Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ibrtxqf-Sj2rXXtvccskQMJLBZk.roa
File: ibrtxqf-Sj2rXXtvccskQMJLBZk.roa (raw, json)
Hash identifier: ajhlFAhtLOqav8uOH1A099/HTW8FjY7zHIXJRFxRwKw=
Subject key identifier: 89:BA:ED:C6:A7:FE:4A:3D:AB:5D:7B:6F:71:CB:24:40:C2:4B:05:99
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018730E2985FF93614C3A96B2A60C878AB10
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ibrtxqf-Sj2rXXtvccskQMJLBZk.roa
Signing time: Thu 30 Mar 2023 04:59:29 +0000
ROA not before: Thu 30 Mar 2023 04:59:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.83.207.0/24 maxlen: 24
2a07:e342::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 30 Mar 2023 18:42:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:30:e2:98:5f:f9:36:14:c3:a9:6b:2a:60:c8:78:ab:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Mar 30 04:59:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89baedc6a7fe4a3dab5d7b6f71cb2440c24b0599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:98:aa:ec:76:df:d6:97:4a:f4:bd:7f:1c:6a:
d9:14:f0:4e:dd:2e:8e:27:f5:03:cf:18:5e:2c:1b:
41:50:36:eb:88:a2:2a:fc:cb:01:37:d5:7f:40:76:
8c:32:e3:d0:aa:04:4b:2d:5b:13:c3:25:1d:b0:71:
81:8f:49:9f:cc:d5:9b:17:ed:f0:da:0d:c5:41:52:
cb:77:b8:e3:fb:16:88:f5:25:44:b7:22:2b:2c:8c:
5f:ea:a8:d9:f2:4c:ff:32:ba:b7:3b:8d:79:ed:63:
bb:13:bc:31:af:82:e0:50:c4:44:da:60:28:86:3f:
75:80:e4:dc:99:7b:b6:da:b5:5b:a6:78:f0:f3:db:
4d:b9:e0:c7:6a:a1:6f:6c:c6:4f:6b:8f:6f:fe:f6:
d3:a7:b4:58:06:e9:e5:9f:af:5d:87:fa:ed:07:5d:
e4:bb:51:5c:0b:2b:60:56:5e:b2:a8:91:d1:31:d0:
e0:16:82:28:40:56:c1:27:01:4d:4f:bc:0d:30:c3:
97:c1:77:ea:d1:1f:e2:5b:3f:2b:2b:1a:7b:63:33:
a5:85:8b:8c:5f:64:10:32:c4:77:b2:c2:36:c5:19:
00:5a:f4:59:3e:7a:70:17:41:fc:96:2b:62:af:7b:
dd:79:ff:7e:b3:f0:9b:87:5c:8e:54:1c:ce:00:49:
c5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:BA:ED:C6:A7:FE:4A:3D:AB:5D:7B:6F:71:CB:24:40:C2:4B:05:99
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ibrtxqf-Sj2rXXtvccskQMJLBZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.207.0/24
IPv6:
2a07:e342::/32
Signature Algorithm: sha256WithRSAEncryption
8b:15:6f:c2:26:04:c4:98:28:9d:07:9a:d9:f3:cf:aa:f9:f3:
c1:1a:9d:29:95:23:3d:46:d2:d6:ad:46:47:1e:27:63:b3:3c:
6d:78:5f:f6:88:27:8f:38:92:52:47:09:28:58:ca:3d:9f:5b:
eb:93:9a:a1:5e:0d:1e:b9:8d:63:0e:5f:9e:26:44:75:ba:1e:
1a:4b:d6:0d:f4:3e:9e:d8:c9:0d:a6:36:db:04:92:af:66:ef:
b3:d0:ec:9c:8e:a3:5d:29:fe:db:dd:c7:f0:85:32:f8:2b:10:
00:a6:92:49:98:0a:bf:6b:cb:e0:99:bb:cc:53:b5:1a:8c:df:
51:9a:9b:81:9b:59:b7:0a:e8:6f:cf:5e:71:7e:32:ce:4c:d4:
bd:60:e9:17:fa:b5:c5:4b:b6:d7:9c:76:3c:c1:7a:5a:c9:37:
04:0e:28:68:48:12:40:9e:00:09:db:4b:b6:f5:9f:d8:f3:84:
ec:45:60:b0:8a:58:34:9a:25:93:54:a7:7b:8d:f5:21:63:b5:
1d:15:90:e6:e1:1b:5f:c7:d8:ab:e9:b0:55:b3:9f:ce:c3:81:
77:0d:8b:9a:82:d0:5a:de:a1:cf:f2:28:af:b5:ab:35:75:21:
1e:b8:98:80:fd:63:79:c4:17:f1:f6:de:40:a6:0a:e3:b2:f0:
c7:d6:5c:8e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYcw4phf+TYUw6lrKmDIeKsQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwMzMwMDQ1OTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWJhZWRjNmE3ZmU0YTNkYWI1ZDdiNmY3MWNiMjQ0MGMyNGIwNTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJiq7Hbf1pdK9L1/HGrZFPBO3S6O
J/UDzxheLBtBUDbriKIq/MsBN9V/QHaMMuPQqgRLLVsTwyUdsHGBj0mfzNWbF+3w
2g3FQVLLd7jj+xaI9SVEtyIrLIxf6qjZ8kz/Mrq3O4157WO7E7wxr4LgUMRE2mAo
hj91gOTcmXu22rVbpnjw89tNueDHaqFvbMZPa49v/vbTp7RYBunln69dh/rtB13k
u1FcCytgVl6yqJHRMdDgFoIoQFbBJwFNT7wNMMOXwXfq0R/iWz8rKxp7YzOlhYuM
X2QQMsR3ssI2xRkAWvRZPnpwF0H8litir3vdef9+s/Cbh1yOVBzOAEnFEwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIm67can/ko9q117b3HLJEDCSwWZMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvaWJydHhxZi1TajJyWFh0dmNjc2tRTUpMQlprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALVPPMA0E
AgACMAcDBQAqB+NCMA0GCSqGSIb3DQEBCwUAA4IBAQCLFW/CJgTEmCidB5rZ88+q
+fPBGp0plSM9RtLWrUZHHidjszxteF/2iCePOJJSRwkoWMo9n1vrk5qhXg0euY1j
Dl+eJkR1uh4aS9YN9D6e2MkNpjbbBJKvZu+z0OycjqNdKf7b3cfwhTL4KxAAppJJ
mAq/a8vgmbvMU7UajN9RmpuBm1m3Cuhvz15xfjLOTNS9YOkX+rXFS7bXnHY8wXpa
yTcEDihoSBJAngAJ20u29Z/Y84TsRWCwilg0miWTVKd7jfUhY7UdFZDm4Rtfx9ir
6bBVs5/Ow4F3DYuagtBa3qHP8iivtas1dSEeuJiA/WN5xBfx9t5ApgrjsvDH1lyO
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:52 2024 by rpki-client on console-ams.rpki-client.org