Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/fkY_z9OvP4pAIi3GXEZdGsBt1Hc.roa
File: fkY_z9OvP4pAIi3GXEZdGsBt1Hc.roa (raw, json)
Hash identifier: uKw4RqKq22Nm1mSIMDVlGJcf/Vvx6eqU4p2YZN+Z1uE=
Subject key identifier: 7E:46:3F:CF:D3:AF:3F:8A:40:22:2D:C6:5C:46:5D:1A:C0:6D:D4:77
Certificate issuer: /CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
Certificate serial: 01872D1F7660BBFDA884511919BDB5ED5EA4
Authority key identifier: 72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/fkY_z9OvP4pAIi3GXEZdGsBt1Hc.roa
Signing time: Wed 29 Mar 2023 11:27:29 +0000
ROA not before: Wed 29 Mar 2023 11:27:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5405
IP address blocks: 45.153.82.0/23 maxlen: 24
45.153.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Dec 2023 09:36:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:1f:76:60:bb:fd:a8:84:51:19:19:bd:b5:ed:5e:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72c26abc9e06c1afef9b5fd2da40412e7aee6b47
Validity
Not Before: Mar 29 11:27:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e463fcfd3af3f8a40222dc65c465d1ac06dd477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a7:3b:b5:d9:c2:b4:d6:a4:ca:ff:11:62:d6:
c1:5b:ac:e5:94:b3:dc:c8:3f:75:06:96:20:0d:08:
80:23:87:b9:30:f1:c1:c2:0b:60:52:a8:2b:94:ab:
3b:9b:4e:07:bc:f9:64:77:c1:30:48:51:ef:a3:ef:
81:e5:e1:bd:f0:1c:7d:90:6e:f3:5a:ba:3a:aa:22:
93:0c:94:e2:91:9d:86:f7:8d:9e:f3:5e:fd:94:ba:
29:ce:a0:79:dc:79:ab:a8:19:57:a2:70:a4:37:6d:
cb:ba:69:3f:3b:e9:1f:55:20:7f:a0:e6:31:c1:9e:
e4:4d:9b:04:cb:5a:0a:33:33:d5:5b:bf:0e:ee:67:
9f:50:bb:59:7d:2f:18:58:7e:45:46:31:62:4a:e6:
9c:22:9b:26:e6:ac:a8:43:09:2a:c3:ce:96:03:b2:
06:5e:a3:6e:04:3b:45:60:ae:62:3b:be:07:3b:c5:
e0:ee:31:b1:c1:88:f2:6e:af:d4:87:e5:14:70:12:
c5:42:4b:5a:73:7a:81:4d:8f:d0:4e:37:a4:fa:58:
3e:2b:31:0b:42:14:c5:c7:08:2e:09:bc:bb:04:8a:
83:c1:78:be:53:b2:c3:25:da:2f:54:4b:8f:00:14:
85:37:58:3a:a7:86:a7:d6:24:a0:6e:03:dc:45:49:
68:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:46:3F:CF:D3:AF:3F:8A:40:22:2D:C6:5C:46:5D:1A:C0:6D:D4:77
X509v3 Authority Key Identifier:
keyid:72:C2:6A:BC:9E:06:C1:AF:EF:9B:5F:D2:DA:40:41:2E:7A:EE:6B:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csJqvJ4Gwa_vm1_S2kBBLnrua0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/fkY_z9OvP4pAIi3GXEZdGsBt1Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6c0530-1074-4b35-be0c-cd7d61913288/1/csJqvJ4Gwa_vm1_S2kBBLnrua0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.81.0-45.153.83.255
Signature Algorithm: sha256WithRSAEncryption
b2:9f:e0:a7:ce:11:c3:0b:be:7f:40:38:26:fb:28:54:8d:78:
93:bf:dc:b9:f9:db:61:3b:31:89:bf:66:31:5d:93:ff:35:ea:
17:10:9e:74:5a:a0:ec:ed:1d:e0:a1:d6:53:8e:93:03:20:29:
7a:9c:a6:2d:73:98:aa:87:4f:00:1a:db:b0:c5:3d:4c:6c:cc:
20:3b:dd:d5:cb:2d:f6:ac:51:63:7b:f2:ed:eb:04:26:96:44:
4d:2a:77:36:c4:c0:37:17:04:7a:17:c5:cf:0e:4f:4e:89:bf:
3d:9b:4a:98:43:ed:11:9c:d3:03:88:d1:c6:a7:ca:95:02:31:
c1:55:bf:49:e3:f5:db:05:23:19:d4:68:71:9f:cc:b2:56:50:
d6:d7:e8:9c:f4:14:96:ed:9c:2d:b6:99:ff:b2:12:53:53:1a:
59:22:b3:40:3c:14:e8:a6:f4:80:d3:f0:be:ae:99:f1:5a:41:
39:c1:33:c6:78:47:bb:5d:9b:8f:fb:f0:8d:28:cf:80:8f:67:
69:e4:65:6e:59:26:f3:97:c3:f9:d2:70:dc:30:11:3d:1b:c4:
a8:a4:59:23:e5:25:65:fb:37:ae:ad:23:f2:d0:2b:af:f5:ae:
ee:6d:76:cc:db:00:12:fa:0b:5b:7e:11:f0:5b:63:2f:cf:60:
41:22:b3:fd
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYctH3Zgu/2ohFEZGb217V6kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYzI2YWJjOWUwNmMxYWZlZjliNWZkMmRhNDA0MTJlN2Fl
ZTZiNDcwHhcNMjMwMzI5MTEyNzI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTQ2M2ZjZmQzYWYzZjhhNDAyMjJkYzY1YzQ2NWQxYWMwNmRkNDc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqc7tdnCtNakyv8RYtbBW6zllLPc
yD91BpYgDQiAI4e5MPHBwgtgUqgrlKs7m04HvPlkd8EwSFHvo++B5eG98Bx9kG7z
Wro6qiKTDJTikZ2G942e8179lLopzqB53HmrqBlXonCkN23Lumk/O+kfVSB/oOYx
wZ7kTZsEy1oKMzPVW78O7mefULtZfS8YWH5FRjFiSuacIpsm5qyoQwkqw86WA7IG
XqNuBDtFYK5iO74HO8Xg7jGxwYjybq/Uh+UUcBLFQktac3qBTY/QTjek+lg+KzEL
QhTFxwguCby7BIqDwXi+U7LDJdovVEuPABSFN1g6p4an1iSgbgPcRUlo8wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFH5GP8/Trz+KQCItxlxGXRrAbdR3MB8GA1UdIwQY
MBaAFHLCaryeBsGv75tf0tpAQS567mtHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3NKcXZKNEd3YV92bTFfUzJrQkJMbnJ1YTBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82YzA1MzAtMTA3NC00YjM1LWJlMGMt
Y2Q3ZDYxOTEzMjg4LzEvZmtZX3o5T3ZQNHBBSWkzR1hFWmRHc0J0MUhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82YzA1MzAtMTA3NC00YjM1LWJlMGMtY2Q3ZDYxOTEzMjg4
LzEvY3NKcXZKNEd3YV92bTFfUzJrQkJMbnJ1YTBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtmVED
BAItmVAwDQYJKoZIhvcNAQELBQADggEBALKf4KfOEcMLvn9AOCb7KFSNeJO/3Ln5
22E7MYm/ZjFdk/816hcQnnRaoOztHeCh1lOOkwMgKXqcpi1zmKqHTwAa27DFPUxs
zCA73dXLLfasUWN78u3rBCaWRE0qdzbEwDcXBHoXxc8OT06Jvz2bSphD7RGc0wOI
0canypUCMcFVv0nj9dsFIxnUaHGfzLJWUNbX6Jz0FJbtnC22mf+yElNTGlkis0A8
FOim9IDT8L6umfFaQTnBM8Z4R7tdm4/78I0oz4CPZ2nkZW5ZJvOXw/nScNwwET0b
xKikWSPlJWX7N66tI/LQK6/1ru5tdszbABL6C1t+EfBbYy/PYEEis/0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:45 2024 by rpki-client on console-ams.rpki-client.org