Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/55W6b-LkZ67Ei0aY47gkuGlBVwQ.roa
File: 55W6b-LkZ67Ei0aY47gkuGlBVwQ.roa (raw, json)
Hash identifier: 2x9KEpsteizGj2DSlaq5PcPCNbyvXmRjDiV5oDCaNXw=
Subject key identifier: E7:95:BA:6F:E2:E4:67:AE:C4:8B:46:98:E3:B8:24:B8:69:41:57:04
Certificate issuer: /CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Certificate serial: 0187BC60EE98F4E6CDB0F62C512A9DBC3223
Authority key identifier: 1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/55W6b-LkZ67Ei0aY47gkuGlBVwQ.roa
Signing time: Wed 26 Apr 2023 07:04:41 +0000
ROA not before: Wed 26 Apr 2023 07:04:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.146.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:60:ee:98:f4:e6:cd:b0:f6:2c:51:2a:9d:bc:32:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Validity
Not Before: Apr 26 07:04:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e795ba6fe2e467aec48b4698e3b824b869415704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:11:27:e9:f4:17:8d:e6:27:6a:96:61:ca:bd:
db:d3:3c:e7:d2:ae:a3:39:0c:4b:f9:b2:3f:4a:99:
29:a0:90:20:95:88:75:b3:72:25:26:61:0c:06:ee:
72:70:3d:f4:a1:4e:c1:83:46:42:ea:a2:80:86:95:
d7:07:0d:21:a3:a9:80:0d:a7:8f:65:b2:69:fe:3e:
31:48:23:f8:6a:ff:6d:1b:6d:42:ed:5a:34:40:a5:
7e:7f:6c:3d:0a:3e:f1:96:11:6e:58:2e:f4:86:b8:
ef:f0:41:29:6a:2c:e1:bd:be:ca:13:ac:e8:f9:9c:
93:ef:ef:f0:c8:8d:a0:7e:70:8e:cd:cb:27:97:61:
ed:b0:4c:72:e2:2b:f1:62:a8:fa:e7:20:0a:86:39:
f4:18:3a:46:c4:c3:a1:7a:eb:2a:65:cc:7e:3c:44:
f5:76:8b:52:c3:ed:f5:e6:bc:eb:0f:bd:26:66:b6:
f9:22:cb:06:df:22:aa:bc:6b:00:22:e5:3e:e7:06:
35:05:5e:d1:c7:95:23:37:93:7c:70:c7:1e:5d:9f:
61:c1:cc:c6:62:60:fb:b1:08:03:88:90:d2:88:c6:
c2:fc:14:4d:f2:06:bb:53:8e:75:c1:18:a0:a1:94:
90:1a:2a:1f:c6:93:39:41:82:94:be:dd:7a:b2:90:
29:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:95:BA:6F:E2:E4:67:AE:C4:8B:46:98:E3:B8:24:B8:69:41:57:04
X509v3 Authority Key Identifier:
keyid:1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/55W6b-LkZ67Ei0aY47gkuGlBVwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.163.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f1:31:2e:e5:d5:01:86:8e:e8:60:7f:36:92:35:a0:c2:c9:
e5:3e:f8:21:06:a6:bd:2b:e9:32:d2:35:b8:13:14:1f:7d:50:
4d:69:25:87:26:aa:6d:87:3a:02:25:76:1b:5e:b5:5b:a7:45:
21:c2:34:f9:e6:86:1b:c2:4d:61:34:4e:58:b5:e3:30:8f:a6:
98:d4:b3:cd:3d:95:50:7f:c0:6d:3a:30:60:fc:ec:e4:d2:14:
1e:31:92:a0:82:a8:8e:70:62:60:75:ef:d9:43:a5:d1:64:1a:
cc:b8:25:a4:c7:d5:fa:0b:3d:4b:26:d4:76:bb:ff:fd:15:f2:
c8:1d:c2:bc:f9:3d:41:03:68:e6:04:c5:b4:21:88:6c:5e:1d:
52:d4:5c:3b:11:eb:d6:ab:15:1e:3f:14:9d:63:58:4e:8c:85:
db:ee:69:10:22:16:7d:13:13:bf:7b:40:31:fc:7f:3c:3e:ac:
3e:ab:3e:ed:ba:19:fb:4c:8f:b5:40:21:13:88:c1:9d:5a:8b:
2a:83:00:b6:f9:d7:09:7b:8d:fb:54:df:9a:c6:d7:d3:11:20:
31:81:41:d3:bc:d4:18:67:51:ad:c1:6b:53:76:59:60:2f:96:
56:5a:67:5a:20:ba:8f:61:06:5d:71:ef:da:6e:ee:b4:a5:5f:
b9:1f:e9:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYe8YO6Y9ObNsPYsUSqdvDIjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNWFmM2FlMjFmOTdlYzRlYzc1ZDUxYTg1YTNlMTYyZWQ3
YTllZDcwHhcNMjMwNDI2MDcwNDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzk1YmE2ZmUyZTQ2N2FlYzQ4YjQ2OThlM2I4MjRiODY5NDE1NzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArREn6fQXjeYnapZhyr3b0zzn0q6j
OQxL+bI/SpkpoJAglYh1s3IlJmEMBu5ycD30oU7Bg0ZC6qKAhpXXBw0ho6mADaeP
ZbJp/j4xSCP4av9tG21C7Vo0QKV+f2w9Cj7xlhFuWC70hrjv8EEpaizhvb7KE6zo
+ZyT7+/wyI2gfnCOzcsnl2HtsExy4ivxYqj65yAKhjn0GDpGxMOheusqZcx+PET1
dotSw+315rzrD70mZrb5IssG3yKqvGsAIuU+5wY1BV7Rx5UjN5N8cMceXZ9hwczG
YmD7sQgDiJDSiMbC/BRN8ga7U451wRigoZSQGiofxpM5QYKUvt16spApXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOeVum/i5GeuxItGmOO4JLhpQVcEMB8GA1UdIwQY
MBaAFB1a864h+X7E7HXVGoWj4WLtep7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFZyenJpSDVmc1RzZGRVYWhhUGhZdTE2bnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kMzRhY2YtM2E1Zi00NjRmLTk1ZWUt
OTA4YmJhMTJiMjFhLzEvNTVXNmItTGtaNjdFaTBhWTQ3Z2t1R2xCVndRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9kMzRhY2YtM2E1Zi00NjRmLTk1ZWUtOTA4YmJhMTJiMjFh
LzEvSFZyenJpSDVmc1RzZGRVYWhhUGhZdTE2bnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZKjMA0G
CSqGSIb3DQEBCwUAA4IBAQAA8TEu5dUBho7oYH82kjWgwsnlPvghBqa9K+ky0jW4
ExQffVBNaSWHJqpthzoCJXYbXrVbp0UhwjT55oYbwk1hNE5YteMwj6aY1LPNPZVQ
f8BtOjBg/Ozk0hQeMZKggqiOcGJgde/ZQ6XRZBrMuCWkx9X6Cz1LJtR2u//9FfLI
HcK8+T1BA2jmBMW0IYhsXh1S1Fw7EevWqxUePxSdY1hOjIXb7mkQIhZ9ExO/e0Ax
/H88Pqw+qz7tuhn7TI+1QCETiMGdWosqgwC2+dcJe437VN+axtfTESAxgUHTvNQY
Z1GtwWtTdllgL5ZWWmdaILqPYQZdce/abu60pV+5H+nX
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:02 2023 by rpki-client on console-fra.rpki-client.org