Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/siX_atzy36JoWmrWtnduHAuIj4c.roa
File: siX_atzy36JoWmrWtnduHAuIj4c.roa (raw, json)
Hash identifier: oy3ObCgKC7SD/9VX9A0wxg4coFQvJagLyQi4gNpfL+s=
Subject key identifier: B2:25:FF:6A:DC:F2:DF:A2:68:5A:6A:D6:B6:77:6E:1C:0B:88:8F:87
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 0189F3FD8E25F888BE3529D9C5907E62B7DF
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/siX_atzy36JoWmrWtnduHAuIj4c.roa
Signing time: Mon 14 Aug 2023 12:20:27 +0000
ROA not before: Mon 14 Aug 2023 12:20:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48147
IP address blocks: 45.144.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:f3:fd:8e:25:f8:88:be:35:29:d9:c5:90:7e:62:b7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Aug 14 12:20:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b225ff6adcf2dfa2685a6ad6b6776e1c0b888f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:68:7e:47:bb:9d:d2:eb:c2:d7:48:22:bc:fa:
f3:bf:af:f9:37:de:1a:d3:d0:99:73:2e:be:bd:8b:
43:3b:5c:1a:00:c9:cf:f8:d1:2a:53:a6:ab:9c:67:
c8:5b:fe:ee:26:64:2e:57:fd:4f:59:1c:cf:70:08:
58:d3:09:e0:fb:8c:cf:80:dd:5a:d9:ba:c3:72:43:
6c:6b:02:6d:b9:7f:a2:98:83:12:48:09:74:ce:36:
63:7c:f8:9e:6e:a9:21:18:19:4e:4f:f1:a0:40:be:
e6:41:47:96:1e:be:6f:62:0e:90:63:a3:92:ea:3f:
0e:18:a6:44:78:42:0b:ca:5c:d6:d1:31:ac:eb:4f:
77:39:20:68:65:0f:34:0b:03:07:77:2a:b9:bc:f1:
83:cd:e0:1d:35:56:d4:4e:c2:40:41:40:0d:88:6c:
1d:48:f2:6e:11:94:d7:6a:1a:d0:2d:ce:d7:e5:08:
a4:03:ee:cc:a7:a5:fc:92:b1:09:5b:e5:8d:e7:02:
c0:1c:45:d9:57:32:aa:8e:58:a7:ae:54:71:d3:43:
d3:85:0c:ba:5c:50:cd:bf:8a:53:5e:70:d5:ab:37:
da:0a:32:93:3e:37:6b:b0:23:42:7c:98:fa:4a:be:
d1:16:2a:1e:51:90:90:62:23:06:bc:48:2f:04:6e:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:25:FF:6A:DC:F2:DF:A2:68:5A:6A:D6:B6:77:6E:1C:0B:88:8F:87
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/siX_atzy36JoWmrWtnduHAuIj4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.18.0/24
Signature Algorithm: sha256WithRSAEncryption
30:93:f2:38:e8:af:e2:6b:0c:c7:06:91:2d:1b:18:2d:d8:ca:
29:b9:ff:59:e2:67:37:44:a7:4e:03:1e:c2:bd:8d:07:e7:2b:
54:88:de:0f:b2:44:f3:2c:ec:a0:31:30:32:64:80:1c:ed:23:
53:76:4c:ad:f7:8d:78:e3:e0:f2:a4:27:48:27:d7:fc:8b:bd:
e3:59:4c:7d:35:71:4b:fa:3d:c0:d7:86:09:d8:e1:b3:df:34:
30:d3:d7:17:cb:91:da:17:4b:63:31:58:af:b8:fe:cc:9e:6c:
4a:79:0a:b3:74:3a:82:73:9b:6f:e5:74:da:1b:c2:4d:15:be:
17:ef:64:46:47:24:b9:e2:2e:81:96:4e:7c:6c:50:25:cc:b2:
d2:cb:c2:e0:24:08:72:9c:73:cf:d0:31:5b:c0:2a:fd:71:8a:
0e:05:92:ca:67:48:59:99:0e:dd:06:e2:57:3b:9e:10:6d:f8:
c4:52:cb:31:a3:e0:87:d6:73:4a:87:62:ee:f4:ad:b2:81:7a:
db:41:02:6d:93:fd:f4:7a:3f:89:52:be:bb:51:fc:1c:3d:89:
dd:25:3b:b7:50:fe:04:ee:06:e7:ab:70:f6:ae:72:cb:07:35:
28:02:94:eb:b6:69:62:c8:04:d4:f6:5c:c6:56:43:6b:fa:5c:
7c:ed:cf:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnz/Y4l+Ii+NSnZxZB+YrffMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjRjZDNlZGY1MjFkZjhlYzBhMTUxMTExMjcyZDNmYjkx
Yjk5YzMwHhcNMjMwODE0MTIyMDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjI1ZmY2YWRjZjJkZmEyNjg1YTZhZDZiNjc3NmUxYzBiODg4Zjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGh+R7ud0uvC10givPrzv6/5N94a
09CZcy6+vYtDO1waAMnP+NEqU6arnGfIW/7uJmQuV/1PWRzPcAhY0wng+4zPgN1a
2brDckNsawJtuX+imIMSSAl0zjZjfPiebqkhGBlOT/GgQL7mQUeWHr5vYg6QY6OS
6j8OGKZEeEILylzW0TGs6093OSBoZQ80CwMHdyq5vPGDzeAdNVbUTsJAQUANiGwd
SPJuEZTXahrQLc7X5QikA+7Mp6X8krEJW+WN5wLAHEXZVzKqjlinrlRx00PThQy6
XFDNv4pTXnDVqzfaCjKTPjdrsCNCfJj6Sr7RFioeUZCQYiMGvEgvBG5dCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLIl/2rc8t+iaFpq1rZ3bhwLiI+HMB8GA1UdIwQY
MBaAFHS0zT7fUh347AoVEREnLT+5G5nDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMt
ZTJhN2ZiODQ4MzE4LzEvc2lYX2F0enkzNkpvV21yV3RuZHVIQXVJajRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMtZTJhN2ZiODQ4MzE4
LzEvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZASMA0G
CSqGSIb3DQEBCwUAA4IBAQAwk/I46K/iawzHBpEtGxgt2Mopuf9Z4mc3RKdOAx7C
vY0H5ytUiN4PskTzLOygMTAyZIAc7SNTdkyt94144+DypCdIJ9f8i73jWUx9NXFL
+j3A14YJ2OGz3zQw09cXy5HaF0tjMVivuP7MnmxKeQqzdDqCc5tv5XTaG8JNFb4X
72RGRyS54i6Blk58bFAlzLLSy8LgJAhynHPP0DFbwCr9cYoOBZLKZ0hZmQ7dBuJX
O54QbfjEUssxo+CH1nNKh2Lu9K2ygXrbQQJtk/30ej+JUr67UfwcPYndJTu3UP4E
7gbnq3D2rnLLBzUoApTrtmliyATU9lzGVkNr+lx87c8+
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-fra.rpki-client.org