Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/U4mu2qj_3HpC42xy8l6A4d_3zps.roa
File: U4mu2qj_3HpC42xy8l6A4d_3zps.roa (raw, json)
Hash identifier: 491UnJEcXP4mJdBppl2YT6vdNfv9SgRXXGieuajswe8=
Subject key identifier: 53:89:AE:DA:A8:FF:DC:7A:42:E3:6C:72:F2:5E:80:E1:DF:F7:CE:9B
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 01856FCB92AAA48554594A3B3933E066B831
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/U4mu2qj_3HpC42xy8l6A4d_3zps.roa
Signing time: Mon 02 Jan 2023 00:04:50 +0000
ROA not before: Mon 02 Jan 2023 00:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51167
IP address blocks: 45.92.31.0/24 maxlen: 24
45.92.30.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:92:aa:a4:85:54:59:4a:3b:39:33:e0:66:b8:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 2 00:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5389aedaa8ffdc7a42e36c72f25e80e1dff7ce9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:7c:05:ba:57:4c:0e:b6:d6:71:0c:3e:3c:
88:55:00:f8:21:47:f4:97:12:11:5b:7d:26:d4:8a:
88:1c:99:a8:f1:ee:3c:f5:55:dc:98:94:0c:63:3d:
fc:b3:a7:91:9d:05:35:63:42:99:99:c0:a6:cf:18:
e2:36:1c:b6:96:f7:38:0d:da:89:15:4d:bd:e9:e1:
c9:2a:82:aa:a5:bf:fe:cf:42:db:3d:58:50:8c:45:
77:56:2b:40:48:cd:6c:e4:09:44:92:12:6e:c3:f3:
1b:1c:dd:40:c9:18:d0:e5:11:fd:bf:58:bc:3f:53:
f6:29:2d:e7:28:dd:d5:7f:0d:eb:9e:36:bb:09:64:
16:91:a4:9d:1f:08:cd:49:82:9b:a8:4e:a0:b5:c4:
0b:df:71:ef:97:f1:fd:ed:20:49:dc:3e:0f:ba:2b:
a6:fc:bf:db:1c:ac:87:1b:a6:3f:50:6e:6d:25:fb:
8e:57:d4:0b:65:79:f4:c9:bf:e9:aa:6a:78:04:f6:
4f:fc:d1:53:1f:6c:48:83:54:d0:11:c0:64:e4:45:
1f:30:cf:74:f1:ad:bd:b0:e6:16:73:e3:c0:18:d2:
13:73:11:4d:3c:5e:0c:a2:5e:5e:0f:5b:87:44:dd:
7f:0a:97:ab:20:44:65:fd:31:a8:a9:15:2b:44:c1:
1a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:89:AE:DA:A8:FF:DC:7A:42:E3:6C:72:F2:5E:80:E1:DF:F7:CE:9B
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/U4mu2qj_3HpC42xy8l6A4d_3zps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.30.0/23
Signature Algorithm: sha256WithRSAEncryption
08:c0:66:fe:13:54:7e:ee:cd:5c:7f:6c:fc:16:16:6b:3c:58:
eb:1c:20:2f:3e:15:c4:a1:69:e4:34:29:d2:8f:46:2c:cc:6b:
26:fa:ea:28:cc:71:93:b2:a7:9a:9f:7b:79:24:84:8f:b8:c5:
85:1a:d9:52:46:79:3e:ea:6e:3a:10:40:89:c5:f3:39:45:21:
13:e1:9f:bf:33:6a:0f:5c:02:19:6d:40:c5:ed:69:17:76:c4:
3d:20:3b:b9:c5:a6:dd:f2:87:0c:81:bd:a7:d7:69:70:56:fb:
59:a0:fa:d3:2b:06:6d:a4:4b:c0:0e:51:1a:9f:50:c7:b1:34:
6e:c2:a9:a6:30:e9:70:06:aa:b3:9a:c7:1d:9a:6a:9b:cc:e3:
2c:cc:ce:81:f0:0d:fc:cd:87:96:15:19:31:8d:e9:ee:44:38:
d2:c9:28:35:fb:73:d3:bc:fe:43:22:54:83:62:34:a6:ba:99:
2a:9b:bc:2f:9e:69:f1:d9:d6:94:c7:d7:2a:70:b8:f4:09:31:
4f:a4:83:08:57:85:bb:90:0a:63:a2:f3:ee:54:c3:bb:37:c0:
20:dd:9d:7d:d6:60:ef:4f:98:ca:fe:1a:28:90:0f:23:78:78:
1e:9a:aa:46:d5:fa:90:07:6d:5b:d3:1d:f9:a1:58:f0:10:6e:
18:73:57:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvy5KqpIVUWUo7OTPgZrgxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxYzhiNzNhYjdiZGViNzZmZjQ4YjJjYTA5OTYxNmVkYmU3
MWM0MjYwHhcNMjMwMTAyMDAwNDUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1Mzg5YWVkYWE4ZmZkYzdhNDJlMzZjNzJmMjVlODBlMWRmZjdjZTliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw218BbpXTA621nEMPjyIVQD4IUf0
lxIRW30m1IqIHJmo8e489VXcmJQMYz38s6eRnQU1Y0KZmcCmzxjiNhy2lvc4DdqJ
FU296eHJKoKqpb/+z0LbPVhQjEV3VitASM1s5AlEkhJuw/MbHN1AyRjQ5RH9v1i8
P1P2KS3nKN3Vfw3rnja7CWQWkaSdHwjNSYKbqE6gtcQL33Hvl/H97SBJ3D4Puium
/L/bHKyHG6Y/UG5tJfuOV9QLZXn0yb/pqmp4BPZP/NFTH2xIg1TQEcBk5EUfMM90
8a29sOYWc+PAGNITcxFNPF4Mol5eD1uHRN1/CperIERl/TGoqRUrRMEaSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFOJrtqo/9x6QuNscvJegOHf986bMB8GA1UdIwQY
MBaAFIHItzq3vet2/0iyygmWFu2+ccQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt
ZDg0ODhiM2FiNDJmLzEvVTRtdTJxal8zSHBDNDJ4eThsNkE0ZF8zenBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm
LzEvZ2NpM09yZTk2M2JfU0xMS0NaWVc3YjV4eENZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVweMA0G
CSqGSIb3DQEBCwUAA4IBAQAIwGb+E1R+7s1cf2z8FhZrPFjrHCAvPhXEoWnkNCnS
j0YszGsm+uoozHGTsqean3t5JISPuMWFGtlSRnk+6m46EECJxfM5RSET4Z+/M2oP
XAIZbUDF7WkXdsQ9IDu5xabd8ocMgb2n12lwVvtZoPrTKwZtpEvADlEan1DHsTRu
wqmmMOlwBqqzmscdmmqbzOMszM6B8A38zYeWFRkxjenuRDjSySg1+3PTvP5DIlSD
YjSmupkqm7wvnmnx2daUx9cqcLj0CTFPpIMIV4W7kApjovPuVMO7N8Ag3Z191mDv
T5jK/hookA8jeHgemqpG1fqQB21b0x35oVjwEG4Yc1ez
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:02 2024 by rpki-client on console-ams.rpki-client.org