Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jCMIXcY1FATyYYAgpZxW3V2H3tI.roa
File: jCMIXcY1FATyYYAgpZxW3V2H3tI.roa (raw, json)
Hash identifier: zBDB/8vCqMm5YywhgeSUz5Q7o2Gn/5QCElICDtcGi8I=
Subject key identifier: 8C:23:08:5D:C6:35:14:04:F2:61:80:20:A5:9C:56:DD:5D:87:DE:D2
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F798BF8FD169335C4CE13A967AA6D33
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jCMIXcY1FATyYYAgpZxW3V2H3tI.roa
Signing time: Sun 01 Jan 2023 22:35:14 +0000
ROA not before: Sun 01 Jan 2023 22:35:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60798
IP address blocks: 45.145.250.0/24 maxlen: 24
45.138.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:8b:f8:fd:16:93:35:c4:ce:13:a9:67:aa:6d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8c23085dc6351404f2618020a59c56dd5d87ded2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e7:2a:1b:fa:8f:03:d2:fd:19:64:cc:b6:d5:
34:ea:32:9a:2e:c4:0e:a6:90:48:97:ea:f1:8f:7c:
31:b9:04:17:12:37:14:77:3e:a5:28:0f:e6:22:e1:
01:6e:ff:3e:05:80:24:40:1d:12:f8:cd:c2:66:bb:
66:19:d5:9e:db:51:aa:33:29:ea:7c:c2:18:8e:68:
42:f2:d1:94:37:a7:37:cb:02:07:b0:cd:61:0a:4e:
39:3c:64:58:bb:4e:d7:e4:73:d3:8c:2e:71:bc:76:
3a:0e:50:57:47:5b:8b:d7:e2:3a:1e:6f:f9:8f:98:
89:5c:3b:98:c8:81:f7:a7:bb:d3:81:1a:e6:74:ae:
05:dc:0e:86:7c:3d:b2:7f:06:7b:bc:f8:f3:26:f8:
2e:c4:42:07:f2:cd:61:cc:a3:dd:f2:43:f3:f9:52:
66:b7:50:5c:99:53:6f:fb:20:e3:23:60:1f:ad:76:
cf:a7:6f:e2:7d:8c:bd:04:90:84:08:ef:0e:92:f5:
97:41:87:68:84:37:cc:64:a7:38:41:01:ef:d0:24:
f2:e4:3f:c8:5c:e7:e4:5b:40:20:a0:b7:c4:74:ec:
02:0e:e7:a0:ce:86:a9:52:b7:58:da:8a:d6:97:51:
da:10:ea:4b:75:86:95:fe:b6:10:e8:74:6d:c2:e1:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:23:08:5D:C6:35:14:04:F2:61:80:20:A5:9C:56:DD:5D:87:DE:D2
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/jCMIXcY1FATyYYAgpZxW3V2H3tI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.18.0/24
45.145.250.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:94:08:23:f1:28:49:2c:ee:79:4d:bb:91:d1:61:31:8f:c0:
65:07:ba:6f:c6:01:b2:ae:52:5f:2e:e0:40:39:19:10:4a:1c:
42:56:1b:fe:c7:5d:85:bb:50:84:7c:e5:19:e8:4d:bb:2f:cf:
8e:38:76:7e:3c:bb:32:b4:db:3b:d3:dc:0f:a9:49:a9:20:b8:
88:eb:40:09:4c:38:72:35:43:80:44:15:e4:4a:42:ee:d6:b9:
d5:d8:98:28:fc:33:46:61:a1:63:40:e3:98:ca:22:b7:56:27:
7b:d8:1d:0f:35:86:88:cb:46:f5:0d:be:55:47:e4:93:93:78:
7e:9e:2b:02:90:bc:7f:f7:f5:7e:b3:e5:91:9d:94:44:43:66:
d0:ef:31:e0:14:e6:32:64:60:eb:18:c6:27:98:f6:a9:2b:85:
9e:22:7b:d0:f6:11:27:a2:03:53:f9:f0:37:e7:92:6a:3f:0a:
ad:62:ec:52:d9:ba:d0:ef:fe:d0:cb:0a:56:a0:7f:c1:bf:36:
12:c6:73:6f:93:10:05:81:af:4b:67:7d:1d:69:c7:99:97:86:
aa:cc:b8:92:67:d6:3c:39:ed:e4:4d:ba:05:62:93:2a:79:9b:
db:5a:94:0b:84:bf:58:95:bc:34:e4:1b:4a:20:49:fc:6f:83:
75:aa:24:50
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVveYv4/RaTNcTOE6lnqm0zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwMTAxMjIzNTE0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzIzMDg1ZGM2MzUxNDA0ZjI2MTgwMjBhNTljNTZkZDVkODdkZWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+cqG/qPA9L9GWTMttU06jKaLsQO
ppBIl+rxj3wxuQQXEjcUdz6lKA/mIuEBbv8+BYAkQB0S+M3CZrtmGdWe21GqMynq
fMIYjmhC8tGUN6c3ywIHsM1hCk45PGRYu07X5HPTjC5xvHY6DlBXR1uL1+I6Hm/5
j5iJXDuYyIH3p7vTgRrmdK4F3A6GfD2yfwZ7vPjzJvguxEIH8s1hzKPd8kPz+VJm
t1BcmVNv+yDjI2AfrXbPp2/ifYy9BJCECO8OkvWXQYdohDfMZKc4QQHv0CTy5D/I
XOfkW0AgoLfEdOwCDuegzoapUrdY2orWl1HaEOpLdYaV/rYQ6HRtwuEfsQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIwjCF3GNRQE8mGAIKWcVt1dh97SMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvakNNSVhjWTFGQVR5WVlBZ3BaeFczVjJIM3RJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYoSAwQA
LZH6MA0GCSqGSIb3DQEBCwUAA4IBAQCclAgj8ShJLO55TbuR0WExj8BlB7pvxgGy
rlJfLuBAORkQShxCVhv+x12Fu1CEfOUZ6E27L8+OOHZ+PLsytNs709wPqUmpILiI
60AJTDhyNUOARBXkSkLu1rnV2Jgo/DNGYaFjQOOYyiK3Vid72B0PNYaIy0b1Db5V
R+STk3h+nisCkLx/9/V+s+WRnZREQ2bQ7zHgFOYyZGDrGMYnmPapK4WeInvQ9hEn
ogNT+fA355JqPwqtYuxS2brQ7/7QywpWoH/BvzYSxnNvkxAFga9LZ30daceZl4aq
zLiSZ9Y8Oe3kTboFYpMqeZvbWpQLhL9Ylbw05BtKIEn8b4N1qiRQ
-----END CERTIFICATE-----
Generated at Thu Oct 12 12:10:38 2023 by rpki-client on console-ams.rpki-client.org