Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/DJTzyzEAXCbpcS5wJuH8ayAviQ0.roa
File: DJTzyzEAXCbpcS5wJuH8ayAviQ0.roa (raw, json)
Hash identifier: iY2IYNXKUuOyxOLWBd1wkf2RvMqOREKm1FbONQzI1FE=
Subject key identifier: 0C:94:F3:CB:31:00:5C:26:E9:71:2E:70:26:E1:FC:6B:20:2F:89:0D
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018748EC3D75B65CC5A9FB66AB28C4E5C8D1
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/DJTzyzEAXCbpcS5wJuH8ayAviQ0.roa
Signing time: Mon 03 Apr 2023 21:00:54 +0000
ROA not before: Mon 03 Apr 2023 21:00:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42375
IP address blocks: 45.147.254.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 06 Apr 2023 16:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:48:ec:3d:75:b6:5c:c5:a9:fb:66:ab:28:c4:e5:c8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Apr 3 21:00:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0c94f3cb31005c26e9712e7026e1fc6b202f890d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a4:ab:ee:26:85:9c:7f:25:e4:eb:c4:bd:73:
c4:b4:88:66:99:f2:74:f6:20:32:ab:f9:0a:d8:a1:
c6:42:6d:21:1e:6e:6a:11:10:3d:9c:e1:52:54:e1:
16:84:94:fe:7d:0c:fb:2a:19:8e:f1:b5:21:62:19:
d4:a1:9b:93:fd:9a:fb:7e:b9:b7:de:1d:48:f7:bc:
1e:1e:2d:71:17:75:bb:77:cf:34:42:4b:5f:b2:31:
09:d5:19:c8:37:06:61:de:72:e2:b2:b7:d7:df:e8:
95:f9:04:9a:a3:1a:ca:4b:83:5d:13:38:94:be:a6:
d1:55:32:d9:30:d9:c8:ea:a9:a9:d3:bc:3e:ca:f4:
4d:52:55:e5:fd:d2:ac:32:37:f6:13:b2:b7:93:e7:
c0:ff:21:80:67:8f:03:bf:e2:2e:38:f7:b8:ba:d1:
07:86:b1:b9:04:07:2c:87:60:54:99:e5:8e:86:ae:
be:78:35:56:d7:71:39:55:bf:36:c4:8e:f7:49:8c:
a3:ba:9b:30:c6:5f:c4:98:7d:31:07:e8:76:e9:88:
d9:b4:31:c5:3b:a8:d4:61:1d:9e:c4:dc:3d:de:b5:
be:42:34:c0:11:48:a3:82:6c:b9:2c:b2:fc:fa:63:
af:52:50:c5:d4:ec:79:e9:db:ac:5b:af:b0:5b:87:
4c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:94:F3:CB:31:00:5C:26:E9:71:2E:70:26:E1:FC:6B:20:2F:89:0D
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/DJTzyzEAXCbpcS5wJuH8ayAviQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.254.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:f2:5f:80:49:18:f0:9b:8b:cb:fd:83:41:9e:54:25:e5:e5:
3f:20:b2:04:c3:10:29:7b:e4:46:b7:b2:40:b7:09:33:63:92:
eb:76:3e:d0:07:e7:92:59:f4:2d:a2:dc:99:f8:5d:9a:f4:9e:
b7:d5:9d:66:18:64:b0:53:a2:e1:9a:01:6c:79:08:ed:4e:67:
0c:25:91:5e:02:d7:2a:9a:3e:12:71:22:82:f1:74:68:a1:bf:
79:4c:9d:6b:4e:fe:98:aa:06:b0:d1:13:bf:8e:53:0b:4c:92:
8b:62:a9:a4:a5:62:77:9f:f6:9e:b0:b9:9f:ad:d5:bc:0a:07:
2a:8a:c0:cc:5e:21:ea:76:77:28:ae:4c:f9:5a:5c:93:17:24:
ec:97:72:cd:7b:a0:c8:6b:64:c9:59:a5:a3:dc:36:ac:d5:c6:
0c:36:89:cb:77:d2:e0:9c:89:ce:84:cd:70:2c:a9:bf:cb:61:
6b:30:3c:80:d2:53:b1:d2:b0:fc:33:d8:c4:a8:bc:ab:7c:99:
c1:a3:f3:9b:5b:86:6e:15:4e:ef:8c:18:fb:00:81:85:b7:c1:
83:c2:a9:7a:0b:b3:d7:ef:11:4e:67:dc:11:26:4a:07:b9:88:
cf:6f:cb:d0:72:db:5f:8f:56:62:34:54:aa:f8:28:99:7f:fc:
c8:22:94:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYdI7D11tlzFqftmqyjE5cjRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjMwNDAzMjEwMDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzk0ZjNjYjMxMDA1YzI2ZTk3MTJlNzAyNmUxZmM2YjIwMmY4OTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKSr7iaFnH8l5OvEvXPEtIhmmfJ0
9iAyq/kK2KHGQm0hHm5qERA9nOFSVOEWhJT+fQz7KhmO8bUhYhnUoZuT/Zr7frm3
3h1I97weHi1xF3W7d880QktfsjEJ1RnINwZh3nLisrfX3+iV+QSaoxrKS4NdEziU
vqbRVTLZMNnI6qmp07w+yvRNUlXl/dKsMjf2E7K3k+fA/yGAZ48Dv+IuOPe4utEH
hrG5BAcsh2BUmeWOhq6+eDVW13E5Vb82xI73SYyjupswxl/EmH0xB+h26YjZtDHF
O6jUYR2exNw93rW+QjTAEUijgmy5LLL8+mOvUlDF1Ox56dusW6+wW4dMDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAyU88sxAFwm6XEucCbh/GsgL4kNMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvREpUenl6RUFYQ2JwY1M1d0p1SDhheUF2aVEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZP+MA0G
CSqGSIb3DQEBCwUAA4IBAQCN8l+ASRjwm4vL/YNBnlQl5eU/ILIEwxApe+RGt7JA
twkzY5Lrdj7QB+eSWfQtotyZ+F2a9J631Z1mGGSwU6LhmgFseQjtTmcMJZFeAtcq
mj4ScSKC8XRoob95TJ1rTv6Yqgaw0RO/jlMLTJKLYqmkpWJ3n/aesLmfrdW8Cgcq
isDMXiHqdncorkz5WlyTFyTsl3LNe6DIa2TJWaWj3Das1cYMNonLd9LgnInOhM1w
LKm/y2FrMDyA0lOx0rD8M9jEqLyrfJnBo/ObW4ZuFU7vjBj7AIGFt8GDwql6C7PX
7xFOZ9wRJkoHuYjPb8vQcttfj1ZiNFSq+CiZf/zIIpR/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org