Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/cfsCAgUVjCiecAw_jngx9wwhw6Y.roa
File: cfsCAgUVjCiecAw_jngx9wwhw6Y.roa (raw, json)
Hash identifier: l8YD8dz98lXCn5t10OQ4kJ18DLBczI5AmbMb/+vGSO8=
Subject key identifier: 71:FB:02:02:05:15:8C:28:9E:70:0C:3F:8E:78:31:F7:0C:21:C3:A6
Certificate issuer: /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial: 0186172B759727D820ADD978D9B9943736A4
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/cfsCAgUVjCiecAw_jngx9wwhw6Y.roa
Signing time: Fri 03 Feb 2023 12:06:09 +0000
ROA not before: Fri 03 Feb 2023 12:06:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200222
IP address blocks: 45.129.104.0/24 maxlen: 24
45.129.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:2b:75:97:27:d8:20:ad:d9:78:d9:b9:94:37:36:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Validity
Not Before: Feb 3 12:06:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71fb020205158c289e700c3f8e7831f70c21c3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:47:c6:cb:cd:f8:33:26:6a:ad:4c:46:f0:
57:82:34:33:08:4f:42:d7:67:c6:a4:5b:97:39:2a:
09:c8:8a:b1:2d:4f:76:78:f0:e0:af:9d:60:8a:8e:
6d:a1:2a:d0:13:a0:2c:01:3f:21:10:25:cc:93:94:
b7:aa:11:c8:e2:3f:c8:59:0e:ad:ff:a1:96:e0:08:
a3:b1:9e:02:d6:15:3a:7f:66:3b:cf:4f:ca:ca:a9:
5d:7b:5c:d3:19:b0:54:f7:14:00:ee:ce:a1:f1:5f:
f8:8c:f4:d0:1f:4b:63:8e:1e:28:a1:5a:d1:b2:01:
80:8e:ec:d6:35:4a:22:12:66:29:12:a5:94:70:bc:
b1:4b:d9:fa:a6:03:80:24:18:ff:64:0f:c8:a3:70:
48:d6:7b:ee:2c:c9:86:81:c2:65:e0:c6:57:f2:6e:
8f:a4:67:6d:45:90:14:2a:99:1c:aa:81:a9:94:ce:
c4:3f:47:ae:30:cc:98:21:4d:df:14:cc:32:12:0e:
ce:4c:95:43:a2:39:e1:58:d6:a4:33:90:db:3e:11:
97:7e:3a:56:b2:7d:42:bf:08:ed:92:23:ea:ad:d0:
f5:7b:2e:04:29:e6:6b:e8:0d:9d:aa:b4:dc:1b:26:
7f:7e:ab:2a:44:29:82:e4:6e:6c:f6:06:93:78:ec:
62:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FB:02:02:05:15:8C:28:9E:70:0C:3F:8E:78:31:F7:0C:21:C3:A6
X509v3 Authority Key Identifier:
keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/cfsCAgUVjCiecAw_jngx9wwhw6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.104.0/24
45.129.107.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:62:4d:06:9a:5b:a9:6d:2d:b3:bf:e5:f7:96:29:76:61:f9:
a4:aa:36:34:4b:3e:13:07:13:ab:0f:3f:8d:23:09:f2:bc:89:
e1:41:8d:d6:81:50:69:4f:73:3c:6e:0c:ed:29:b8:46:d7:3c:
4d:35:32:a3:3c:52:ac:96:63:fe:ca:c6:45:8f:bd:61:33:33:
da:b3:17:86:c3:04:68:93:ed:47:a5:a8:c9:e1:07:f8:5c:06:
df:23:44:ce:fc:c6:fd:6c:ff:c1:ec:b7:0a:ff:e0:b7:d8:61:
99:8e:d0:ab:97:e0:a6:64:d3:e9:c5:43:d6:26:8c:51:8d:4a:
c9:e3:55:a8:cd:e9:29:bb:a9:d7:d8:26:03:33:1d:47:05:79:
1f:17:fc:f9:df:56:ad:62:dc:b3:a4:d1:7b:49:85:ad:d4:0a:
6b:02:34:8d:64:91:f7:be:80:f3:00:89:a5:fb:8e:1f:7b:86:
a8:2d:1c:d4:2d:90:f0:7d:1f:a8:d8:8a:14:4a:dd:a5:32:25:
7b:70:d0:4c:2b:b1:85:ce:89:eb:60:b0:f5:10:30:fe:2a:5e:
d5:b0:e0:fc:af:5c:f7:f7:11:7c:7b:2c:6c:1f:67:0d:a0:49:
29:c9:d1:5c:2f:81:79:5b:71:f0:22:df:bd:89:b2:d1:c0:7e:
09:b3:bd:d5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYYXK3WXJ9ggrdl42bmUNzakMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4OGMwNDc3MWUyYmZhYzhmNjBmMWI0YzljYmQwOTNhYWZl
YTk3NGUwHhcNMjMwMjAzMTIwNjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWZiMDIwMjA1MTU4YzI4OWU3MDBjM2Y4ZTc4MzFmNzBjMjFjM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4FHxsvN+DMmaq1MRvBXgjQzCE9C
12fGpFuXOSoJyIqxLU92ePDgr51gio5toSrQE6AsAT8hECXMk5S3qhHI4j/IWQ6t
/6GW4AijsZ4C1hU6f2Y7z0/Kyqlde1zTGbBU9xQA7s6h8V/4jPTQH0tjjh4ooVrR
sgGAjuzWNUoiEmYpEqWUcLyxS9n6pgOAJBj/ZA/Io3BI1nvuLMmGgcJl4MZX8m6P
pGdtRZAUKpkcqoGplM7EP0euMMyYIU3fFMwyEg7OTJVDojnhWNakM5DbPhGXfjpW
sn1CvwjtkiPqrdD1ey4EKeZr6A2dqrTcGyZ/fqsqRCmC5G5s9gaTeOxinQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHH7AgIFFYwonnAMP454MfcMIcOmMB8GA1UdIwQY
MBaAFOiMBHceK/rI9g8bTJy9CTqv6pdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkl3RWR4NHItc2oyRHh0TW5MMEpPcV9xbDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8yYWU3YzMtOThhNS00Y2RhLTliYWUt
YmE2NDVmMTk5MTVhLzEvY2ZzQ0FnVVZqQ2llY0F3X2puZ3g5d3dodzZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8yYWU3YzMtOThhNS00Y2RhLTliYWUtYmE2NDVmMTk5MTVh
LzEvNkl3RWR4NHItc2oyRHh0TW5MMEpPcV9xbDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYFoAwQA
LYFrMA0GCSqGSIb3DQEBCwUAA4IBAQCzYk0GmlupbS2zv+X3lil2YfmkqjY0Sz4T
BxOrDz+NIwnyvInhQY3WgVBpT3M8bgztKbhG1zxNNTKjPFKslmP+ysZFj71hMzPa
sxeGwwRok+1HpajJ4Qf4XAbfI0TO/Mb9bP/B7LcK/+C32GGZjtCrl+CmZNPpxUPW
JoxRjUrJ41Wozekpu6nX2CYDMx1HBXkfF/z531atYtyzpNF7SYWt1AprAjSNZJH3
voDzAIml+44fe4aoLRzULZDwfR+o2IoUSt2lMiV7cNBMK7GFzonrYLD1EDD+Kl7V
sOD8r1z39xF8eyxsH2cNoEkpydFcL4F5W3HwIt+9ibLRwH4Js73V
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:00 2023 by rpki-client on console-fra.rpki-client.org