Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/xkoMGBqmc42er3aW4UQBZTNaKKc.roa
File: xkoMGBqmc42er3aW4UQBZTNaKKc.roa (raw, json)
Hash identifier: doFrYJXESErxNh2K8xj+6EJfClM4hIpWIpjRX62dD4M=
Subject key identifier: C6:4A:0C:18:1A:A6:73:8D:9E:AF:76:96:E1:44:01:65:33:5A:28:A7
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 01890AC51F91AD7F69A259A0E8E3F875FD6D
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/xkoMGBqmc42er3aW4UQBZTNaKKc.roa
Signing time: Fri 30 Jun 2023 05:27:18 +0000
ROA not before: Fri 30 Jun 2023 05:27:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.141.234.0/24 maxlen: 24
94.190.195.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0a:c5:1f:91:ad:7f:69:a2:59:a0:e8:e3:f8:75:fd:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 30 05:27:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c64a0c181aa6738d9eaf7696e1440165335a28a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:cf:3e:a1:6e:92:ef:d7:a5:d9:78:62:97:
ca:92:8c:2c:58:65:b1:ae:84:3b:a4:a6:5d:c7:22:
f6:50:97:94:4c:fe:48:47:2e:8e:48:71:88:00:74:
85:54:a1:cc:a2:84:03:e8:b7:1d:d7:35:36:85:b9:
7f:2b:3a:79:03:77:6d:a1:5e:ed:f2:41:30:4c:83:
20:12:2e:0e:1f:84:ad:7b:37:b7:e5:60:da:1f:c7:
d2:7f:d2:20:b1:05:87:40:e0:71:50:0e:dd:cb:64:
2a:03:ac:e1:e7:d0:81:42:bc:4d:ab:6c:f9:63:74:
dd:7d:1c:44:fc:9f:95:4d:cb:4d:28:e0:0b:9a:e4:
1d:6f:44:b8:65:bb:7c:6d:be:dd:4a:11:cf:36:63:
d9:fb:9c:11:85:28:47:74:b6:5a:4a:22:3d:78:c1:
bc:bc:c7:26:66:1e:d1:e1:f0:6d:40:7c:98:dd:fa:
37:5e:c6:9b:57:06:43:b5:d2:aa:cd:9d:a2:b9:d5:
cd:90:b4:d3:96:e5:94:58:67:0f:cf:74:70:86:d8:
c2:13:d4:5d:04:c7:fa:d2:8e:2c:e2:bd:73:b5:4d:
03:0d:01:c6:e5:41:72:c0:ab:ab:fd:d5:34:7f:39:
b6:7e:cd:78:3e:ca:2f:b3:b9:6a:3a:51:e9:b4:4e:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4A:0C:18:1A:A6:73:8D:9E:AF:76:96:E1:44:01:65:33:5A:28:A7
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/xkoMGBqmc42er3aW4UQBZTNaKKc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.234.0/24
94.190.195.0/24
Signature Algorithm: sha256WithRSAEncryption
41:4e:8a:14:fc:7c:33:b9:0b:25:63:1a:54:6f:e8:a4:12:2f:
80:28:44:ac:50:df:ec:67:6d:8c:ea:49:d5:77:a9:73:ae:87:
df:56:ca:a0:d2:dc:63:3a:2c:f2:74:10:16:8a:aa:16:e8:d4:
f8:50:d8:13:2c:28:55:8d:b2:3e:53:63:fc:4b:f7:d0:5a:95:
5e:f7:dc:69:c7:62:69:ba:e5:b1:3a:16:ef:88:59:3d:17:d1:
67:c6:f6:2a:18:75:52:9e:4e:f5:06:51:77:54:20:82:a0:ef:
18:b6:63:3e:8c:d2:f5:18:c1:7d:75:05:46:59:85:ba:8f:cd:
1b:1c:d7:d4:15:d7:8d:40:c0:86:d8:21:07:4c:22:e8:1b:8f:
e6:e0:8b:04:5c:0f:0c:b5:e7:13:c5:9f:b3:ee:25:fd:24:a7:
ec:98:ca:6c:14:34:00:7a:6e:2d:b8:4f:26:26:f2:9d:fd:30:
26:1f:c5:b0:72:77:72:3a:58:44:4b:fd:2d:79:e2:54:f6:52:
65:ee:a9:84:df:be:46:25:c2:7d:ba:68:11:30:83:f4:aa:db:
cb:54:3a:3b:07:66:04:e9:0d:76:64:ef:0d:a5:b1:c0:6b:69:
7d:43:7b:ca:72:11:d9:e3:9b:be:ae:36:eb:2e:da:c4:79:cc:
33:50:55:94
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYkKxR+RrX9polmg6OP4df1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk
MDAxOGMwHhcNMjMwNjMwMDUyNzE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNjRhMGMxODFhYTY3MzhkOWVhZjc2OTZlMTQ0MDE2NTMzNWEyOGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCTPPqFuku/Xpdl4YpfKkowsWGWx
roQ7pKZdxyL2UJeUTP5IRy6OSHGIAHSFVKHMooQD6Lcd1zU2hbl/Kzp5A3dtoV7t
8kEwTIMgEi4OH4Steze35WDaH8fSf9IgsQWHQOBxUA7dy2QqA6zh59CBQrxNq2z5
Y3TdfRxE/J+VTctNKOALmuQdb0S4Zbt8bb7dShHPNmPZ+5wRhShHdLZaSiI9eMG8
vMcmZh7R4fBtQHyY3fo3XsabVwZDtdKqzZ2iudXNkLTTluWUWGcPz3RwhtjCE9Rd
BMf60o4s4r1ztU0DDQHG5UFywKur/dU0fzm2fs14Psovs7lqOlHptE4cJwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMZKDBgapnONnq92luFEAWUzWiinMB8GA1UdIwQY
MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct
MjliMDg1ZGQyM2FkLzEveGtvTUdCcW1jNDJlcjNhVzRVUUJaVE5hS0tjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk
LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALY3qAwQA
Xr7DMA0GCSqGSIb3DQEBCwUAA4IBAQBBTooU/HwzuQslYxpUb+ikEi+AKESsUN/s
Z22M6knVd6lzroffVsqg0txjOizydBAWiqoW6NT4UNgTLChVjbI+U2P8S/fQWpVe
99xpx2JpuuWxOhbviFk9F9FnxvYqGHVSnk71BlF3VCCCoO8YtmM+jNL1GMF9dQVG
WYW6j80bHNfUFdeNQMCG2CEHTCLoG4/m4IsEXA8MtecTxZ+z7iX9JKfsmMpsFDQA
em4tuE8mJvKd/TAmH8WwcndyOlhES/0teeJU9lJl7qmE375GJcJ9umgRMIP0qtvL
VDo7B2YE6Q12ZO8NpbHAa2l9Q3vKchHZ45u+rjbrLtrEecwzUFWU
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:07 2023 by rpki-client on console-fra.rpki-client.org