Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/rGLAAScVVSH4iImHFHgWOsoopa4.roa
File: rGLAAScVVSH4iImHFHgWOsoopa4.roa (raw, json)
Hash identifier: k2yGt3wKYnp6yjpZbVV2GDvgZL1mZoVcx4jZ+o5yxAE=
Subject key identifier: AC:62:C0:01:27:15:55:21:F8:88:89:87:14:78:16:3A:CA:28:A5:AE
Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Certificate serial: 01856F5DE915122597E2668FB65D625D648B
Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/rGLAAScVVSH4iImHFHgWOsoopa4.roa
Signing time: Sun 01 Jan 2023 22:05:03 +0000
ROA not before: Sun 01 Jan 2023 22:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24669
IP address blocks: 45.250.26.0/24 maxlen: 24
45.250.25.0/24 maxlen: 24
45.250.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:e9:15:12:25:97:e2:66:8f:b6:5d:62:5d:64:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd
Validity
Not Before: Jan 1 22:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac62c00127155521f88889871478163aca28a5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:5c:fa:e9:3e:9c:5d:b3:8f:b4:6f:45:63:
14:55:27:59:f2:1c:6e:73:95:8c:ba:3a:e0:8e:c0:
bf:14:77:8c:27:f6:9d:1a:e8:56:1a:ae:80:c0:d3:
c9:eb:49:60:3e:c7:3f:34:10:20:d4:36:08:82:3b:
95:31:18:7c:29:0b:a5:28:97:bf:7e:7c:f6:a7:3d:
cd:78:45:6c:6e:9c:9c:b3:64:f4:e0:ff:42:00:c8:
6d:e7:7f:b2:0c:e8:d8:2c:07:87:96:79:7d:6c:6f:
4f:c2:48:20:53:1b:3f:f3:a5:34:ac:ed:19:63:e7:
b1:3b:c6:d7:8b:34:8c:92:af:2b:40:2c:5f:55:02:
57:28:17:d4:e1:9c:8c:c1:a1:db:8f:27:9c:64:b3:
c5:16:c0:1d:d8:ca:e6:70:2f:f3:f6:9a:8c:2b:2b:
8d:c6:c5:e1:c1:df:ba:ec:53:70:d6:ea:83:b5:cc:
47:ed:c1:9e:7b:59:01:6c:56:38:e8:85:b6:12:44:
c0:92:0e:01:37:0c:92:bf:9f:ce:b3:d5:64:7d:43:
e0:2b:40:f4:77:8c:88:cc:2c:af:eb:0c:ef:19:2f:
d9:ab:af:f2:a6:2e:e0:04:d5:f4:64:8c:8f:fa:c5:
92:b7:32:cb:ca:eb:63:58:c4:3a:63:54:07:0f:40:
31:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:62:C0:01:27:15:55:21:F8:88:89:87:14:78:16:3A:CA:28:A5:AE
X509v3 Authority Key Identifier:
keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/rGLAAScVVSH4iImHFHgWOsoopa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.250.25.0-45.250.27.255
Signature Algorithm: sha256WithRSAEncryption
2d:21:42:98:36:e0:bd:6c:94:34:3c:29:fe:14:aa:0a:d1:2b:
cb:7f:91:65:6e:c2:fe:31:e4:61:f3:60:14:a3:0f:47:3e:69:
00:5d:3c:bf:91:c1:aa:73:59:0f:74:05:2b:15:8d:37:a7:a8:
5f:94:f7:ad:70:12:e7:90:71:04:38:a9:83:b5:26:e6:0e:2e:
5d:d8:9e:7e:6c:e0:a2:58:23:cf:e3:37:b3:74:b9:3c:d9:a0:
56:00:c7:50:ea:ce:47:09:cd:f4:27:34:7a:58:c4:de:b0:37:
77:be:b8:fb:0c:74:45:a2:2c:be:e5:f2:10:cb:ed:51:ba:06:
74:38:8b:4d:23:bb:7a:ac:6a:79:19:c0:e3:8b:b6:75:6b:1b:
91:ba:4d:25:06:fa:97:79:39:a9:11:1b:b3:8c:10:d6:f8:fd:
54:80:c5:5d:50:c8:2d:6a:a1:ff:5b:e5:57:1d:69:42:32:54:
82:03:b7:b0:58:e7:08:ad:d7:26:51:1e:45:16:50:ed:ee:c4:
8e:b6:89:4d:ea:83:26:cd:d3:46:9e:9b:cc:9c:71:19:80:a5:
b8:e4:7a:2e:be:91:42:a1:4e:83:19:83:ed:05:1c:1a:12:a5:
51:65:ee:4a:90:39:28:4b:85:4f:1d:c4:e7:af:dc:7f:6c:82:
3c:57:51:c9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVvXekVEiWX4maPtl1iXWSLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4
YmUxYmQwHhcNMjMwMTAxMjIwNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzYyYzAwMTI3MTU1NTIxZjg4ODg5ODcxNDc4MTYzYWNhMjhhNWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnxc+uk+nF2zj7RvRWMUVSdZ8hxu
c5WMujrgjsC/FHeMJ/adGuhWGq6AwNPJ60lgPsc/NBAg1DYIgjuVMRh8KQulKJe/
fnz2pz3NeEVsbpycs2T04P9CAMht53+yDOjYLAeHlnl9bG9PwkggUxs/86U0rO0Z
Y+exO8bXizSMkq8rQCxfVQJXKBfU4ZyMwaHbjyecZLPFFsAd2MrmcC/z9pqMKyuN
xsXhwd+67FNw1uqDtcxH7cGee1kBbFY46IW2EkTAkg4BNwySv5/Os9VkfUPgK0D0
d4yIzCyv6wzvGS/Zq6/ypi7gBNX0ZIyP+sWStzLLyutjWMQ6Y1QHD0AxRwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKxiwAEnFVUh+IiJhxR4FjrKKKWuMB8GA1UdIwQY
MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt
N2U4YzZkNGQ5YmVmLzEvckdMQUFTY1ZWU0g0aUltSEZIZ1dPc29vcGE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm
LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAt+hkD
BAIt+hgwDQYJKoZIhvcNAQELBQADggEBAC0hQpg24L1slDQ8Kf4UqgrRK8t/kWVu
wv4x5GHzYBSjD0c+aQBdPL+RwapzWQ90BSsVjTenqF+U961wEueQcQQ4qYO1JuYO
Ll3Ynn5s4KJYI8/jN7N0uTzZoFYAx1DqzkcJzfQnNHpYxN6wN3e+uPsMdEWiLL7l
8hDL7VG6BnQ4i00ju3qsankZwOOLtnVrG5G6TSUG+pd5OakRG7OMENb4/VSAxV1Q
yC1qof9b5VcdaUIyVIIDt7BY5wit1yZRHkUWUO3uxI62iU3qgybN00aem8yccRmA
pbjkei6+kUKhToMZg+0FHBoSpVFl7kqQOShLhU8dxOev3H9sgjxXUck=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:52 2024 by rpki-client on console-ams.rpki-client.org