Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/arLPVIdiuWGGdjHZSZOtNR8q_Z0.roa
File: arLPVIdiuWGGdjHZSZOtNR8q_Z0.roa (raw, json)
Hash identifier: CgHftxLYksf54U1bJerm1G3zBJ3mqKf7Edb0fA0B06M=
Subject key identifier: 6A:B2:CF:54:87:62:B9:61:86:76:31:D9:49:93:AD:35:1F:2A:FD:9D
Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial: 018B707596CDA0527A4EC4B4676A9B7F4C5A
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/arLPVIdiuWGGdjHZSZOtNR8q_Z0.roa
Signing time: Fri 27 Oct 2023 09:27:16 +0000
ROA not before: Fri 27 Oct 2023 09:27:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.149.92.0/24 maxlen: 24
80.246.228.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:70:75:96:cd:a0:52:7a:4e:c4:b4:67:6a:9b:7f:4c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
Validity
Not Before: Oct 27 09:27:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ab2cf548762b961867631d94993ad351f2afd9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e6:f9:c4:bd:56:6a:fe:c6:c4:63:6f:a7:ef:
29:ae:e4:79:13:cc:ef:d0:74:1a:8f:fb:a0:26:1e:
48:69:e7:81:5d:7a:54:31:03:d5:05:fd:41:c0:17:
00:16:75:67:04:99:33:09:58:b6:df:09:e8:57:fd:
0d:5b:ba:56:21:71:d1:4c:7e:27:e0:fd:51:de:c4:
5c:b6:e0:f9:f2:08:f9:df:7c:cd:58:8f:a6:7c:de:
a6:49:bb:89:ab:ce:d6:c5:4f:b9:32:ac:d5:bc:dc:
74:bc:b3:80:3b:6c:8c:eb:a7:94:fa:87:3b:03:6f:
a1:72:b8:03:25:a5:04:3b:b9:73:78:96:0e:e1:9e:
b5:87:af:77:12:16:d6:4e:21:bc:ec:7c:93:d9:84:
13:27:d7:b3:af:ba:1d:c1:00:c4:ac:57:cb:b9:05:
a5:22:ff:48:7a:23:4a:ba:a8:b5:e7:ec:a3:c6:db:
36:35:e0:48:a2:db:9a:37:47:fe:75:f4:e5:79:1d:
d7:bb:fe:c8:49:26:af:95:fa:be:b8:46:91:63:fb:
1b:e4:30:b6:20:3d:9a:44:24:55:22:2b:d0:3d:50:
df:a2:4a:df:e9:b8:05:41:f9:c6:ee:d5:3f:6b:77:
56:1c:cc:42:27:c4:df:13:e3:4b:6d:c9:1e:43:e1:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B2:CF:54:87:62:B9:61:86:76:31:D9:49:93:AD:35:1F:2A:FD:9D
X509v3 Authority Key Identifier:
keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/arLPVIdiuWGGdjHZSZOtNR8q_Z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.92.0/24
80.246.228.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f2:9c:da:a1:36:65:7b:84:0e:75:39:c0:38:e9:2c:c5:05:
ff:17:f7:7d:04:2c:f6:e2:8b:f3:96:f8:42:9a:d6:f6:36:37:
e9:4d:e0:db:2a:26:f7:be:21:a3:88:27:66:d3:e6:ff:6b:fd:
0a:79:fd:08:14:35:1c:41:56:60:35:d8:f5:66:78:5d:2a:98:
0c:11:55:51:37:35:35:ec:e6:0d:bc:fa:66:2f:4e:91:05:14:
3c:ae:ed:12:37:75:b2:51:bb:84:be:dd:4e:4c:fc:cf:7b:26:
00:3a:26:20:89:2e:93:16:3c:c3:35:5c:6d:ad:c9:41:03:b8:
47:1b:b9:31:2d:60:2a:c6:61:11:8f:73:86:0e:8d:43:58:d5:
68:d2:a7:d0:df:12:a9:63:93:5c:aa:00:15:8b:4f:5f:54:2f:
b1:cc:c7:92:e4:40:7d:a9:5f:e1:b4:ae:73:fe:a9:29:bf:77:
20:e7:d0:b0:b7:aa:2b:b2:bb:41:1b:c4:49:21:61:b2:20:a8:
54:1d:4e:8c:39:81:a1:71:3b:74:26:d4:68:37:e1:58:52:a7:
e0:73:3c:cb:d2:4a:8f:fa:dc:16:ac:62:fe:bf:b0:1f:db:78:
b5:53:cc:c4:93:0e:46:93:ad:12:4d:24:3e:35:02:fa:a6:86:
1b:5e:dc:13
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYtwdZbNoFJ6TsS0Z2qbf0xaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2
Y2Q3MzMwHhcNMjMxMDI3MDkyNzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWIyY2Y1NDg3NjJiOTYxODY3NjMxZDk0OTkzYWQzNTFmMmFmZDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgub5xL1Wav7GxGNvp+8pruR5E8zv
0HQaj/ugJh5IaeeBXXpUMQPVBf1BwBcAFnVnBJkzCVi23wnoV/0NW7pWIXHRTH4n
4P1R3sRctuD58gj533zNWI+mfN6mSbuJq87WxU+5MqzVvNx0vLOAO2yM66eU+oc7
A2+hcrgDJaUEO7lzeJYO4Z61h693EhbWTiG87HyT2YQTJ9ezr7odwQDErFfLuQWl
Iv9IeiNKuqi15+yjxts2NeBIotuaN0f+dfTleR3Xu/7ISSavlfq+uEaRY/sb5DC2
ID2aRCRVIivQPVDfokrf6bgFQfnG7tU/a3dWHMxCJ8TfE+NLbckeQ+E9HQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGqyz1SHYrlhhnYx2UmTrTUfKv2dMB8GA1UdIwQY
MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt
YWRlYWRlMjg2NWMxLzEvYXJMUFZJZGl1V0dHZGpIWlNaT3ROUjhxX1owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx
LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZVcAwQA
UPbkMA0GCSqGSIb3DQEBCwUAA4IBAQA58pzaoTZle4QOdTnAOOksxQX/F/d9BCz2
4ovzlvhCmtb2NjfpTeDbKib3viGjiCdm0+b/a/0Kef0IFDUcQVZgNdj1ZnhdKpgM
EVVRNzU17OYNvPpmL06RBRQ8ru0SN3WyUbuEvt1OTPzPeyYAOiYgiS6TFjzDNVxt
rclBA7hHG7kxLWAqxmERj3OGDo1DWNVo0qfQ3xKpY5NcqgAVi09fVC+xzMeS5EB9
qV/htK5z/qkpv3cg59Cwt6orsrtBG8RJIWGyIKhUHU6MOYGhcTt0JtRoN+FYUqfg
czzL0kqP+twWrGL+v7Af23i1U8zEkw5Gk60STSQ+NQL6poYbXtwT
-----END CERTIFICATE-----
Generated at Tue Oct 31 09:52:41 2023 by rpki-client on console-ams.rpki-client.org