Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/SpVK1tbKBYs4w3Or1sIoUnXTplo.roa
File: SpVK1tbKBYs4w3Or1sIoUnXTplo.roa (raw, json)
Hash identifier: I4Tq4Xj/3Bb1qh8dh9amK/Ab+kYgAWGtFII4VDtitpg=
Subject key identifier: 4A:95:4A:D6:D6:CA:05:8B:38:C3:73:AB:D6:C2:28:52:75:D3:A6:5A
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 01856E5D44598B23536F79DA7A72D6413C53
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/SpVK1tbKBYs4w3Or1sIoUnXTplo.roa
Signing time: Sun 01 Jan 2023 17:24:44 +0000
ROA not before: Sun 01 Jan 2023 17:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 45.158.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 Feb 2023 20:29:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:44:59:8b:23:53:6f:79:da:7a:72:d6:41:3c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Jan 1 17:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a954ad6d6ca058b38c373abd6c2285275d3a65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8d:91:5c:a8:64:30:7f:63:9d:de:22:c8:04:
f0:55:93:77:57:0c:5d:38:95:ea:96:1d:ce:43:2e:
11:29:6c:70:61:5c:17:a4:a0:d2:28:4e:8f:2d:34:
02:01:d9:9c:88:a9:35:17:db:17:09:01:40:a6:f7:
98:8e:dc:82:8f:71:3f:c6:4c:65:48:4c:8c:4e:4f:
b5:99:e4:b9:14:85:80:8b:14:8b:48:02:d7:0b:23:
6b:1a:ea:53:0a:cf:6a:5b:a3:f1:bc:38:33:48:cc:
89:35:e2:66:34:26:b3:c6:3c:cc:32:05:22:23:e3:
93:2c:fd:df:68:23:9e:e4:49:b5:e2:1b:74:35:29:
56:c5:44:b6:cf:3f:9e:4a:4d:2a:07:b4:04:a6:28:
32:1c:e2:6d:b6:2d:6b:30:e6:87:02:50:6d:29:c7:
af:39:c8:64:22:59:f2:d9:4a:4b:9b:f1:55:6f:b8:
93:1e:8a:8a:2a:5f:37:7f:72:9e:33:7a:4f:d8:ca:
d5:03:b4:3f:e6:06:57:4f:ab:d7:03:0c:49:ae:25:
ff:aa:26:47:77:fc:06:05:5f:e0:87:ef:89:10:01:
3e:35:f8:a8:be:85:9c:64:25:cc:35:ef:44:5e:4b:
92:6e:d5:9f:9d:78:9f:2c:5b:0c:22:55:04:b2:e5:
22:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:95:4A:D6:D6:CA:05:8B:38:C3:73:AB:D6:C2:28:52:75:D3:A6:5A
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/SpVK1tbKBYs4w3Or1sIoUnXTplo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.126.0/24
Signature Algorithm: sha256WithRSAEncryption
78:4e:55:12:fa:37:8d:75:01:7a:d5:37:46:18:2f:2f:e0:87:
4f:9b:c8:01:8d:46:77:d7:24:65:0d:d4:e5:bc:b4:cf:80:7f:
f5:98:54:9d:43:8a:73:11:14:70:fe:7a:5e:9b:3a:fa:4c:c8:
2a:f5:50:c6:f9:98:8e:36:78:73:f4:d8:2c:12:16:6e:10:2f:
53:6f:99:9a:dc:ae:e7:a0:74:9e:43:5f:e0:5c:fd:8a:98:b6:
02:80:6e:b3:8d:31:4a:89:28:95:ed:81:ef:92:5b:a7:39:c4:
77:10:8f:8a:b4:c8:f8:99:ac:0a:62:c0:60:30:4f:51:9b:0a:
dc:95:e8:75:21:de:0e:c4:6e:46:77:e3:21:44:8f:8a:88:7a:
92:9f:c0:64:81:7f:be:30:09:3c:bd:e7:22:d2:93:05:42:a5:
34:81:10:c5:1c:9d:88:6e:6c:4e:6d:88:ce:df:07:d8:75:fe:
ae:ec:3f:10:41:37:70:11:0c:b1:d9:e0:bd:9d:29:df:1a:a9:
f2:eb:ca:3d:15:16:8b:71:da:c9:22:c7:3f:95:93:29:0d:0a:
b9:56:c3:f4:04:9a:8c:d1:9d:f2:a8:85:a9:4e:74:78:ac:6f:
91:4e:e7:8a:5d:49:23:5d:5c:2d:8a:c0:e6:31:71:22:5a:7f:
4c:d2:46:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuXURZiyNTb3naenLWQTxTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTE1ZWFkMDk1ZWVkOWFjNGNhYmM1YWI0YWQwYjU4Njdk
OWYwMWIwHhcNMjMwMTAxMTcyNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTk1NGFkNmQ2Y2EwNThiMzhjMzczYWJkNmMyMjg1Mjc1ZDNhNjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmo2RXKhkMH9jnd4iyATwVZN3Vwxd
OJXqlh3OQy4RKWxwYVwXpKDSKE6PLTQCAdmciKk1F9sXCQFApveYjtyCj3E/xkxl
SEyMTk+1meS5FIWAixSLSALXCyNrGupTCs9qW6PxvDgzSMyJNeJmNCazxjzMMgUi
I+OTLP3faCOe5Em14ht0NSlWxUS2zz+eSk0qB7QEpigyHOJtti1rMOaHAlBtKcev
OchkIlny2UpLm/FVb7iTHoqKKl83f3KeM3pP2MrVA7Q/5gZXT6vXAwxJriX/qiZH
d/wGBV/gh++JEAE+NfiovoWcZCXMNe9EXkuSbtWfnXifLFsMIlUEsuUi2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEqVStbWygWLOMNzq9bCKFJ106ZaMB8GA1UdIwQY
MBaAFH9RXq0JXu2axMq8WrStC1hn2fAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFGZXJRbGU3WnJFeXJ4YXRLMExXR2ZaOEJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81YzJhNTktNjAyNS00MDBlLWFiMjgt
ZjBhNjI0ZDQwOTEyLzEvU3BWSzF0YktCWXM0dzNPcjFzSW9VblhUcGxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81YzJhNTktNjAyNS00MDBlLWFiMjgtZjBhNjI0ZDQwOTEy
LzEvZjFGZXJRbGU3WnJFeXJ4YXRLMExXR2ZaOEJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ5+MA0G
CSqGSIb3DQEBCwUAA4IBAQB4TlUS+jeNdQF61TdGGC8v4IdPm8gBjUZ31yRlDdTl
vLTPgH/1mFSdQ4pzERRw/npemzr6TMgq9VDG+ZiONnhz9NgsEhZuEC9Tb5ma3K7n
oHSeQ1/gXP2KmLYCgG6zjTFKiSiV7YHvklunOcR3EI+KtMj4mawKYsBgME9Rmwrc
leh1Id4OxG5Gd+MhRI+KiHqSn8BkgX++MAk8veci0pMFQqU0gRDFHJ2IbmxObYjO
3wfYdf6u7D8QQTdwEQyx2eC9nSnfGqny68o9FRaLcdrJIsc/lZMpDQq5VsP0BJqM
0Z3yqIWpTnR4rG+RTueKXUkjXVwtisDmMXEiWn9M0kYQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:00 2024 by rpki-client on console-ams.rpki-client.org