:d1:bc:3f:4f:1d:2f:a6:87:f4:
84:b6:de:9a:38:08:9d:66:6d:52:bb:11:fa:54:54:
bf:87:8c:4d:21:fa:05:e3:9a:94:73:2a:f1:9a:b6:
a1:5e:a9:6d:67:2d:2a:c3:bf:b1:55:92:00:88:6b:
2f:52:f9:7c:58:6d:a9:a2:0c:f0:67:71:0f:9d:8c:
fa:30:7f:3a:d7:a9:85:84:1a:cc:94:a5:cf:e7:fa:
4c:b0:d1:35:80:7d:3f:4c:67:e6:83:05:65:03:0f:
c5:37:65:f3:91:ae:4c:54:6f:9e:3a:83:00:a7:bd:
c4:3e:7e:36:d8:48:99:3e:75:d4:59:b5:ac:3b:8c:
56:e8:67:c3:12:61:5a:c0:d4:10:9f:4c:b9:23:cb:
6e:3e:3b:d5:25:d5:ec:dd:54:1a:2f:26:89:c6:7f:
ba:32:ad:6b:04:8d:cf:1e:b8:37:2c:7d:b7:7d:20:
28:0e:ba:a1:14:93:0e:cf:4c:1d:63:b1:cc:93:c4:
90:b5:b8:24:a0:ca:7f:c4:a9:88:60:fb:e6:f5:2d:
d9:53:79:fb:ca:29:f3:5d:8c:38:49:e2:aa:d2:ec:
1f:11:63:32:cc:30:df:ac:ca:c0:17:b9:dc:e3:93:
07:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2C:CB:30:B7:C2:AF:22:44:FB:DF:1A:FA:7A:AF:F3:D5:3F:DA:0A
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/cCzLMLfCryJE-98a-nqv89U_2go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.170.0/23
Signature Algorithm: sha256WithRSAEncryption
28:71:b1:77:dd:5f:97:da:7d:73:d6:fd:e5:4f:39:e5:54:ef:
d0:1a:93:1d:1a:09:44:6f:13:e4:07:44:cf:2d:37:0f:b5:5a:
bc:d7:90:70:e3:60:a1:02:a8:c3:77:b0:da:c8:0d:1a:33:7c:
19:18:91:53:b5:f8:d0:4a:0e:ff:4f:42:e6:ff:5c:8b:52:07:
44:f1:65:67:18:f4:3a:fc:13:fe:61:7b:f0:f1:7a:c3:a5:3a:
14:a8:f1:dd:d6:57:26:05:44:69:a4:9a:70:0c:59:8b:b3:86:
37:21:11:42:81:5d:85:bf:e3:76:b9:91:87:f8:b4:21:30:bf:
c7:99:ca:f8:bc:0b:83:1c:d4:b4:3d:6a:2e:73:46:e4:96:03:
c3:10:cd:e8:b9:ff:88:f8:7f:a4:f1:40:24:77:18:c4:db:24:
1e:ce:51:1b:34:dd:d7:74:f9:b7:97:a2:01:21:e7:5e:f2:ce:
dc:cd:36:5d:e0:d5:43:25:72:d6:92:6d:3c:d3:f8:b4:b1:33:
99:1f:72:f2:d8:6c:44:01:a5:9b:50:d5:cd:e5:12:8d:7e:1d:
0d:59:16:de:e3:89:6b:2e:ef:76:b0:c1:a4:0d:c8:01:05:10:
ae:4c:c4:bb:ce:e4:36:6d:6a:cd:3b:ea:82:d2:b7:90:ca:9d:
74:d9:53:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYoYMztpfq0emtkbx8tI2fsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4MTAxNzcyMjQ4OTk2Yjg3ZDkwODQwYzJkMjdkNjI1NDk0
NTgxNzMwHhcNMjMwODIxMTMwNTI1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDJjY2IzMGI3YzJhZjIyNDRmYmRmMWFmYTdhYWZmM2Q1M2ZkYTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsZBhmfMaP3eN0+ZIIg++EOTForR
vD9PHS+mh/SEtt6aOAidZm1SuxH6VFS/h4xNIfoF45qUcyrxmrahXqltZy0qw7+x
VZIAiGsvUvl8WG2pogzwZ3EPnYz6MH8616mFhBrMlKXP5/pMsNE1gH0/TGfmgwVl
Aw/FN2Xzka5MVG+eOoMAp73EPn422EiZPnXUWbWsO4xW6GfDEmFawNQQn0y5I8tu
PjvVJdXs3VQaLyaJxn+6Mq1rBI3PHrg3LH23fSAoDrqhFJMOz0wdY7HMk8SQtbgk
oMp/xKmIYPvm9S3ZU3n7yinzXYw4SeKq0uwfEWMyzDDfrMrAF7nc45MHnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHAsyzC3wq8iRPvfGvp6r/PVP9oKMB8GA1UdIwQY
MBaAFBgQF3IkiZa4fZCEDC0n1iVJRYFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQt
M2NjODVhZDNjMTkwLzEvY0N6TE1MZkNyeUpFLTk4YS1ucXY4OVVfMmdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMGE1YTUtMGJhMi00MDUyLWJlYjQtM2NjODVhZDNjMTkw
LzEvR0JBWGNpU0pscmg5a0lRTUxTZldKVWxGZ1hNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLY2qMA0G
CSqGSIb3DQEBCwUAA4IBAQAocbF33V+X2n1z1v3lTznlVO/QGpMdGglEbxPkB0TP
LTcPtVq815Bw42ChAqjDd7DayA0aM3wZGJFTtfjQSg7/T0Lm/1yLUgdE8WVnGPQ6
/BP+YXvw8XrDpToUqPHd1lcmBURppJpwDFmLs4Y3IRFCgV2Fv+N2uZGH+LQhML/H
mcr4vAuDHNS0PWouc0bklgPDEM3ouf+I+H+k8UAkdxjE2yQezlEbNN3XdPm3l6IB
Iede8s7czTZd4NVDJXLWkm080/i0sTOZH3Ly2GxEAaWbUNXN5RKNfh0NWRbe44lr
Lu92sMGkDcgBBRCuTMS7zuQ2bWrNO+qC0reQyp102VNC
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org