Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JZqDTAykveg4rDhPY_RJ5DxJQv8.roa
File: JZqDTAykveg4rDhPY_RJ5DxJQv8.roa (raw, json)
Hash identifier: 12UzLzVdR4E97RvRMedlXZZZ36z1n15B0okdCukIRU8=
Subject key identifier: 25:9A:83:4C:0C:A4:BD:E8:38:AC:38:4F:63:F4:49:E4:3C:49:42:FF
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01857102FA68E823F59ED8626979FB329D4D
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JZqDTAykveg4rDhPY_RJ5DxJQv8.roa
Signing time: Mon 02 Jan 2023 05:44:58 +0000
ROA not before: Mon 02 Jan 2023 05:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7040
IP address blocks: 45.130.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:fa:68:e8:23:f5:9e:d8:62:69:79:fb:32:9d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=259a834c0ca4bde838ac384f63f449e43c4942ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:28:05:b1:13:cd:48:2c:b3:2a:d8:ad:c8:23:
8c:0c:0a:c1:27:2e:35:46:31:44:fe:a0:17:63:06:
eb:1a:85:7b:71:e5:92:38:ca:ea:1c:cf:83:13:d7:
37:e8:c5:41:d4:43:02:0f:af:4f:f2:ba:2e:0e:9e:
e8:0e:f3:df:9f:8d:e9:ed:e3:a1:ed:97:a0:42:88:
f8:1b:2e:36:a8:73:e3:33:3d:0a:7f:22:51:0c:1d:
b5:af:cd:c1:cd:ef:e3:41:1e:a2:25:c8:99:80:32:
02:b3:c3:2b:a1:39:ad:04:43:0b:dc:c0:1c:69:d5:
d0:f4:a0:45:04:5d:a8:8d:e1:90:ae:b2:6b:f2:8b:
be:dc:0e:24:d0:98:bf:fa:c2:2e:cf:72:22:cd:07:
70:3e:08:82:71:8a:29:4a:bb:c0:94:f9:9b:e7:b8:
79:b0:d0:4f:4e:ef:d0:56:c8:75:56:99:83:7a:43:
62:a4:43:4c:7b:28:53:e1:ed:61:18:34:4a:f9:53:
3b:0f:4c:8e:a0:4f:a3:cd:4d:7e:b7:d6:88:d1:4b:
80:42:0d:25:5f:e8:3b:19:06:99:46:74:33:48:81:
c7:6d:fa:1b:db:aa:d1:c0:8a:61:ba:57:55:71:c2:
a8:95:5b:b5:9d:b8:8f:bb:2a:1e:8c:78:98:2f:fd:
61:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9A:83:4C:0C:A4:BD:E8:38:AC:38:4F:63:F4:49:E4:3C:49:42:FF
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/JZqDTAykveg4rDhPY_RJ5DxJQv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.80.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ca:e8:bf:9b:17:ec:8c:c0:7e:57:4a:27:c7:84:80:8c:16:
f0:d8:12:33:c4:f5:42:96:96:86:db:7b:23:55:57:85:e1:3f:
92:e5:c4:c7:91:da:29:21:b2:7c:2a:4f:36:c8:89:c0:03:59:
e6:fb:04:c7:db:82:68:c2:96:3b:58:ab:02:3d:d7:ff:8d:89:
a1:c9:16:e2:aa:36:b5:9e:10:06:f4:95:0d:0a:fb:c7:d3:3d:
81:d9:68:52:81:c8:cf:da:15:5d:90:a8:7a:4c:7e:ba:26:79:
b4:b9:84:d9:1e:d3:9f:fa:38:a5:8b:ec:d8:6a:72:85:b8:ba:
3b:1c:83:2d:50:3a:3d:6d:29:cf:72:4b:07:3c:07:bc:a3:e4:
73:04:a6:99:9a:82:4f:7f:65:fc:f7:36:4b:75:8e:3e:f9:90:
54:6e:b6:1d:ce:b7:ae:c5:05:2b:ed:44:75:0a:f5:d0:d1:0d:
2d:aa:b1:bd:ce:92:90:f4:70:dd:34:ca:db:9c:3e:ff:2f:d2:
72:e5:1e:59:9c:20:06:ff:0a:07:a5:7a:69:77:84:23:12:e2:
90:63:e3:59:2b:b9:19:74:65:33:6b:71:8e:03:a9:a5:01:8d:
cb:ff:96:6d:de:64:b6:68:a2:ce:17:6b:f8:b9:f9:7c:4f:01:
d4:60:1f:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxAvpo6CP1nthiaXn7Mp1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMTAyMDU0NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTlhODM0YzBjYTRiZGU4MzhhYzM4NGY2M2Y0NDllNDNjNDk0MmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSgFsRPNSCyzKtityCOMDArBJy41
RjFE/qAXYwbrGoV7ceWSOMrqHM+DE9c36MVB1EMCD69P8rouDp7oDvPfn43p7eOh
7ZegQoj4Gy42qHPjMz0KfyJRDB21r83Bze/jQR6iJciZgDICs8MroTmtBEML3MAc
adXQ9KBFBF2ojeGQrrJr8ou+3A4k0Ji/+sIuz3IizQdwPgiCcYopSrvAlPmb57h5
sNBPTu/QVsh1VpmDekNipENMeyhT4e1hGDRK+VM7D0yOoE+jzU1+t9aI0UuAQg0l
X+g7GQaZRnQzSIHHbfob26rRwIphuldVccKolVu1nbiPuyoejHiYL/1hEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCWag0wMpL3oOKw4T2P0SeQ8SUL/MB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvSlpxRFRBeWt2ZWc0ckRoUFlfUko1RHhKUXY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYJQMA0G
CSqGSIb3DQEBCwUAA4IBAQAsyui/mxfsjMB+V0onx4SAjBbw2BIzxPVClpaG23sj
VVeF4T+S5cTHkdopIbJ8Kk82yInAA1nm+wTH24JowpY7WKsCPdf/jYmhyRbiqja1
nhAG9JUNCvvH0z2B2WhSgcjP2hVdkKh6TH66Jnm0uYTZHtOf+jili+zYanKFuLo7
HIMtUDo9bSnPcksHPAe8o+RzBKaZmoJPf2X89zZLdY4++ZBUbrYdzreuxQUr7UR1
CvXQ0Q0tqrG9zpKQ9HDdNMrbnD7/L9Jy5R5ZnCAG/woHpXppd4QjEuKQY+NZK7kZ
dGUza3GOA6mlAY3L/5Zt3mS2aKLOF2v4ufl8TwHUYB8u
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-fra.rpki-client.org