Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/vCEVVmhJmbmKhuSNRmRsnIaAmy8.roa
File: vCEVVmhJmbmKhuSNRmRsnIaAmy8.roa (raw, json)
Hash identifier: FWO9vo2FaUEVPhDb65AxCZ7BYHCZBtUQUUkad3gmD3E=
Subject key identifier: BC:21:15:56:68:49:99:B9:8A:86:E4:8D:46:64:6C:9C:86:80:9B:2F
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 01877B47D835FEB8209B713FA2457EDED2B3
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/vCEVVmhJmbmKhuSNRmRsnIaAmy8.roa
Signing time: Thu 13 Apr 2023 15:41:58 +0000
ROA not before: Thu 13 Apr 2023 15:41:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 23470
IP address blocks: 45.147.62.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7b:47:d8:35:fe:b8:20:9b:71:3f:a2:45:7e:de:d2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Apr 13 15:41:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc211556684999b98a86e48d46646c9c86809b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0d:b0:9e:72:8b:16:e5:26:c1:7f:cf:c6:01:
2c:af:be:af:a6:cb:f7:c1:d1:8c:cd:2a:d2:10:1e:
a0:b9:06:65:77:f2:92:45:d6:d7:47:70:c7:ed:5b:
b5:c4:07:df:47:56:2c:e0:83:80:a8:d0:37:31:7f:
57:ef:83:39:55:e1:9a:75:c3:b0:3a:45:96:00:a9:
4c:68:29:83:be:c8:d4:35:3b:c5:ed:97:1a:cb:6e:
f2:4b:f7:f9:49:f9:8c:91:25:0a:5b:a3:a4:79:58:
0b:83:29:4a:b0:de:05:77:5f:64:99:f7:27:1a:90:
01:dc:a5:39:f0:56:4a:9e:e0:2f:d7:3d:28:d9:9f:
43:20:f3:6f:01:f9:ce:13:6e:54:7e:de:f1:98:97:
04:aa:30:60:44:0f:61:ed:58:0b:58:7e:04:e7:1b:
58:19:2d:a7:a4:1d:91:e1:a7:41:19:51:0f:c0:c1:
0d:1e:e8:c3:21:0c:14:8c:82:6f:3a:6b:dd:a7:ec:
b7:3d:08:16:32:dd:ac:64:6b:6c:f2:6b:ba:6d:73:
8a:41:3d:3b:74:43:7d:1f:59:c2:97:27:4c:7a:b4:
c8:d7:3d:6f:10:b5:87:08:25:42:6f:88:ae:37:4f:
b7:b0:e9:bd:24:97:e0:01:74:5a:6e:8f:b8:63:92:
94:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:21:15:56:68:49:99:B9:8A:86:E4:8D:46:64:6C:9C:86:80:9B:2F
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/vCEVVmhJmbmKhuSNRmRsnIaAmy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.62.0/24
Signature Algorithm: sha256WithRSAEncryption
74:1c:84:b7:2a:00:91:62:e8:45:c9:13:a5:8a:74:89:b4:9e:
ec:a3:3b:d8:37:5b:17:5b:2f:a5:23:1f:1a:f9:d6:32:b5:ae:
20:10:62:76:c7:42:d6:38:f2:14:dc:da:4b:2b:86:b7:4b:ab:
e5:07:b4:b9:c0:3b:9c:f7:08:73:b7:7e:1e:8f:b9:13:d0:7a:
8e:a5:5d:04:79:a1:81:41:44:67:e4:61:48:28:31:b2:c4:91:
c9:2a:fd:dc:12:ef:d3:ad:14:f6:7e:0c:22:ce:a5:eb:13:ae:
99:6f:55:75:14:f5:de:f2:4e:e2:16:28:e2:74:4f:5c:f8:76:
59:90:cb:e6:24:6b:8f:47:8b:97:f1:5b:af:2d:c5:a4:0d:d6:
34:b1:3f:36:ce:9e:19:ad:6d:9a:8c:43:40:d5:e4:ca:9a:51:
c9:63:73:20:a0:60:27:b7:4d:3e:ca:fc:0c:89:13:1a:25:94:
a6:5f:0e:b3:ce:e9:54:b8:43:0a:b5:14:f2:6b:e3:c4:32:76:
c9:46:f6:17:c1:9d:bb:64:6f:31:2c:8e:22:b1:2b:da:b0:95:
e1:37:ea:93:c6:d2:50:7f:96:ce:a0:b9:85:e8:1b:66:b7:62:
1d:69:1f:46:7a:b3:3b:8a:6a:21:95:2b:83:24:42:76:22:ad:
54:8b:29:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd7R9g1/rggm3E/okV+3tKzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx
ODQxMmMwHhcNMjMwNDEzMTU0MTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzIxMTU1NjY4NDk5OWI5OGE4NmU0OGQ0NjY0NmM5Yzg2ODA5YjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3A2wnnKLFuUmwX/PxgEsr76vpsv3
wdGMzSrSEB6guQZld/KSRdbXR3DH7Vu1xAffR1Ys4IOAqNA3MX9X74M5VeGadcOw
OkWWAKlMaCmDvsjUNTvF7Zcay27yS/f5SfmMkSUKW6OkeVgLgylKsN4Fd19kmfcn
GpAB3KU58FZKnuAv1z0o2Z9DIPNvAfnOE25Uft7xmJcEqjBgRA9h7VgLWH4E5xtY
GS2npB2R4adBGVEPwMENHujDIQwUjIJvOmvdp+y3PQgWMt2sZGts8mu6bXOKQT07
dEN9H1nClydMerTI1z1vELWHCCVCb4iuN0+3sOm9JJfgAXRabo+4Y5KUZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLwhFVZoSZm5iobkjUZkbJyGgJsvMB8GA1UdIwQY
MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt
MjVjYzlkNmNmYmI5LzEvdkNFVlZtaEptYm1LaHVTTlJtUnNuSWFBbXk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5
LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZM+MA0G
CSqGSIb3DQEBCwUAA4IBAQB0HIS3KgCRYuhFyROlinSJtJ7sozvYN1sXWy+lIx8a
+dYyta4gEGJ2x0LWOPIU3NpLK4a3S6vlB7S5wDuc9whzt34ej7kT0HqOpV0EeaGB
QURn5GFIKDGyxJHJKv3cEu/TrRT2fgwizqXrE66Zb1V1FPXe8k7iFijidE9c+HZZ
kMvmJGuPR4uX8VuvLcWkDdY0sT82zp4ZrW2ajENA1eTKmlHJY3MgoGAnt00+yvwM
iRMaJZSmXw6zzulUuEMKtRTya+PEMnbJRvYXwZ27ZG8xLI4isSvasJXhN+qTxtJQ
f5bOoLmF6Btmt2IdaR9GerM7imohlSuDJEJ2Iq1UiylP
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:32 2024 by rpki-client on console-fra.rpki-client.org