Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/fjw4t7DolLH87X5d68W0Vkmxk7Q.roa
File: fjw4t7DolLH87X5d68W0Vkmxk7Q.roa (raw, json)
Hash identifier: C7uboAahm4Yu2ivICJXRkRL8Mo0HkOvRyIxGzYxkK5E=
Subject key identifier: 7E:3C:38:B7:B0:E8:94:B1:FC:ED:7E:5D:EB:C5:B4:56:49:B1:93:B4
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 0185729EC61EB8F72C9908BDA4BA516D5DBC
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/fjw4t7DolLH87X5d68W0Vkmxk7Q.roa
Signing time: Mon 02 Jan 2023 13:14:45 +0000
ROA not before: Mon 02 Jan 2023 13:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34919
IP address blocks: 45.136.240.0/22 maxlen: 24
2a0e:9dc0::/29 maxlen: 48
Validation: Failed, certificate revoked on Wed 08 Feb 2023 22:57:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:c6:1e:b8:f7:2c:99:08:bd:a4:ba:51:6d:5d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Jan 2 13:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e3c38b7b0e894b1fced7e5debc5b45649b193b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2a:98:3a:9f:04:d8:50:eb:6d:fd:09:b5:c9:
31:30:65:d9:42:b3:8b:74:46:f5:6b:f5:ff:78:5c:
cb:97:06:f3:5c:e7:a9:ca:80:b3:34:84:a6:28:d8:
0d:3e:ec:dc:4f:8a:dd:e6:95:82:0d:83:a7:04:4c:
28:05:1e:21:8e:39:5e:5c:fe:af:04:8f:ca:bb:13:
f7:ba:75:bd:5b:ce:b9:e4:a7:3e:d2:54:a5:39:22:
c5:cf:3b:68:49:01:13:59:ce:c6:46:0a:a1:f5:44:
5d:95:48:67:bc:7b:ab:4f:fa:2c:8e:53:da:93:fd:
41:c6:d8:f1:ef:c7:92:11:d6:4d:9d:3e:ef:a0:4b:
be:10:ac:a4:a8:e0:24:18:ca:18:fa:a1:99:4c:34:
99:f1:d6:13:35:a2:35:92:25:33:4a:0b:2e:fe:4a:
3d:5f:0d:bf:c4:f5:28:9f:fc:92:87:fc:e6:a0:c4:
fb:16:fa:8c:e1:d3:e4:c1:a5:7b:f2:55:e2:57:3e:
92:90:6b:38:13:50:e3:d0:8a:f1:64:52:52:65:f5:
1e:05:8e:b7:60:58:3d:5f:84:86:62:e1:64:27:8c:
bb:46:94:d0:2f:fd:99:c7:bd:43:75:f1:b1:db:db:
e1:1f:75:ae:8b:8e:21:29:3f:65:97:8b:60:e5:6d:
ee:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3C:38:B7:B0:E8:94:B1:FC:ED:7E:5D:EB:C5:B4:56:49:B1:93:B4
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/fjw4t7DolLH87X5d68W0Vkmxk7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.240.0/22
IPv6:
2a0e:9dc0::/29
Signature Algorithm: sha256WithRSAEncryption
7e:87:2e:53:6a:f7:85:bb:9a:d8:e0:20:a6:04:5c:2d:57:f6:
fa:49:97:ce:e6:2d:2d:8b:b4:d7:06:67:3c:32:aa:cb:6b:f1:
86:17:ca:b3:b9:7c:14:39:20:98:dc:ec:bf:4a:3a:0c:67:ef:
f2:76:fe:e0:8a:78:47:8d:cf:fe:df:25:60:23:32:3f:e2:1a:
7b:6e:e6:6f:a3:80:b0:d3:2f:5c:de:d7:27:5b:57:33:26:fc:
8a:4e:35:77:c7:80:94:80:89:c2:1b:82:3a:99:f7:19:9b:1b:
6d:97:71:b1:49:0e:05:7d:a7:ff:89:30:09:ab:9d:8b:97:8d:
55:6a:92:97:3a:69:64:f3:88:a1:a3:8b:ab:38:bf:d7:e1:1a:
0f:de:01:41:a9:b8:71:03:ba:92:3d:a2:65:fa:34:d6:04:c4:
dc:0e:23:f8:bd:0c:a7:8a:42:bd:b8:8f:9e:aa:cf:66:53:c5:
df:49:a3:50:23:e8:7e:c3:bb:21:fd:91:65:15:87:6e:b8:39:
e4:b7:de:db:19:2f:27:e0:da:ec:4f:0f:42:21:e4:67:a1:0f:
c6:8a:dd:0e:23:3e:54:28:b8:fa:08:36:be:c2:02:5b:6c:b1:
fb:f2:45:90:96:7a:04:20:19:5a:18:4f:3c:23:bf:74:bd:99:
f5:8f:99:d5
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVynsYeuPcsmQi9pLpRbV28MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1ZjE5ZWIwZGQ0OGUxYjI0OTI0OTA4YmI1YjY4NDhjYzE2
Nzg1NDYwHhcNMjMwMTAyMTMxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTNjMzhiN2IwZTg5NGIxZmNlZDdlNWRlYmM1YjQ1NjQ5YjE5M2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyqYOp8E2FDrbf0JtckxMGXZQrOL
dEb1a/X/eFzLlwbzXOepyoCzNISmKNgNPuzcT4rd5pWCDYOnBEwoBR4hjjleXP6v
BI/KuxP3unW9W8655Kc+0lSlOSLFzztoSQETWc7GRgqh9URdlUhnvHurT/osjlPa
k/1Bxtjx78eSEdZNnT7voEu+EKykqOAkGMoY+qGZTDSZ8dYTNaI1kiUzSgsu/ko9
Xw2/xPUon/ySh/zmoMT7FvqM4dPkwaV78lXiVz6SkGs4E1Dj0IrxZFJSZfUeBY63
YFg9X4SGYuFkJ4y7RpTQL/2Zx71DdfGx29vhH3Wui44hKT9ll4tg5W3u5wIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFH48OLew6JSx/O1+XevFtFZJsZO0MB8GA1UdIwQY
MBaAFLXxnrDdSOGySSSQi7W2hIzBZ4VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQt
MzVjNjZkN2M1MjYwLzEvZmp3NHQ3RG9sTEg4N1g1ZDY4VzBWa214azdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQtMzVjNjZkN2M1MjYw
LzEvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYjwMA0E
AgACMAcDBQMqDp3AMA0GCSqGSIb3DQEBCwUAA4IBAQB+hy5TaveFu5rY4CCmBFwt
V/b6SZfO5i0ti7TXBmc8MqrLa/GGF8qzuXwUOSCY3Oy/SjoMZ+/ydv7ginhHjc/+
3yVgIzI/4hp7buZvo4Cw0y9c3tcnW1czJvyKTjV3x4CUgInCG4I6mfcZmxttl3Gx
SQ4Ffaf/iTAJq52Ll41VapKXOmlk84iho4urOL/X4RoP3gFBqbhxA7qSPaJl+jTW
BMTcDiP4vQynikK9uI+eqs9mU8XfSaNQI+h+w7sh/ZFlFYduuDnkt97bGS8n4Nrs
Tw9CIeRnoQ/Git0OIz5UKLj6CDa+wgJbbLH78kWQlnoEIBlaGE88I790vZn1j5nV
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:07 2024 by rpki-client on console-ams.rpki-client.org