Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/U1z6h8jCQ12rLYs78xjYXVRmJIg.roa
File: U1z6h8jCQ12rLYs78xjYXVRmJIg.roa (raw, json)
Hash identifier: YjnwY7dFbsgs51rTEu5sM5YD3YdPj5Mf08H2feaO1TQ=
Subject key identifier: 53:5C:FA:87:C8:C2:43:5D:AB:2D:8B:3B:F3:18:D8:5D:54:66:24:88
Certificate issuer: /CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Certificate serial: 01892B361DBD085121A3D35C5C46FDD67517
Authority key identifier: 35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/U1z6h8jCQ12rLYs78xjYXVRmJIg.roa
Signing time: Thu 06 Jul 2023 12:38:34 +0000
ROA not before: Thu 06 Jul 2023 12:38:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.84.112.0/23 maxlen: 24
31.193.240.0/22 maxlen: 24
45.84.114.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 06:37:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2b:36:1d:bd:08:51:21:a3:d3:5c:5c:46:fd:d6:75:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352f8919e6bc1ef5663489018fc875be34c0f24c
Validity
Not Before: Jul 6 12:38:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=535cfa87c8c2435dab2d8b3bf318d85d54662488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:8a:b5:3a:bc:af:9e:18:8f:19:30:2c:a7:
4e:2b:e5:4a:c3:34:08:0d:a7:72:5d:0f:42:b2:f3:
44:65:4b:b9:27:7c:5c:87:50:a7:ed:87:77:3d:26:
eb:1a:db:6e:9c:03:bd:4f:ff:7c:6a:f0:fd:aa:39:
ce:ac:d3:dc:cc:c5:2d:2f:5e:72:35:e0:c2:e2:15:
35:71:fb:13:54:be:c2:6a:25:b0:65:a5:cf:ab:8e:
ea:52:0e:91:95:39:6a:7d:03:5e:e8:4c:ad:b5:c2:
0d:c7:8f:b9:2c:3f:04:d8:ff:40:97:1f:72:b6:6a:
13:64:1b:8b:93:56:85:19:ce:fc:e3:50:3e:dd:14:
57:fe:74:4c:f9:ba:c4:f0:84:fe:66:f2:fa:52:c5:
93:3d:0b:6f:5c:9e:1f:74:ee:8a:16:37:a3:91:12:
c5:fc:ab:3c:bf:77:b6:a6:7a:9d:af:c1:52:ba:fb:
e4:29:cd:f6:33:df:59:ff:d7:f9:df:92:60:bb:7e:
3b:a5:46:7d:cb:3e:c3:8f:4d:e3:1b:ea:5e:c6:71:
f6:34:cb:8f:6f:e4:de:69:28:f1:45:8a:c8:66:b4:
0e:ee:91:76:4e:ce:07:1b:b9:9c:a1:4f:49:a6:c8:
54:f1:da:e5:92:4f:89:65:32:71:f3:38:0d:42:ba:
a2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5C:FA:87:C8:C2:43:5D:AB:2D:8B:3B:F3:18:D8:5D:54:66:24:88
X509v3 Authority Key Identifier:
keyid:35:2F:89:19:E6:BC:1E:F5:66:34:89:01:8F:C8:75:BE:34:C0:F2:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NS-JGea8HvVmNIkBj8h1vjTA8kw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/U1z6h8jCQ12rLYs78xjYXVRmJIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/cf943d-c921-4ef7-9aa0-e3fcb23e3438/1/NS-JGea8HvVmNIkBj8h1vjTA8kw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.193.240.0/22
45.84.112.0/22
Signature Algorithm: sha256WithRSAEncryption
95:a8:69:b7:fd:5d:d2:ea:b5:34:6b:f3:4d:ea:d0:84:25:bc:
6f:95:24:a2:d5:05:4b:58:c1:12:cf:ff:08:8e:28:33:54:ab:
4c:b3:cf:98:0c:26:85:95:1e:c3:09:fe:29:f1:0f:71:98:63:
0b:a9:3c:a5:c1:30:df:f2:52:8a:03:55:f5:c0:c5:f0:bc:58:
db:49:13:2d:a8:b2:27:a1:8c:94:cd:96:0e:e7:82:1e:ac:38:
91:b7:63:72:c8:9d:88:ea:c8:5a:aa:41:4d:7f:80:7f:03:32:
4c:e6:5f:a1:b8:7c:82:a5:01:46:71:ce:34:89:3a:71:75:dd:
87:7c:00:58:5f:74:a7:a2:38:62:f1:75:fe:6a:c7:ab:54:33:
cf:70:fd:6e:0b:bb:17:30:5e:db:7b:3c:8e:5b:c8:dd:c3:1b:
93:74:06:2a:0e:80:89:9a:88:d3:4b:d7:bf:e8:2a:72:b0:a6:
70:82:2c:9f:cc:ac:96:2c:3a:b1:f9:06:95:52:e8:f3:54:d2:
31:14:8a:72:ea:e3:29:ec:dc:4d:6d:76:13:73:33:7c:57:a3:
90:07:f6:3b:46:6d:58:bd:b1:d3:23:2c:49:d5:4b:c7:a5:f9:
1c:38:6a:35:08:62:87:d3:16:c3:05:c2:c8:30:82:5e:c8:7f:
5e:a7:dc:3f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYkrNh29CFEho9NcXEb91nUXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MmY4OTE5ZTZiYzFlZjU2NjM0ODkwMThmYzg3NWJlMzRj
MGYyNGMwHhcNMjMwNzA2MTIzODM0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzVjZmE4N2M4YzI0MzVkYWIyZDhiM2JmMzE4ZDg1ZDU0NjYyNDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d2KtTq8r54YjxkwLKdOK+VKwzQI
DadyXQ9CsvNEZUu5J3xch1Cn7Yd3PSbrGttunAO9T/98avD9qjnOrNPczMUtL15y
NeDC4hU1cfsTVL7CaiWwZaXPq47qUg6RlTlqfQNe6EyttcINx4+5LD8E2P9Alx9y
tmoTZBuLk1aFGc7841A+3RRX/nRM+brE8IT+ZvL6UsWTPQtvXJ4fdO6KFjejkRLF
/Ks8v3e2pnqdr8FSuvvkKc32M99Z/9f535Jgu347pUZ9yz7Dj03jG+pexnH2NMuP
b+TeaSjxRYrIZrQO7pF2Ts4HG7mcoU9JpshU8drlkk+JZTJx8zgNQrqi7wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFNc+ofIwkNdqy2LO/MY2F1UZiSIMB8GA1UdIwQY
MBaAFDUviRnmvB71ZjSJAY/Idb40wPJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAt
ZTNmY2IyM2UzNDM4LzEvVTF6Nmg4akNRMTJyTFlzNzh4allYVlJtSklnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9jZjk0M2QtYzkyMS00ZWY3LTlhYTAtZTNmY2IyM2UzNDM4
LzEvTlMtSkdlYThIdlZtTklrQmo4aDF2alRBOGt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCH8HwAwQC
LVRwMA0GCSqGSIb3DQEBCwUAA4IBAQCVqGm3/V3S6rU0a/NN6tCEJbxvlSSi1QVL
WMESz/8IjigzVKtMs8+YDCaFlR7DCf4p8Q9xmGMLqTylwTDf8lKKA1X1wMXwvFjb
SRMtqLInoYyUzZYO54IerDiRt2NyyJ2I6shaqkFNf4B/AzJM5l+huHyCpQFGcc40
iTpxdd2HfABYX3Snojhi8XX+aserVDPPcP1uC7sXMF7bezyOW8jdwxuTdAYqDoCJ
mojTS9e/6CpysKZwgiyfzKyWLDqx+QaVUujzVNIxFIpy6uMp7NxNbXYTczN8V6OQ
B/Y7Rm1YvbHTIyxJ1UvHpfkcOGo1CGKH0xbDBcLIMIJeyH9ep9w/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:26 2024 by rpki-client on console-ams.rpki-client.org