Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cosgVyLLKfPsEoWlhrL6pOqrg9A.roa
File: cosgVyLLKfPsEoWlhrL6pOqrg9A.roa (raw, json)
Hash identifier: mau17GPkYFePdz245WSuPQl/vbgWMo5mhJCttxe5WwE=
Subject key identifier: 72:8B:20:57:22:CB:29:F3:EC:12:85:A5:86:B2:FA:A4:EA:AB:83:D0
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018B067970787D6A11D9217CAE9A3E375F11
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cosgVyLLKfPsEoWlhrL6pOqrg9A.roa
Signing time: Fri 06 Oct 2023 19:31:43 +0000
ROA not before: Fri 06 Oct 2023 19:31:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.9.2.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:06:79:70:78:7d:6a:11:d9:21:7c:ae:9a:3e:37:5f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 6 19:31:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=728b205722cb29f3ec1285a586b2faa4eaab83d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:53:97:2e:32:53:48:59:77:30:77:92:5e:3a:
ae:9a:0c:8c:99:d5:d1:f4:df:e6:54:94:05:22:4f:
82:b5:fc:e2:18:24:14:33:be:f6:09:9e:0b:f9:05:
2b:e2:e1:9e:b3:50:a4:14:e5:5a:29:f3:6b:64:13:
8b:34:44:d3:91:3b:67:93:b4:b3:29:56:26:03:f5:
f9:67:58:20:66:a0:5a:83:5b:96:c4:8e:05:81:40:
ce:6a:4b:69:f1:e6:2f:31:f0:6a:96:a2:e0:84:c1:
d2:37:95:8a:52:f2:2e:a1:fe:63:63:73:e1:c3:9e:
53:c3:7d:13:b2:68:49:2c:c8:63:b4:c1:43:0a:0d:
2d:d6:2c:5b:5f:57:cb:be:18:60:f2:ee:c9:80:af:
e0:3e:1c:43:9e:b8:39:b6:bb:da:18:1f:aa:41:48:
62:f9:21:21:6a:1c:1d:f6:3f:4e:e1:04:8d:37:30:
ca:da:34:e8:9e:32:9b:c1:8e:89:ef:91:33:a3:8e:
44:5c:24:92:f2:c0:db:0c:33:f3:45:0e:31:83:fa:
47:34:c3:62:fd:f8:fc:5b:fb:77:23:83:64:43:cd:
bc:c1:78:3c:ef:5b:a9:4d:d1:fa:95:d1:7e:de:01:
bd:63:e8:66:e3:12:f1:fe:95:17:a8:d1:74:25:f6:
eb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8B:20:57:22:CB:29:F3:EC:12:85:A5:86:B2:FA:A4:EA:AB:83:D0
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cosgVyLLKfPsEoWlhrL6pOqrg9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.2.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:22:aa:cc:24:52:fc:97:e8:81:70:89:c1:4d:d1:8d:f7:f1:
6c:c1:48:71:48:04:ef:b4:8f:68:11:f3:c8:2f:16:52:1a:cd:
0a:0b:d5:8f:fa:46:11:04:f4:7d:a6:b3:22:2a:2b:81:a0:b9:
68:dd:dd:e7:50:aa:45:f4:83:c8:5d:2d:7f:df:ea:ec:a6:6f:
1e:14:94:9e:05:3e:4c:52:49:24:f5:b3:87:77:08:b8:b5:92:
f1:44:4d:24:3c:cf:5a:69:f1:8b:16:4f:1b:10:f6:b0:9b:e7:
6d:b3:b6:54:43:ef:41:b8:45:f3:7d:58:99:31:0e:cc:da:53:
2d:25:2e:2b:1d:b8:a7:97:b2:6b:c5:62:cb:3e:0e:e8:cc:7d:
f4:f0:fc:fb:73:84:9a:c6:13:1e:c5:fa:f3:45:54:41:c8:08:
7a:01:c3:28:c2:d5:3e:90:37:22:21:9f:f6:7b:a3:a2:0a:75:
13:2f:7b:e8:cd:05:49:ad:39:68:7b:6e:1c:79:bb:7a:a8:70:
8a:be:53:5e:37:b1:63:69:7c:cc:78:7e:32:51:29:21:ed:00:
2b:61:37:6d:b3:f8:5f:6d:3d:ab:de:8b:d6:79:5d:86:2a:f3:
4d:95:70:53:52:d1:ea:02:36:db:63:2a:1b:8a:dc:5d:e5:3f:
ae:77:fb:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsGeXB4fWoR2SF8rpo+N18RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjMxMDA2MTkzMTQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjhiMjA1NzIyY2IyOWYzZWMxMjg1YTU4NmIyZmFhNGVhYWI4M2QwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFOXLjJTSFl3MHeSXjqumgyMmdXR
9N/mVJQFIk+CtfziGCQUM772CZ4L+QUr4uGes1CkFOVaKfNrZBOLNETTkTtnk7Sz
KVYmA/X5Z1ggZqBag1uWxI4FgUDOaktp8eYvMfBqlqLghMHSN5WKUvIuof5jY3Ph
w55Tw30TsmhJLMhjtMFDCg0t1ixbX1fLvhhg8u7JgK/gPhxDnrg5trvaGB+qQUhi
+SEhahwd9j9O4QSNNzDK2jTonjKbwY6J75Ezo45EXCSS8sDbDDPzRQ4xg/pHNMNi
/fj8W/t3I4NkQ828wXg871upTdH6ldF+3gG9Y+hm4xLx/pUXqNF0JfbrNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHKLIFciyynz7BKFpYay+qTqq4PQMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvY29zZ1Z5TExLZlBzRW9XbGhyTDZwT3FyZzlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQkCMA0G
CSqGSIb3DQEBCwUAA4IBAQDRIqrMJFL8l+iBcInBTdGN9/FswUhxSATvtI9oEfPI
LxZSGs0KC9WP+kYRBPR9prMiKiuBoLlo3d3nUKpF9IPIXS1/3+rspm8eFJSeBT5M
Ukkk9bOHdwi4tZLxRE0kPM9aafGLFk8bEPawm+dts7ZUQ+9BuEXzfViZMQ7M2lMt
JS4rHbinl7JrxWLLPg7ozH308Pz7c4SaxhMexfrzRVRByAh6AcMowtU+kDciIZ/2
e6OiCnUTL3vozQVJrTloe24cebt6qHCKvlNeN7FjaXzMeH4yUSkh7QArYTdts/hf
bT2r3ovWeV2GKvNNlXBTUtHqAjbbYyobitxd5T+ud/vt
-----END CERTIFICATE-----
Generated at Sat Oct 7 11:09:39 2023 by rpki-client on console-ams.rpki-client.org