Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/15GDVdn5QzPIMbOCJJkEx9sdI34.roa
File: 15GDVdn5QzPIMbOCJJkEx9sdI34.roa (raw, json)
Hash identifier: CoN9DnK/u6LUPHN/pMR/4EC8MBe5NFxe3UglwGXbu04=
Subject key identifier: D7:91:83:55:D9:F9:43:33:C8:31:B3:82:24:99:04:C7:DB:1D:23:7E
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 0187C32346747F26318DAAC55F8F9A9196AF
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/15GDVdn5QzPIMbOCJJkEx9sdI34.roa
Signing time: Thu 27 Apr 2023 14:34:41 +0000
ROA not before: Thu 27 Apr 2023 14:34:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44547
IP address blocks: 45.145.154.0/23 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Apr 2023 16:09:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:c3:23:46:74:7f:26:31:8d:aa:c5:5f:8f:9a:91:96:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Apr 27 14:34:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7918355d9f94333c831b382249904c7db1d237e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c5:5a:9d:68:bb:39:a3:e2:67:3a:fe:66:ee:
4a:a4:ac:0a:12:58:bf:80:bf:4f:b6:7f:67:59:1b:
08:26:05:28:6f:62:12:ba:f0:8a:cf:f7:d3:8d:fd:
ef:d4:33:de:58:e6:15:15:cc:dc:da:1f:80:70:00:
32:41:bf:12:42:13:c6:b6:61:2d:33:df:3b:64:82:
9a:45:b5:c1:b5:12:c0:eb:5c:78:f2:ba:30:41:d4:
29:33:fd:5b:70:cb:ce:78:33:b6:bc:2b:b4:46:ca:
79:f2:a0:f2:d9:9c:8b:4e:c3:4c:b6:3c:38:91:b2:
d2:48:ba:4d:f7:08:05:25:7f:62:02:54:ba:91:5b:
8d:35:39:19:11:5a:2d:74:6a:20:9b:2a:d5:98:ba:
cb:31:6f:85:25:ae:80:97:c6:0a:e8:4a:c0:f3:02:
09:61:e8:18:12:50:c1:ab:46:e8:6d:28:43:26:47:
9a:ce:bb:d0:15:38:51:f9:ec:49:1e:43:56:8b:07:
67:4c:87:24:fb:29:82:58:c7:2f:04:54:3c:57:29:
1e:91:31:7f:72:07:5f:bd:3b:eb:17:e0:cf:60:3d:
77:8c:0b:4f:ed:51:82:7c:fa:7b:c3:2e:17:31:03:
3d:27:fd:bd:0d:cf:16:06:88:1e:77:33:0d:74:0b:
0c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:91:83:55:D9:F9:43:33:C8:31:B3:82:24:99:04:C7:DB:1D:23:7E
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/15GDVdn5QzPIMbOCJJkEx9sdI34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.154.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:9e:0f:dc:65:ca:13:9e:4f:ef:ed:c5:a3:b0:39:31:91:18:
5d:63:49:69:46:bd:56:e9:44:16:f4:c6:59:9a:4a:45:a1:4b:
5f:1f:9b:7b:cf:98:bf:8b:07:6b:37:ee:8d:7a:d7:11:40:24:
a5:3d:d6:e6:35:8d:8b:6e:1d:11:40:f9:72:70:7f:d6:9b:03:
cf:61:2b:6d:f8:56:c8:f6:12:13:88:2d:ea:51:33:65:e6:3a:
dd:d6:93:33:a1:9a:03:54:21:2c:d7:e2:b8:66:6b:98:a6:61:
72:4e:32:c6:ec:77:ab:d6:bf:09:95:f3:9d:20:93:2c:40:8d:
44:6c:e2:0b:18:87:92:9d:4b:0b:24:5b:a8:34:ee:1e:b3:5d:
bc:37:ec:1a:72:53:a7:70:e7:ed:05:69:fd:6c:fd:15:6e:42:
c1:32:d3:8c:25:a1:42:69:af:a4:58:b0:f8:67:10:48:b7:a5:
9e:21:4e:31:a2:02:45:6a:c7:cf:2e:77:8e:4c:d8:42:56:78:
0f:ac:fe:10:85:8a:17:c6:d8:ff:05:33:7b:0e:b4:0f:68:f7:
1b:76:06:05:80:41:9a:83:77:23:9f:db:16:21:cd:9c:dc:ee:
1e:5c:fd:03:0b:8d:c4:8e:47:e8:50:48:85:1d:c7:40:1c:65:
8f:83:57:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYfDI0Z0fyYxjarFX4+akZavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi
MTcyNzcwHhcNMjMwNDI3MTQzNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzkxODM1NWQ5Zjk0MzMzYzgzMWIzODIyNDk5MDRjN2RiMWQyMzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMVanWi7OaPiZzr+Zu5KpKwKEli/
gL9Ptn9nWRsIJgUob2ISuvCKz/fTjf3v1DPeWOYVFczc2h+AcAAyQb8SQhPGtmEt
M987ZIKaRbXBtRLA61x48rowQdQpM/1bcMvOeDO2vCu0Rsp58qDy2ZyLTsNMtjw4
kbLSSLpN9wgFJX9iAlS6kVuNNTkZEVotdGogmyrVmLrLMW+FJa6Al8YK6ErA8wIJ
YegYElDBq0bobShDJkeazrvQFThR+exJHkNWiwdnTIck+ymCWMcvBFQ8VykekTF/
cgdfvTvrF+DPYD13jAtP7VGCfPp7wy4XMQM9J/29Dc8WBogedzMNdAsMQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNeRg1XZ+UMzyDGzgiSZBMfbHSN+MB8GA1UdIwQY
MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt
MzMyNDdjOGUxYzFmLzEvMTVHRFZkbjVRelBJTWJPQ0pKa0V4OXNkSTM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm
LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZGaMA0G
CSqGSIb3DQEBCwUAA4IBAQA7ng/cZcoTnk/v7cWjsDkxkRhdY0lpRr1W6UQW9MZZ
mkpFoUtfH5t7z5i/iwdrN+6NetcRQCSlPdbmNY2Lbh0RQPlycH/WmwPPYStt+FbI
9hITiC3qUTNl5jrd1pMzoZoDVCEs1+K4ZmuYpmFyTjLG7Her1r8JlfOdIJMsQI1E
bOILGIeSnUsLJFuoNO4es128N+waclOncOftBWn9bP0VbkLBMtOMJaFCaa+kWLD4
ZxBIt6WeIU4xogJFasfPLneOTNhCVngPrP4QhYoXxtj/BTN7DrQPaPcbdgYFgEGa
g3cjn9sWIc2c3O4eXP0DC43EjkfoUEiFHcdAHGWPg1ek
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:42 2024 by rpki-client on console-ams.rpki-client.org