Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/thodq21eZ9gaHw25PUkBggOuCec.roa
File: thodq21eZ9gaHw25PUkBggOuCec.roa (raw, json)
Hash identifier: FYNxt5SGkKXC8vzeiCFNaarYL9WdhgSJx8kKC+I7NzY=
Subject key identifier: B6:1A:1D:AB:6D:5E:67:D8:1A:1F:0D:B9:3D:49:01:82:03:AE:09:E7
Certificate issuer: /CN=cec5afe769b94346e1cd362eb85f875b23b17277
Certificate serial: 018C08F0175E9AB9BFECAB7C118463E0263B
Authority key identifier: CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/thodq21eZ9gaHw25PUkBggOuCec.roa
Signing time: Sun 26 Nov 2023 00:03:21 +0000
ROA not before: Sun 26 Nov 2023 00:03:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.145.153.0/24 maxlen: 24
45.145.154.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:08:f0:17:5e:9a:b9:bf:ec:ab:7c:11:84:63:e0:26:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cec5afe769b94346e1cd362eb85f875b23b17277
Validity
Not Before: Nov 26 00:03:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b61a1dab6d5e67d81a1f0db93d49018203ae09e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9a:18:45:af:21:0e:b5:b3:b0:20:6c:2e:a0:
c1:31:33:70:e6:e0:60:c9:3a:d2:42:43:50:c6:37:
95:12:09:33:3b:af:36:d6:e5:6b:bd:1d:4b:b1:66:
85:61:ca:32:34:53:86:28:b6:5d:59:0b:7b:4d:1f:
8d:d9:55:59:7d:e3:89:64:ef:21:30:da:39:28:89:
70:30:dd:64:86:cd:3f:0c:82:7d:d5:ea:9d:be:da:
ec:26:da:85:c0:45:f7:58:aa:d8:e9:84:8c:ca:c5:
0e:b2:41:ad:04:1e:27:da:15:d3:97:e2:a2:4d:cd:
1c:e4:45:ce:9e:76:67:2d:01:5d:05:22:3d:fc:38:
6b:60:3d:c2:4a:97:9c:fd:10:18:10:6f:fc:12:de:
35:c1:34:91:a5:c9:c2:4f:fc:78:95:02:cb:4d:f2:
0e:3b:a8:40:17:16:f0:5b:65:f4:8f:5f:8e:67:67:
bd:d6:3b:8e:3c:5d:92:a8:88:be:6d:92:1a:6f:95:
ed:cb:28:ed:62:72:65:cf:6c:45:a3:5f:9a:cd:f8:
f4:d1:15:c0:9c:1a:9a:35:08:ea:54:7a:05:13:7e:
9a:bb:cf:0c:fc:98:59:e2:12:b2:21:af:b5:59:ea:
cb:d4:db:86:29:18:9e:86:58:1f:c1:2f:b5:2c:e6:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1A:1D:AB:6D:5E:67:D8:1A:1F:0D:B9:3D:49:01:82:03:AE:09:E7
X509v3 Authority Key Identifier:
keyid:CE:C5:AF:E7:69:B9:43:46:E1:CD:36:2E:B8:5F:87:5B:23:B1:72:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsWv52m5Q0bhzTYuuF-HWyOxcnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/thodq21eZ9gaHw25PUkBggOuCec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/3d569c-1907-4d2c-aced-33247c8e1c1f/1/zsWv52m5Q0bhzTYuuF-HWyOxcnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.153.0-45.145.155.255
Signature Algorithm: sha256WithRSAEncryption
57:05:03:2c:1f:a1:17:26:ee:66:0a:eb:68:29:bf:4b:10:9a:
a3:f5:92:07:78:fc:5c:9b:bb:45:52:9d:45:28:07:8e:34:44:
9c:b3:b9:c8:0e:05:11:ad:9d:55:2c:f4:b6:94:4b:6a:bb:09:
dc:21:6e:18:85:6c:a5:c7:d3:ff:f9:bf:6b:0f:fa:21:11:6f:
86:37:ff:ac:8a:00:26:09:69:7c:cd:14:1d:90:01:46:89:db:
36:bd:02:b8:78:d7:45:dd:b3:2c:3b:a6:6e:c3:97:89:7d:a2:
eb:ca:2a:53:98:1c:9b:80:6c:e6:b2:b4:d8:c8:d4:5a:97:77:
44:35:fd:56:6a:81:50:ae:d8:6b:68:f6:6d:cc:df:20:27:0c:
dd:c8:6c:53:d5:0b:c2:a9:44:db:8a:3c:38:f8:9d:72:de:12:
f1:0d:fa:22:81:7c:a8:8f:4d:09:76:63:f3:06:1f:38:b9:21:
49:4b:9d:04:5d:5f:5b:2f:b3:8f:d3:ed:f2:1d:a4:53:33:a2:
e0:47:f4:97:0a:39:fb:ba:8c:bd:d8:49:4a:64:a9:98:80:88:
74:48:dc:66:d8:9a:bc:1e:87:8f:ed:38:be:5d:6a:ea:98:1f:
36:47:8b:0b:fb:5f:ae:b6:1d:e2:a6:a5:01:bc:17:24:40:da:
27:87:1c:d1
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYwI8Bdemrm/7Kt8EYRj4CY7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlYzVhZmU3NjliOTQzNDZlMWNkMzYyZWI4NWY4NzViMjNi
MTcyNzcwHhcNMjMxMTI2MDAwMzIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjFhMWRhYjZkNWU2N2Q4MWExZjBkYjkzZDQ5MDE4MjAzYWUwOWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5oYRa8hDrWzsCBsLqDBMTNw5uBg
yTrSQkNQxjeVEgkzO6821uVrvR1LsWaFYcoyNFOGKLZdWQt7TR+N2VVZfeOJZO8h
MNo5KIlwMN1khs0/DIJ91eqdvtrsJtqFwEX3WKrY6YSMysUOskGtBB4n2hXTl+Ki
Tc0c5EXOnnZnLQFdBSI9/DhrYD3CSpec/RAYEG/8Et41wTSRpcnCT/x4lQLLTfIO
O6hAFxbwW2X0j1+OZ2e91juOPF2SqIi+bZIab5XtyyjtYnJlz2xFo1+azfj00RXA
nBqaNQjqVHoFE36au88M/JhZ4hKyIa+1WerL1NuGKRiehlgfwS+1LOaWSwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLYaHattXmfYGh8NuT1JAYIDrgnnMB8GA1UdIwQY
MBaAFM7Fr+dpuUNG4c02Lrhfh1sjsXJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQt
MzMyNDdjOGUxYzFmLzEvdGhvZHEyMWVaOWdhSHcyNVBVa0JnZ091Q2VjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi8zZDU2OWMtMTkwNy00ZDJjLWFjZWQtMzMyNDdjOGUxYzFm
LzEvenNXdjUybTVRMGJoelRZdXVGLUhXeU94Y25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtkZkD
BAItkZgwDQYJKoZIhvcNAQELBQADggEBAFcFAywfoRcm7mYK62gpv0sQmqP1kgd4
/Fybu0VSnUUoB440RJyzucgOBRGtnVUs9LaUS2q7CdwhbhiFbKXH0//5v2sP+iER
b4Y3/6yKACYJaXzNFB2QAUaJ2za9Arh410Xdsyw7pm7Dl4l9ouvKKlOYHJuAbOay
tNjI1FqXd0Q1/VZqgVCu2Gto9m3M3yAnDN3IbFPVC8KpRNuKPDj4nXLeEvEN+iKB
fKiPTQl2Y/MGHzi5IUlLnQRdX1svs4/T7fIdpFMzouBH9JcKOfu6jL3YSUpkqZiA
iHRI3GbYmrweh4/tOL5dauqYHzZHiwv7X662HeKmpQG8FyRA2ieHHNE=
-----END CERTIFICATE-----
Generated at Tue Nov 28 00:41:55 2023 by rpki-client on console-ams.rpki-client.org