Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/SxlCgRgTt0jjpngKc-AILJjQU7Q.roa
File: SxlCgRgTt0jjpngKc-AILJjQU7Q.roa (raw, json)
Hash identifier: 1cX5dvCXXSje6rItFs7NVtnR8QiMRWSYgOU2+5wjhSM=
Subject key identifier: 4B:19:42:81:18:13:B7:48:E3:A6:78:0A:73:E0:08:2C:98:D0:53:B4
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 0189BD8DDD8846270A50967A2C50B4C0AFDA
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/SxlCgRgTt0jjpngKc-AILJjQU7Q.roa
Signing time: Thu 03 Aug 2023 22:38:58 +0000
ROA not before: Thu 03 Aug 2023 22:38:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198351
IP address blocks: 45.145.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bd:8d:dd:88:46:27:0a:50:96:7a:2c:50:b4:c0:af:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Aug 3 22:38:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b1942811813b748e3a6780a73e0082c98d053b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:57:98:c4:24:e3:52:f3:0b:3d:46:9a:9f:
5e:ae:62:a2:f1:71:c7:a4:00:b6:10:11:a9:40:9b:
f6:3f:3d:d6:08:4b:a2:ec:62:99:6b:2d:bc:34:eb:
f4:79:ba:50:88:af:38:74:09:5c:8b:57:91:02:b8:
7d:95:1c:89:d7:61:06:4b:9a:72:78:4f:7a:90:91:
ef:4c:b3:91:9d:13:03:99:75:b4:4b:e3:1d:f6:ac:
01:0f:5c:0a:de:9b:e7:a7:d3:1f:4f:dc:b5:be:e3:
06:c9:30:64:cf:5e:a6:68:ff:bf:71:4c:34:78:0c:
73:4d:fa:ad:3a:55:c8:f7:4c:9d:a0:c8:bc:e7:56:
52:b8:7c:7a:64:84:6f:d8:ec:55:fa:0a:8e:b3:53:
da:6a:ac:37:27:da:8e:8e:44:65:03:d5:cb:9e:14:
3f:47:7e:aa:c2:52:fd:f0:8c:d4:70:24:67:20:8e:
d0:fc:dc:ed:57:92:e4:bd:96:cc:9d:a9:1d:14:d7:
17:1f:f5:04:bb:3c:71:1f:a7:75:1b:43:d9:c9:4f:
d5:bc:45:41:e0:29:dc:4e:7b:00:ea:a4:d9:d6:86:
49:9f:4b:1c:98:f7:a4:29:40:27:62:de:c8:73:6b:
6c:9e:c9:73:f9:8c:ea:60:19:3b:d6:91:56:ea:bc:
32:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:19:42:81:18:13:B7:48:E3:A6:78:0A:73:E0:08:2C:98:D0:53:B4
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/SxlCgRgTt0jjpngKc-AILJjQU7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.152.0/24
Signature Algorithm: sha256WithRSAEncryption
57:4a:2a:37:15:38:15:53:f4:2f:ea:31:bf:6f:14:f8:c1:96:
05:17:75:c2:e7:4b:23:da:9e:3d:7c:8c:e3:65:cb:c8:de:5d:
23:32:84:18:d9:ec:c1:a8:05:6c:9d:b2:ff:09:9b:43:75:fe:
fe:a3:d6:ee:39:c8:69:c5:35:89:4f:cb:b5:cc:6c:7b:ae:e8:
ff:94:9f:09:75:3c:95:a5:3e:a4:ca:5e:73:a7:c3:1e:b9:45:
fd:7d:94:32:4d:46:3b:70:0c:2d:49:17:03:59:23:cd:81:45:
f9:59:81:93:54:42:58:c1:b8:8f:a3:e8:0a:f8:35:96:6c:de:
72:2f:da:95:b9:05:a5:f2:1c:72:56:66:c4:51:ca:0f:20:4c:
b6:69:2a:b0:03:5a:a5:66:39:e2:44:91:96:b7:3d:0d:9d:af:
f9:06:01:51:1c:c0:b2:96:e9:88:eb:52:a5:5d:aa:da:52:bc:
6c:c5:9a:90:3a:7f:ef:2c:d5:ed:4c:a2:83:8c:f7:76:9c:fb:
bc:8f:e1:51:24:91:ab:95:b2:e6:57:e0:7f:b2:b5:f1:fc:7c:
25:bb:ff:71:25:98:b5:bb:35:29:4f:2d:17:db:f5:bf:3a:02:
11:a5:7c:4b:4b:4a:2f:77:ca:c9:51:da:a7:3f:ba:84:16:95:
c3:2e:ac:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYm9jd2IRicKUJZ6LFC0wK/aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi
MTcyNzcwHhcNMjMwODAzMjIzODU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjE5NDI4MTE4MTNiNzQ4ZTNhNjc4MGE3M2UwMDgyYzk4ZDA1M2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlb1XmMQk41LzCz1Gmp9ermKi8XHH
pAC2EBGpQJv2Pz3WCEui7GKZay28NOv0ebpQiK84dAlci1eRArh9lRyJ12EGS5py
eE96kJHvTLORnRMDmXW0S+Md9qwBD1wK3pvnp9MfT9y1vuMGyTBkz16maP+/cUw0
eAxzTfqtOlXI90ydoMi851ZSuHx6ZIRv2OxV+gqOs1Paaqw3J9qOjkRlA9XLnhQ/
R36qwlL98IzUcCRnII7Q/NztV5LkvZbMnakdFNcXH/UEuzxxH6d1G0PZyU/VvEVB
4CncTnsA6qTZ1oZJn0scmPekKUAnYt7Ic2tsnslz+YzqYBk71pFW6rwyawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEsZQoEYE7dI46Z4CnPgCCyY0FO0MB8GA1UdIwQY
MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt
MzMyNDdjOGUxYzFmLzEvU3hsQ2dSZ1R0MGpqcG5nS2MtQUlMSmpRVTdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm
LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZGYMA0G
CSqGSIb3DQEBCwUAA4IBAQBXSio3FTgVU/Qv6jG/bxT4wZYFF3XC50sj2p49fIzj
ZcvI3l0jMoQY2ezBqAVsnbL/CZtDdf7+o9buOchpxTWJT8u1zGx7ruj/lJ8JdTyV
pT6kyl5zp8MeuUX9fZQyTUY7cAwtSRcDWSPNgUX5WYGTVEJYwbiPo+gK+DWWbN5y
L9qVuQWl8hxyVmbEUcoPIEy2aSqwA1qlZjniRJGWtz0Nna/5BgFRHMCylumI61Kl
XaraUrxsxZqQOn/vLNXtTKKDjPd2nPu8j+FRJJGrlbLmV+B/srXx/Hwlu/9xJZi1
uzUpTy0X2/W/OgIRpXxLS0ovd8rJUdqnP7qEFpXDLqwG
-----END CERTIFICATE-----
Generated at Tue Oct 3 21:44:38 2023 by rpki-client on console-fra.rpki-client.org