Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/Ao2i_7vJKBaJIJgXt6ika2hAJno.roa
File: Ao2i_7vJKBaJIJgXt6ika2hAJno.roa (raw, json)
Hash identifier: ZYCMg9+BAyUqiOKgNy4PM4ffHLTwKeVN3SzPBPNmQIc=
Subject key identifier: 02:8D:A2:FF:BB:C9:28:16:89:20:98:17:B7:A8:A4:6B:68:40:26:7A
Certificate issuer: /CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Certificate serial: 01856D9D39005F71ACCD35EB659911762D28
Authority key identifier: AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/Ao2i_7vJKBaJIJgXt6ika2hAJno.roa
Signing time: Sun 01 Jan 2023 13:54:58 +0000
ROA not before: Sun 01 Jan 2023 13:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44407
IP address blocks: 45.138.112.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:9d:39:00:5f:71:ac:cd:35:eb:65:99:11:76:2d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afdac241f3010b1ae484bc31f584ad0f9d206734
Validity
Not Before: Jan 1 13:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=028da2ffbbc9281689209817b7a8a46b6840267a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ea:e1:23:ed:9e:e4:61:aa:fd:7a:60:98:d5:
ba:3f:e8:4e:14:74:1d:e4:77:51:84:62:15:5a:03:
28:6b:6f:74:9d:da:11:1c:a4:5e:1d:6e:56:7d:7d:
84:21:a6:a4:fa:8b:97:26:ef:e5:f3:fb:63:7e:38:
ec:5c:68:23:6c:a6:36:ff:82:b5:14:a1:ec:9a:e9:
27:b0:57:88:67:75:df:92:18:49:7a:cd:21:96:1c:
6d:75:c1:c5:5b:26:d2:b1:23:8e:51:87:b6:0e:c1:
1a:ff:cf:54:ee:53:a4:c6:81:5a:6b:1f:d5:3e:f8:
e5:2c:23:0f:c9:98:e8:2c:6f:23:85:1a:9e:88:ad:
b1:4a:ba:e9:68:cb:64:16:53:a5:bd:19:2c:84:3e:
80:92:c4:ce:ff:a2:f6:62:de:b1:4f:29:17:c2:64:
fd:80:42:73:09:d5:c1:d5:8a:e2:3c:65:66:2e:d6:
db:7e:b0:c2:7d:87:51:50:af:ce:50:9c:4f:6a:9c:
e5:bf:94:9c:42:39:df:5d:80:3a:d6:f6:33:09:3d:
4a:05:a2:98:55:23:44:69:83:b9:06:5b:a7:db:af:
2e:f3:a3:06:f4:51:79:c0:ee:49:c1:43:94:c9:58:
ef:82:36:82:26:a9:9e:96:f1:24:8a:4e:2c:78:02:
d3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8D:A2:FF:BB:C9:28:16:89:20:98:17:B7:A8:A4:6B:68:40:26:7A
X509v3 Authority Key Identifier:
keyid:AF:DA:C2:41:F3:01:0B:1A:E4:84:BC:31:F5:84:AD:0F:9D:20:67:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r9rCQfMBCxrkhLwx9YStD50gZzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/Ao2i_7vJKBaJIJgXt6ika2hAJno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/eb7a65-f9e6-4784-8ff7-4b4f0f6f7522/1/r9rCQfMBCxrkhLwx9YStD50gZzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.112.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:14:7a:9a:f8:22:d4:c4:8a:f2:0f:de:9c:bc:e7:22:03:d8:
61:f6:b4:1b:b6:97:61:56:1d:a4:b6:2b:65:dc:fd:db:70:92:
07:c9:45:14:76:50:1e:4e:84:11:dd:17:e3:85:72:63:bd:09:
47:4a:b1:dd:d6:8f:2f:b4:06:ce:1f:63:c6:3b:0e:dc:b4:9e:
66:cf:88:fe:6b:36:7a:de:13:64:81:17:67:cb:ba:37:09:d6:
f0:b7:35:0c:1c:d5:c5:24:84:d6:d1:26:92:db:36:67:19:8c:
ab:bc:0e:63:7c:73:b0:a5:b0:84:c2:64:68:da:67:3d:ab:07:
b9:de:03:c3:50:79:3e:41:ad:f0:ac:75:51:8d:e5:4c:b0:73:
99:58:80:57:fd:d6:80:71:92:cf:9f:78:c6:eb:fd:3d:85:25:
88:50:5e:03:40:56:07:ec:14:22:9c:f1:98:f5:84:23:97:c9:
64:02:00:b2:64:5c:60:0e:9e:2c:ac:8f:6a:44:13:7e:75:e9:
b0:b9:76:09:7b:52:0d:31:a9:98:e8:cf:bf:9d:8e:9b:dc:35:
63:52:8c:a9:27:09:08:5f:f7:d6:c7:ee:4b:b0:19:e4:a8:a0:
5b:80:05:c5:e9:95:3f:a8:28:dc:00:79:9e:84:7f:d0:3b:88:
e0:a9:7d:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtnTkAX3GszTXrZZkRdi0oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZGFjMjQxZjMwMTBiMWFlNDg0YmMzMWY1ODRhZDBmOWQy
MDY3MzQwHhcNMjMwMTAxMTM1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjhkYTJmZmJiYzkyODE2ODkyMDk4MTdiN2E4YTQ2YjY4NDAyNjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+rhI+2e5GGq/XpgmNW6P+hOFHQd
5HdRhGIVWgMoa290ndoRHKReHW5WfX2EIaak+ouXJu/l8/tjfjjsXGgjbKY2/4K1
FKHsmuknsFeIZ3XfkhhJes0hlhxtdcHFWybSsSOOUYe2DsEa/89U7lOkxoFaax/V
PvjlLCMPyZjoLG8jhRqeiK2xSrrpaMtkFlOlvRkshD6AksTO/6L2Yt6xTykXwmT9
gEJzCdXB1YriPGVmLtbbfrDCfYdRUK/OUJxPapzlv5ScQjnfXYA61vYzCT1KBaKY
VSNEaYO5Blun268u86MG9FF5wO5JwUOUyVjvgjaCJqmelvEkik4seALTYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAKNov+7ySgWiSCYF7eopGtoQCZ6MB8GA1UdIwQY
MBaAFK/awkHzAQsa5IS8MfWErQ+dIGc0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9lYjdhNjUtZjllNi00Nzg0LThmZjct
NGI0ZjBmNmY3NTIyLzEvQW8yaV83dkpLQmFKSUpnWHQ2aWthMmhBSm5vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9lYjdhNjUtZjllNi00Nzg0LThmZjctNGI0ZjBmNmY3NTIy
LzEvcjlyQ1FmTUJDeHJraEx3eDlZU3RENTBnWnpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYpwMA0G
CSqGSIb3DQEBCwUAA4IBAQCOFHqa+CLUxIryD96cvOciA9hh9rQbtpdhVh2ktitl
3P3bcJIHyUUUdlAeToQR3RfjhXJjvQlHSrHd1o8vtAbOH2PGOw7ctJ5mz4j+azZ6
3hNkgRdny7o3CdbwtzUMHNXFJITW0SaS2zZnGYyrvA5jfHOwpbCEwmRo2mc9qwe5
3gPDUHk+Qa3wrHVRjeVMsHOZWIBX/daAcZLPn3jG6/09hSWIUF4DQFYH7BQinPGY
9YQjl8lkAgCyZFxgDp4srI9qRBN+demwuXYJe1INMamY6M+/nY6b3DVjUoypJwkI
X/fWx+5LsBnkqKBbgAXF6ZU/qCjcAHmehH/QO4jgqX1d
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:03 2024 by rpki-client on console-ams.rpki-client.org