Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/sYX0wf5ATK9KukXpnifFDlBdA80.roa
File: sYX0wf5ATK9KukXpnifFDlBdA80.roa (raw, json)
Hash identifier: v3/sOQGr3cxWAhinneNGxOYU2q7GTFlXhm7KPZglDcM=
Subject key identifier: B1:85:F4:C1:FE:40:4C:AF:4A:BA:45:E9:9E:27:C5:0E:50:5D:03:CD
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 0189E88B6B901E20F9E1EB54B179BD0D33B0
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/sYX0wf5ATK9KukXpnifFDlBdA80.roa
Signing time: Sat 12 Aug 2023 06:59:58 +0000
ROA not before: Sat 12 Aug 2023 06:59:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.145.153.0/24 maxlen: 24
45.145.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e8:8b:6b:90:1e:20:f9:e1:eb:54:b1:79:bd:0d:33:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Aug 12 06:59:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b185f4c1fe404caf4aba45e99e27c50e505d03cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bb:8d:e1:e5:79:5e:12:eb:df:63:d4:25:07:
ab:be:89:f9:7c:d8:db:3d:a8:f7:15:3d:f1:c5:e2:
82:f8:e6:fd:ec:10:31:e3:7b:d2:39:9c:c1:d6:78:
8d:56:cc:86:cc:fc:93:e6:9a:59:5d:bb:8f:48:dc:
67:dc:5e:41:9e:8b:39:59:ba:95:73:68:0b:ef:6d:
eb:0b:26:e5:27:84:ad:02:9d:b7:cf:aa:49:68:e4:
5a:cd:1b:ff:e6:73:70:b8:7a:3b:a4:d2:a2:03:fc:
d4:33:e7:55:74:0b:5f:54:32:5e:ba:f2:d6:e1:40:
21:d5:e4:21:ed:2b:0d:de:6d:82:35:c7:4c:76:3f:
79:c3:50:de:19:c0:5c:dd:bc:ed:7e:54:a8:bf:37:
9f:2d:cc:cd:cf:7c:e1:07:9f:6c:d9:c6:9c:69:67:
ac:54:2f:91:c4:9c:30:aa:67:0b:1a:28:46:9b:9d:
83:cb:38:31:59:47:82:8f:65:25:d1:9c:64:d8:72:
96:c5:67:be:b4:4a:71:31:3a:f7:28:b1:06:c4:1d:
c4:26:a6:f8:ea:52:28:47:ca:37:6c:1c:df:1b:86:
11:e9:a7:4a:1a:51:c7:03:4f:a8:65:4c:ca:1d:e2:
52:e4:70:9d:e0:74:ad:21:39:5e:88:6b:36:05:dc:
b6:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:85:F4:C1:FE:40:4C:AF:4A:BA:45:E9:9E:27:C5:0E:50:5D:03:CD
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/sYX0wf5ATK9KukXpnifFDlBdA80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.153.0/24
45.145.155.0/24
Signature Algorithm: sha256WithRSAEncryption
42:80:e6:3c:7f:25:03:ba:92:87:d0:38:ad:03:96:35:e6:de:
cd:e7:30:d6:1e:57:54:25:21:24:76:22:f3:c2:1c:49:3d:5f:
e7:a8:2d:08:41:86:0c:a8:8c:f5:ff:ea:41:98:61:f8:7d:cb:
5d:42:3c:b4:f6:c3:5f:4c:4c:71:69:fc:89:a8:bc:b1:1b:9a:
fc:6f:28:78:f1:13:cc:73:e7:38:50:a1:08:08:08:07:1a:01:
7e:ce:8c:04:77:96:8c:68:18:a8:0e:2f:e4:2e:c7:9e:3c:0b:
8a:b4:45:3d:5a:84:b8:78:3f:4f:f9:31:95:1d:87:58:59:f1:
14:70:8f:b8:ee:4e:da:af:d6:2c:6f:e2:23:95:66:04:ad:a9:
63:05:f8:0a:ff:bc:3b:19:7f:f1:a5:5c:7d:71:f0:e4:0d:15:
61:4f:5f:8b:18:38:c1:ef:ff:b7:fb:c9:ee:cb:6e:bb:d5:25:
3d:22:cc:1f:ff:4c:dd:ad:98:ff:7e:d4:fe:7f:d6:ce:e7:03:
56:22:f4:1a:26:80:28:b8:e4:1f:c8:d6:39:34:1a:a8:af:cb:
e0:f3:2c:72:30:9e:ce:7b:9c:9d:e9:65:e0:d7:c3:71:8a:da:
25:9a:f5:09:bc:e6:96:03:37:26:27:85:28:98:58:7b:63:2b:
fc:5d:0c:14
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYnoi2uQHiD54etUsXm9DTOwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi
MTcyNzcwHhcNMjMwODEyMDY1OTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTg1ZjRjMWZlNDA0Y2FmNGFiYTQ1ZTk5ZTI3YzUwZTUwNWQwM2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLuN4eV5XhLr32PUJQervon5fNjb
Paj3FT3xxeKC+Ob97BAx43vSOZzB1niNVsyGzPyT5ppZXbuPSNxn3F5Bnos5WbqV
c2gL723rCyblJ4StAp23z6pJaORazRv/5nNwuHo7pNKiA/zUM+dVdAtfVDJeuvLW
4UAh1eQh7SsN3m2CNcdMdj95w1DeGcBc3bztflSovzefLczNz3zhB59s2cacaWes
VC+RxJwwqmcLGihGm52DyzgxWUeCj2Ul0Zxk2HKWxWe+tEpxMTr3KLEGxB3EJqb4
6lIoR8o3bBzfG4YR6adKGlHHA0+oZUzKHeJS5HCd4HStITleiGs2Bdy2GwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLGF9MH+QEyvSrpF6Z4nxQ5QXQPNMB8GA1UdIwQY
MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt
MzMyNDdjOGUxYzFmLzEvc1lYMHdmNUFUSzlLdWtYcG5pZkZEbEJkQTgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm
LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZGZAwQA
LZGbMA0GCSqGSIb3DQEBCwUAA4IBAQBCgOY8fyUDupKH0DitA5Y15t7N5zDWHldU
JSEkdiLzwhxJPV/nqC0IQYYMqIz1/+pBmGH4fctdQjy09sNfTExxafyJqLyxG5r8
byh48RPMc+c4UKEICAgHGgF+zowEd5aMaBioDi/kLseePAuKtEU9WoS4eD9P+TGV
HYdYWfEUcI+47k7ar9Ysb+IjlWYEraljBfgK/7w7GX/xpVx9cfDkDRVhT1+LGDjB
7/+3+8nuy2671SU9Iswf/0zdrZj/ftT+f9bO5wNWIvQaJoAouOQfyNY5NBqor8vg
8yxyMJ7Oe5yd6WXg18NxitolmvUJvOaWAzcmJ4UomFh7Yyv8XQwU
Generated at Tue Aug 15 17:52:36 2023 by rpki-client on console-ams.rpki-client.org