Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SKMvAzRT4Tv-VIMidbf5BUSE7Us.roa
File: SKMvAzRT4Tv-VIMidbf5BUSE7Us.roa (raw, json)
Hash identifier: j0Qt6B6n8z9ICWzE5QmjLvjn+y5Qv7ZbY87Hbex29T4=
Subject key identifier: 48:A3:2F:03:34:53:E1:3B:FE:54:83:22:75:B7:F9:05:44:84:ED:4B
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F799A2088979ED169E44F2B0C593FEF
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SKMvAzRT4Tv-VIMidbf5BUSE7Us.roa
Signing time: Sun 01 Jan 2023 22:35:18 +0000
ROA not before: Sun 01 Jan 2023 22:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212042
IP address blocks: 45.87.29.0/24 maxlen: 24
45.150.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:9a:20:88:97:9e:d1:69:e4:4f:2b:0c:59:3f:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48a32f033453e13bfe54832275b7f9054484ed4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a5:f2:a2:70:f2:02:2d:eb:d0:9e:4c:94:23:
19:77:9c:7e:86:0e:37:83:8e:09:6b:ee:ed:f0:58:
33:1c:ca:5d:f7:56:0f:68:fa:de:b4:77:50:ea:0a:
c6:8a:14:03:19:63:10:9e:2c:ed:42:08:5a:53:71:
7d:f4:c6:dd:0c:07:18:29:06:ae:96:68:fd:d0:1f:
b4:96:a3:91:dd:36:83:53:49:44:de:8f:65:5e:34:
f8:4b:e9:f1:02:0b:31:7b:1c:3b:7f:14:f5:93:21:
55:31:66:5f:81:8b:6c:26:4a:c2:65:ac:fc:67:f3:
8b:d7:99:3f:cf:b7:6a:7e:ad:b0:58:d6:f9:e8:05:
6e:ee:45:c5:28:cf:69:6e:2e:1f:a9:b2:8b:52:e8:
51:e2:05:c9:c7:2c:84:71:94:5c:35:8f:8a:cb:44:
aa:d0:bb:63:af:50:74:51:28:52:2f:21:47:2e:b4:
b2:64:23:6e:13:4a:3f:96:16:b8:72:e4:bc:8f:02:
6b:41:82:44:d8:ab:28:7b:da:6e:23:e8:a6:d4:e7:
cc:00:28:19:bf:16:9b:8b:93:f0:f0:cb:62:7d:80:
8f:54:75:c7:b7:f1:71:a8:6e:98:3d:84:20:5f:79:
6a:80:84:28:c9:dc:a4:3c:ef:27:f9:47:f6:ac:50:
89:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A3:2F:03:34:53:E1:3B:FE:54:83:22:75:B7:F9:05:44:84:ED:4B
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/SKMvAzRT4Tv-VIMidbf5BUSE7Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.29.0/24
45.150.95.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:d5:c9:64:92:6f:5d:f2:86:90:ac:ed:79:c3:e2:8b:42:b1:
d6:ad:b4:0c:fa:66:15:b0:49:55:46:89:4c:f4:48:1f:8c:15:
24:4e:16:5d:fb:dd:f9:c3:3a:5d:2e:96:52:ef:8f:e1:ce:78:
9f:6b:ab:81:d5:53:53:99:0c:4b:be:c8:cf:9f:72:64:e4:27:
b8:6a:e0:8b:c5:2b:64:9b:ee:76:d7:85:cd:1a:ff:60:a5:a3:
0c:b2:04:89:4d:59:95:77:e8:ef:a0:70:cd:da:a9:76:72:36:
15:81:42:07:61:e7:99:4c:eb:86:ce:07:1a:76:69:75:97:5b:
59:34:20:a0:2b:42:eb:c8:76:d8:75:c8:ef:5e:86:bf:19:38:
1e:49:19:50:4f:41:a2:7c:dc:78:04:c7:2e:56:23:7e:dc:d3:
55:67:8e:ce:e3:44:73:3c:bc:2b:ef:5e:46:c6:ac:66:2e:42:
d9:97:29:4c:26:82:49:33:7b:aa:61:fe:3a:74:1b:ce:18:8d:
0f:49:fb:b0:e7:48:82:31:cd:a2:b5:04:89:8e:c5:49:9a:08:
69:be:a7:db:56:fb:53:7b:da:cb:99:9a:81:04:c8:76:0b:b0:
ec:f1:1b:69:aa:9a:cd:5c:a8:43:f2:f1:2b:5f:79:dc:3b:5a:
c0:dd:57:70
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVveZogiJee0WnkTysMWT/vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwMTAxMjIzNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGEzMmYwMzM0NTNlMTNiZmU1NDgzMjI3NWI3ZjkwNTQ0ODRlZDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqXyonDyAi3r0J5MlCMZd5x+hg43
g44Ja+7t8FgzHMpd91YPaPretHdQ6grGihQDGWMQniztQghaU3F99MbdDAcYKQau
lmj90B+0lqOR3TaDU0lE3o9lXjT4S+nxAgsxexw7fxT1kyFVMWZfgYtsJkrCZaz8
Z/OL15k/z7dqfq2wWNb56AVu7kXFKM9pbi4fqbKLUuhR4gXJxyyEcZRcNY+Ky0Sq
0Ltjr1B0UShSLyFHLrSyZCNuE0o/lha4cuS8jwJrQYJE2Ksoe9puI+im1OfMACgZ
vxabi5Pw8MtifYCPVHXHt/FxqG6YPYQgX3lqgIQoydykPO8n+Uf2rFCJbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEijLwM0U+E7/lSDInW3+QVEhO1LMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvU0tNdkF6UlQ0VHYtVklNaWRiZjVCVVNFN1VzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVcdAwQA
LZZfMA0GCSqGSIb3DQEBCwUAA4IBAQDA1clkkm9d8oaQrO15w+KLQrHWrbQM+mYV
sElVRolM9EgfjBUkThZd+935wzpdLpZS74/hznifa6uB1VNTmQxLvsjPn3Jk5Ce4
auCLxStkm+5214XNGv9gpaMMsgSJTVmVd+jvoHDN2ql2cjYVgUIHYeeZTOuGzgca
dml1l1tZNCCgK0LryHbYdcjvXoa/GTgeSRlQT0GifNx4BMcuViN+3NNVZ47O40Rz
PLwr715GxqxmLkLZlylMJoJJM3uqYf46dBvOGI0PSfuw50iCMc2itQSJjsVJmghp
vqfbVvtTe9rLmZqBBMh2C7Ds8RtpqprNXKhD8vErX3ncO1rA3Vdw
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:43 2024 by rpki-client on console-ams.rpki-client.org