Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sd55_x4rCmlal_BfI7OVMeYwHV8.roa
File: sd55_x4rCmlal_BfI7OVMeYwHV8.roa (raw, json)
Hash identifier: bkU2zShdCCk5yTgqa11c+75OkFIGMS7Qg4ppi3CY5/k=
Subject key identifier: B1:DE:79:FF:1E:2B:0A:69:5A:97:F0:5F:23:B3:95:31:E6:30:1D:5F
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01895DE194B5957A7AD39D55A57BA7A68F39
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sd55_x4rCmlal_BfI7OVMeYwHV8.roa
Signing time: Sun 16 Jul 2023 08:46:51 +0000
ROA not before: Sun 16 Jul 2023 08:46:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60528
IP address blocks: 45.84.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 23 Jul 2023 06:24:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:5d:e1:94:b5:95:7a:7a:d3:9d:55:a5:7b:a7:a6:8f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jul 16 08:46:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b1de79ff1e2b0a695a97f05f23b39531e6301d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:14:e8:f7:8b:5e:5c:c5:5c:2d:83:1c:c8:db:
b0:42:0f:69:83:9a:61:90:16:8e:00:3a:63:33:c8:
9a:91:41:9d:e2:92:89:67:2e:da:4a:80:a1:3f:9f:
26:0f:fb:b8:21:4f:a6:95:60:a6:df:c7:40:d7:8a:
54:be:af:f2:fc:6b:25:3f:07:45:a5:f7:56:55:2c:
c5:48:a3:28:49:60:61:5d:c6:f0:25:b0:62:9d:70:
e3:e2:e4:ad:90:ea:6a:af:fb:6f:05:b9:2e:a3:21:
c5:80:2c:64:37:57:e8:26:b5:fc:14:7e:79:c1:59:
93:aa:5c:09:ca:e7:b7:49:41:56:8d:fa:35:c3:e7:
91:4d:ee:c2:90:ef:16:38:d9:21:30:50:fa:f1:0e:
97:f7:61:56:80:7b:70:85:36:3e:5b:79:81:d5:4f:
3a:cd:9c:7b:f5:f9:15:62:74:85:28:fa:08:bb:a8:
e2:15:2b:f8:c8:29:2c:af:fd:55:46:c0:3f:bf:9d:
da:ab:90:e1:44:e3:8d:c8:e1:b0:1f:ee:78:ee:a7:
96:a5:5c:35:96:88:f4:12:2c:f7:76:85:12:85:c2:
71:f6:56:e7:b3:4f:a8:f9:7c:7e:b6:1e:d0:62:05:
3b:2f:17:0e:57:38:3c:89:05:d1:52:73:a0:04:46:
d5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DE:79:FF:1E:2B:0A:69:5A:97:F0:5F:23:B3:95:31:E6:30:1D:5F
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sd55_x4rCmlal_BfI7OVMeYwHV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.214.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:5a:aa:55:24:7c:01:6c:68:75:98:3c:e2:71:41:86:ee:8f:
64:78:4c:48:c3:65:30:9a:5d:d4:ad:ab:20:e1:80:6b:ae:c5:
3d:90:25:cb:48:3d:5a:db:40:6f:33:cf:10:63:c5:5d:95:33:
d3:56:f5:57:d6:91:94:b9:79:01:03:4b:4d:b9:56:8c:6d:25:
3a:bf:65:8a:02:48:fa:64:ed:98:d6:fa:20:3a:23:b3:bf:c7:
b1:6d:ce:e9:38:27:b5:c5:9d:58:68:f0:43:0e:70:da:85:77:
28:26:1c:e2:b0:6f:a1:5b:21:e7:10:60:1a:9c:c7:c8:c9:56:
68:ea:c8:97:a6:54:a0:b1:cf:57:dd:8a:ba:5f:cd:59:54:d6:
b0:cf:c1:43:e0:98:42:67:2e:7d:45:a4:7f:a4:4d:f7:46:7c:
28:0d:d7:be:8a:ab:24:ac:d5:13:a6:13:d2:91:5c:90:10:dc:
67:8f:cb:b5:25:52:d3:16:1f:c6:5f:72:b1:19:e8:a3:c9:31:
53:5e:96:0c:35:7a:a2:c2:74:49:35:a0:7b:6b:b8:dd:d8:ee:
93:09:19:26:40:3d:2d:94:94:67:55:44:85:c6:60:19:51:c5:
d7:0a:73:73:42:5e:70:f6:b9:7b:68:4e:d9:0b:50:68:49:e0:
d2:89:bb:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYld4ZS1lXp6051VpXunpo85MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwNzE2MDg0NjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMWRlNzlmZjFlMmIwYTY5NWE5N2YwNWYyM2IzOTUzMWU2MzAxZDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixTo94teXMVcLYMcyNuwQg9pg5ph
kBaOADpjM8iakUGd4pKJZy7aSoChP58mD/u4IU+mlWCm38dA14pUvq/y/GslPwdF
pfdWVSzFSKMoSWBhXcbwJbBinXDj4uStkOpqr/tvBbkuoyHFgCxkN1foJrX8FH55
wVmTqlwJyue3SUFWjfo1w+eRTe7CkO8WONkhMFD68Q6X92FWgHtwhTY+W3mB1U86
zZx79fkVYnSFKPoIu6jiFSv4yCksr/1VRsA/v53aq5DhROONyOGwH+547qeWpVw1
loj0Eiz3doUShcJx9lbns0+o+Xx+th7QYgU7LxcOVzg8iQXRUnOgBEbVtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLHeef8eKwppWpfwXyOzlTHmMB1fMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvc2Q1NV94NHJDbWxhbF9CZkk3T1ZNZVl3SFY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVTWMA0G
CSqGSIb3DQEBCwUAA4IBAQCOWqpVJHwBbGh1mDzicUGG7o9keExIw2Uwml3Urasg
4YBrrsU9kCXLSD1a20BvM88QY8VdlTPTVvVX1pGUuXkBA0tNuVaMbSU6v2WKAkj6
ZO2Y1vogOiOzv8exbc7pOCe1xZ1YaPBDDnDahXcoJhzisG+hWyHnEGAanMfIyVZo
6siXplSgsc9X3Yq6X81ZVNawz8FD4JhCZy59RaR/pE33RnwoDde+iqskrNUTphPS
kVyQENxnj8u1JVLTFh/GX3KxGeijyTFTXpYMNXqiwnRJNaB7a7jd2O6TCRkmQD0t
lJRnVUSFxmAZUcXXCnNzQl5w9rl7aE7ZC1BoSeDSibtQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:52 2024 by rpki-client on console-fra.rpki-client.org