Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Sm4btFHZZXxZ1EfAGrjjflNn8kQ.roa
File: Sm4btFHZZXxZ1EfAGrjjflNn8kQ.roa (raw, json)
Hash identifier: NfqpcOaIeIwmJ9f9AdsxvCIe7GRo7fAF/aFxj1ykAHU=
Subject key identifier: 4A:6E:1B:B4:51:D9:65:7C:59:D4:47:C0:1A:B8:E3:7E:53:67:F2:44
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01857103139E3C06232056A8BBFAA42FE549
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Sm4btFHZZXxZ1EfAGrjjflNn8kQ.roa
Signing time: Mon 02 Jan 2023 05:45:05 +0000
ROA not before: Mon 02 Jan 2023 05:45:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200023
IP address blocks: 45.130.196.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:13:9e:3c:06:23:20:56:a8:bb:fa:a4:2f:e5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a6e1bb451d9657c59d447c01ab8e37e5367f244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ee:67:de:16:9c:3d:cc:60:35:48:3a:43:41:
4f:33:29:31:ec:85:d0:f4:fe:48:82:6c:d3:e4:2d:
b7:9e:db:1d:c3:fd:d4:a3:4a:44:34:10:d9:77:8e:
f9:48:5b:f6:6e:2a:c9:08:17:67:e0:21:08:e8:44:
ba:0e:ca:52:88:d6:8b:65:b7:58:08:92:62:45:0c:
ed:fa:a6:96:a7:c5:a5:60:be:42:76:da:6c:ce:d8:
ec:a7:0c:8f:c9:09:33:a1:86:74:dd:2b:91:2b:34:
9f:a6:97:61:a2:0b:b9:99:3c:9d:63:c9:c2:50:3d:
04:54:07:96:d3:0d:98:48:c9:02:61:1e:63:64:a1:
37:04:39:e6:2b:9f:dd:a8:f0:b1:2e:86:b7:61:42:
ed:17:e3:d3:51:9a:6c:62:64:53:3e:d0:14:9c:8b:
63:6d:a1:16:a8:13:ce:a1:e9:71:87:60:66:97:a4:
22:32:d5:31:59:6f:0f:61:44:b8:08:81:35:95:47:
e6:8d:bd:75:ec:65:49:a8:94:42:91:1e:c1:7b:fb:
86:bd:13:ff:b7:08:ba:67:6d:68:69:ea:58:eb:64:
03:d9:37:a5:5c:14:35:5d:39:91:47:ea:af:c2:36:
bc:2d:99:c0:d7:42:b1:b5:cb:99:2e:34:40:65:a4:
66:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:6E:1B:B4:51:D9:65:7C:59:D4:47:C0:1A:B8:E3:7E:53:67:F2:44
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Sm4btFHZZXxZ1EfAGrjjflNn8kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.196.0/22
Signature Algorithm: sha256WithRSAEncryption
47:59:c9:dc:dd:38:0e:ba:6a:92:3f:4b:b1:9e:b0:ad:c7:5a:
ac:c2:23:89:ce:8b:e0:94:b1:d2:30:0f:54:b7:fc:d6:9e:21:
3e:a6:23:28:fc:b9:11:f4:41:c3:52:6a:a2:1b:87:4d:d6:d3:
41:7e:af:72:1d:c8:1b:46:2f:ef:bf:b4:f9:3d:15:33:4e:24:
a9:db:16:7d:d5:e7:d2:6a:91:76:e5:0e:18:7f:5f:f4:75:32:
2a:4d:70:de:2f:26:53:1e:91:fa:09:a8:89:36:e4:49:d9:a0:
55:52:57:6a:70:8b:29:45:cb:e1:69:42:65:c7:46:32:d6:9f:
8d:0d:e6:6d:6a:09:02:69:1c:14:4a:ea:70:7b:fe:d1:a3:8f:
47:d7:b0:45:93:63:26:40:8a:5c:65:e2:6d:62:b7:30:ec:e8:
df:33:13:97:b5:cc:f5:a3:99:c2:17:3e:21:ac:32:7e:da:f4:
23:38:4e:19:51:92:1a:01:1a:c2:62:31:61:a2:b4:f2:20:49:
2b:b0:55:b8:a8:be:bb:a8:dc:76:bd:d8:f9:22:fc:70:03:79:
19:8d:8c:3f:6b:e1:a8:08:54:04:c8:e3:50:ad:f2:33:7c:b2:
6a:7f:6c:e3:de:34:63:14:6c:50:31:2f:30:02:2b:f8:7b:6f:
15:2a:5f:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxAxOePAYjIFaou/qkL+VJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMTAyMDU0NTA1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTZlMWJiNDUxZDk2NTdjNTlkNDQ3YzAxYWI4ZTM3ZTUzNjdmMjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre5n3hacPcxgNUg6Q0FPMykx7IXQ
9P5IgmzT5C23ntsdw/3Uo0pENBDZd475SFv2birJCBdn4CEI6ES6DspSiNaLZbdY
CJJiRQzt+qaWp8WlYL5CdtpsztjspwyPyQkzoYZ03SuRKzSfppdhogu5mTydY8nC
UD0EVAeW0w2YSMkCYR5jZKE3BDnmK5/dqPCxLoa3YULtF+PTUZpsYmRTPtAUnItj
baEWqBPOoelxh2Bml6QiMtUxWW8PYUS4CIE1lUfmjb117GVJqJRCkR7Be/uGvRP/
twi6Z21oaepY62QD2TelXBQ1XTmRR+qvwja8LZnA10KxtcuZLjRAZaRmzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEpuG7RR2WV8WdRHwBq4435TZ/JEMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvU200YnRGSFpaWHhaMUVmQUdyampmbE5uOGtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYLEMA0G
CSqGSIb3DQEBCwUAA4IBAQBHWcnc3TgOumqSP0uxnrCtx1qswiOJzovglLHSMA9U
t/zWniE+piMo/LkR9EHDUmqiG4dN1tNBfq9yHcgbRi/vv7T5PRUzTiSp2xZ91efS
apF25Q4Yf1/0dTIqTXDeLyZTHpH6CaiJNuRJ2aBVUldqcIspRcvhaUJlx0Yy1p+N
DeZtagkCaRwUSupwe/7Ro49H17BFk2MmQIpcZeJtYrcw7OjfMxOXtcz1o5nCFz4h
rDJ+2vQjOE4ZUZIaARrCYjFhorTyIEkrsFW4qL67qNx2vdj5IvxwA3kZjYw/a+Go
CFQEyONQrfIzfLJqf2zj3jRjFGxQMS8wAiv4e28VKl+y
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org