Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/mVokXcf4guECY8KPIO280Wx40fE.roa
File: mVokXcf4guECY8KPIO280Wx40fE.roa (raw, json)
Hash identifier: 0JtVDCceoY2m/rKQXhiR4D0tbeTBDq6jWFkd9OEtBTQ=
Subject key identifier: 99:5A:24:5D:C7:F8:82:E1:02:63:C2:8F:20:ED:BC:D1:6C:78:D1:F1
Certificate issuer: /CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Certificate serial: 01856E5D637580B4A942421A88AD16D3D25F
Authority key identifier: 1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/mVokXcf4guECY8KPIO280Wx40fE.roa
Signing time: Sun 01 Jan 2023 17:24:52 +0000
ROA not before: Sun 01 Jan 2023 17:24:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 45.146.162.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:63:75:80:b4:a9:42:42:1a:88:ad:16:d3:d2:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d5af3ae21f97ec4ec75d51a85a3e162ed7a9ed7
Validity
Not Before: Jan 1 17:24:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=995a245dc7f882e10263c28f20edbcd16c78d1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:07:61:e6:8a:25:20:0b:30:06:b5:39:a1:
42:94:5d:f3:72:bb:c5:48:2f:9f:f7:73:f7:3f:2c:
07:ee:51:b3:ed:3d:4a:f8:e4:f8:53:db:a2:7b:ec:
e9:cf:91:dd:55:12:60:26:9b:23:62:78:7c:95:a4:
7b:e0:33:81:4c:a9:8b:ba:26:3a:bb:7a:6a:f0:c6:
a6:9c:6e:ed:39:3b:de:ef:b7:30:04:56:81:4b:31:
0e:31:44:de:5e:94:a3:dc:41:69:7f:70:72:cb:3d:
e9:d8:bc:20:9d:6a:35:48:bd:14:87:2d:29:d5:20:
94:7f:0b:a7:70:1a:5e:b4:e7:01:6d:e6:31:b1:c2:
8b:9e:ad:0a:54:77:bb:40:64:7e:f9:48:ab:fc:c0:
cf:ce:d2:8e:92:66:05:24:42:d5:cc:08:47:98:ac:
44:5b:72:6f:19:a2:34:e2:08:42:a8:b4:6b:ea:5a:
84:b7:ca:66:5e:5a:79:2c:f8:e1:12:68:4e:c4:ac:
11:4a:40:2a:75:f0:33:40:e3:fc:1e:55:d2:c3:c9:
8c:7a:23:83:bd:e5:2e:16:a3:8b:09:02:fd:fb:1b:
f0:5e:42:fd:fd:df:81:be:29:c1:7b:20:66:de:eb:
e9:e9:a5:e7:bf:9d:42:2d:f1:8c:59:74:9b:59:be:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5A:24:5D:C7:F8:82:E1:02:63:C2:8F:20:ED:BC:D1:6C:78:D1:F1
X509v3 Authority Key Identifier:
keyid:1D:5A:F3:AE:21:F9:7E:C4:EC:75:D5:1A:85:A3:E1:62:ED:7A:9E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVrzriH5fsTsddUahaPhYu16ntc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/mVokXcf4guECY8KPIO280Wx40fE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d34acf-3a5f-464f-95ee-908bba12b21a/1/HVrzriH5fsTsddUahaPhYu16ntc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:da:4d:c8:dd:fa:b0:64:19:3a:67:31:f5:ee:86:f6:88:87:
1a:19:4e:fc:4f:39:95:ce:ae:cc:75:f9:a3:2c:46:ed:5b:02:
d7:6f:8d:78:f9:ed:14:64:30:9a:1f:91:03:62:f4:4a:6a:82:
eb:41:b8:75:cb:5a:69:3b:fa:f7:02:21:dc:64:d4:fd:dc:0c:
1d:99:eb:27:60:d8:65:4d:10:55:a8:0e:dc:23:c4:27:57:0e:
5a:ba:c1:9a:c4:93:46:d3:76:7c:dd:bf:0f:05:66:ad:60:ec:
71:7f:8d:2c:98:ba:ed:c9:7a:d6:b2:d4:ed:f8:bc:79:98:58:
a0:21:ea:17:9b:71:dd:4d:43:e2:43:8d:89:20:8c:04:4e:e0:
b6:b4:47:8d:aa:10:90:18:39:79:d5:ae:ad:32:63:6e:e8:ca:
7f:1f:41:42:7d:b7:ad:81:a0:dc:5d:60:20:83:21:6c:b4:8d:
a8:be:dc:01:d8:59:24:dd:bf:96:45:55:88:77:98:de:a9:d8:
3e:63:c7:18:a8:31:1a:f7:1a:ff:6b:58:ff:7a:28:07:8a:2b:
10:7a:fc:01:0c:65:d5:a5:aa:ae:6a:38:de:b0:f3:ec:d5:60:
ea:b2:09:f6:dc:b2:ce:1e:85:7f:30:7e:78:b1:0c:ea:71:ff:
b1:0c:37:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuXWN1gLSpQkIaiK0W09JfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNWFmM2FlMjFmOTdlYzRlYzc1ZDUxYTg1YTNlMTYyZWQ3
YTllZDcwHhcNMjMwMTAxMTcyNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTVhMjQ1ZGM3Zjg4MmUxMDI2M2MyOGYyMGVkYmNkMTZjNzhkMWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopsHYeaKJSALMAa1OaFClF3zcrvF
SC+f93P3PywH7lGz7T1K+OT4U9uie+zpz5HdVRJgJpsjYnh8laR74DOBTKmLuiY6
u3pq8MamnG7tOTve77cwBFaBSzEOMUTeXpSj3EFpf3Byyz3p2LwgnWo1SL0Uhy0p
1SCUfwuncBpetOcBbeYxscKLnq0KVHe7QGR++Uir/MDPztKOkmYFJELVzAhHmKxE
W3JvGaI04ghCqLRr6lqEt8pmXlp5LPjhEmhOxKwRSkAqdfAzQOP8HlXSw8mMeiOD
veUuFqOLCQL9+xvwXkL9/d+BvinBeyBm3uvp6aXnv51CLfGMWXSbWb7HZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJlaJF3H+ILhAmPCjyDtvNFseNHxMB8GA1UdIwQY
MBaAFB1a864h+X7E7HXVGoWj4WLtep7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFZyenJpSDVmc1RzZGRVYWhhUGhZdTE2bnRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kMzRhY2YtM2E1Zi00NjRmLTk1ZWUt
OTA4YmJhMTJiMjFhLzEvbVZva1hjZjRndUVDWThLUElPMjgwV3g0MGZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9kMzRhY2YtM2E1Zi00NjRmLTk1ZWUtOTA4YmJhMTJiMjFh
LzEvSFZyenJpSDVmc1RzZGRVYWhhUGhZdTE2bnRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZKiMA0G
CSqGSIb3DQEBCwUAA4IBAQA62k3I3fqwZBk6ZzH17ob2iIcaGU78TzmVzq7Mdfmj
LEbtWwLXb414+e0UZDCaH5EDYvRKaoLrQbh1y1ppO/r3AiHcZNT93AwdmesnYNhl
TRBVqA7cI8QnVw5ausGaxJNG03Z83b8PBWatYOxxf40smLrtyXrWstTt+Lx5mFig
IeoXm3HdTUPiQ42JIIwETuC2tEeNqhCQGDl51a6tMmNu6Mp/H0FCfbetgaDcXWAg
gyFstI2ovtwB2Fkk3b+WRVWId5jeqdg+Y8cYqDEa9xr/a1j/eigHiisQevwBDGXV
paquajjesPPs1WDqsgn23LLOHoV/MH54sQzqcf+xDDei
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:02 2023 by rpki-client on console-fra.rpki-client.org