Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/2JxLr6oSdX0VL7MaB6wrpbzbsEo.roa
File: 2JxLr6oSdX0VL7MaB6wrpbzbsEo.roa (raw, json)
Hash identifier: ebOzuyQNH0XG5y6wQjCcQJ6F1+SeqOI44/TPmXJveks=
Subject key identifier: D8:9C:4B:AF:AA:12:75:7D:15:2F:B3:1A:07:AC:2B:A5:BC:DB:B0:4A
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 018A4023EFDAF2A78E0F51E10E6357A9B0E8
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/2JxLr6oSdX0VL7MaB6wrpbzbsEo.roa
Signing time: Tue 29 Aug 2023 07:13:31 +0000
ROA not before: Tue 29 Aug 2023 07:13:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199654
IP address blocks: 45.95.35.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Dec 2023 13:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:40:23:ef:da:f2:a7:8e:0f:51:e1:0e:63:57:a9:b0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Aug 29 07:13:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d89c4bafaa12757d152fb31a07ac2ba5bcdbb04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:02:cd:4a:d0:82:68:40:7c:7d:e3:5e:42:05:
d7:e9:6b:97:09:6d:0a:4f:7d:fa:2e:b8:5e:7f:a6:
28:48:da:09:e5:e3:80:de:26:db:b8:21:7d:bc:e2:
41:c8:49:2d:db:0f:dc:30:eb:6c:fb:fd:02:2f:71:
99:22:69:b0:89:f1:44:38:b3:86:e6:2c:e9:a3:63:
96:59:ec:35:37:cd:2f:93:fd:0e:8a:80:17:96:65:
19:f6:53:0e:7b:63:b7:54:f3:0b:ea:5a:7d:fb:b6:
4a:06:99:b3:34:1a:1f:fa:30:62:d3:cc:56:23:3e:
1b:78:f4:3e:02:95:29:8b:ae:4b:13:fc:5f:b3:8b:
3e:43:84:f9:0b:99:ca:1f:ae:e0:c1:37:80:71:6f:
1f:d9:7e:25:b9:e1:93:c7:22:65:07:40:b3:cf:58:
8d:33:0f:c2:76:c4:e7:1e:e7:14:76:16:a3:53:1b:
0f:f6:1c:14:b0:26:85:56:85:75:aa:61:02:8c:e4:
49:e4:66:5d:20:a3:79:a5:a2:56:50:18:5c:ed:13:
c5:79:e7:cf:ac:ea:e6:7b:43:13:52:9b:d9:b4:19:
47:56:85:1c:aa:10:aa:f8:11:b3:fb:ac:48:87:0a:
57:61:ec:49:d2:e2:1f:bc:61:e9:28:de:60:a3:c2:
45:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:9C:4B:AF:AA:12:75:7D:15:2F:B3:1A:07:AC:2B:A5:BC:DB:B0:4A
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/2JxLr6oSdX0VL7MaB6wrpbzbsEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.35.0/24
Signature Algorithm: sha256WithRSAEncryption
17:ea:2d:90:04:f0:05:84:d5:8f:2b:1c:e4:0d:b7:03:84:00:
ed:9d:30:02:e1:2f:c7:8e:4f:dd:82:5e:c8:6c:d1:24:d3:11:
31:be:10:39:11:d5:27:e9:c6:51:15:f0:0c:03:08:3e:95:c3:
32:d4:db:a5:dc:b1:ab:d2:4d:e3:d3:f0:cc:26:ae:b1:d5:f5:
7b:6f:2e:75:8d:f2:da:5d:52:71:fb:23:e1:f2:2b:e7:c6:d2:
ee:cd:f4:43:ec:13:67:d6:3c:5d:1f:b0:48:97:48:66:bb:5e:
d7:dc:65:09:78:f1:64:bd:36:d2:a6:d5:c4:ce:0b:44:cf:d2:
cc:2a:61:86:a5:c5:5c:0e:c4:e0:67:dd:6c:32:a2:e5:b0:8e:
36:bc:1d:32:ab:cc:d5:6f:10:7c:e4:01:d7:e9:c7:3f:47:7a:
6e:69:dc:08:bd:e8:18:41:fa:ef:8e:5b:26:a2:02:77:d9:53:
67:4c:6e:3f:f7:d0:fa:de:4b:1b:b3:90:c5:2d:86:04:03:dc:
64:37:5e:c6:8f:64:fb:c6:b6:36:5d:5d:3c:bc:95:eb:3e:99:
3d:74:08:53:10:d8:e1:d1:f4:df:bc:b1:9c:b0:a1:42:1d:79:
21:39:62:c7:54:c5:6d:fc:1e:eb:ea:ae:4b:c2:1f:b6:b5:9f:
a8:f3:8a:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYpAI+/a8qeOD1HhDmNXqbDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjMwODI5MDcxMzMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkODljNGJhZmFhMTI3NTdkMTUyZmIzMWEwN2FjMmJhNWJjZGJiMDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgALNStCCaEB8feNeQgXX6WuXCW0K
T336Lrhef6YoSNoJ5eOA3ibbuCF9vOJByEkt2w/cMOts+/0CL3GZImmwifFEOLOG
5izpo2OWWew1N80vk/0OioAXlmUZ9lMOe2O3VPML6lp9+7ZKBpmzNBof+jBi08xW
Iz4bePQ+ApUpi65LE/xfs4s+Q4T5C5nKH67gwTeAcW8f2X4lueGTxyJlB0Czz1iN
Mw/CdsTnHucUdhajUxsP9hwUsCaFVoV1qmECjORJ5GZdIKN5paJWUBhc7RPFeefP
rOrme0MTUpvZtBlHVoUcqhCq+BGz+6xIhwpXYexJ0uIfvGHpKN5go8JF9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNicS6+qEnV9FS+zGgesK6W827BKMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvMkp4THI2b1NkWDBWTDdNYUI2d3JwYnpic0VvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV8jMA0G
CSqGSIb3DQEBCwUAA4IBAQAX6i2QBPAFhNWPKxzkDbcDhADtnTAC4S/Hjk/dgl7I
bNEk0xExvhA5EdUn6cZRFfAMAwg+lcMy1Nul3LGr0k3j0/DMJq6x1fV7by51jfLa
XVJx+yPh8ivnxtLuzfRD7BNn1jxdH7BIl0hmu17X3GUJePFkvTbSptXEzgtEz9LM
KmGGpcVcDsTgZ91sMqLlsI42vB0yq8zVbxB85AHX6cc/R3puadwIvegYQfrvjlsm
ogJ32VNnTG4/99D63ksbs5DFLYYEA9xkN17Gj2T7xrY2XV08vJXrPpk9dAhTENjh
0fTfvLGcsKFCHXkhOWLHVMVt/B7r6q5Lwh+2tZ+o84rf
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:49 2024 by rpki-client on console-ams.rpki-client.org