Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PQA0AgQsFwQxWXNhn0SLC7TuGjI.roa
File: PQA0AgQsFwQxWXNhn0SLC7TuGjI.roa (raw, json)
Hash identifier: VKJOFtcSsludR061b7GgYK/9zXUQ2fSlPhQ5y9nBdtA=
Subject key identifier: 3D:00:34:02:04:2C:17:04:31:59:73:61:9F:44:8B:0B:B4:EE:1A:32
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018A8D99A0CC9C91AFFC09044A0E3898B761
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PQA0AgQsFwQxWXNhn0SLC7TuGjI.roa
Signing time: Wed 13 Sep 2023 08:12:50 +0000
ROA not before: Wed 13 Sep 2023 08:12:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5065
IP address blocks: 45.9.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8d:99:a0:cc:9c:91:af:fc:09:04:4a:0e:38:98:b7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 13 08:12:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3d003402042c1704315973619f448b0bb4ee1a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cd:e4:f0:3d:41:e3:73:01:2c:59:25:a8:0a:
a8:7f:e8:e9:e9:94:bf:d0:7d:e6:a1:78:27:43:a1:
4a:6f:9f:54:c8:4f:5d:1d:df:d0:10:ef:c7:3a:a5:
e0:9e:af:06:c9:25:01:6e:48:ec:7b:d7:48:6c:7d:
24:10:1e:a2:0b:ab:2d:0c:61:c4:8c:1b:ce:c2:83:
60:64:7b:34:d9:54:98:15:74:cd:25:25:70:3c:02:
5f:9b:fc:16:1b:3b:e3:ce:ae:86:6c:0a:d6:c4:88:
90:1c:33:6a:6a:93:8a:ae:a7:b7:79:91:ba:f4:84:
90:17:cd:30:e9:28:6e:0e:f1:cb:d1:3f:2d:8d:64:
e7:19:41:2b:29:30:26:d6:c6:ba:95:2c:04:7a:61:
48:e2:b7:49:62:87:7e:d6:96:ef:25:98:dd:07:73:
ec:9b:53:5f:14:1d:ff:98:dd:4d:62:35:9c:c2:73:
3d:d2:07:5c:11:c0:22:14:a0:51:9f:04:09:8c:21:
fd:34:ac:a1:e6:5f:fe:60:6e:4e:d9:0a:b0:46:fd:
cb:46:39:b0:bc:8b:19:66:64:d1:df:8f:00:71:cf:
0f:2a:24:f5:13:88:e9:3d:ae:64:66:bc:63:33:8a:
50:85:83:75:fb:7a:91:5b:0a:4a:18:3a:6d:b1:2f:
f9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:00:34:02:04:2C:17:04:31:59:73:61:9F:44:8B:0B:B4:EE:1A:32
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/PQA0AgQsFwQxWXNhn0SLC7TuGjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.3.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:98:4c:58:43:3d:da:c2:81:80:3c:03:e6:f5:0d:97:7b:29:
96:25:aa:5c:c8:99:32:9c:e5:2c:22:dd:e1:b2:45:82:2b:5a:
73:59:31:f3:61:6f:91:0e:cd:99:72:a5:57:96:26:b3:fb:bf:
6d:39:fa:cc:99:e9:a9:ac:69:35:6a:af:ae:c7:4c:1e:5a:58:
44:f6:21:f2:1c:7e:ef:4a:11:5f:02:e9:27:55:2a:64:ff:68:
13:78:d0:2e:66:7a:58:f6:80:f8:c0:c8:ec:d9:61:7b:f0:dd:
5f:93:54:1c:6b:7c:f2:78:18:c8:e5:73:bd:80:09:68:b9:fd:
e6:11:5e:c2:66:61:6b:b1:07:f6:5f:f6:a1:11:ab:9b:f3:14:
92:77:fe:a9:34:8f:d5:67:c0:41:23:03:02:17:e6:9b:be:61:
45:43:b7:c1:ed:5c:09:a5:e0:fe:80:f2:86:71:af:ff:7e:42:
cf:a9:ac:88:90:53:7e:e6:d5:b7:69:f6:5d:40:a0:9b:ad:72:
b0:2a:d7:42:a7:8c:43:07:2b:9e:d7:c7:b7:de:97:7a:33:fc:
7a:79:25:8c:e3:60:27:7d:d2:dc:0b:70:c4:7f:a7:3a:87:9b:
0b:5b:bf:cc:9e:66:5d:bf:7c:00:57:41:5d:5b:a7:02:b4:20:
a4:6f:9b:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqNmaDMnJGv/AkESg44mLdhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwOTEzMDgxMjUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDAwMzQwMjA0MmMxNzA0MzE1OTczNjE5ZjQ0OGIwYmI0ZWUxYTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM3k8D1B43MBLFklqAqof+jp6ZS/
0H3moXgnQ6FKb59UyE9dHd/QEO/HOqXgnq8GySUBbkjse9dIbH0kEB6iC6stDGHE
jBvOwoNgZHs02VSYFXTNJSVwPAJfm/wWGzvjzq6GbArWxIiQHDNqapOKrqe3eZG6
9ISQF80w6ShuDvHL0T8tjWTnGUErKTAm1sa6lSwEemFI4rdJYod+1pbvJZjdB3Ps
m1NfFB3/mN1NYjWcwnM90gdcEcAiFKBRnwQJjCH9NKyh5l/+YG5O2QqwRv3LRjmw
vIsZZmTR348Acc8PKiT1E4jpPa5kZrxjM4pQhYN1+3qRWwpKGDptsS/5pwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD0ANAIELBcEMVlzYZ9Eiwu07hoyMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvUFFBMEFnUXNGd1F4V1hOaG4wU0xDN1R1R2pJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQkDMA0G
CSqGSIb3DQEBCwUAA4IBAQAumExYQz3awoGAPAPm9Q2XeymWJapcyJkynOUsIt3h
skWCK1pzWTHzYW+RDs2ZcqVXliaz+79tOfrMmemprGk1aq+ux0weWlhE9iHyHH7v
ShFfAuknVSpk/2gTeNAuZnpY9oD4wMjs2WF78N1fk1Qca3zyeBjI5XO9gAlouf3m
EV7CZmFrsQf2X/ahEaub8xSSd/6pNI/VZ8BBIwMCF+abvmFFQ7fB7VwJpeD+gPKG
ca//fkLPqayIkFN+5tW3afZdQKCbrXKwKtdCp4xDByue18e33pd6M/x6eSWM42An
fdLcC3DEf6c6h5sLW7/MnmZdv3wAV0FdW6cCtCCkb5sV
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:03 2024 by rpki-client on console-ams.rpki-client.org