Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/cxUqYpU8YmUQM4e3DMI_xqaR_JY.roa
File: cxUqYpU8YmUQM4e3DMI_xqaR_JY.roa (raw, json)
Hash identifier: Uk2s3yvI551A6MpDVfzKBKpIAJCX9rRBks+5bn6noK0=
Subject key identifier: 73:15:2A:62:95:3C:62:65:10:33:87:B7:0C:C2:3F:C6:A6:91:FC:96
Certificate issuer: /CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Certificate serial: 01864BA2DC3727724906F9C8379D9BE9C889
Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/cxUqYpU8YmUQM4e3DMI_xqaR_JY.roa
Signing time: Mon 13 Feb 2023 16:36:49 +0000
ROA not before: Mon 13 Feb 2023 16:36:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44592
IP address blocks: 185.70.45.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4b:a2:dc:37:27:72:49:06:f9:c8:37:9d:9b:e9:c8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580
Validity
Not Before: Feb 13 16:36:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=73152a62953c6265103387b70cc23fc6a691fc96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:75:4d:5d:a4:3a:48:03:8a:e6:b4:e6:8c:
d7:3e:8d:c6:38:ad:dc:38:51:b0:cc:04:21:09:3d:
af:26:c6:32:36:38:c4:b9:a2:af:89:6e:9e:cc:da:
db:e1:c6:09:44:b3:4d:dc:11:8c:6c:19:a8:07:00:
ce:e9:b1:b3:08:60:96:74:23:73:a4:da:70:2b:73:
c6:65:45:c6:cb:a2:4a:57:39:d6:b3:73:4f:1c:ee:
ab:44:22:cf:3e:3b:fa:1d:f6:0d:09:fa:85:a0:2d:
0b:67:f2:71:be:32:24:b6:b2:da:67:50:f3:aa:d3:
96:5b:d0:eb:49:75:98:09:d6:1f:df:b2:50:71:93:
03:4a:88:93:05:19:8b:52:eb:99:95:7e:88:67:95:
3b:32:14:3e:da:67:20:f8:f2:cc:6f:6f:9c:80:a0:
88:67:88:0f:e4:63:de:f0:6d:fa:fe:8b:bc:21:7e:
c8:28:5f:d5:ae:7f:ca:0c:d2:b0:b9:33:40:64:21:
06:67:4f:e3:09:ef:59:46:64:fa:ee:90:60:d2:b1:
41:2c:f5:a6:f6:4b:13:02:bc:38:19:1b:4e:bd:97:
52:88:f3:d0:10:fc:68:19:c7:06:ab:bd:c9:69:ac:
2e:49:28:1d:48:25:72:d3:0d:67:fa:0c:8f:a0:03:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:15:2A:62:95:3C:62:65:10:33:87:B7:0C:C2:3F:C6:A6:91:FC:96
X509v3 Authority Key Identifier:
keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/cxUqYpU8YmUQM4e3DMI_xqaR_JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.45.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:9b:11:d5:24:a8:db:be:57:31:c7:a9:c9:89:03:6b:75:f7:
9e:4e:bd:e4:0f:19:5d:5b:7a:3d:0f:ea:bc:62:c3:92:4a:a5:
d3:06:62:da:32:34:26:1a:73:b8:b2:0b:ef:66:f1:1c:c8:f9:
5e:74:74:b0:1d:f3:43:c0:3e:14:9f:9e:f2:7c:6f:4a:9e:86:
d6:68:06:3d:73:0f:96:33:2e:ee:25:53:9a:8f:1a:72:b6:24:
1f:73:fd:b5:2a:c5:44:1e:e9:37:67:b2:c7:3f:66:35:ae:98:
f4:56:7b:dc:5a:86:bf:94:b8:60:1f:77:06:30:0d:5d:d1:57:
9e:c0:aa:4d:a0:20:53:92:9d:c5:d9:28:b9:d8:9d:8b:2f:fb:
4b:7a:8d:d7:f5:87:28:03:f2:2d:0b:65:80:95:d5:26:18:65:
64:bf:c8:81:ec:ca:2e:c0:50:6f:f6:ca:81:19:7d:9a:ae:a3:
a0:11:07:61:15:38:99:09:8c:07:6e:5e:e6:11:90:e5:a8:c5:
d3:77:40:83:20:5b:72:9b:4d:e8:99:17:42:b8:da:d6:01:63:
a9:86:db:4f:21:c3:58:e4:3c:b2:2b:97:57:e6:f6:ad:13:8c:
31:d7:9b:ae:71:60:43:b5:11:8f:d9:5b:ae:24:3d:a2:a7:76:
85:be:b8:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZLotw3J3JJBvnIN52b6ciJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwYThjNmU5MzA4YmIwMDA4MzEwMDE3MWUwMGRiYjYxNDBm
NGY1ODAwHhcNMjMwMjEzMTYzNjQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzE1MmE2Mjk1M2M2MjY1MTAzMzg3YjcwY2MyM2ZjNmE2OTFmYzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWB1TV2kOkgDiua05ozXPo3GOK3c
OFGwzAQhCT2vJsYyNjjEuaKviW6ezNrb4cYJRLNN3BGMbBmoBwDO6bGzCGCWdCNz
pNpwK3PGZUXGy6JKVznWs3NPHO6rRCLPPjv6HfYNCfqFoC0LZ/JxvjIktrLaZ1Dz
qtOWW9DrSXWYCdYf37JQcZMDSoiTBRmLUuuZlX6IZ5U7MhQ+2mcg+PLMb2+cgKCI
Z4gP5GPe8G36/ou8IX7IKF/Vrn/KDNKwuTNAZCEGZ0/jCe9ZRmT67pBg0rFBLPWm
9ksTArw4GRtOvZdSiPPQEPxoGccGq73JaawuSSgdSCVy0w1n+gyPoAMrFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHMVKmKVPGJlEDOHtwzCP8amkfyWMB8GA1UdIwQY
MBaAFBCoxukwi7AAgxABceANu2FA9PWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUtqRzZUQ0xzQUNERUFGeDRBMjdZVUQwOVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMzc5NDctNzBjMi00NjYxLWEzNmYt
NmI0OTdiMmMwYjM4LzEvY3hVcVlwVThZbVVRTTRlM0RNSV94cWFSX0pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yMzc5NDctNzBjMi00NjYxLWEzNmYtNmI0OTdiMmMwYjM4
LzEvRUtqRzZUQ0xzQUNERUFGeDRBMjdZVUQwOVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuUYtMA0G
CSqGSIb3DQEBCwUAA4IBAQDImxHVJKjbvlcxx6nJiQNrdfeeTr3kDxldW3o9D+q8
YsOSSqXTBmLaMjQmGnO4sgvvZvEcyPledHSwHfNDwD4Un57yfG9KnobWaAY9cw+W
My7uJVOajxpytiQfc/21KsVEHuk3Z7LHP2Y1rpj0VnvcWoa/lLhgH3cGMA1d0Vee
wKpNoCBTkp3F2Si52J2LL/tLeo3X9YcoA/ItC2WAldUmGGVkv8iB7MouwFBv9sqB
GX2arqOgEQdhFTiZCYwHbl7mEZDlqMXTd0CDIFtym03omRdCuNrWAWOphttPIcNY
5DyyK5dX5vatE4wx15uucWBDtRGP2VuuJD2ip3aFvriG
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:09 2024 by rpki-client on console-fra.rpki-client.org