Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/3IoZg6AsrycmYSISBE62juHRO3I.roa
File: 3IoZg6AsrycmYSISBE62juHRO3I.roa (raw, json)
Hash identifier: 1ctPkJ5w7bBLzdU6on79axKZ297oPVVYCZ7tOJd0foY=
Subject key identifier: DC:8A:19:83:A0:2C:AF:27:26:61:22:12:04:4E:B6:8E:E1:D1:3B:72
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 0189005AC8E94A61A77C0CD705756EAA61DB
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/3IoZg6AsrycmYSISBE62juHRO3I.roa
Signing time: Wed 28 Jun 2023 04:54:56 +0000
ROA not before: Wed 28 Jun 2023 04:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.146.200.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 06:46:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:00:5a:c8:e9:4a:61:a7:7c:0c:d7:05:75:6e:aa:61:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jun 28 04:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dc8a1983a02caf2726612212044eb68ee1d13b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:55:d3:f8:f1:71:fb:7f:09:e0:40:a9:e5:86:
81:9d:b6:ce:b1:b8:18:ec:71:85:0d:9e:a4:6a:b0:
cf:a5:dd:8c:86:f9:56:46:00:37:0d:18:53:16:d9:
12:1a:7f:2e:7d:75:91:ce:90:41:03:9e:56:d6:08:
1e:94:ac:39:2a:f5:e8:c1:d7:12:29:e3:b4:75:32:
f9:31:ef:9e:8b:71:aa:ad:a4:a8:f2:82:f5:f7:44:
62:5d:91:2a:f7:6b:9c:78:e5:37:07:c0:cc:5a:fe:
03:7e:b3:f9:48:d0:6a:05:ab:91:81:e4:ba:71:70:
fc:73:42:74:30:aa:9d:cf:dc:a7:ee:98:7d:89:40:
ff:f6:c4:c3:5a:30:08:a9:b6:1e:70:1b:59:35:c7:
74:90:eb:45:6f:55:f9:9b:ed:20:18:20:6d:1e:17:
a6:00:0d:1c:17:e3:10:3f:5a:b4:67:ee:d4:50:eb:
0c:5f:c5:1d:61:ff:b5:d6:86:3d:4e:64:8a:09:a3:
8d:a3:30:db:b9:37:6a:65:55:d0:92:fd:db:89:d4:
6b:93:93:91:69:1e:b9:2f:c7:88:6e:18:ee:89:5d:
ac:2c:46:16:d8:c1:bc:18:66:13:06:ac:0f:33:73:
d6:c3:ed:03:c2:c7:dc:de:7b:88:ff:80:3d:4c:89:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8A:19:83:A0:2C:AF:27:26:61:22:12:04:4E:B6:8E:E1:D1:3B:72
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/3IoZg6AsrycmYSISBE62juHRO3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.200.0/23
Signature Algorithm: sha256WithRSAEncryption
32:03:93:b8:61:f6:50:89:a4:f6:eb:45:fa:ac:f0:16:ce:e9:
15:71:b5:2f:be:e2:aa:27:e8:bc:f8:9e:b1:c7:2e:57:0c:0c:
0a:b1:d9:46:fa:c2:6d:2d:70:55:f1:37:d9:43:e3:1a:0f:c0:
17:94:67:25:01:f7:88:cf:2f:ed:37:cd:8a:f2:0b:b1:d7:8b:
6a:64:c5:14:a2:a4:4e:5d:86:a0:d0:7d:94:63:24:1b:5a:1d:
73:c9:11:23:1c:bc:12:e4:c5:7d:b4:a6:d8:fd:36:78:a9:57:
fa:b3:3f:da:61:9f:4b:71:06:72:53:85:44:b8:2b:37:f6:22:
72:40:c7:94:ec:72:95:c2:89:50:e7:43:fe:5c:0b:7c:33:52:
71:9d:9e:50:7c:df:2a:39:ab:23:4c:4a:ce:2a:9d:74:f5:75:
94:dd:48:cf:b8:81:c2:b7:24:1f:1c:0f:e2:55:0f:6e:cf:44:
73:8c:87:69:31:15:a5:37:54:6f:4e:9c:54:03:3c:c6:9e:a4:
e9:20:4e:5f:73:33:6c:e0:a4:f7:8f:d1:c6:78:08:93:66:8b:
55:91:50:31:a6:d6:4b:b4:93:cc:cf:a0:28:8f:88:bf:28:3d:
bd:17:84:49:ea:91:3c:53:97:09:6b:b4:6a:94:44:df:c3:ae:
4e:5c:65:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkAWsjpSmGnfAzXBXVuqmHbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjMwNjI4MDQ1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYzhhMTk4M2EwMmNhZjI3MjY2MTIyMTIwNDRlYjY4ZWUxZDEzYjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVXT+PFx+38J4ECp5YaBnbbOsbgY
7HGFDZ6karDPpd2MhvlWRgA3DRhTFtkSGn8ufXWRzpBBA55W1ggelKw5KvXowdcS
KeO0dTL5Me+ei3GqraSo8oL190RiXZEq92uceOU3B8DMWv4DfrP5SNBqBauRgeS6
cXD8c0J0MKqdz9yn7ph9iUD/9sTDWjAIqbYecBtZNcd0kOtFb1X5m+0gGCBtHhem
AA0cF+MQP1q0Z+7UUOsMX8UdYf+11oY9TmSKCaONozDbuTdqZVXQkv3bidRrk5OR
aR65L8eIbhjuiV2sLEYW2MG8GGYTBqwPM3PWw+0Dwsfc3nuI/4A9TIlwpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNyKGYOgLK8nJmEiEgROto7h0TtyMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvM0lvWmc2QXNyeWNtWVNJU0JFNjJqdUhSTzNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZLIMA0G
CSqGSIb3DQEBCwUAA4IBAQAyA5O4YfZQiaT260X6rPAWzukVcbUvvuKqJ+i8+J6x
xy5XDAwKsdlG+sJtLXBV8TfZQ+MaD8AXlGclAfeIzy/tN82K8gux14tqZMUUoqRO
XYag0H2UYyQbWh1zyREjHLwS5MV9tKbY/TZ4qVf6sz/aYZ9LcQZyU4VEuCs39iJy
QMeU7HKVwolQ50P+XAt8M1JxnZ5QfN8qOasjTErOKp109XWU3UjPuIHCtyQfHA/i
VQ9uz0RzjIdpMRWlN1RvTpxUAzzGnqTpIE5fczNs4KT3j9HGeAiTZotVkVAxptZL
tJPMz6Aoj4i/KD29F4RJ6pE8U5cJa7RqlETfw65OXGV8
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:49 2024 by rpki-client on console-ams.rpki-client.org