Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/g2iL2tx_Rd9JBO8KH03BqYVWm_I.roa
File: g2iL2tx_Rd9JBO8KH03BqYVWm_I.roa (raw, json)
Hash identifier: GC4kRMJ5sFzi8cC/niIH7hy5t14I1GBP9SfgnNALR5U=
Subject key identifier: 83:68:8B:DA:DC:7F:45:DF:49:04:EF:0A:1F:4D:C1:A9:85:56:9B:F2
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F799BA52C36956E42F89D01F3F21155
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/g2iL2tx_Rd9JBO8KH03BqYVWm_I.roa
Signing time: Sun 01 Jan 2023 22:35:18 +0000
ROA not before: Sun 01 Jan 2023 22:35:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213277
IP address blocks: 45.92.229.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:9b:a5:2c:36:95:6e:42:f8:9d:01:f3:f2:11:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=83688bdadc7f45df4904ef0a1f4dc1a985569bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:71:39:31:3a:78:7b:e7:2a:64:99:7b:1f:c5:
f5:8c:d5:ec:7e:8c:d7:b8:95:2f:ca:26:c7:25:ff:
64:95:8a:3b:ef:3b:71:07:ef:17:6d:00:93:ab:47:
7d:7e:db:59:50:75:01:e3:e2:8a:eb:b6:97:bc:7a:
62:c7:a6:14:77:93:b4:3e:b5:73:00:71:c0:a1:7e:
f4:22:e2:a4:f3:8c:7e:ce:3a:37:96:bd:a0:d3:b2:
ec:bc:e2:bb:96:b8:2b:1d:df:f5:27:c3:74:ac:e4:
85:54:46:02:ae:06:b7:dc:cf:df:16:b1:b5:d1:5e:
db:29:7d:4f:09:79:99:69:22:9f:0c:9f:7c:6d:af:
83:84:b3:63:9c:fc:03:c0:d0:c4:59:48:a8:09:a8:
9b:2b:96:0f:9e:56:e9:bb:7b:74:45:3c:a8:83:f9:
91:72:20:c7:34:d1:89:a1:5e:af:6f:e8:29:5f:85:
99:01:e0:76:b2:f6:6d:24:5a:df:5c:bc:d2:f8:28:
38:6d:e9:af:b7:94:7e:60:b5:f0:ca:89:cf:ac:7a:
1c:d9:90:5c:44:04:3c:36:b3:7f:7a:12:b0:32:f2:
29:25:a0:31:24:8c:75:be:4a:f4:7f:21:8c:c3:7a:
1b:35:75:a8:10:a8:63:6e:ec:55:5e:eb:0a:51:31:
e7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:68:8B:DA:DC:7F:45:DF:49:04:EF:0A:1F:4D:C1:A9:85:56:9B:F2
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/g2iL2tx_Rd9JBO8KH03BqYVWm_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.229.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:80:42:7d:b5:97:e2:9a:83:bb:98:12:9c:19:87:e0:d2:02:
9d:a0:75:bd:38:03:b3:60:ab:4a:eb:0e:83:6e:9f:c3:b3:9f:
d8:5d:77:2a:ba:af:9c:c8:02:91:af:d3:2a:1e:81:62:91:59:
44:a1:a1:5e:48:93:ae:55:81:ae:e2:c7:a5:e8:21:20:9d:0c:
cd:5e:14:6d:46:9d:56:b9:e2:cc:6e:24:6b:02:c3:a6:c0:06:
1c:03:ba:d6:e5:57:92:42:cc:19:06:c3:9d:ab:11:25:12:40:
69:e2:9a:a5:b6:f3:f0:71:ef:be:67:68:ce:2c:3a:72:4a:43:
c8:12:d0:f6:43:8a:17:df:3e:3a:86:55:fa:4f:f3:dc:ab:6c:
1a:13:b7:c8:fc:61:ff:87:86:0c:34:38:a3:64:68:ab:9a:e7:
54:09:f3:b9:92:4e:11:80:28:b7:cd:10:62:8c:de:12:93:dd:
05:bb:5c:9a:0d:68:40:a8:59:44:4a:c0:0b:9d:c2:c9:ce:e8:
c6:14:30:c8:17:e8:e5:5a:0a:72:f0:7e:4e:07:80:e2:77:55:
4c:e6:63:19:97:8f:26:bc:c6:b3:b5:e1:44:e4:ed:36:0e:68:
a9:be:08:7c:7f:24:0c:ea:80:51:44:0f:d3:e7:c7:0c:9a:26:
e8:c5:4a:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVveZulLDaVbkL4nQHz8hFVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwMTAxMjIzNTE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MzY4OGJkYWRjN2Y0NWRmNDkwNGVmMGExZjRkYzFhOTg1NTY5YmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3E5MTp4e+cqZJl7H8X1jNXsfozX
uJUvyibHJf9klYo77ztxB+8XbQCTq0d9fttZUHUB4+KK67aXvHpix6YUd5O0PrVz
AHHAoX70IuKk84x+zjo3lr2g07LsvOK7lrgrHd/1J8N0rOSFVEYCrga33M/fFrG1
0V7bKX1PCXmZaSKfDJ98ba+DhLNjnPwDwNDEWUioCaibK5YPnlbpu3t0RTyog/mR
ciDHNNGJoV6vb+gpX4WZAeB2svZtJFrfXLzS+Cg4bemvt5R+YLXwyonPrHoc2ZBc
RAQ8NrN/ehKwMvIpJaAxJIx1vkr0fyGMw3obNXWoEKhjbuxVXusKUTHn0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFINoi9rcf0XfSQTvCh9NwamFVpvyMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvZzJpTDJ0eF9SZDlKQk84S0gwM0JxWVZXbV9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVzlMA0G
CSqGSIb3DQEBCwUAA4IBAQAfgEJ9tZfimoO7mBKcGYfg0gKdoHW9OAOzYKtK6w6D
bp/Ds5/YXXcquq+cyAKRr9MqHoFikVlEoaFeSJOuVYGu4sel6CEgnQzNXhRtRp1W
ueLMbiRrAsOmwAYcA7rW5VeSQswZBsOdqxElEkBp4pqltvPwce++Z2jOLDpySkPI
EtD2Q4oX3z46hlX6T/Pcq2waE7fI/GH/h4YMNDijZGirmudUCfO5kk4RgCi3zRBi
jN4Sk90Fu1yaDWhAqFlESsALncLJzujGFDDIF+jlWgpy8H5OB4Did1VM5mMZl48m
vMazteFE5O02Dmipvgh8fyQM6oBRRA/T58cMmiboxUqr
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org