Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/777c74-c6c0-4679-b0bc-4331a1f1abd0/1/WCxZHbkwAGbYjZyi8L-80Voa7oE.roa
File: WCxZHbkwAGbYjZyi8L-80Voa7oE.roa (raw, json)
Hash identifier: lY6ILLPCJSJARE1Ypkln/8VRyiz2hvn0g0vC+x/rixs=
Subject key identifier: 58:2C:59:1D:B9:30:00:66:D8:8D:9C:A2:F0:BF:BC:D1:5A:1A:EE:81
Certificate issuer: /CN=11f5d5e61b0ba4dc7bcc733e5ab2125735356b2f
Certificate serial: 01856B6EB191C48E38AE93282EFCBB4BD707
Authority key identifier: 11:F5:D5:E6:1B:0B:A4:DC:7B:CC:73:3E:5A:B2:12:57:35:35:6B:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EfXV5hsLpNx7zHM-WrISVzU1ay8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/777c74-c6c0-4679-b0bc-4331a1f1abd0/1/WCxZHbkwAGbYjZyi8L-80Voa7oE.roa
Signing time: Sun 01 Jan 2023 03:44:54 +0000
ROA not before: Sun 01 Jan 2023 03:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51747
IP address blocks: 45.146.48.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:6e:b1:91:c4:8e:38:ae:93:28:2e:fc:bb:4b:d7:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11f5d5e61b0ba4dc7bcc733e5ab2125735356b2f
Validity
Not Before: Jan 1 03:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=582c591db9300066d88d9ca2f0bfbcd15a1aee81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2f:79:fc:4f:9d:82:b9:68:50:4e:1d:ca:31:
e6:af:95:a6:16:e1:43:5b:6e:37:78:55:f5:10:a9:
19:15:ee:83:0c:fb:e3:44:cc:e5:61:15:87:be:1f:
d2:96:d2:1f:93:ca:1e:a4:07:7c:4d:35:9d:7a:7a:
4b:a9:91:a1:2a:5b:e2:b9:b0:e5:46:50:ed:98:15:
24:63:e6:f2:7b:d1:9a:f1:75:35:1d:4c:2e:df:6f:
dd:e8:72:77:b4:67:ba:26:a2:5a:a9:f2:a6:7a:07:
6f:c3:41:54:33:f8:eb:a1:38:21:79:29:60:ed:d2:
4f:c6:cc:b2:b4:8a:00:26:19:1c:3a:78:1e:44:e5:
9c:13:0b:7d:3b:a3:d6:8b:4c:f4:7c:30:1f:da:93:
3a:68:d6:c8:6c:19:9e:ba:50:51:ec:bb:49:b5:ea:
37:87:eb:43:ec:4b:e0:12:92:43:33:f0:28:b4:c6:
7e:f3:d4:26:6b:cf:06:67:48:00:4b:0e:47:16:f6:
68:af:2d:ea:1b:60:11:1c:b3:ce:ee:a6:b2:07:93:
52:94:51:0f:bf:1f:56:a0:3c:38:84:00:3a:97:73:
a1:28:51:7f:62:02:33:04:8c:9c:77:11:ac:f2:3c:
c2:0a:27:48:aa:1c:03:58:4d:ba:2c:e6:dd:e3:07:
bf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:2C:59:1D:B9:30:00:66:D8:8D:9C:A2:F0:BF:BC:D1:5A:1A:EE:81
X509v3 Authority Key Identifier:
keyid:11:F5:D5:E6:1B:0B:A4:DC:7B:CC:73:3E:5A:B2:12:57:35:35:6B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EfXV5hsLpNx7zHM-WrISVzU1ay8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/777c74-c6c0-4679-b0bc-4331a1f1abd0/1/WCxZHbkwAGbYjZyi8L-80Voa7oE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/777c74-c6c0-4679-b0bc-4331a1f1abd0/1/EfXV5hsLpNx7zHM-WrISVzU1ay8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.48.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:b2:53:cc:26:97:1c:02:f3:41:14:11:99:ed:87:a1:dc:86:
33:4a:a4:44:b9:d1:25:76:08:ab:ca:8d:8f:2f:3e:cf:67:57:
71:76:d3:3b:d3:23:b4:34:cf:a8:74:2e:d2:b9:dc:36:23:c4:
f4:79:64:8c:af:89:ae:a0:84:0c:2f:ac:f3:9d:f1:6a:c7:f0:
a3:ee:8c:b6:24:9c:78:20:55:a0:dc:d2:bc:00:bd:0e:7c:07:
02:7c:52:37:27:8b:5a:03:c2:a1:84:a4:85:ca:41:55:d4:c5:
d0:19:42:29:66:c2:1d:50:8a:b1:f3:84:4f:28:62:d8:cd:b8:
c1:66:75:51:74:e3:44:9b:57:1f:98:9f:c3:19:0c:7a:a5:4f:
6b:82:19:b8:d6:89:88:ae:56:45:e0:73:d4:0f:09:f5:1d:5c:
e0:0a:6d:05:22:36:4a:d9:df:f5:2a:4d:06:dc:a5:28:76:0d:
80:99:2f:d9:a9:20:86:10:03:2e:58:b1:bd:2b:8c:97:0d:76:
8d:18:d5:24:bb:53:52:d0:f5:20:d2:6b:df:8c:86:16:42:57:
14:24:e2:d3:e9:45:ab:c7:be:f9:e0:c5:55:98:73:17:3b:e5:
c4:6c:7a:15:2a:49:e6:55:2e:04:d1:a2:6e:98:33:ab:be:2b:
ad:47:9f:ae
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrbrGRxI44rpMoLvy7S9cHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExZjVkNWU2MWIwYmE0ZGM3YmNjNzMzZTVhYjIxMjU3MzUz
NTZiMmYwHhcNMjMwMTAxMDM0NDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODJjNTkxZGI5MzAwMDY2ZDg4ZDljYTJmMGJmYmNkMTVhMWFlZTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC95/E+dgrloUE4dyjHmr5WmFuFD
W243eFX1EKkZFe6DDPvjRMzlYRWHvh/SltIfk8oepAd8TTWdenpLqZGhKlviubDl
RlDtmBUkY+bye9Ga8XU1HUwu32/d6HJ3tGe6JqJaqfKmegdvw0FUM/jroTgheSlg
7dJPxsyytIoAJhkcOngeROWcEwt9O6PWi0z0fDAf2pM6aNbIbBmeulBR7LtJteo3
h+tD7EvgEpJDM/AotMZ+89Qma88GZ0gASw5HFvZory3qG2ARHLPO7qayB5NSlFEP
vx9WoDw4hAA6l3OhKFF/YgIzBIycdxGs8jzCCidIqhwDWE26LObd4we/GQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFgsWR25MABm2I2covC/vNFaGu6BMB8GA1UdIwQY
MBaAFBH11eYbC6Tce8xzPlqyElc1NWsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWZYVjVoc0xwTng3ekhNLVdySVNWelUxYXk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS83NzdjNzQtYzZjMC00Njc5LWIwYmMt
NDMzMWExZjFhYmQwLzEvV0N4Wkhia3dBR2JZalp5aThMLTgwVm9hN29FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS83NzdjNzQtYzZjMC00Njc5LWIwYmMtNDMzMWExZjFhYmQw
LzEvRWZYVjVoc0xwTng3ekhNLVdySVNWelUxYXk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZIwMA0G
CSqGSIb3DQEBCwUAA4IBAQA7slPMJpccAvNBFBGZ7Yeh3IYzSqREudEldgiryo2P
Lz7PZ1dxdtM70yO0NM+odC7Sudw2I8T0eWSMr4muoIQML6zznfFqx/Cj7oy2JJx4
IFWg3NK8AL0OfAcCfFI3J4taA8KhhKSFykFV1MXQGUIpZsIdUIqx84RPKGLYzbjB
ZnVRdONEm1cfmJ/DGQx6pU9rghm41omIrlZF4HPUDwn1HVzgCm0FIjZK2d/1Kk0G
3KUodg2AmS/ZqSCGEAMuWLG9K4yXDXaNGNUku1NS0PUg0mvfjIYWQlcUJOLT6UWr
x7754MVVmHMXO+XEbHoVKknmVS4E0aJumDOrviutR5+u
-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:10 2024 by rpki-client on console-ams.rpki-client.org