Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_CR_68u1Qw-ch3757nRh3ax_nVs.roa
File: _CR_68u1Qw-ch3757nRh3ax_nVs.roa (raw, json)
Hash identifier: tiPfPhwzx3VhPjCesdw/uDbGRP8HI6AAF+c1cWsKoqo=
Subject key identifier: FC:24:7F:EB:CB:B5:43:0F:9C:87:7E:F9:EE:74:61:DD:AC:7F:9D:5B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0189644DDC933D1C604DB74B9547B0239F08
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_CR_68u1Qw-ch3757nRh3ax_nVs.roa
Signing time: Mon 17 Jul 2023 14:42:51 +0000
ROA not before: Mon 17 Jul 2023 14:42:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 45.8.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:4d:dc:93:3d:1c:60:4d:b7:4b:95:47:b0:23:9f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 17 14:42:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc247febcbb5430f9c877ef9ee7461ddac7f9d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:07:bf:04:10:69:4b:33:a4:ce:29:db:ab:03:
cd:5d:9b:46:da:c5:ce:0a:82:b7:56:16:ae:5b:cf:
13:eb:e0:2f:f0:eb:d3:e6:c3:64:03:76:2a:62:65:
61:25:7b:06:34:9b:d3:2a:d2:01:1d:c6:30:05:47:
b9:7f:46:d8:3f:47:7e:7b:e4:5a:9d:1d:44:7c:21:
1c:68:9e:a8:4d:d4:0f:38:35:24:26:5e:a0:19:64:
49:20:fa:b7:f0:f6:9f:66:80:35:87:57:3f:ff:54:
a9:b9:ea:50:a4:38:7e:53:27:83:2f:5e:a8:f9:fe:
6f:72:03:c9:d7:48:a6:6e:02:2b:b1:55:57:40:a0:
2f:9b:7e:d8:e9:b2:59:7a:db:88:28:63:09:1c:ca:
8e:40:04:57:cd:fe:82:2b:b9:87:1c:a5:a2:48:e3:
0f:97:02:06:1e:c7:f0:3f:42:5c:89:85:fa:1e:7d:
ab:90:f4:96:b0:31:9a:52:75:94:92:c0:10:9b:a4:
ff:19:93:ee:df:d5:23:26:c5:51:00:76:d0:cf:b0:
20:a7:08:f5:ea:80:b4:98:46:6c:94:23:70:c9:d6:
38:88:49:db:3d:11:3b:57:6d:8d:ca:46:45:2f:5c:
10:3f:cd:93:51:03:ee:14:07:b8:f3:c6:6f:e0:9d:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:24:7F:EB:CB:B5:43:0F:9C:87:7E:F9:EE:74:61:DD:AC:7F:9D:5B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_CR_68u1Qw-ch3757nRh3ax_nVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.187.0/24
Signature Algorithm: sha256WithRSAEncryption
54:50:51:10:1a:a5:cc:bb:71:51:f3:f1:ba:18:58:ae:e5:b9:
18:05:77:72:d5:a0:02:87:d9:5e:ba:e1:d8:81:13:49:6a:06:
e7:1e:47:1e:7b:fd:f0:c5:76:74:c8:0d:7b:2a:d0:62:70:e9:
8d:79:72:bd:60:07:a5:eb:68:d8:89:f6:ff:18:ff:a7:48:9a:
9b:39:f7:6c:c4:5c:91:8f:1d:e5:5b:13:93:82:8d:7d:d7:16:
e6:0e:96:97:8d:5e:1c:da:9a:64:c1:4f:2e:16:67:14:04:eb:
3e:57:2a:d4:79:1f:e2:0d:7d:64:cf:c5:79:ca:e5:d8:de:eb:
f7:20:55:e9:ab:f8:44:8b:1b:16:20:66:ad:c0:5b:96:da:97:
3b:42:af:58:8d:a5:6b:50:b2:5f:22:c1:6a:d3:7d:78:0a:9a:
8a:94:2e:a1:d7:10:6a:6f:9e:0b:9d:e9:78:73:99:4d:ab:8c:
f4:85:ab:d1:83:8a:3b:53:9e:9d:27:d2:56:6b:83:2d:9b:80:
79:7f:c1:2c:7c:16:af:bd:01:84:cd:0e:f3:38:67:03:01:a2:
44:a7:73:c7:6a:e3:bf:fc:c0:da:71:37:51:60:35:c8:f8:ed:
9b:f2:ed:39:9e:19:f3:4a:32:04:94:49:ba:53:f4:7e:30:75:
fa:28:f0:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlkTdyTPRxgTbdLlUewI58IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMwNzE3MTQ0MjUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzI0N2ZlYmNiYjU0MzBmOWM4NzdlZjllZTc0NjFkZGFjN2Y5ZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnge/BBBpSzOkzinbqwPNXZtG2sXO
CoK3VhauW88T6+Av8OvT5sNkA3YqYmVhJXsGNJvTKtIBHcYwBUe5f0bYP0d+e+Ra
nR1EfCEcaJ6oTdQPODUkJl6gGWRJIPq38PafZoA1h1c//1SpuepQpDh+UyeDL16o
+f5vcgPJ10imbgIrsVVXQKAvm37Y6bJZetuIKGMJHMqOQARXzf6CK7mHHKWiSOMP
lwIGHsfwP0JciYX6Hn2rkPSWsDGaUnWUksAQm6T/GZPu39UjJsVRAHbQz7Agpwj1
6oC0mEZslCNwydY4iEnbPRE7V22NykZFL1wQP82TUQPuFAe488Zv4J1ahQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPwkf+vLtUMPnId++e50Yd2sf51bMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvX0NSXzY4dTFRdy1jaDM3NTduUmgzYXhfblZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQi7MA0G
CSqGSIb3DQEBCwUAA4IBAQBUUFEQGqXMu3FR8/G6GFiu5bkYBXdy1aACh9leuuHY
gRNJagbnHkcee/3wxXZ0yA17KtBicOmNeXK9YAel62jYifb/GP+nSJqbOfdsxFyR
jx3lWxOTgo191xbmDpaXjV4c2ppkwU8uFmcUBOs+VyrUeR/iDX1kz8V5yuXY3uv3
IFXpq/hEixsWIGatwFuW2pc7Qq9YjaVrULJfIsFq0314CpqKlC6h1xBqb54Lnel4
c5lNq4z0havRg4o7U56dJ9JWa4Mtm4B5f8EsfBavvQGEzQ7zOGcDAaJEp3PHauO/
/MDacTdRYDXI+O2b8u05nhnzSjIElEm6U/R+MHX6KPCo
-----END CERTIFICATE-----
Generated at Tue Oct 17 09:10:54 2023 by rpki-client on console-fra.rpki-client.org