Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/P0THY7dxAW62qTIyeP96bf20xH8.roa
File: P0THY7dxAW62qTIyeP96bf20xH8.roa (raw, json)
Hash identifier: EKkfr3OOiFRDLHShq/CmHr8tBbpNo/v4u9RpevzWnZg=
Subject key identifier: 3F:44:C7:63:B7:71:01:6E:B6:A9:32:32:78:FF:7A:6D:FD:B4:C4:7F
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 018B005B88A5AA7DD1AEBBB31F16736C21FD
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/P0THY7dxAW62qTIyeP96bf20xH8.roa
Signing time: Thu 05 Oct 2023 15:01:20 +0000
ROA not before: Thu 05 Oct 2023 15:01:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204316
IP address blocks: 45.149.60.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:5b:88:a5:aa:7d:d1:ae:bb:b3:1f:16:73:6c:21:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Oct 5 15:01:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f44c763b771016eb6a9323278ff7a6dfdb4c47f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e7:b6:dd:18:a4:4f:ee:5f:db:5c:d1:2d:cc:
85:e1:8e:f7:5e:16:19:bb:08:40:cf:bb:39:6f:ed:
30:22:e1:8e:07:62:3b:92:b9:7c:bb:74:27:61:93:
70:e9:c9:56:fd:5f:3f:e0:15:3a:d4:b0:50:2c:1e:
fd:68:0c:68:28:2a:46:3b:52:d5:4a:00:ca:78:46:
d9:39:b3:11:0c:c0:1b:46:1b:e9:32:5d:44:7c:c4:
b0:cf:3a:bd:2c:24:1e:e5:d0:46:05:6f:d0:33:a3:
ca:35:d0:71:02:f6:41:51:e7:54:84:c0:80:77:60:
9f:cf:e4:7c:73:f4:ee:7c:3b:5d:e5:49:ee:a1:49:
11:e6:81:b1:cb:df:53:bd:22:8e:9d:e8:b3:d1:d8:
1d:c1:86:ae:06:71:bb:e1:75:67:d1:44:cc:c4:8c:
5a:dc:ee:b5:18:36:77:50:1d:9f:c9:83:c2:de:9b:
74:3c:2c:ac:60:20:c3:85:3f:ec:a6:77:97:5e:b1:
9a:c7:ce:f3:2c:82:e9:8d:8c:e8:55:a6:6f:a6:f5:
f0:49:82:ac:67:a3:8a:41:a3:85:1c:a3:40:ed:47:
05:5e:8f:d8:3b:b4:aa:da:94:2c:72:31:86:79:8d:
bc:e1:74:d5:cf:38:8d:53:58:f2:87:fc:1a:15:c2:
19:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:44:C7:63:B7:71:01:6E:B6:A9:32:32:78:FF:7A:6D:FD:B4:C4:7F
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/P0THY7dxAW62qTIyeP96bf20xH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.60.0/23
Signature Algorithm: sha256WithRSAEncryption
03:ca:a6:51:5a:ea:6f:45:16:73:36:e3:33:63:ee:23:f2:ad:
92:b5:2e:0f:e5:5b:09:9c:4a:60:57:ca:49:8f:9a:02:6b:81:
81:43:d5:56:bd:3f:b1:75:c8:96:2b:d5:6f:9b:ce:4e:25:11:
5e:8a:8e:9d:cc:c4:1f:67:6a:de:45:90:6a:23:9f:53:6c:2e:
89:85:84:db:b1:08:f0:25:8d:33:f8:e7:db:d5:a5:29:ae:65:
a8:ee:00:1a:d9:a4:81:24:0b:42:03:19:f9:62:39:fd:bf:28:
62:b2:97:fc:0b:6a:f7:5e:03:e8:e0:97:1b:58:c8:b4:ef:89:
8f:f6:e5:72:a7:21:44:95:8e:8f:eb:fc:aa:bc:c1:a2:f3:a1:
74:c9:ad:69:87:38:76:54:0d:a4:1c:15:07:48:6d:c5:e2:cd:
e4:2a:8f:ec:15:03:26:5b:0a:70:ea:06:91:03:91:5d:a6:0f:
15:a5:c8:30:a4:a6:9b:cb:7b:5b:ae:c7:a2:c3:00:85:69:b6:
74:0d:be:e0:8a:4a:63:e0:c6:a0:f2:f3:dc:fd:b4:cb:98:b5:
0c:0d:88:99:d9:9d:b6:76:60:fe:fa:6a:1e:40:f7:5e:f1:a8:
99:16:79:85:e8:e2:74:5d:3c:15:0e:9c:43:a2:1e:b5:26:8b:
c6:1e:72:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsAW4ilqn3RrruzHxZzbCH9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3MTk0MTI5MThhNjYyN2Y5OWNjZTU1YzdhY2ExMzkwNTdi
ODU3NGUwHhcNMjMxMDA1MTUwMTIwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjQ0Yzc2M2I3NzEwMTZlYjZhOTMyMzI3OGZmN2E2ZGZkYjRjNDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOe23RikT+5f21zRLcyF4Y73XhYZ
uwhAz7s5b+0wIuGOB2I7krl8u3QnYZNw6clW/V8/4BU61LBQLB79aAxoKCpGO1LV
SgDKeEbZObMRDMAbRhvpMl1EfMSwzzq9LCQe5dBGBW/QM6PKNdBxAvZBUedUhMCA
d2Cfz+R8c/TufDtd5UnuoUkR5oGxy99TvSKOneiz0dgdwYauBnG74XVn0UTMxIxa
3O61GDZ3UB2fyYPC3pt0PCysYCDDhT/spneXXrGax87zLILpjYzoVaZvpvXwSYKs
Z6OKQaOFHKNA7UcFXo/YO7Sq2pQscjGGeY284XTVzziNU1jyh/waFcIZnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD9Ex2O3cQFutqkyMnj/em39tMR/MB8GA1UdIwQY
MBaAFCcZQSkYpmJ/mczlXHrKE5BXuFdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYt
NGUyMjM5MTdiODYwLzEvUDBUSFk3ZHhBVzYycVRJeWVQOTZiZjIweEg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9lOTJjNDktYmQ0YS00ZThkLWJiZjYtNGUyMjM5MTdiODYw
LzEvSnhsQktSaW1Zbi1aek9WY2Vzb1RrRmU0VjA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZU8MA0G
CSqGSIb3DQEBCwUAA4IBAQADyqZRWupvRRZzNuMzY+4j8q2StS4P5VsJnEpgV8pJ
j5oCa4GBQ9VWvT+xdciWK9Vvm85OJRFeio6dzMQfZ2reRZBqI59TbC6JhYTbsQjw
JY0z+Ofb1aUprmWo7gAa2aSBJAtCAxn5Yjn9vyhispf8C2r3XgPo4JcbWMi074mP
9uVypyFElY6P6/yqvMGi86F0ya1phzh2VA2kHBUHSG3F4s3kKo/sFQMmWwpw6gaR
A5Fdpg8VpcgwpKaby3tbrseiwwCFabZ0Db7gikpj4Mag8vPc/bTLmLUMDYiZ2Z22
dmD++moeQPde8aiZFnmF6OJ0XTwVDpxDoh61JovGHnKj
-----END CERTIFICATE-----
Generated at Thu Oct 5 16:55:15 2023 by rpki-client on console-fra.rpki-client.org