Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/iZZ9MKhDcr2ppl1UqBwGZ-9FQZo.roa
File: iZZ9MKhDcr2ppl1UqBwGZ-9FQZo.roa (raw, json)
Hash identifier: OYURpEfThb7Gex1UYb+DJImDMqmIfBZclE0Ro50h5Zw=
Subject key identifier: 89:96:7D:30:A8:43:72:BD:A9:A6:5D:54:A8:1C:06:67:EF:45:41:9A
Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial: 01856D01754EDCFB56C4AB72ECBFB2851419
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/iZZ9MKhDcr2ppl1UqBwGZ-9FQZo.roa
Signing time: Sun 01 Jan 2023 11:04:49 +0000
ROA not before: Sun 01 Jan 2023 11:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21150
IP address blocks: 155.45.176.0/20 maxlen: 20
155.45.208.0/21 maxlen: 21
155.45.240.0/21 maxlen: 21
155.45.255.0/24 maxlen: 24
155.45.160.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:75:4e:dc:fb:56:c4:ab:72:ec:bf:b2:85:14:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Validity
Not Before: Jan 1 11:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89967d30a84372bda9a65d54a81c0667ef45419a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:22:16:b1:37:7d:fc:c6:a5:3c:65:4c:e2:d9:
e5:8d:5c:a2:1e:9d:52:0c:09:92:c9:5c:15:f7:de:
19:1d:d6:34:7e:fe:23:f0:95:8b:57:da:97:db:35:
3e:b5:99:cc:48:09:7d:5a:ae:5b:7f:e6:72:60:15:
d6:09:b2:78:b6:69:82:74:4e:51:15:b0:36:4f:d5:
af:4f:aa:0f:1f:b2:a0:7a:8d:b9:d1:e6:d6:e4:73:
df:d0:88:f8:fc:07:2b:5a:2c:3a:d1:63:bb:83:fd:
5a:c3:8a:ac:78:26:e4:e4:58:ca:86:b1:0f:72:b5:
59:11:8e:be:98:14:da:7b:8d:e4:ca:08:9f:fd:e7:
37:ca:cc:de:a5:6e:bf:82:53:12:5a:aa:fa:de:bd:
c4:ee:c3:3c:00:1d:5c:b1:df:ec:65:80:3f:13:ab:
99:bb:d1:bb:ee:8d:5a:b6:24:12:6b:b4:9e:c3:8c:
42:0b:da:48:51:52:c0:24:de:26:5c:64:0a:c6:75:
23:de:74:b4:1f:27:fc:9a:3e:ad:a1:31:0e:f8:0f:
a0:98:48:c0:fd:0b:bc:6f:64:92:f7:e2:75:6f:c9:
67:5d:40:48:6f:a7:db:61:71:25:c0:6f:e3:56:57:
45:97:e5:9c:ac:6b:7f:b1:e3:1e:17:8f:8d:2e:ee:
03:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:96:7D:30:A8:43:72:BD:A9:A6:5D:54:A8:1C:06:67:EF:45:41:9A
X509v3 Authority Key Identifier:
keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/iZZ9MKhDcr2ppl1UqBwGZ-9FQZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.45.160.0/19
155.45.208.0/21
155.45.240.0/21
155.45.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:db:7b:5c:f7:67:1a:35:af:cb:0b:cc:a8:9a:aa:25:97:4e:
c8:31:28:87:5c:91:c3:c6:93:0a:7f:d4:b6:fa:0c:87:c8:a3:
7b:5b:46:93:d8:f9:fe:a2:7b:77:5f:02:65:4d:f6:3d:b7:7a:
66:69:9f:3d:ad:3a:48:d0:5f:a4:39:b0:14:3f:5c:4d:49:3c:
95:8d:a1:a0:f2:11:9b:51:f8:d7:f1:80:21:92:77:e1:f9:ed:
c1:6b:95:6d:5a:fd:31:2d:90:38:23:69:62:09:ef:7d:3b:06:
c6:9e:96:cc:ae:a2:3b:7c:87:24:c8:58:69:af:2d:ed:6a:b8:
e9:40:c0:4b:1b:34:78:fd:69:8a:d5:15:ca:69:6d:00:16:09:
3f:eb:b1:78:ec:b7:98:59:7d:32:29:95:aa:ca:4c:36:64:a6:
fc:da:07:d5:b8:55:c9:0f:8a:22:a6:30:b2:82:f5:40:f7:c9:
d0:51:3f:bd:71:9e:11:db:8e:43:9c:7f:8c:57:2f:80:49:ae:
65:09:f4:f2:1b:f3:94:19:34:d1:cd:59:13:6d:78:36:79:7e:
45:20:43:93:5a:64:de:bd:f5:c3:26:66:3d:e2:69:7e:58:36:
9c:35:1b:3f:c4:a0:2e:05:3f:06:f1:a3:57:3d:75:ae:f7:c5:
51:0f:db:22
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYVtAXVO3PtWxKty7L+yhRQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2Y2RlMTM5YWUwNTczYjBhNGRkYTkzZTc3YjU3ZmYyN2Y5
YmViYTEwHhcNMjMwMTAxMTEwNDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OTk2N2QzMGE4NDM3MmJkYTlhNjVkNTRhODFjMDY2N2VmNDU0MTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSIWsTd9/MalPGVM4tnljVyiHp1S
DAmSyVwV994ZHdY0fv4j8JWLV9qX2zU+tZnMSAl9Wq5bf+ZyYBXWCbJ4tmmCdE5R
FbA2T9WvT6oPH7Kgeo250ebW5HPf0Ij4/AcrWiw60WO7g/1aw4qseCbk5FjKhrEP
crVZEY6+mBTae43kygif/ec3yszepW6/glMSWqr63r3E7sM8AB1csd/sZYA/E6uZ
u9G77o1atiQSa7Sew4xCC9pIUVLAJN4mXGQKxnUj3nS0Hyf8mj6toTEO+A+gmEjA
/Qu8b2SS9+J1b8lnXUBIb6fbYXElwG/jVldFl+WcrGt/seMeF4+NLu4DZwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFImWfTCoQ3K9qaZdVKgcBmfvRUGaMB8GA1UdIwQY
MBaAFBbN4TmuBXOwpN2pPne1f/J/m+uhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUt
YjY5ZGNlNzU0N2ExLzEvaVpaOU1LaERjcjJwcGwxVXFCd0daLTlGUVpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8zYzAyZjYtN2M0MS00OWJiLWI5ZGUtYjY5ZGNlNzU0N2Ex
LzEvRnMzaE9hNEZjN0NrM2FrLWQ3Vl84bi1iNjZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQFmy2gAwQD
my3QAwQDmy3wAwQAmy3/MA0GCSqGSIb3DQEBCwUAA4IBAQA/23tc92caNa/LC8yo
mqoll07IMSiHXJHDxpMKf9S2+gyHyKN7W0aT2Pn+ont3XwJlTfY9t3pmaZ89rTpI
0F+kObAUP1xNSTyVjaGg8hGbUfjX8YAhknfh+e3Ba5VtWv0xLZA4I2liCe99OwbG
npbMrqI7fIckyFhpry3tarjpQMBLGzR4/WmK1RXKaW0AFgk/67F47LeYWX0yKZWq
ykw2ZKb82gfVuFXJD4oipjCygvVA98nQUT+9cZ4R245DnH+MVy+ASa5lCfTyG/OU
GTTRzVkTbXg2eX5FIEOTWmTevfXDJmY94ml+WDacNRs/xKAuBT8G8aNXPXWu98VR
D9si
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:30:22 2024 by rpki-client on console-ams.rpki-client.org