Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/boYQ-MpMFB98KX21TeSH2lzXDDU.roa
File: boYQ-MpMFB98KX21TeSH2lzXDDU.roa (raw, json)
Hash identifier: +r4BhQxwFTJsy6qge0sRL7a4SzefgzQPdjKkZEZ7p4s=
Subject key identifier: 6E:86:10:F8:CA:4C:14:1F:7C:29:7D:B5:4D:E4:87:DA:5C:D7:0C:35
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 018CC79342D0FC4DA1BDB74B8AB34BFB4AAF
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/boYQ-MpMFB98KX21TeSH2lzXDDU.roa
Signing time: Tue 02 Jan 2024 00:29:26 +0000
ROA not before: Tue 02 Jan 2024 00:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 264617
IP address blocks: 45.82.220.0/23 maxlen: 24
45.82.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 02 Jun 2024 04:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:42:d0:fc:4d:a1:bd:b7:4b:8a:b3:4b:fb:4a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Jan 2 00:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6e8610f8ca4c141f7c297db54de487da5cd70c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:56:3e:c2:22:8e:3b:b4:85:e2:5e:5b:34:ad:
71:66:0f:57:46:3c:f2:58:3a:f2:46:e9:cf:e7:ac:
11:3a:4f:41:4b:15:54:60:c8:5a:29:4b:4e:55:2d:
00:2b:26:69:63:26:50:dd:e4:66:0d:ab:22:ba:44:
70:ae:4e:d1:11:5f:67:f6:18:3a:8a:92:d3:6c:1b:
c0:d7:ca:28:4a:1a:a3:6b:8f:c2:2e:b4:42:c5:88:
d7:07:12:31:85:38:13:d0:1c:ed:06:27:1c:67:ce:
8e:14:da:e7:a9:8d:9c:c8:df:21:3c:10:bb:40:7c:
76:88:15:fa:68:11:df:e6:fe:09:3f:0c:bf:88:b6:
6b:a3:b9:3a:e0:0b:81:68:6d:13:47:1e:3b:55:59:
c3:e1:b6:89:ea:83:9f:6b:6d:6e:77:f4:56:da:91:
bf:02:10:6a:61:8c:ad:fb:93:53:6c:fa:4c:d7:0c:
1e:7d:6f:2e:59:11:1d:bd:28:5d:10:2e:ff:af:2e:
b5:61:f9:bb:25:3d:23:8b:0c:e5:73:c7:dc:98:e7:
49:64:1d:ac:30:c6:1a:52:c5:3e:ba:c0:c2:10:9b:
8c:bf:8a:42:4e:5e:f8:35:49:79:fd:e5:de:a5:60:
eb:6f:93:60:07:5d:79:5d:bc:bb:2f:58:d8:84:10:
3a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:86:10:F8:CA:4C:14:1F:7C:29:7D:B5:4D:E4:87:DA:5C:D7:0C:35
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/boYQ-MpMFB98KX21TeSH2lzXDDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.220.0-45.82.222.255
Signature Algorithm: sha256WithRSAEncryption
01:27:97:c2:de:dc:35:e6:26:d1:98:9d:dc:49:87:54:73:30:
0f:36:90:59:fd:02:da:24:bc:7c:4c:66:a5:f5:27:a5:71:54:
aa:2f:c6:04:1c:b9:a8:38:85:cd:dd:c7:1a:91:7a:b8:ef:c6:
47:80:bb:80:4e:25:29:db:64:ed:32:88:bd:de:24:ce:35:89:
8b:34:5a:86:4e:0e:8a:58:a8:a9:cd:f3:72:cf:62:16:e6:79:
61:48:b3:a4:53:97:ff:4d:6a:2f:b7:27:07:1b:50:cf:14:01:
fd:a0:3c:b8:6f:f6:e9:75:66:4a:39:2e:7e:82:8c:7d:47:09:
6f:03:2a:5e:81:e3:b0:ce:ff:19:17:76:7f:c7:f4:5a:38:1d:
e7:e7:c5:3a:bf:9a:62:71:5a:a5:d7:80:f0:9e:50:c3:a3:7c:
03:1e:88:a8:7f:69:5b:32:31:7b:2b:ae:a5:28:6c:96:fc:72:
5b:a0:b1:9b:dd:1f:98:f3:cd:22:9f:1c:75:7e:63:9a:91:cc:
5b:42:6a:d0:b2:32:5c:db:ff:16:09:ea:21:e5:71:02:fb:9d:
5f:4f:b4:a2:2b:81:81:e8:d9:bf:26:f9:f9:a3:22:30:3c:68:
aa:c5:17:e3:b1:6b:32:d3:95:7b:97:e5:93:08:0a:52:2e:5a:
01:34:38:3c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzHk0LQ/E2hvbdLirNL+0qvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZDBjNDlhMGU5N2UwZDVmM2NlZDNiN2I2YjlmNzJjYTBj
YjUzZDYwHhcNMjQwMTAyMDAyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZTg2MTBmOGNhNGMxNDFmN2MyOTdkYjU0ZGU0ODdkYTVjZDcwYzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFY+wiKOO7SF4l5bNK1xZg9XRjzy
WDryRunP56wROk9BSxVUYMhaKUtOVS0AKyZpYyZQ3eRmDasiukRwrk7REV9n9hg6
ipLTbBvA18ooShqja4/CLrRCxYjXBxIxhTgT0BztBiccZ86OFNrnqY2cyN8hPBC7
QHx2iBX6aBHf5v4JPwy/iLZro7k64AuBaG0TRx47VVnD4baJ6oOfa21ud/RW2pG/
AhBqYYyt+5NTbPpM1wwefW8uWREdvShdEC7/ry61Yfm7JT0jiwzlc8fcmOdJZB2s
MMYaUsU+usDCEJuMv4pCTl74NUl5/eXepWDrb5NgB115Xby7L1jYhBA6pwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFG6GEPjKTBQffCl9tU3kh9pc1ww1MB8GA1UdIwQY
MBaAFOLQxJoOl+DV887Tt7a59yygy1PWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEt
NDY5MGEwMDcxNDFmLzEvYm9ZUS1NcE1GQjk4S1gyMVRlU0gybHpYRERVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC85ZjBmN2EtMTFlYi00MzgzLWJjNmEtNDY5MGEwMDcxNDFm
LzEvNHRERW1nNlg0Tlh6enRPM3RybjNMS0RMVTlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItUtwD
BAAtUt4wDQYJKoZIhvcNAQELBQADggEBAAEnl8Le3DXmJtGYndxJh1RzMA82kFn9
AtokvHxMZqX1J6VxVKovxgQcuag4hc3dxxqRerjvxkeAu4BOJSnbZO0yiL3eJM41
iYs0WoZODopYqKnN83LPYhbmeWFIs6RTl/9Nai+3JwcbUM8UAf2gPLhv9ul1Zko5
Ln6CjH1HCW8DKl6B47DO/xkXdn/H9Fo4HefnxTq/mmJxWqXXgPCeUMOjfAMeiKh/
aVsyMXsrrqUobJb8clugsZvdH5jzzSKfHHV+Y5qRzFtCatCyMlzb/xYJ6iHlcQL7
nV9PtKIrgYHo2b8m+fmjIjA8aKrFF+OxazLTlXuX5ZMIClIuWgE0ODw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:36 2024 by rpki-client on console-ams.rpki-client.org