Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/fVI82TN6qYw2ZPqoy3dzVeWYm-E.roa
File: fVI82TN6qYw2ZPqoy3dzVeWYm-E.roa (raw, json)
Hash identifier: H4c9PvkAybAa5E5+2eHzXsjRwPYlBt+xlrfAmD3cN/Y=
Subject key identifier: 7D:52:3C:D9:33:7A:A9:8C:36:64:FA:A8:CB:77:73:55:E5:98:9B:E1
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 018BABC94CED2A1D96452DED6E531A2F2E71
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/fVI82TN6qYw2ZPqoy3dzVeWYm-E.roa
Signing time: Tue 07 Nov 2023 21:56:18 +0000
ROA not before: Tue 07 Nov 2023 21:56:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56884
IP address blocks: 45.145.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ab:c9:4c:ed:2a:1d:96:45:2d:ed:6e:53:1a:2f:2e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Nov 7 21:56:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d523cd9337aa98c3664faa8cb777355e5989be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ec:bf:2b:d4:51:c8:11:a5:7e:43:4d:3b:b0:
ba:4d:96:4e:0c:f3:5e:8a:c0:95:8d:f3:e6:33:8c:
85:ac:54:67:05:b0:fa:4e:ba:e6:a8:34:51:eb:37:
e6:a1:3e:cc:55:b2:df:ca:04:51:1a:aa:94:86:21:
29:df:d5:fb:b6:9c:bb:47:8c:dc:90:3d:79:98:ef:
5d:65:74:dd:44:8c:e8:95:f0:c9:24:7d:92:52:36:
61:d2:84:2f:44:0b:06:2a:ad:3f:d3:44:9a:1d:79:
f8:64:81:29:5e:99:03:21:61:c7:f1:9e:31:42:50:
8c:61:29:52:48:67:a2:0c:15:d5:12:07:1e:96:05:
cf:4f:0d:0b:46:6c:6c:35:aa:5a:d6:ee:f4:05:63:
2f:95:23:f6:95:12:c0:9a:a0:00:9c:92:cb:74:6c:
fb:c9:d7:92:63:f7:65:ba:cd:2e:e9:43:fa:b7:01:
3e:8d:c5:bc:1a:49:04:20:dc:6d:ee:a0:95:27:f0:
74:cb:d2:a7:38:b2:b4:56:1a:c2:2e:53:2c:ca:d0:
3d:2c:27:22:c0:d1:a3:ba:c4:a6:5e:24:12:d8:ee:
a3:dd:de:c6:30:87:74:49:bb:bd:76:de:81:43:00:
6b:da:37:bc:a2:c9:eb:c6:4a:42:be:ae:a3:56:b2:
3e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:52:3C:D9:33:7A:A9:8C:36:64:FA:A8:CB:77:73:55:E5:98:9B:E1
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/fVI82TN6qYw2ZPqoy3dzVeWYm-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.152.0/24
Signature Algorithm: sha256WithRSAEncryption
77:bd:bb:c6:37:6d:4e:e8:0a:19:b7:4f:1b:62:c6:c2:99:57:
c7:ba:e0:ff:d0:65:c9:d6:f9:66:3e:d6:40:d1:0c:72:79:a3:
2a:ea:b1:e8:e1:24:2a:68:f4:51:74:23:11:30:64:92:cc:97:
b4:fe:07:0e:ce:c4:3e:bd:9b:7e:a0:67:b6:e3:38:93:c5:7f:
55:37:0b:9a:e9:64:74:20:5c:a6:d6:92:d3:d3:85:bf:9d:68:
a5:fd:bd:13:28:26:74:7a:8e:eb:7a:e6:0b:99:06:0e:1a:17:
2e:da:f9:c4:62:31:4e:3d:43:bf:a0:07:31:57:e1:7e:5a:c3:
31:bf:fd:f7:d5:24:3c:2b:c8:80:8b:ad:92:e9:13:80:59:51:
3f:07:5b:ee:13:85:30:1c:c6:7e:17:92:fa:39:e2:db:c3:d9:
5c:87:86:9c:b7:60:08:44:f3:2f:9a:db:b2:6b:40:2c:00:b4:
b2:4b:07:25:18:6b:0a:b5:a0:6d:60:8c:85:7d:60:d5:8f:b3:
cc:cf:30:8b:bc:54:28:d7:aa:68:2b:18:d0:1f:25:0a:28:78:
90:46:dc:09:99:29:f6:a2:43:90:bc:0e:df:0b:fd:34:59:96:
de:a7:1c:66:30:55:b8:e1:f4:67:08:d7:b1:1d:5c:c4:7b:12:
60:2e:dd:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuryUztKh2WRS3tblMaLy5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi
MTcyNzcwHhcNMjMxMTA3MjE1NjE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZDUyM2NkOTMzN2FhOThjMzY2NGZhYThjYjc3NzM1NWU1OTg5YmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuy/K9RRyBGlfkNNO7C6TZZODPNe
isCVjfPmM4yFrFRnBbD6TrrmqDRR6zfmoT7MVbLfygRRGqqUhiEp39X7tpy7R4zc
kD15mO9dZXTdRIzolfDJJH2SUjZh0oQvRAsGKq0/00SaHXn4ZIEpXpkDIWHH8Z4x
QlCMYSlSSGeiDBXVEgcelgXPTw0LRmxsNapa1u70BWMvlSP2lRLAmqAAnJLLdGz7
ydeSY/dlus0u6UP6twE+jcW8GkkEINxt7qCVJ/B0y9KnOLK0VhrCLlMsytA9LCci
wNGjusSmXiQS2O6j3d7GMId0Sbu9dt6BQwBr2je8osnrxkpCvq6jVrI+iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH1SPNkzeqmMNmT6qMt3c1XlmJvhMB8GA1UdIwQY
MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt
MzMyNDdjOGUxYzFmLzEvZlZJODJUTjZxWXcyWlBxb3kzZHpWZVdZbS1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm
LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZGYMA0G
CSqGSIb3DQEBCwUAA4IBAQB3vbvGN21O6AoZt08bYsbCmVfHuuD/0GXJ1vlmPtZA
0QxyeaMq6rHo4SQqaPRRdCMRMGSSzJe0/gcOzsQ+vZt+oGe24ziTxX9VNwua6WR0
IFym1pLT04W/nWil/b0TKCZ0eo7reuYLmQYOGhcu2vnEYjFOPUO/oAcxV+F+WsMx
v/331SQ8K8iAi62S6ROAWVE/B1vuE4UwHMZ+F5L6OeLbw9lch4act2AIRPMvmtuy
a0AsALSySwclGGsKtaBtYIyFfWDVj7PMzzCLvFQo16poKxjQHyUKKHiQRtwJmSn2
okOQvA7fC/00WZbepxxmMFW44fRnCNexHVzEexJgLt2E
-----END CERTIFICATE-----
Generated at Thu Dec 7 00:27:53 2023 by rpki-client on console-ams.rpki-client.org