Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5hhbsu81IB-NK1b5C-Z2fQHPi64.roa
File: 5hhbsu81IB-NK1b5C-Z2fQHPi64.roa (raw, json)
Hash identifier: y8HrcqHwal2ZPYiYJKonqVTvJUuWC/NH4xW5KhHfOAE=
Subject key identifier: E6:18:5B:B2:EF:35:20:1F:8D:2B:56:F9:0B:E6:76:7D:01:CF:8B:AE
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01857102FFEFB82A315FC173A8F9505A01EF
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5hhbsu81IB-NK1b5C-Z2fQHPi64.roa
Signing time: Mon 02 Jan 2023 05:45:00 +0000
ROA not before: Mon 02 Jan 2023 05:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15162
IP address blocks: 45.130.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:ff:ef:b8:2a:31:5f:c1:73:a8:f9:50:5a:01:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6185bb2ef35201f8d2b56f90be6767d01cf8bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1c:89:68:ba:a8:06:dc:bc:3e:19:ad:02:a6:
9c:09:db:d6:e4:4a:00:f2:95:66:b7:6d:d9:78:d0:
90:c2:72:89:f6:9b:eb:51:4b:76:e5:03:c8:02:66:
e3:77:3b:5c:e8:aa:d5:3c:4d:3d:a4:5d:08:9a:b9:
bb:7b:cc:28:48:41:2f:96:a2:b5:33:21:c8:21:0c:
f9:41:3e:f5:cb:fb:69:63:38:fb:85:63:08:40:df:
6d:2d:59:8d:57:2d:64:5f:fd:5f:bb:16:67:08:3e:
30:44:1f:69:03:52:d4:68:3d:91:e9:51:3f:f8:77:
53:81:36:10:af:02:4a:8f:83:b5:eb:4e:87:ae:f4:
22:5f:75:3c:9a:47:97:9b:14:d3:fd:85:aa:95:a3:
c9:e2:a5:f1:25:bd:3c:ed:71:bc:f7:e1:60:2e:ab:
7d:8d:e2:21:1a:62:75:45:d7:8a:01:d1:4c:5a:4d:
27:d3:17:b7:66:79:48:f1:a4:c7:32:90:db:0a:c4:
20:7e:a0:40:59:be:fb:d9:58:4d:8e:ea:dd:e1:a2:
b6:d5:a4:8e:62:ca:a4:be:39:4f:fa:ac:76:6e:bc:
51:0b:bb:52:de:0a:b5:8d:9c:39:c2:36:7e:4c:c4:
c0:13:e8:35:7d:a2:27:0d:93:71:de:20:9d:02:11:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:18:5B:B2:EF:35:20:1F:8D:2B:56:F9:0B:E6:76:7D:01:CF:8B:AE
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5hhbsu81IB-NK1b5C-Z2fQHPi64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.80.0/24
Signature Algorithm: sha256WithRSAEncryption
69:87:7a:0a:67:27:63:7b:4b:84:b4:55:ae:99:36:f2:d8:91:
4a:de:d0:bf:e4:16:d7:b2:02:ce:0c:e8:9b:95:86:c8:57:58:
15:f0:1f:a9:72:9b:9d:8a:41:d2:c6:01:3c:4b:47:7d:6d:68:
f4:05:31:b4:9a:69:80:b5:c6:7f:b5:a8:f9:e3:e2:10:f0:4f:
77:68:79:ad:f4:c2:17:38:75:d7:38:22:bb:ce:53:ae:68:9b:
44:bf:78:7e:07:4d:09:e3:ca:41:26:55:ca:be:21:c0:c7:ab:
0e:66:2b:c1:1b:14:5c:b8:0c:2f:32:e1:dd:91:43:e5:3c:46:
9b:4a:15:0b:d3:59:2a:eb:1d:8e:e9:c1:07:09:33:97:a9:4c:
5b:aa:bf:4a:13:77:cf:ad:d1:15:bb:01:47:43:65:6c:36:db:
3e:7f:a5:af:a1:9e:2b:c0:34:02:7d:25:65:e0:cc:99:fa:d8:
8a:4d:ac:ee:76:a3:14:d8:26:bc:7c:74:5b:41:d9:6e:f4:5f:
04:49:43:90:3c:f1:af:4b:8d:73:74:32:8f:6b:de:34:57:a7:
e5:91:df:05:0a:78:7b:76:b9:71:fd:7a:28:9c:59:1b:ed:82:
6c:15:4c:e5:66:73:67:ae:04:65:d7:15:fe:7b:54:52:e4:81:
da:fe:cb:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxAv/vuCoxX8FzqPlQWgHvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMTAyMDU0NTAwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjE4NWJiMmVmMzUyMDFmOGQyYjU2ZjkwYmU2NzY3ZDAxY2Y4YmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihyJaLqoBty8PhmtAqacCdvW5EoA
8pVmt23ZeNCQwnKJ9pvrUUt25QPIAmbjdztc6KrVPE09pF0Imrm7e8woSEEvlqK1
MyHIIQz5QT71y/tpYzj7hWMIQN9tLVmNVy1kX/1fuxZnCD4wRB9pA1LUaD2R6VE/
+HdTgTYQrwJKj4O1606HrvQiX3U8mkeXmxTT/YWqlaPJ4qXxJb087XG89+FgLqt9
jeIhGmJ1RdeKAdFMWk0n0xe3ZnlI8aTHMpDbCsQgfqBAWb772VhNjurd4aK21aSO
YsqkvjlP+qx2brxRC7tS3gq1jZw5wjZ+TMTAE+g1faInDZNx3iCdAhGRCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOYYW7LvNSAfjStW+Qvmdn0Bz4uuMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvNWhoYnN1ODFJQi1OSzFiNUMtWjJmUUhQaTY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYJQMA0G
CSqGSIb3DQEBCwUAA4IBAQBph3oKZydje0uEtFWumTby2JFK3tC/5BbXsgLODOib
lYbIV1gV8B+pcpudikHSxgE8S0d9bWj0BTG0mmmAtcZ/taj54+IQ8E93aHmt9MIX
OHXXOCK7zlOuaJtEv3h+B00J48pBJlXKviHAx6sOZivBGxRcuAwvMuHdkUPlPEab
ShUL01kq6x2O6cEHCTOXqUxbqr9KE3fPrdEVuwFHQ2VsNts+f6WvoZ4rwDQCfSVl
4MyZ+tiKTazudqMU2Ca8fHRbQdlu9F8ESUOQPPGvS41zdDKPa940V6flkd8FCnh7
drlx/XoonFkb7YJsFUzlZnNnrgRl1xX+e1RS5IHa/svZ
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:57 2023 by rpki-client on console-fra.rpki-client.org