Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/efFTuCJKRtT1eSxP28gRydV2CF4.roa
File: efFTuCJKRtT1eSxP28gRydV2CF4.roa (raw, json)
Hash identifier: 0xi9rJ4aFl7TRuYKdorfhNjR6Xb0csZ7N6InZfn+DPE=
Subject key identifier: 79:F1:53:B8:22:4A:46:D4:F5:79:2C:4F:DB:C8:11:C9:D5:76:08:5E
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 01856E5D433E0B3D344D1C678B1497A5D91D
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/efFTuCJKRtT1eSxP28gRydV2CF4.roa
Signing time: Sun 01 Jan 2023 17:24:43 +0000
ROA not before: Sun 01 Jan 2023 17:24:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34827
IP address blocks: 45.158.124.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:43:3e:0b:3d:34:4d:1c:67:8b:14:97:a5:d9:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Jan 1 17:24:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79f153b8224a46d4f5792c4fdbc811c9d576085e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:76:ef:06:c1:8c:e2:86:3e:96:e1:77:20:79:
b7:5f:dd:4a:6e:e8:77:5d:9c:c2:c6:aa:5d:f9:1a:
29:b2:ed:c6:14:79:51:43:dc:17:57:40:de:b4:38:
7b:03:53:52:49:04:2b:99:5f:f1:93:2d:f0:32:d6:
56:63:41:6e:57:2c:cc:e9:ef:fd:93:50:33:72:18:
a4:2e:3a:4e:6a:7b:a7:29:8b:68:9d:ae:e2:23:29:
f1:a6:12:f8:6a:6d:43:32:38:77:04:36:74:bd:7f:
2d:eb:ec:67:d5:1c:ef:64:f2:83:40:ba:75:b3:11:
b0:8c:a2:26:55:ed:3d:cf:68:96:47:b9:a7:9e:1d:
5f:d7:96:56:78:8b:36:71:3a:09:90:bf:43:fd:ed:
fb:c1:d9:9c:9f:6b:8e:57:d1:d6:f1:ae:6f:78:e6:
ff:6d:68:d8:b0:a7:d3:83:cf:df:dd:c3:35:db:f6:
19:6e:c5:eb:24:53:a5:a3:e3:f1:b3:d6:86:a0:74:
0b:3c:f4:1a:bd:f1:ec:1a:b5:67:3d:cb:e9:75:2c:
e1:54:c6:c9:76:99:d2:0c:29:3b:ea:11:69:1d:bd:
e9:18:2d:c9:b1:dd:05:40:ee:28:07:00:4f:3a:1b:
85:02:0a:d6:92:8f:eb:97:09:84:34:6c:04:49:97:
cb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F1:53:B8:22:4A:46:D4:F5:79:2C:4F:DB:C8:11:C9:D5:76:08:5E
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/efFTuCJKRtT1eSxP28gRydV2CF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:5c:0e:a0:62:34:6b:db:13:60:7b:53:6b:04:b4:66:2b:27:
78:c1:90:8a:06:98:06:5f:99:1e:86:12:40:d3:31:f2:33:b1:
ca:4e:a5:6c:4f:2e:13:6c:47:3b:42:be:63:45:5b:6a:19:8f:
5d:f3:5e:a2:9d:24:a3:f4:f9:01:51:0d:36:62:e6:d3:22:56:
0c:d3:67:81:c3:d9:b6:d4:5c:46:d8:36:de:fb:0a:d7:d2:4b:
41:f5:e9:d4:0a:0e:86:5b:da:5f:19:03:7d:63:bf:b2:b7:eb:
dd:fe:fb:45:4b:ae:d7:af:32:c6:e7:a0:96:02:14:62:94:1a:
07:bc:fb:12:41:da:ad:37:2a:f7:fb:4d:64:a3:1e:08:8e:a3:
26:f2:3b:19:ac:97:fe:0d:56:ca:6e:4c:fd:3c:16:ab:c6:ba:
68:4f:c1:fc:86:7e:ca:fd:2a:7f:20:4b:9e:c1:6a:c3:ca:be:
e5:8d:18:75:0e:d6:5c:1a:0d:72:3f:78:9d:85:c4:99:51:70:
43:e1:0a:42:eb:09:f8:c3:81:b3:16:58:cd:c9:a4:65:d1:e6:
90:33:85:f0:bf:13:1c:51:90:82:a2:15:17:c4:9a:a9:70:3b:
e4:fc:b6:aa:83:2b:ee:06:e1:7f:e1:a1:58:1d:62:b4:6c:df:
23:af:d7:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuXUM+Cz00TRxnixSXpdkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTE1ZWFkMDk1ZWVkOWFjNGNhYmM1YWI0YWQwYjU4Njdk
OWYwMWIwHhcNMjMwMTAxMTcyNDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OWYxNTNiODIyNGE0NmQ0ZjU3OTJjNGZkYmM4MTFjOWQ1NzYwODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnbvBsGM4oY+luF3IHm3X91Kbuh3
XZzCxqpd+Ropsu3GFHlRQ9wXV0DetDh7A1NSSQQrmV/xky3wMtZWY0FuVyzM6e/9
k1AzchikLjpOanunKYtona7iIynxphL4am1DMjh3BDZ0vX8t6+xn1RzvZPKDQLp1
sxGwjKImVe09z2iWR7mnnh1f15ZWeIs2cToJkL9D/e37wdmcn2uOV9HW8a5veOb/
bWjYsKfTg8/f3cM12/YZbsXrJFOlo+Pxs9aGoHQLPPQavfHsGrVnPcvpdSzhVMbJ
dpnSDCk76hFpHb3pGC3Jsd0FQO4oBwBPOhuFAgrWko/rlwmENGwESZfLNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHnxU7giSkbU9XksT9vIEcnVdgheMB8GA1UdIwQY
MBaAFH9RXq0JXu2axMq8WrStC1hn2fAbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFGZXJRbGU3WnJFeXJ4YXRLMExXR2ZaOEJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81YzJhNTktNjAyNS00MDBlLWFiMjgt
ZjBhNjI0ZDQwOTEyLzEvZWZGVHVDSktSdFQxZVN4UDI4Z1J5ZFYyQ0Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81YzJhNTktNjAyNS00MDBlLWFiMjgtZjBhNjI0ZDQwOTEy
LzEvZjFGZXJRbGU3WnJFeXJ4YXRLMExXR2ZaOEJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ58MA0G
CSqGSIb3DQEBCwUAA4IBAQB6XA6gYjRr2xNge1NrBLRmKyd4wZCKBpgGX5kehhJA
0zHyM7HKTqVsTy4TbEc7Qr5jRVtqGY9d816inSSj9PkBUQ02YubTIlYM02eBw9m2
1FxG2Dbe+wrX0ktB9enUCg6GW9pfGQN9Y7+yt+vd/vtFS67XrzLG56CWAhRilBoH
vPsSQdqtNyr3+01kox4IjqMm8jsZrJf+DVbKbkz9PBarxrpoT8H8hn7K/Sp/IEue
wWrDyr7ljRh1DtZcGg1yP3idhcSZUXBD4QpC6wn4w4GzFljNyaRl0eaQM4XwvxMc
UZCCohUXxJqpcDvk/LaqgyvuBuF/4aFYHWK0bN8jr9fK
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:00 2024 by rpki-client on console-ams.rpki-client.org