Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/SlsQCBMtHzlO3T4ip_P4w8NYsQg.roa
File: SlsQCBMtHzlO3T4ip_P4w8NYsQg.roa (raw, json)
Hash identifier: mw0z6ymaOzr0x7HjpyLNpTqo75COFslpFy7ozrlZhgY=
Subject key identifier: 4A:5B:10:08:13:2D:1F:39:4E:DD:3E:22:A7:F3:F8:C3:C3:58:B1:08
Certificate issuer: /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial: 01857102DDC0B4F9E6ED3449DA4ABB0D782F
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/SlsQCBMtHzlO3T4ip_P4w8NYsQg.roa
Signing time: Mon 02 Jan 2023 05:44:51 +0000
ROA not before: Mon 02 Jan 2023 05:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 45.91.255.0/24 maxlen: 24
193.57.172.0/24 maxlen: 24
2a11:5ec0::/40 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:dd:c0:b4:f9:e6:ed:34:49:da:4a:bb:0d:78:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Validity
Not Before: Jan 2 05:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a5b1008132d1f394edd3e22a7f3f8c3c358b108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3f:b2:de:e2:24:6e:b7:da:fd:c6:51:d1:a2:
89:19:33:78:14:27:5c:6c:57:e5:77:a2:f8:a5:90:
df:a0:2f:d4:c3:cb:4d:94:1c:37:71:bf:f2:ec:a1:
56:8c:76:7f:a8:fd:44:85:d5:9b:65:4c:9f:c4:c6:
9e:1d:96:4b:c2:96:da:38:6a:c7:60:1e:5c:81:c5:
29:1d:9c:dc:80:e1:6e:f0:c8:07:a9:2d:c4:ec:a8:
8b:7b:af:a9:6a:4b:1f:7d:e3:8c:07:3c:b4:6c:76:
58:77:ac:03:e2:e7:24:00:96:2b:ae:bc:97:6c:c9:
9a:ba:d1:bb:ad:a9:fa:23:94:73:8e:06:16:f0:2c:
c1:12:c7:6a:54:1b:49:ff:a9:df:4f:fc:47:44:02:
3f:9b:16:3f:fc:a9:f3:62:2b:cd:eb:03:d4:31:d5:
a7:5a:59:32:70:ff:f5:0b:af:85:ef:c5:56:ea:d7:
de:92:e3:df:ad:ba:06:25:4d:43:f2:a3:24:d6:bf:
03:98:20:07:a4:b8:b8:e4:52:15:2d:12:20:0a:c0:
7b:b2:16:4d:85:ad:5e:30:c9:80:b2:55:bd:d3:14:
ed:99:b9:2a:35:a4:1a:f4:cf:2d:ac:6f:a2:d7:7a:
be:ab:a5:5d:21:8b:2b:74:28:f5:47:2b:8c:7d:98:
85:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5B:10:08:13:2D:1F:39:4E:DD:3E:22:A7:F3:F8:C3:C3:58:B1:08
X509v3 Authority Key Identifier:
keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/SlsQCBMtHzlO3T4ip_P4w8NYsQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.255.0/24
193.57.172.0/24
IPv6:
2a11:5ec0::/40
Signature Algorithm: sha256WithRSAEncryption
64:c0:75:4f:07:94:39:86:40:b1:f8:b7:59:1e:b6:56:37:60:
2a:4f:de:3a:51:82:d8:65:5d:b4:91:e8:fa:f4:fc:1f:a6:88:
db:ad:e4:1e:70:38:24:b7:50:9a:93:64:36:3e:52:3e:69:17:
10:9d:83:94:cc:86:72:07:7e:d5:b4:45:75:08:ea:5d:e8:07:
b9:89:cc:5e:ab:2e:79:ad:1b:5d:97:c9:d7:f0:bd:bb:97:4d:
4a:3f:d6:b0:cb:64:b5:36:5b:33:8f:f7:61:1c:12:e4:b5:0f:
73:5d:19:d4:e5:8b:89:02:ae:d5:73:b8:9d:07:ff:d1:36:2d:
a2:d1:dc:94:4a:c9:be:5c:e4:54:6c:80:c4:ad:92:f4:68:8d:
40:7b:68:53:79:53:fe:db:d2:5f:cc:5b:af:2d:15:54:21:7c:
8b:72:e3:8b:76:4f:ff:c3:10:9c:dd:7d:c3:5c:05:93:b8:07:
55:76:54:ba:b0:60:96:f2:de:c3:6d:07:a0:ae:8b:ab:f6:65:
e9:c9:e6:29:88:95:1c:db:39:7c:e5:71:d0:5a:ba:3c:48:4a:
6f:88:14:d1:cb:f6:0c:76:cb:f2:1b:bc:d4:55:79:40:00:c4:
1e:ac:af:ea:60:c1:39:8c:56:ef:ba:8b:b8:da:7c:6b:90:dd:
56:8d:38:e6
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAYVxAt3AtPnm7TRJ2kq7DXgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzk4MDRlMjI3ZWFhYzlhYzA5YjA4MjFmYzA3ZWUyODE3
Nzc3YjUwHhcNMjMwMTAyMDU0NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTViMTAwODEzMmQxZjM5NGVkZDNlMjJhN2YzZjhjM2MzNThiMTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyj+y3uIkbrfa/cZR0aKJGTN4FCdc
bFfld6L4pZDfoC/Uw8tNlBw3cb/y7KFWjHZ/qP1EhdWbZUyfxMaeHZZLwpbaOGrH
YB5cgcUpHZzcgOFu8MgHqS3E7KiLe6+paksffeOMBzy0bHZYd6wD4uckAJYrrryX
bMmautG7ran6I5RzjgYW8CzBEsdqVBtJ/6nfT/xHRAI/mxY//KnzYivN6wPUMdWn
WlkycP/1C6+F78VW6tfekuPfrboGJU1D8qMk1r8DmCAHpLi45FIVLRIgCsB7shZN
ha1eMMmAslW90xTtmbkqNaQa9M8trG+i13q+q6VdIYsrdCj1RyuMfZiFPwIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFEpbEAgTLR85Tt0+Iqfz+MPDWLEIMB8GA1UdIwQY
MBaAFMrJgE4ifqrJrAmwgh/AfuKBd3e1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEt
OTBmYjU3ZDQwY2E3LzEvU2xzUUNCTXRIemxPM1Q0aXBfUDR3OE5Zc1FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEtOTBmYjU3ZDQwY2E3
LzEveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQALVv/AwQA
wTmsMA4EAgACMAgDBgAqEV7AADANBgkqhkiG9w0BAQsFAAOCAQEAZMB1TweUOYZA
sfi3WR62VjdgKk/eOlGC2GVdtJHo+vT8H6aI263kHnA4JLdQmpNkNj5SPmkXEJ2D
lMyGcgd+1bRFdQjqXegHuYnMXqsuea0bXZfJ1/C9u5dNSj/WsMtktTZbM4/3YRwS
5LUPc10Z1OWLiQKu1XO4nQf/0TYtotHclErJvlzkVGyAxK2S9GiNQHtoU3lT/tvS
X8xbry0VVCF8i3Lji3ZP/8MQnN19w1wFk7gHVXZUurBglvLew20HoK6Lq/Zl6cnm
KYiVHNs5fOVx0Fq6PEhKb4gU0cv2DHbL8hu81FV5QADEHqyv6mDBOYxW77qLuNp8
a5DdVo045g==
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:45 2024 by rpki-client on console-ams.rpki-client.org