Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PDJLyqkfURRK11u19c8UdyEI8RE.roa
File: PDJLyqkfURRK11u19c8UdyEI8RE.roa (raw, json)
Hash identifier: IPgWI7/oKim7tL3ICmQRTDTODkKoqfieE6v7NQzbuIw=
Subject key identifier: 3C:32:4B:CA:A9:1F:51:14:4A:D7:5B:B5:F5:CF:14:77:21:08:F1:11
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188247D6443933C8BFDB26B80C79954D7E5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PDJLyqkfURRK11u19c8UdyEI8RE.roa
Signing time: Tue 16 May 2023 12:16:17 +0000
ROA not before: Tue 16 May 2023 12:16:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41378
IP address blocks: 45.131.132.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:24:7d:64:43:93:3c:8b:fd:b2:6b:80:c7:99:54:d7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 16 12:16:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c324bcaa91f51144ad75bb5f5cf14772108f111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:26:c6:be:74:79:50:a6:43:28:81:b7:fa:de:
77:3d:b3:36:9c:b1:e3:7d:41:fb:4a:d4:ca:4f:1f:
1a:58:50:ce:6c:91:4f:19:5f:72:7d:aa:76:5c:47:
8f:7a:48:72:6d:98:ec:62:d3:fa:82:de:12:20:2d:
28:c3:56:a1:d4:9b:bc:42:7d:ac:5c:5e:90:6d:67:
e3:8c:a2:0c:d0:84:3e:c6:76:5c:43:96:96:68:e6:
8a:7e:34:70:d2:af:03:26:41:a6:d6:a7:29:b2:bf:
44:61:94:a7:a3:66:21:0b:8e:07:bd:1a:45:c0:a3:
8b:38:01:16:9c:a9:ee:a8:01:52:1a:70:d2:0b:f6:
6e:ef:11:8e:49:af:27:3a:9f:b8:47:b3:70:50:41:
2d:2b:48:5c:96:08:1a:44:cb:6e:92:fa:bb:a2:be:
5a:b4:52:b9:49:63:d9:60:ad:a2:65:df:fe:f9:8e:
45:a7:f7:11:06:68:70:66:0b:f4:88:e6:5a:9e:cf:
16:c8:6a:1d:12:62:fe:e5:25:83:26:4f:b6:25:8a:
21:9e:a4:0f:71:3a:0c:81:68:b8:fa:f8:db:86:a5:
5d:7b:4c:c6:51:d6:75:a1:3d:af:e0:bb:8f:6d:21:
b6:1e:c1:cb:48:38:e8:e9:75:46:bf:59:3a:48:20:
87:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:32:4B:CA:A9:1F:51:14:4A:D7:5B:B5:F5:CF:14:77:21:08:F1:11
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/PDJLyqkfURRK11u19c8UdyEI8RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.132.0/23
Signature Algorithm: sha256WithRSAEncryption
00:c1:c0:c8:40:6d:5b:77:d7:aa:39:be:a9:3e:ab:8d:f0:bf:
c9:bb:88:83:45:e2:75:63:23:ba:72:ee:87:d9:a3:a0:99:30:
8e:8c:56:b3:70:25:e2:b0:40:22:b8:19:8b:ff:6c:ea:7e:9d:
60:97:94:95:d6:14:82:b7:6d:12:80:29:5d:dd:e3:98:7a:b5:
8f:4f:a5:de:b8:18:da:7a:91:2e:a3:93:97:48:d7:f6:86:b4:
ca:be:04:df:be:34:9d:41:f4:3f:59:30:08:64:06:8e:28:c5:
6e:c7:d3:8f:c5:57:60:76:2c:26:d2:7b:fc:1d:15:96:3e:e0:
92:21:68:00:9f:e7:94:cb:8f:8c:06:96:14:f0:9e:21:62:ea:
02:93:b7:e9:43:36:a7:5f:ec:4f:fc:0f:9e:6e:be:05:52:00:
6e:cb:09:9c:e6:4e:8c:19:8d:a0:cc:04:f4:d1:9a:ca:41:a0:
4a:29:a6:9d:9b:04:a0:88:a4:28:43:c9:72:56:1f:f3:a3:2e:
13:f4:c9:b7:fa:e7:ff:b9:5f:e1:be:d4:fb:01:98:f9:57:16:
22:b9:68:ad:72:97:58:f3:c5:87:12:ec:6b:78:88:1d:bc:b3:
89:cb:26:a5:11:19:52:ab:e7:69:f5:1b:13:5e:9f:9e:84:e3:
7c:f8:9d:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYgkfWRDkzyL/bJrgMeZVNflMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjc4NGMxMDUwODViOWQ2YWQ1ZjczYTAzYjIwZDlhNWMx
MTRjYWYwHhcNMjMwNTE2MTIxNjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzMyNGJjYWE5MWY1MTE0NGFkNzViYjVmNWNmMTQ3NzIxMDhmMTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApibGvnR5UKZDKIG3+t53PbM2nLHj
fUH7StTKTx8aWFDObJFPGV9yfap2XEePekhybZjsYtP6gt4SIC0ow1ah1Ju8Qn2s
XF6QbWfjjKIM0IQ+xnZcQ5aWaOaKfjRw0q8DJkGm1qcpsr9EYZSno2YhC44HvRpF
wKOLOAEWnKnuqAFSGnDSC/Zu7xGOSa8nOp+4R7NwUEEtK0hclggaRMtukvq7or5a
tFK5SWPZYK2iZd/++Y5Fp/cRBmhwZgv0iOZans8WyGodEmL+5SWDJk+2JYohnqQP
cToMgWi4+vjbhqVde0zGUdZ1oT2v4LuPbSG2HsHLSDjo6XVGv1k6SCCHUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDwyS8qpH1EUStdbtfXPFHchCPERMB8GA1UdIwQY
MBaAFGBnhMEFCFudatX3OgOyDZpcEUyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgt
YjQzNDJiYTkxYWJjLzEvUERKTHlxa2ZVUlJLMTF1MTljOFVkeUVJOFJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yYjgzNGUtYmFkMi00OWZmLWJhMzgtYjQzNDJiYTkxYWJj
LzEvWUdlRXdRVUlXNTFxMWZjNkE3SU5tbHdSVEs4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYOEMA0G
CSqGSIb3DQEBCwUAA4IBAQAAwcDIQG1bd9eqOb6pPquN8L/Ju4iDReJ1YyO6cu6H
2aOgmTCOjFazcCXisEAiuBmL/2zqfp1gl5SV1hSCt20SgCld3eOYerWPT6XeuBja
epEuo5OXSNf2hrTKvgTfvjSdQfQ/WTAIZAaOKMVux9OPxVdgdiwm0nv8HRWWPuCS
IWgAn+eUy4+MBpYU8J4hYuoCk7fpQzanX+xP/A+ebr4FUgBuywmc5k6MGY2gzAT0
0ZrKQaBKKaadmwSgiKQoQ8lyVh/zoy4T9Mm3+uf/uV/hvtT7AZj5VxYiuWitcpdY
88WHEuxreIgdvLOJyyalERlSq+dp9RsTXp+ehON8+J2v
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:22 2024 by rpki-client on console-ams.rpki-client.org