Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/qbD2qyBiLd6WQbnDJaw7Wv2EItE.roa
File: qbD2qyBiLd6WQbnDJaw7Wv2EItE.roa (raw, json)
Hash identifier: C3jYUmUx6olJVK/nKXthUHAyFv3Oyqw8051f9h9KmMk=
Subject key identifier: A9:B0:F6:AB:20:62:2D:DE:96:41:B9:C3:25:AC:3B:5A:FD:84:22:D1
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 01877467BD62171EFA75B9B6C00BB57894D9
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/qbD2qyBiLd6WQbnDJaw7Wv2EItE.roa
Signing time: Wed 12 Apr 2023 07:39:28 +0000
ROA not before: Wed 12 Apr 2023 07:39:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.143.163.0/24 maxlen: 24
45.149.166.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:67:bd:62:17:1e:fa:75:b9:b6:c0:0b:b5:78:94:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Apr 12 07:39:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a9b0f6ab20622dde9641b9c325ac3b5afd8422d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dd:5e:fe:2c:e8:a9:7c:f2:b4:a4:49:96:94:
ba:61:c0:86:25:b2:34:2d:ad:45:6d:e4:04:08:de:
16:62:5e:75:42:bc:f3:56:56:22:26:a8:e1:96:91:
d5:ae:76:b1:a5:55:5e:45:b3:fb:6e:f6:07:7e:56:
4f:b5:d5:ca:b1:e7:a9:4f:23:62:bf:23:86:58:a8:
de:dc:d2:02:d0:40:2c:fc:7f:73:8a:cd:ed:a8:bf:
1c:5a:4f:b6:8b:45:a8:6b:fa:3f:18:ba:63:55:7b:
d4:06:76:ce:53:8a:da:01:db:cd:3f:c7:01:c3:70:
cd:d3:00:af:7c:45:09:76:f3:57:b1:4c:2c:00:d2:
5e:f5:39:b3:95:d9:7b:9b:0c:38:53:16:44:bc:f2:
6f:01:7b:ab:d5:b0:97:f0:a3:c1:ce:2f:8d:c8:c7:
85:1f:c2:c7:e4:07:ae:bd:c5:d7:eb:62:e6:5d:53:
98:cd:f5:24:05:11:1a:e0:9b:68:03:5c:3b:aa:9d:
da:c6:e4:11:3a:58:93:e5:4f:19:6e:6b:2d:fa:f1:
e5:d3:0a:82:e2:9d:78:c6:c9:32:6c:20:64:c2:6a:
0f:6b:a0:70:6d:76:16:b5:ee:74:26:b3:13:8c:54:
ab:ae:d0:5f:08:04:cd:71:66:02:40:7b:2d:c1:b3:
10:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B0:F6:AB:20:62:2D:DE:96:41:B9:C3:25:AC:3B:5A:FD:84:22:D1
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/qbD2qyBiLd6WQbnDJaw7Wv2EItE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.163.0/24
45.149.166.0/24
Signature Algorithm: sha256WithRSAEncryption
94:97:89:cf:0c:94:96:9f:9b:a8:47:54:6b:c3:82:a9:e4:71:
28:5e:f8:aa:23:54:e0:9b:b8:9f:3f:2f:ea:ea:fc:4e:38:bd:
23:bd:35:e5:b7:64:5f:b3:f1:97:4a:62:b9:d5:f0:89:9b:03:
d2:84:83:10:7a:0a:db:ca:f0:78:6d:e4:01:48:15:92:95:98:
9f:37:2f:ee:b4:8c:13:df:af:47:e6:34:dc:60:30:7e:28:59:
51:b7:03:1e:43:ee:e2:2b:11:fb:f9:91:df:dc:58:96:d7:99:
5b:8a:c5:5a:81:34:7b:13:66:54:7b:49:79:b6:ee:41:8c:d2:
da:cd:9f:69:65:84:ef:10:f5:7a:eb:a5:af:6b:1a:56:da:45:
52:32:f3:ec:ec:26:1c:da:86:87:8c:15:62:f8:b4:d0:b1:4a:
dc:f4:c7:b3:5b:eb:c1:51:b7:af:c0:05:0e:06:9f:42:ae:74:
77:99:56:5e:81:f2:60:4b:27:d3:ab:9d:9b:f2:3b:24:8c:72:
8c:d4:00:77:8b:20:9d:f3:af:4e:3d:ff:02:c2:85:16:ab:7f:
aa:73:e9:6a:36:7c:16:84:40:e9:29:65:8f:86:ce:6c:57:66:
5b:85:56:19:e3:97:0f:e4:45:d7:5a:c5:06:6c:47:4f:b4:b3:
b2:45:1c:98
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYd0Z71iFx76dbm2wAu1eJTZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl
ZWFjNDQwHhcNMjMwNDEyMDczOTI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWIwZjZhYjIwNjIyZGRlOTY0MWI5YzMyNWFjM2I1YWZkODQyMmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN1e/izoqXzytKRJlpS6YcCGJbI0
La1FbeQECN4WYl51QrzzVlYiJqjhlpHVrnaxpVVeRbP7bvYHflZPtdXKseepTyNi
vyOGWKje3NIC0EAs/H9zis3tqL8cWk+2i0Woa/o/GLpjVXvUBnbOU4raAdvNP8cB
w3DN0wCvfEUJdvNXsUwsANJe9Tmzldl7mww4UxZEvPJvAXur1bCX8KPBzi+NyMeF
H8LH5AeuvcXX62LmXVOYzfUkBREa4JtoA1w7qp3axuQROliT5U8Zbmst+vHl0wqC
4p14xskybCBkwmoPa6BwbXYWte50JrMTjFSrrtBfCATNcWYCQHstwbMQ3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKmw9qsgYi3elkG5wyWsO1r9hCLRMB8GA1UdIwQY
MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt
OGVmZjNmZDNjNDhhLzEvcWJEMnF5QmlMZDZXUWJuREphdzdXdjJFSXRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh
LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALY+jAwQA
LZWmMA0GCSqGSIb3DQEBCwUAA4IBAQCUl4nPDJSWn5uoR1Rrw4Kp5HEoXviqI1Tg
m7ifPy/q6vxOOL0jvTXlt2Rfs/GXSmK51fCJmwPShIMQegrbyvB4beQBSBWSlZif
Ny/utIwT369H5jTcYDB+KFlRtwMeQ+7iKxH7+ZHf3FiW15lbisVagTR7E2ZUe0l5
tu5BjNLazZ9pZYTvEPV666WvaxpW2kVSMvPs7CYc2oaHjBVi+LTQsUrc9MezW+vB
UbevwAUOBp9CrnR3mVZegfJgSyfTq52b8jskjHKM1AB3iyCd869OPf8CwoUWq3+q
c+lqNnwWhEDpKWWPhs5sV2ZbhVYZ45cP5EXXWsUGbEdPtLOyRRyY
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:46 2023 by rpki-client on console-ams.rpki-client.org