Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Ub4lK5-oVzdxSjmb8NBoj4P2D9k.roa
File: Ub4lK5-oVzdxSjmb8NBoj4P2D9k.roa (raw, json)
Hash identifier: YISzHiO411Rnh0ZroFvb64vAUuhK0hDoq6z7GPuwb40=
Subject key identifier: 51:BE:25:2B:9F:A8:57:37:71:4A:39:9B:F0:D0:68:8F:83:F6:0F:D9
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018B5B89C0A60923FA1423F456CB81240BF8
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Ub4lK5-oVzdxSjmb8NBoj4P2D9k.roa
Signing time: Mon 23 Oct 2023 07:57:16 +0000
ROA not before: Mon 23 Oct 2023 07:57:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.8.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5b:89:c0:a6:09:23:fa:14:23:f4:56:cb:81:24:0b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 23 07:57:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=51be252b9fa85737714a399bf0d0688f83f60fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4a:4e:41:22:a2:f4:d4:51:13:a0:e6:46:37:
38:7f:42:32:e2:f8:4a:1f:49:51:2d:c7:57:1c:6b:
1b:f4:f2:ad:2d:b5:c5:79:a5:d0:40:ec:1b:64:80:
ce:95:d7:8c:cd:15:0c:8f:9c:6c:d8:63:d3:1e:00:
8c:d8:68:e6:7d:82:eb:28:a2:98:e2:30:41:de:df:
17:32:1d:fe:9b:35:da:a9:4d:83:36:6d:fb:13:ba:
1b:60:c2:ca:74:1c:7e:bf:78:c6:37:f8:b7:ce:be:
a3:ff:fa:3c:28:30:0a:38:6b:51:70:c7:fc:71:76:
aa:cd:a5:93:f3:59:25:72:dc:7a:79:5b:27:16:7e:
f4:e5:eb:58:a7:7e:09:6e:25:e8:66:3e:44:dc:42:
e5:22:6e:5d:e0:f7:14:f1:dc:6c:11:4a:3d:ac:5e:
b6:f8:9b:ed:62:9b:fd:80:42:60:b6:81:00:38:65:
b1:50:29:75:4c:29:ba:75:c6:43:95:6b:fe:98:a9:
f9:cf:2d:6d:32:cf:20:fe:13:1b:6b:82:20:5e:2e:
a7:9a:1c:ab:2b:c3:e1:d8:89:b2:07:76:ca:09:e1:
59:3e:02:01:04:e1:b3:4b:3f:05:a0:59:06:ea:73:
51:7d:61:4c:a9:42:c4:5d:ca:94:a9:16:c0:e7:13:
0a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:BE:25:2B:9F:A8:57:37:71:4A:39:9B:F0:D0:68:8F:83:F6:0F:D9
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Ub4lK5-oVzdxSjmb8NBoj4P2D9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.187.0/24
Signature Algorithm: sha256WithRSAEncryption
84:74:1c:9e:de:16:52:69:10:6f:02:c1:ca:8f:ea:de:03:41:
a1:cb:66:62:fb:e2:10:5d:57:51:ea:f1:fe:20:7b:45:68:e4:
33:f0:5f:64:89:17:31:6b:6a:c1:96:cc:36:87:d5:ee:54:f1:
6b:0a:1c:b9:f5:38:18:7c:4c:08:d3:7b:f3:66:cd:37:8e:16:
8a:98:c2:02:25:88:d1:a9:91:8c:05:2e:89:c3:f9:be:26:2a:
ec:45:99:42:31:19:9a:47:f4:4a:8d:67:4a:f3:db:e7:0f:b9:
e8:0f:f8:e6:54:3a:d0:14:0d:3f:14:08:a7:7b:30:9f:98:e5:
59:64:9a:7b:17:8f:26:7d:19:1d:08:a6:a0:0f:84:eb:d9:8a:
56:0c:3d:76:e9:13:25:cd:a2:3d:00:2a:08:7a:fa:ba:f3:66:
60:47:6e:6d:2c:16:5d:6c:3e:db:78:11:0d:58:ab:0f:53:7c:
f8:8f:22:a4:76:7a:5b:2a:44:76:b4:90:da:f2:47:2d:11:82:
63:46:68:90:82:10:d1:8f:d3:f2:37:56:59:11:8c:38:d3:f1:
c1:04:6f:3a:6a:ef:d4:2c:60:a8:ea:8f:47:92:34:24:81:b0:
05:27:cf:ec:8a:8c:27:c6:7f:b5:e7:a2:be:24:77:19:68:75:
0c:c2:a6:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtbicCmCSP6FCP0VsuBJAv4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMxMDIzMDc1NzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MWJlMjUyYjlmYTg1NzM3NzE0YTM5OWJmMGQwNjg4ZjgzZjYwZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUpOQSKi9NRRE6DmRjc4f0Iy4vhK
H0lRLcdXHGsb9PKtLbXFeaXQQOwbZIDOldeMzRUMj5xs2GPTHgCM2GjmfYLrKKKY
4jBB3t8XMh3+mzXaqU2DNm37E7obYMLKdBx+v3jGN/i3zr6j//o8KDAKOGtRcMf8
cXaqzaWT81klctx6eVsnFn705etYp34JbiXoZj5E3ELlIm5d4PcU8dxsEUo9rF62
+JvtYpv9gEJgtoEAOGWxUCl1TCm6dcZDlWv+mKn5zy1tMs8g/hMba4IgXi6nmhyr
K8Ph2ImyB3bKCeFZPgIBBOGzSz8FoFkG6nNRfWFMqULEXcqUqRbA5xMK2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFG+JSufqFc3cUo5m/DQaI+D9g/ZMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvVWI0bEs1LW9WemR4U2ptYjhOQm9qNFAyRDlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQi7MA0G
CSqGSIb3DQEBCwUAA4IBAQCEdBye3hZSaRBvAsHKj+reA0Ghy2Zi++IQXVdR6vH+
IHtFaOQz8F9kiRcxa2rBlsw2h9XuVPFrChy59TgYfEwI03vzZs03jhaKmMICJYjR
qZGMBS6Jw/m+JirsRZlCMRmaR/RKjWdK89vnD7noD/jmVDrQFA0/FAinezCfmOVZ
ZJp7F48mfRkdCKagD4Tr2YpWDD126RMlzaI9ACoIevq682ZgR25tLBZdbD7beBEN
WKsPU3z4jyKkdnpbKkR2tJDa8kctEYJjRmiQghDRj9PyN1ZZEYw40/HBBG86au/U
LGCo6o9HkjQkgbAFJ8/siownxn+156K+JHcZaHUMwqYV
-----END CERTIFICATE-----
Generated at Mon Oct 23 17:00:19 2023 by rpki-client on console-ams.rpki-client.org