Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/lFeZi0Q-rgpYW9DA4-rYUFqGdN8.roa
File: lFeZi0Q-rgpYW9DA4-rYUFqGdN8.roa (raw, json)
Hash identifier: LxvQXZFiylJlZEu48cQ9/JHq8Q71DxAac2w54UhAXtc=
Subject key identifier: 94:57:99:8B:44:3E:AE:0A:58:5B:D0:C0:E3:EA:D8:50:5A:86:74:DF
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185710323773830E4D2549A1A531D06475A
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/lFeZi0Q-rgpYW9DA4-rYUFqGdN8.roa
Signing time: Mon 02 Jan 2023 05:45:09 +0000
ROA not before: Mon 02 Jan 2023 05:45:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 393894
IP address blocks: 45.80.100.0/22 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:03:23:77:38:30:e4:d2:54:9a:1a:53:1d:06:47:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 2 05:45:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9457998b443eae0a585bd0c0e3ead8505a8674df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:af:8a:1e:59:39:c1:59:4c:5a:39:85:2c:
30:dd:da:93:26:14:bb:eb:0d:97:20:c5:82:fb:9a:
96:76:47:eb:ac:a2:3a:f8:35:3a:e9:28:3c:24:5e:
3c:e4:94:cb:5f:b5:da:14:54:7e:3f:bf:20:e2:d5:
f4:a9:9a:2a:80:d1:9c:fc:71:ae:21:e4:3e:bd:3e:
2f:92:9d:6c:41:4c:c6:98:48:7b:7b:58:cc:3e:72:
e1:dd:ed:04:45:21:a3:c1:88:df:2d:42:4a:40:5b:
0a:0e:d4:ff:bd:b4:65:2c:c8:a0:12:70:68:ee:2a:
09:a1:c0:54:89:ea:0e:4f:36:a4:26:6f:49:cb:84:
1c:23:f8:26:98:09:dc:ee:4e:31:45:eb:ee:bf:4e:
f7:69:58:9b:c4:c3:0e:6d:77:ed:5c:ad:f9:b3:1d:
13:68:ff:7d:4b:2e:7f:71:e6:8d:13:2f:60:33:86:
1b:59:16:91:52:8d:57:1c:42:41:e9:97:c9:73:18:
e6:30:4c:6a:84:3a:83:27:73:5d:2c:bb:1a:b1:2d:
ca:59:43:44:38:4f:5b:a2:61:d7:e4:c3:9d:d4:87:
53:02:a4:1f:da:7c:07:7b:89:29:79:5c:aa:66:ce:
03:8c:a2:31:7c:c7:6a:32:2a:fd:df:89:4a:cc:7f:
92:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:57:99:8B:44:3E:AE:0A:58:5B:D0:C0:E3:EA:D8:50:5A:86:74:DF
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/lFeZi0Q-rgpYW9DA4-rYUFqGdN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.100.0/22
Signature Algorithm: sha256WithRSAEncryption
02:bb:25:91:ba:c2:e7:cb:c6:5a:56:dc:42:ee:95:e5:69:1e:
1d:ee:96:83:f8:c9:e8:c8:b5:e8:d2:73:c0:35:c7:8e:59:1b:
21:72:7d:e9:67:0f:fd:f1:7e:6b:e7:85:c8:96:7c:0c:e0:ee:
73:bb:be:6c:57:27:4b:80:79:d6:44:df:9f:c0:d6:41:95:80:
9d:e5:17:14:58:cb:42:06:ef:ab:4f:73:8a:f0:db:ac:30:fc:
3a:83:4d:82:4c:eb:b8:4d:c4:e6:18:8f:7f:8d:6e:ee:6c:87:
4e:6f:c3:7c:86:88:9e:59:9f:ad:63:8e:bf:65:d0:e5:15:aa:
f4:69:95:dc:42:9d:cc:25:24:f2:6e:ee:63:ea:98:99:f9:49:
5a:96:ea:71:71:1f:5d:a8:c2:d1:0d:fb:84:55:9c:6c:93:da:
3f:c5:f8:61:52:af:dc:4b:6a:ab:ef:42:f9:97:59:a3:ad:60:
f5:9f:7a:8f:2f:d1:7d:87:fd:93:55:80:08:fb:dd:1c:34:b0:
55:ab:51:bf:e3:3b:5a:67:2e:76:74:72:2c:66:0e:30:65:01:
a9:d8:0f:a5:f2:42:e7:80:31:22:b2:f2:2c:3a:01:e7:22:80:
33:56:da:b6:52:70:a2:60:0b:c5:e9:49:72:e1:b3:ce:a7:54:
b2:96:50:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxAyN3ODDk0lSaGlMdBkdaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMTAyMDU0NTA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDU3OTk4YjQ0M2VhZTBhNTg1YmQwYzBlM2VhZDg1MDVhODY3NGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyc+vih5ZOcFZTFo5hSww3dqTJhS7
6w2XIMWC+5qWdkfrrKI6+DU66Sg8JF485JTLX7XaFFR+P78g4tX0qZoqgNGc/HGu
IeQ+vT4vkp1sQUzGmEh7e1jMPnLh3e0ERSGjwYjfLUJKQFsKDtT/vbRlLMigEnBo
7ioJocBUieoOTzakJm9Jy4QcI/gmmAnc7k4xRevuv073aVibxMMObXftXK35sx0T
aP99Sy5/ceaNEy9gM4YbWRaRUo1XHEJB6ZfJcxjmMExqhDqDJ3NdLLsasS3KWUNE
OE9bomHX5MOd1IdTAqQf2nwHe4kpeVyqZs4DjKIxfMdqMir934lKzH+S8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJRXmYtEPq4KWFvQwOPq2FBahnTfMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvbEZlWmkwUS1yZ3BZVzlEQTQtcllVRnFHZE44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVBkMA0G
CSqGSIb3DQEBCwUAA4IBAQACuyWRusLny8ZaVtxC7pXlaR4d7paD+MnoyLXo0nPA
NceOWRshcn3pZw/98X5r54XIlnwM4O5zu75sVydLgHnWRN+fwNZBlYCd5RcUWMtC
Bu+rT3OK8NusMPw6g02CTOu4TcTmGI9/jW7ubIdOb8N8hoieWZ+tY46/ZdDlFar0
aZXcQp3MJSTybu5j6piZ+UlalupxcR9dqMLRDfuEVZxsk9o/xfhhUq/cS2qr70L5
l1mjrWD1n3qPL9F9h/2TVYAI+90cNLBVq1G/4ztaZy52dHIsZg4wZQGp2A+l8kLn
gDEisvIsOgHnIoAzVtq2UnCiYAvF6Uly4bPOp1SyllBW
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:15:28 2024 by rpki-client on console-fra.rpki-client.org