Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/nxGSzHEh6xm8vjVMjMqmdTIy5E4.roa
File: nxGSzHEh6xm8vjVMjMqmdTIy5E4.roa (raw, json)
Hash identifier: 79L+00plR7YI2eyL3Gp+6TizGZ4viPdPwPjzntPv5xI=
Subject key identifier: 9F:11:92:CC:71:21:EB:19:BC:BE:35:4C:8C:CA:A6:75:32:32:E4:4E
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 01858BB43A146ABF1435DDE9D1175BA1534D
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/nxGSzHEh6xm8vjVMjMqmdTIy5E4.roa
Signing time: Sat 07 Jan 2023 10:08:42 +0000
ROA not before: Sat 07 Jan 2023 10:08:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 45.149.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Apr 2023 09:04:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:8b:b4:3a:14:6a:bf:14:35:dd:e9:d1:17:5b:a1:53:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 7 10:08:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f1192cc7121eb19bcbe354c8ccaa6753232e44e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:b2:4f:6a:c3:37:66:52:76:dd:01:1a:3e:
4f:04:b1:b5:84:b5:f3:87:60:51:e8:67:d5:19:3b:
5e:3f:8d:d1:d6:e7:4c:f1:31:5c:ee:dd:bd:a5:05:
23:b1:97:1f:4b:d3:09:35:5b:48:46:c4:be:9c:87:
21:93:f5:1d:cb:44:44:5a:55:aa:62:df:b2:52:e0:
f8:e1:1d:6f:4d:b6:be:c6:9b:43:6f:d7:16:c6:ce:
ae:89:72:ac:49:f5:c8:22:1d:a2:b4:fd:17:c3:f4:
f7:16:3e:1d:07:55:76:2b:95:cb:32:d6:36:b4:28:
16:5a:55:83:5e:57:ed:0c:63:01:d3:fb:48:81:60:
95:7a:0b:fa:04:19:24:0a:26:4a:8a:6b:93:32:65:
6a:22:7c:5d:cb:4b:4c:c0:71:5f:87:18:f3:52:c1:
16:50:fe:01:7f:44:99:9f:4e:7a:a8:9c:06:69:6a:
ac:2a:ad:72:37:1e:b5:4c:fb:43:14:86:64:e3:6b:
c2:d6:6c:ca:0d:f5:4c:5c:af:90:5d:38:6b:dd:66:
10:f9:d4:64:90:15:de:e0:45:8b:a4:94:a3:ce:07:
96:28:9a:0b:f4:5e:67:37:9d:5a:3f:1f:cd:e0:b1:
aa:35:a9:3e:03:2d:db:ef:52:c7:b3:9b:e8:6d:bd:
92:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:11:92:CC:71:21:EB:19:BC:BE:35:4C:8C:CA:A6:75:32:32:E4:4E
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/nxGSzHEh6xm8vjVMjMqmdTIy5E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.164.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:9f:bf:fd:82:ad:79:93:79:6c:32:cc:e9:65:11:ba:b1:1c:
fd:4a:96:e6:66:04:eb:d8:18:00:a3:3b:be:63:4b:4c:2b:7f:
e7:f0:94:78:30:60:b6:e7:2e:84:04:f8:3d:95:fd:d4:23:ee:
4e:0d:db:b4:a7:98:56:5d:fa:ad:10:ef:8a:ac:11:87:a3:bc:
da:5a:32:9b:bc:cb:df:eb:f0:4a:de:ad:b3:dc:b1:6b:e5:62:
19:92:8d:1c:0f:f1:32:03:12:db:b2:55:4f:24:9f:16:aa:14:
96:c6:b1:0a:eb:eb:b2:0e:af:9e:7b:25:46:f2:f7:91:46:ca:
1f:9d:b1:ce:82:a6:23:72:b6:56:8b:82:88:fc:fa:2a:88:06:
d9:8b:a5:fd:b4:bf:b5:29:28:dd:75:57:2a:da:ef:35:3f:90:
f8:69:6c:51:61:0c:7b:7e:87:22:ab:1f:dc:aa:a5:50:7f:a0:
ca:ed:e7:d1:0d:88:36:fb:f5:4d:88:fb:c4:be:f3:60:cd:6e:
e2:e8:af:94:62:1c:be:ae:4d:f1:db:b1:ad:55:1a:5f:fe:0b:
86:7d:9c:70:67:7e:b9:49:76:bd:bc:0f:f8:a3:45:8f:a7:1f:
be:91:d2:dc:6a:53:a5:61:31:ca:25:af:73:f3:7a:2d:ed:7d:
b9:25:37:07
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWLtDoUar8UNd3p0RdboVNNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl
ZWFjNDQwHhcNMjMwMTA3MTAwODQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjExOTJjYzcxMjFlYjE5YmNiZTM1NGM4Y2NhYTY3NTMyMzJlNDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoiyT2rDN2ZSdt0BGj5PBLG1hLXz
h2BR6GfVGTteP43R1udM8TFc7t29pQUjsZcfS9MJNVtIRsS+nIchk/Udy0REWlWq
Yt+yUuD44R1vTba+xptDb9cWxs6uiXKsSfXIIh2itP0Xw/T3Fj4dB1V2K5XLMtY2
tCgWWlWDXlftDGMB0/tIgWCVegv6BBkkCiZKimuTMmVqInxdy0tMwHFfhxjzUsEW
UP4Bf0SZn056qJwGaWqsKq1yNx61TPtDFIZk42vC1mzKDfVMXK+QXThr3WYQ+dRk
kBXe4EWLpJSjzgeWKJoL9F5nN51aPx/N4LGqNak+Ay3b71LHs5vobb2SkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ8RksxxIesZvL41TIzKpnUyMuROMB8GA1UdIwQY
MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt
OGVmZjNmZDNjNDhhLzEvbnhHU3pIRWg2eG04dmpWTWpNcW1kVEl5NUU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh
LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZWkMA0G
CSqGSIb3DQEBCwUAA4IBAQBen7/9gq15k3lsMszpZRG6sRz9SpbmZgTr2BgAozu+
Y0tMK3/n8JR4MGC25y6EBPg9lf3UI+5ODdu0p5hWXfqtEO+KrBGHo7zaWjKbvMvf
6/BK3q2z3LFr5WIZko0cD/EyAxLbslVPJJ8WqhSWxrEK6+uyDq+eeyVG8veRRsof
nbHOgqYjcrZWi4KI/PoqiAbZi6X9tL+1KSjddVcq2u81P5D4aWxRYQx7fociqx/c
qqVQf6DK7efRDYg2+/VNiPvEvvNgzW7i6K+UYhy+rk3x27GtVRpf/guGfZxwZ365
SXa9vA/4o0WPpx++kdLcalOlYTHKJa9z83ot7X25JTcH
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:08 2024 by rpki-client on console-ams.rpki-client.org