Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/0Bjr3w8FlpMmVgTqsKtwGowSowQ.roa
File: 0Bjr3w8FlpMmVgTqsKtwGowSowQ.roa (raw, json)
Hash identifier: 5JmPfXE/AEqrULvRyO9SPSVeAox6+JIjEte8weOLy5U=
Subject key identifier: D0:18:EB:DF:0F:05:96:93:26:56:04:EA:B0:AB:70:1A:8C:12:A3:04
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 018C389F555EF5E95A01AD450B159412335D
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/0Bjr3w8FlpMmVgTqsKtwGowSowQ.roa
Signing time: Tue 05 Dec 2023 06:16:55 +0000
ROA not before: Tue 05 Dec 2023 06:16:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57043
IP address blocks: 45.95.35.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:38:9f:55:5e:f5:e9:5a:01:ad:45:0b:15:94:12:33:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Dec 5 06:16:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d018ebdf0f059693265604eab0ab701a8c12a304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a4:d6:11:c3:5f:ea:75:a3:15:d3:30:07:05:
af:cd:c5:0d:2b:7b:98:d0:5d:2f:f5:ac:60:86:ac:
10:3e:b4:a7:67:73:f0:52:d4:59:85:a8:7d:47:85:
9d:2c:a9:7a:70:b0:c6:5a:c0:26:59:b5:a3:1c:a8:
5a:33:d7:56:0e:c0:32:dd:bc:50:e3:cf:86:32:03:
19:26:e1:4b:e2:b2:74:c0:c2:22:3b:ee:56:9c:de:
6b:f5:a6:d7:c4:17:54:bf:f1:60:37:32:94:2c:a4:
93:63:81:60:ed:79:78:93:39:b6:8b:9e:ab:5e:57:
68:d7:69:ac:c7:f5:ca:9d:64:54:fd:4d:a2:2a:8c:
bf:66:fc:75:77:da:2c:0f:ed:fa:d8:05:d0:3c:75:
fc:55:d8:2b:b0:2f:ac:22:5a:bc:c6:9e:c8:b4:da:
3b:59:f5:fb:03:35:83:56:6e:13:0a:c9:dc:9d:b8:
d2:83:18:c6:cc:5a:a1:13:15:76:ec:da:e6:b1:61:
ba:44:7f:56:1a:6a:e5:98:79:d5:d8:96:2e:0c:05:
bc:f3:79:0a:6d:52:ff:ab:bc:a7:91:69:a2:89:27:
18:04:20:97:77:4a:f6:66:c8:fa:fb:da:f4:ea:eb:
94:3b:6c:3b:1d:5a:06:1b:9b:02:79:94:d9:08:aa:
e7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:18:EB:DF:0F:05:96:93:26:56:04:EA:B0:AB:70:1A:8C:12:A3:04
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/0Bjr3w8FlpMmVgTqsKtwGowSowQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.35.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:1b:3e:35:f2:2e:c8:94:5c:da:32:f4:0b:70:e2:31:39:80:
cb:7b:6a:51:0e:f5:bc:a3:2e:74:a9:5c:57:8f:26:b2:fc:4f:
ba:bd:e5:0f:02:b2:d9:45:6f:f9:94:a4:f7:99:d6:1e:43:b3:
3b:b4:1b:04:9f:94:0d:82:2a:e4:eb:78:4b:9f:e1:9c:aa:c0:
d1:ba:fb:83:d1:22:bc:7e:4b:c6:83:fb:2b:4a:1e:56:78:81:
ec:24:f3:8f:92:60:7e:0f:ba:08:7d:d3:46:8a:29:61:b0:c9:
75:6f:dc:44:ed:67:25:fb:99:b7:26:0d:d8:96:8d:bd:fe:da:
1d:07:f5:66:67:da:a7:79:26:2d:86:d5:b8:3c:00:73:25:7e:
da:c3:69:a4:33:25:be:10:6b:fe:64:a0:8f:93:39:cc:48:c2:
66:9f:6b:49:21:27:7c:3f:e0:12:a5:35:ab:1b:a0:56:27:0c:
b2:c2:3c:57:88:17:74:a9:e5:72:27:8a:09:2f:84:e1:38:ca:
b5:98:f1:93:49:51:99:c9:0c:8f:b6:d7:02:52:5f:a7:09:2e:
65:cf:fc:be:5b:39:e9:98:e7:e6:42:99:10:41:2a:aa:a4:b0:
4b:c4:57:be:da:c7:81:06:b5:0c:96:35:64:0a:83:38:48:20:
50:9d:70:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYw4n1Ve9elaAa1FCxWUEjNdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjMxMjA1MDYxNjU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDE4ZWJkZjBmMDU5NjkzMjY1NjA0ZWFiMGFiNzAxYThjMTJhMzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqTWEcNf6nWjFdMwBwWvzcUNK3uY
0F0v9axghqwQPrSnZ3PwUtRZhah9R4WdLKl6cLDGWsAmWbWjHKhaM9dWDsAy3bxQ
48+GMgMZJuFL4rJ0wMIiO+5WnN5r9abXxBdUv/FgNzKULKSTY4Fg7Xl4kzm2i56r
Xldo12msx/XKnWRU/U2iKoy/Zvx1d9osD+362AXQPHX8VdgrsC+sIlq8xp7ItNo7
WfX7AzWDVm4TCsncnbjSgxjGzFqhExV27NrmsWG6RH9WGmrlmHnV2JYuDAW883kK
bVL/q7ynkWmiiScYBCCXd0r2Zsj6+9r06uuUO2w7HVoGG5sCeZTZCKrn6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNAY698PBZaTJlYE6rCrcBqMEqMEMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvMEJqcjN3OEZscE1tVmdUcXNLdHdHb3dTb3dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV8jMA0G
CSqGSIb3DQEBCwUAA4IBAQCfGz418i7IlFzaMvQLcOIxOYDLe2pRDvW8oy50qVxX
jyay/E+6veUPArLZRW/5lKT3mdYeQ7M7tBsEn5QNgirk63hLn+GcqsDRuvuD0SK8
fkvGg/srSh5WeIHsJPOPkmB+D7oIfdNGiilhsMl1b9xE7Wcl+5m3Jg3Ylo29/tod
B/VmZ9qneSYthtW4PABzJX7aw2mkMyW+EGv+ZKCPkznMSMJmn2tJISd8P+ASpTWr
G6BWJwyywjxXiBd0qeVyJ4oJL4ThOMq1mPGTSVGZyQyPttcCUl+nCS5lz/y+Wznp
mOfmQpkQQSqqpLBLxFe+2seBBrUMljVkCoM4SCBQnXA6
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:30 2024 by rpki-client on console-ams.rpki-client.org