Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Sr-zIIE19rBjqdtUq2w1TOsJfu0.roa
File: Sr-zIIE19rBjqdtUq2w1TOsJfu0.roa (raw, json)
Hash identifier: K02M/F36wKBJ/50P6+jhmGgDRz7PDuGzP4TAvVWC0zk=
Subject key identifier: 4A:BF:B3:20:81:35:F6:B0:63:A9:DB:54:AB:6C:35:4C:EB:09:7E:ED
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018571031DB5CC20B075051B7B342F3303F3
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Sr-zIIE19rBjqdtUq2w1TOsJfu0.roa
Signing time: Mon 02 Jan 2023 05:45:07 +0000
ROA not before: Mon 02 Jan 2023 05:45:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211112
IP address blocks: 45.92.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:1d:b5:cc:20:b0:75:05:1b:7b:34:2f:33:03:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4abfb3208135f6b063a9db54ab6c354ceb097eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b9:83:1a:f7:9a:76:22:c5:e8:fd:1e:89:29:
03:9c:b5:30:6b:b8:8c:7d:bb:12:3f:fd:2b:0a:1b:
2d:25:92:4c:ea:4d:d4:9a:92:bc:9c:75:ff:cd:fc:
c4:f1:f4:cd:9e:d9:23:ed:db:d0:05:38:5c:f2:d4:
cf:5c:b4:27:2c:6a:8e:8f:f2:d4:83:f0:1b:57:9f:
ac:f9:2c:0f:f8:6e:67:35:d4:83:e5:f6:63:fa:74:
48:a5:9b:cf:37:55:83:c0:d0:7a:77:12:5e:6d:60:
80:c8:0b:c4:31:d3:95:4f:2d:c7:30:b3:6d:da:c5:
2f:c8:b2:58:b4:72:fd:0e:fa:da:93:4e:56:6c:1f:
1b:16:19:ca:cb:ec:4b:c0:b8:6e:08:96:b8:e8:5f:
ab:9a:45:32:74:aa:d8:57:24:df:22:bf:ed:a9:78:
3a:e6:df:a8:56:a9:37:80:d0:50:1b:34:c1:58:01:
cc:36:78:41:84:03:6e:5c:d6:51:50:3c:1c:55:84:
94:ec:95:55:6a:2b:b4:47:5e:c0:ae:73:9b:7b:12:
9f:a3:ae:59:5e:17:45:1e:38:3d:9b:1e:95:6b:c0:
e0:3c:31:af:3e:52:d5:c6:97:42:00:00:cf:64:63:
b0:15:d0:14:bb:4d:a9:ac:46:8a:85:99:c6:a4:3f:
99:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BF:B3:20:81:35:F6:B0:63:A9:DB:54:AB:6C:35:4C:EB:09:7E:ED
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Sr-zIIE19rBjqdtUq2w1TOsJfu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.0.0/24
Signature Algorithm: sha256WithRSAEncryption
54:bf:2a:dd:86:81:de:28:8f:0b:ba:ba:87:25:b0:de:e6:c3:
37:38:27:ed:91:27:e4:81:47:26:b2:a2:b0:d0:ba:51:18:a1:
b4:43:75:3f:b6:ed:c3:de:cc:e2:b8:75:35:a7:23:31:9d:e8:
1e:0f:b1:71:7c:3c:d7:da:cd:6a:d3:cc:c3:7a:f6:40:93:92:
33:ee:19:65:ed:94:f4:46:23:aa:a4:fe:63:e7:51:19:e7:d1:
07:3f:60:ed:63:1a:fe:d4:76:6d:d3:a1:5d:e1:fa:67:7b:8d:
39:9c:b6:9a:ac:bf:17:ee:74:78:4d:f0:6a:e3:99:c9:39:16:
bb:f1:4c:7d:91:70:f8:e6:95:b6:12:52:17:f7:55:0a:e2:d5:
f1:50:22:82:0f:ff:08:c9:8e:d2:8c:64:b8:ea:12:ac:54:a3:
5d:ff:b0:4a:6b:6a:6e:5e:9b:29:df:7d:97:d6:80:a4:04:16:
f7:a5:11:9e:14:74:2b:f5:a3:bc:bc:4c:9a:11:91:61:ce:4a:
b0:66:c9:36:42:18:78:58:c9:b7:93:ba:1f:18:a8:99:c6:9c:
ca:5e:81:9d:70:73:c3:93:ab:01:ec:1a:f3:f4:d2:7d:25:d4:
52:9b:dd:60:44:1b:e1:58:c7:50:07:b1:9b:10:b6:d9:a8:86:
24:a8:bb:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxAx21zCCwdQUbezQvMwPzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMTAyMDU0NTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWJmYjMyMDgxMzVmNmIwNjNhOWRiNTRhYjZjMzU0Y2ViMDk3ZWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrmDGveadiLF6P0eiSkDnLUwa7iM
fbsSP/0rChstJZJM6k3UmpK8nHX/zfzE8fTNntkj7dvQBThc8tTPXLQnLGqOj/LU
g/AbV5+s+SwP+G5nNdSD5fZj+nRIpZvPN1WDwNB6dxJebWCAyAvEMdOVTy3HMLNt
2sUvyLJYtHL9Dvrak05WbB8bFhnKy+xLwLhuCJa46F+rmkUydKrYVyTfIr/tqXg6
5t+oVqk3gNBQGzTBWAHMNnhBhANuXNZRUDwcVYSU7JVVaiu0R17ArnObexKfo65Z
XhdFHjg9mx6Va8DgPDGvPlLVxpdCAADPZGOwFdAUu02prEaKhZnGpD+ZfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEq/syCBNfawY6nbVKtsNUzrCX7tMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvU3IteklJRTE5ckJqcWR0VXEydzFUT3NKZnUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVwAMA0G
CSqGSIb3DQEBCwUAA4IBAQBUvyrdhoHeKI8LurqHJbDe5sM3OCftkSfkgUcmsqKw
0LpRGKG0Q3U/tu3D3sziuHU1pyMxnegeD7FxfDzX2s1q08zDevZAk5Iz7hll7ZT0
RiOqpP5j51EZ59EHP2DtYxr+1HZt06Fd4fpne405nLaarL8X7nR4TfBq45nJORa7
8Ux9kXD45pW2ElIX91UK4tXxUCKCD/8IyY7SjGS46hKsVKNd/7BKa2puXpsp332X
1oCkBBb3pRGeFHQr9aO8vEyaEZFhzkqwZsk2Qhh4WMm3k7ofGKiZxpzKXoGdcHPD
k6sB7Brz9NJ9JdRSm91gRBvhWMdQB7GbELbZqIYkqLvM
-----END CERTIFICATE-----
Generated at Fri Nov 3 06:00:24 2023 by rpki-client on console-fra.rpki-client.org