Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ix_UWVUd3z94zcwX8sz263463HI.roa
File: Ix_UWVUd3z94zcwX8sz263463HI.roa (raw, json)
Hash identifier: dMVpa941L9aRKEraJzVXTIzLjIudDqfdCxKMfanz7QU=
Subject key identifier: 23:1F:D4:59:55:1D:DF:3F:78:CD:CC:17:F2:CC:F6:EB:7E:3A:DC:72
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01892A9A4FFE31358C91CF8270AEC33294C2
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ix_UWVUd3z94zcwX8sz263463HI.roa
Signing time: Thu 06 Jul 2023 09:48:23 +0000
ROA not before: Thu 06 Jul 2023 09:48:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206216
IP address blocks: 45.8.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 08:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2a:9a:4f:fe:31:35:8c:91:cf:82:70:ae:c3:32:94:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jul 6 09:48:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=231fd459551ddf3f78cdcc17f2ccf6eb7e3adc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:13:fa:bc:db:3e:89:fc:f5:33:43:f7:8d:9e:
60:cb:43:fd:58:24:96:2b:4d:42:06:78:6b:fe:98:
2b:b1:33:66:19:92:ea:05:9b:c0:ed:ec:4d:c7:69:
36:22:41:3c:f5:4b:c8:83:25:0d:a4:c7:df:b9:ee:
31:40:66:a7:48:4c:bb:50:df:fe:99:de:c0:44:84:
f7:52:6c:00:fb:d6:24:56:85:f8:4a:5f:c6:66:df:
6c:79:54:6c:72:50:81:77:a4:e7:39:4d:86:3f:9c:
1c:84:0f:48:de:a8:2f:65:d1:d2:96:5d:57:8c:1e:
73:2b:7c:2a:77:b7:8f:54:49:8f:81:14:e2:b3:60:
3a:30:e2:52:ef:65:65:67:08:d4:99:e6:d1:7a:0f:
9c:12:1f:9e:70:c1:49:d4:05:30:4c:4c:31:df:1d:
16:fe:51:58:7f:f9:0a:ad:c4:75:16:3c:69:84:6d:
e9:bc:ca:a8:2d:5e:a7:5a:de:be:b9:4b:fe:bb:bc:
38:57:97:47:40:b7:1b:23:17:03:97:b2:92:51:f2:
01:a7:58:c0:cc:4d:5e:eb:69:bb:42:f9:77:89:3e:
bd:a7:00:11:33:ed:f3:de:7f:a7:6f:be:24:c8:f3:
b8:84:36:42:1f:a0:58:f2:56:33:b6:0c:93:41:f7:
c5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:1F:D4:59:55:1D:DF:3F:78:CD:CC:17:F2:CC:F6:EB:7E:3A:DC:72
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ix_UWVUd3z94zcwX8sz263463HI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.22.0/24
Signature Algorithm: sha256WithRSAEncryption
05:35:00:d4:b1:7d:d8:54:de:3a:42:46:b8:8d:41:09:d1:25:
12:72:31:1b:fb:19:d8:96:32:ea:12:ee:61:f0:37:78:74:76:
b0:86:51:90:d8:57:c7:42:01:f3:50:58:cf:97:38:c9:0f:fa:
9b:88:7d:95:9f:cc:67:78:9b:40:b3:c2:0d:92:7d:91:a0:0b:
12:62:3c:a8:9d:20:54:67:29:f8:06:04:88:12:47:7f:31:a1:
fa:ad:a5:6a:34:5c:75:b6:ea:4c:75:cd:e3:01:35:90:9b:9e:
20:95:1f:45:5c:4e:4b:5e:4c:05:40:f7:76:47:56:46:8f:c5:
59:b7:7d:53:65:64:75:bb:dc:2a:93:de:bf:f3:65:4f:1b:6e:
59:8c:30:b2:11:d3:89:39:fd:0f:85:65:90:3f:48:a1:8d:e4:
80:c9:6b:b5:06:e2:1d:ae:e7:90:7f:26:d1:7b:6e:86:ab:4f:
49:25:56:b2:9c:ff:35:a8:ec:c1:b9:8f:c8:df:71:e7:cb:39:
ec:35:cd:fe:41:d5:11:8a:e9:88:eb:c5:ca:d9:ef:f2:2b:78:
fa:4e:e9:9f:63:77:22:da:25:7d:92:15:31:06:2d:10:6d:3b:
fa:12:85:c6:a3:08:c1:f1:a6:af:7e:c4:6b:7f:2a:3c:bf:09:
31:36:7c:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkqmk/+MTWMkc+CcK7DMpTCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwNzA2MDk0ODIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzFmZDQ1OTU1MWRkZjNmNzhjZGNjMTdmMmNjZjZlYjdlM2FkYzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhP6vNs+ifz1M0P3jZ5gy0P9WCSW
K01CBnhr/pgrsTNmGZLqBZvA7exNx2k2IkE89UvIgyUNpMffue4xQGanSEy7UN/+
md7ARIT3UmwA+9YkVoX4Sl/GZt9seVRsclCBd6TnOU2GP5wchA9I3qgvZdHSll1X
jB5zK3wqd7ePVEmPgRTis2A6MOJS72VlZwjUmebReg+cEh+ecMFJ1AUwTEwx3x0W
/lFYf/kKrcR1FjxphG3pvMqoLV6nWt6+uUv+u7w4V5dHQLcbIxcDl7KSUfIBp1jA
zE1e62m7Qvl3iT69pwARM+3z3n+nb74kyPO4hDZCH6BY8lYztgyTQffFrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCMf1FlVHd8/eM3MF/LM9ut+OtxyMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvSXhfVVdWVWQzejk0emN3WDhzejI2MzQ2M0hJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQgWMA0G
CSqGSIb3DQEBCwUAA4IBAQAFNQDUsX3YVN46Qka4jUEJ0SUScjEb+xnYljLqEu5h
8Dd4dHawhlGQ2FfHQgHzUFjPlzjJD/qbiH2Vn8xneJtAs8INkn2RoAsSYjyonSBU
Zyn4BgSIEkd/MaH6raVqNFx1tupMdc3jATWQm54glR9FXE5LXkwFQPd2R1ZGj8VZ
t31TZWR1u9wqk96/82VPG25ZjDCyEdOJOf0PhWWQP0ihjeSAyWu1BuIdrueQfybR
e26Gq09JJVaynP81qOzBuY/I33HnyznsNc3+QdURiumI68XK2e/yK3j6TumfY3ci
2iV9khUxBi0QbTv6EoXGowjB8aavfsRrfyo8vwkxNnyK
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:21 2024 by rpki-client on console-ams.rpki-client.org