Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/vGOXymiymqroZ9LrnucotZNyHGA.roa
File: vGOXymiymqroZ9LrnucotZNyHGA.roa (raw, json)
Hash identifier: OTGoTU/zf/kAV242DtNzO9C+56j4MrLYvikDdqBMvmQ=
Subject key identifier: BC:63:97:CA:68:B2:9A:AA:E8:67:D2:EB:9E:E7:28:B5:93:72:1C:60
Certificate issuer: /CN=0a06f033537bbd863bbca2b62092d8de3611f651
Certificate serial: 0189D620720384DF603BC926EE4C9661A65B
Authority key identifier: 0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/vGOXymiymqroZ9LrnucotZNyHGA.roa
Signing time: Tue 08 Aug 2023 17:09:57 +0000
ROA not before: Tue 08 Aug 2023 17:09:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207919
IP address blocks: 45.133.52.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 15 Aug 2023 18:47:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d6:20:72:03:84:df:60:3b:c9:26:ee:4c:96:61:a6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a06f033537bbd863bbca2b62092d8de3611f651
Validity
Not Before: Aug 8 17:09:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc6397ca68b29aaae867d2eb9ee728b593721c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:2d:11:de:a0:a2:82:dc:5c:56:48:3c:8d:
dd:58:86:e7:8b:c7:74:1b:5a:5c:09:72:75:72:18:
db:d0:88:d7:b1:5e:45:29:7a:b5:d6:b2:0e:2c:1c:
39:40:de:7f:0d:64:c9:80:ae:2b:5c:6b:b8:47:f4:
c2:02:cf:01:20:b5:47:f4:36:95:ee:32:5a:d1:2b:
39:c9:1c:b9:b6:3d:fd:85:11:5e:19:3d:8b:6d:70:
fb:4c:de:d3:ac:13:47:c9:4a:4c:db:44:60:40:2b:
e1:6b:34:f8:f2:e8:a5:b6:bf:78:ab:bc:d3:88:c6:
62:e2:96:9e:a1:45:96:7d:3b:1d:b3:04:3b:5e:34:
0e:7a:77:75:52:14:bf:f0:90:cb:58:da:36:7e:c6:
d7:42:87:6f:8a:f8:43:6b:14:ea:28:63:17:63:c2:
1e:32:87:ee:ba:c7:62:fa:66:6f:aa:0b:ab:12:b1:
f4:23:ff:96:e2:3a:1c:65:ca:40:b3:59:3f:48:b6:
67:bf:02:a3:ae:62:ab:3d:81:98:2b:c3:70:78:d9:
3d:d5:d8:a6:ed:b0:f5:d6:01:bd:9a:74:ab:44:c1:
0e:0f:6d:1b:bc:fd:c7:ee:0f:4f:ff:90:84:cd:fb:
05:78:0b:fc:1e:da:e9:1f:a1:2e:8f:cb:b7:8e:52:
87:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:63:97:CA:68:B2:9A:AA:E8:67:D2:EB:9E:E7:28:B5:93:72:1C:60
X509v3 Authority Key Identifier:
keyid:0A:06:F0:33:53:7B:BD:86:3B:BC:A2:B6:20:92:D8:DE:36:11:F6:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CgbwM1N7vYY7vKK2IJLY3jYR9lE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/vGOXymiymqroZ9LrnucotZNyHGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/4cd16b-2a23-48a9-9eeb-2a4813a13120/1/CgbwM1N7vYY7vKK2IJLY3jYR9lE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.52.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:3a:b5:62:b5:90:83:bb:5e:15:a8:fd:8b:70:34:21:a3:30:
7f:90:7f:71:78:eb:59:6c:6a:9c:01:bf:15:85:3c:13:40:02:
d8:c7:69:b3:2f:b9:b8:26:8c:25:17:91:ee:4f:25:be:89:90:
b4:73:9c:0d:e1:09:dd:64:8c:82:b7:ef:f1:7b:62:0d:fe:b9:
97:06:95:a8:b6:b8:d2:f2:02:24:12:d2:e2:c6:5b:d5:96:df:
ba:3f:1a:eb:69:5c:34:63:cd:db:93:65:62:67:9d:f0:7a:d9:
b6:35:7a:7a:d1:ef:ad:ce:6d:6d:f5:22:18:57:60:8c:85:44:
55:09:86:16:de:f3:a2:fb:11:f3:8f:39:29:10:79:73:3f:96:
31:58:3d:10:81:22:bf:68:7a:bf:fd:37:5a:72:5e:6a:d2:d8:
8e:39:4c:f5:b2:a3:c4:ed:36:b0:10:59:83:08:fe:51:d4:37:
f8:7d:69:2c:0b:e7:80:f0:7d:30:55:b2:ed:35:95:42:9f:2b:
5f:3b:aa:97:84:cb:60:c0:57:28:c7:42:63:21:f4:b8:38:d0:
85:26:44:c3:a6:cf:00:3d:11:8b:76:17:f2:e1:5f:6c:e8:16:
93:6d:61:0f:93:be:a9:ab:f7:0e:a1:5b:ff:77:3e:ad:d5:b7:
ae:0a:3b:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYnWIHIDhN9gO8km7kyWYaZbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMDZmMDMzNTM3YmJkODYzYmJjYTJiNjIwOTJkOGRlMzYx
MWY2NTEwHhcNMjMwODA4MTcwOTU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzYzOTdjYTY4YjI5YWFhZTg2N2QyZWI5ZWU3MjhiNTkzNzIxYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVEtEd6gooLcXFZIPI3dWIbni8d0
G1pcCXJ1chjb0IjXsV5FKXq11rIOLBw5QN5/DWTJgK4rXGu4R/TCAs8BILVH9DaV
7jJa0Ss5yRy5tj39hRFeGT2LbXD7TN7TrBNHyUpM20RgQCvhazT48uiltr94q7zT
iMZi4paeoUWWfTsdswQ7XjQOend1UhS/8JDLWNo2fsbXQodvivhDaxTqKGMXY8Ie
Mofuusdi+mZvqgurErH0I/+W4jocZcpAs1k/SLZnvwKjrmKrPYGYK8NweNk91dim
7bD11gG9mnSrRMEOD20bvP3H7g9P/5CEzfsFeAv8HtrpH6Euj8u3jlKHDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLxjl8pospqq6GfS657nKLWTchxgMB8GA1UdIwQY
MBaAFAoG8DNTe72GO7yitiCS2N42EfZRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2did00xTjd2WVk3dktLMklKTFkzallSOWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy80Y2QxNmItMmEyMy00OGE5LTllZWIt
MmE0ODEzYTEzMTIwLzEvdkdPWHltaXltcXJvWjlMcm51Y290Wk55SEdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy80Y2QxNmItMmEyMy00OGE5LTllZWItMmE0ODEzYTEzMTIw
LzEvQ2did00xTjd2WVk3dktLMklKTFkzallSOWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYU0MA0G
CSqGSIb3DQEBCwUAA4IBAQCgOrVitZCDu14VqP2LcDQhozB/kH9xeOtZbGqcAb8V
hTwTQALYx2mzL7m4JowlF5HuTyW+iZC0c5wN4QndZIyCt+/xe2IN/rmXBpWotrjS
8gIkEtLixlvVlt+6PxrraVw0Y83bk2ViZ53wetm2NXp60e+tzm1t9SIYV2CMhURV
CYYW3vOi+xHzjzkpEHlzP5YxWD0QgSK/aHq//Tdacl5q0tiOOUz1sqPE7TawEFmD
CP5R1Df4fWksC+eA8H0wVbLtNZVCnytfO6qXhMtgwFcox0JjIfS4ONCFJkTDps8A
PRGLdhfy4V9s6BaTbWEPk76pq/cOoVv/dz6t1beuCjtB
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:01 2024 by rpki-client on console-ams.rpki-client.org