Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/OAI8-t0oThQJLPfpfgtIS0GE-hs.roa
File: OAI8-t0oThQJLPfpfgtIS0GE-hs.roa (raw, json)
Hash identifier: yAEnnPiMcNddVJRkKn2pxsMjFVSTftn8TXGjnXpX0TM=
Subject key identifier: 38:02:3C:FA:DD:28:4E:14:09:2C:F7:E9:7E:0B:48:4B:41:84:FA:1B
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 01856F0233AC6EA2E160E61A4DB9C78D2B75
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/OAI8-t0oThQJLPfpfgtIS0GE-hs.roa
Signing time: Sun 01 Jan 2023 20:24:53 +0000
ROA not before: Sun 01 Jan 2023 20:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208275
IP address blocks: 45.149.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:33:ac:6e:a2:e1:60:e6:1a:4d:b9:c7:8d:2b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: Jan 1 20:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38023cfadd284e14092cf7e97e0b484b4184fa1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:99:5d:83:c2:a2:5d:09:08:dd:7b:1f:12:
b3:73:18:32:86:8b:0e:29:67:bf:fb:af:a4:26:fe:
e2:39:14:a0:6f:a0:a5:01:67:73:e0:03:36:8a:fe:
bf:f6:5f:fc:e4:3e:d1:d2:45:72:c3:1f:65:c6:d2:
b5:33:99:3e:0b:21:fc:bc:62:03:9a:2e:9e:80:a0:
49:6b:5c:b4:0d:f3:7a:34:8b:53:bc:2a:07:66:9e:
af:b2:a1:75:42:ec:5e:38:d7:3f:ad:a7:0d:c9:da:
95:56:99:e1:d5:4f:e9:fa:26:bc:5a:aa:69:2b:94:
18:4c:9f:bb:dd:4a:31:c4:25:69:67:76:f1:ee:a9:
7c:45:e3:30:dc:28:d1:ba:6f:b3:bb:7f:58:6d:36:
ff:a1:72:cf:7b:6b:79:f3:8b:df:6b:9b:ba:0c:45:
5d:ce:f1:e0:3f:d0:ef:c7:91:23:26:82:6f:2e:16:
f6:47:59:64:a1:85:f8:7d:30:f6:32:d6:7a:e3:13:
39:d9:af:b3:53:d8:8c:a5:8c:e8:2c:3b:d5:21:51:
08:ca:1d:c0:8e:27:ec:13:6c:bf:e3:8c:9a:dd:6e:
9d:6b:f9:37:9c:90:b3:5d:83:53:74:ff:c9:55:52:
9d:88:30:df:e9:45:92:85:46:12:82:c2:61:f9:12:
84:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:02:3C:FA:DD:28:4E:14:09:2C:F7:E9:7E:0B:48:4B:41:84:FA:1B
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/OAI8-t0oThQJLPfpfgtIS0GE-hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.152.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:7f:2f:62:07:20:a6:78:47:92:9f:29:86:aa:1f:0f:26:3b:
ae:f4:eb:5e:5e:91:74:66:86:a6:9e:66:87:f0:2e:96:6a:04:
5d:60:8a:71:92:8b:72:d8:a9:51:2c:6f:6f:68:dc:30:6e:93:
e5:ec:bf:3b:18:2d:10:a8:73:ee:da:3a:24:01:40:10:dc:f0:
f3:f6:e1:26:b6:fc:b1:b3:79:03:a4:85:dc:b2:9f:2c:74:41:
9f:19:d2:67:ee:cd:da:79:55:a4:0d:e6:fd:7a:70:0f:eb:f6:
93:1b:fa:8b:09:cd:8a:2d:c4:51:5f:fd:14:58:85:e2:bb:3d:
fb:80:84:d9:ad:c4:65:32:49:71:41:cc:68:dd:e2:33:4f:68:
98:be:8f:6c:da:c5:9c:47:6d:57:09:15:9c:7a:17:6a:4b:bd:
5a:82:72:db:0e:ec:c1:33:ee:f7:53:3a:67:31:e9:53:9b:85:
ea:a7:49:36:be:87:10:47:d4:36:4c:f6:08:78:25:aa:ef:31:
a2:40:ed:25:9f:64:f0:2a:5e:27:79:6d:1a:b9:a7:79:02:8b:
2f:7f:72:aa:d2:2f:b9:bd:7c:ee:50:65:65:4d:a2:8a:68:de:
ec:91:68:ad:1d:6f:76:e2:93:f2:de:dd:72:15:21:6d:98:15:
dc:8f:14:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvAjOsbqLhYOYaTbnHjSt1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OTVjOTYxN2NhNWE2YTNiZmYyNjNmYzE4Mzc5OTJmZDFh
YzQ3ZjIwHhcNMjMwMTAxMjAyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODAyM2NmYWRkMjg0ZTE0MDkyY2Y3ZTk3ZTBiNDg0YjQxODRmYTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N+ZXYPCol0JCN17HxKzcxgyhosO
KWe/+6+kJv7iORSgb6ClAWdz4AM2iv6/9l/85D7R0kVywx9lxtK1M5k+CyH8vGID
mi6egKBJa1y0DfN6NItTvCoHZp6vsqF1QuxeONc/racNydqVVpnh1U/p+ia8Wqpp
K5QYTJ+73UoxxCVpZ3bx7ql8ReMw3CjRum+zu39YbTb/oXLPe2t584vfa5u6DEVd
zvHgP9Dvx5EjJoJvLhb2R1lkoYX4fTD2MtZ64xM52a+zU9iMpYzoLDvVIVEIyh3A
jifsE2y/44ya3W6da/k3nJCzXYNTdP/JVVKdiDDf6UWShUYSgsJh+RKEBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDgCPPrdKE4UCSz36X4LSEtBhPobMB8GA1UdIwQY
MBaAFOeVyWF8paajv/Jj/Bg3mS/RrEfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85ODZkZGUtNWY2OC00YzIxLWI1NDYt
ZDU0MGRmODg2YmFiLzEvT0FJOC10MG9UaFFKTFBmcGZndElTMEdFLWhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC85ODZkZGUtNWY2OC00YzIxLWI1NDYtZDU0MGRmODg2YmFi
LzEvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZWYMA0G
CSqGSIb3DQEBCwUAA4IBAQDBfy9iByCmeEeSnymGqh8PJjuu9OteXpF0ZoamnmaH
8C6WagRdYIpxkoty2KlRLG9vaNwwbpPl7L87GC0QqHPu2jokAUAQ3PDz9uEmtvyx
s3kDpIXcsp8sdEGfGdJn7s3aeVWkDeb9enAP6/aTG/qLCc2KLcRRX/0UWIXiuz37
gITZrcRlMklxQcxo3eIzT2iYvo9s2sWcR21XCRWcehdqS71agnLbDuzBM+73Uzpn
MelTm4Xqp0k2vocQR9Q2TPYIeCWq7zGiQO0ln2TwKl4neW0auad5Aosvf3Kq0i+5
vXzuUGVlTaKKaN7skWitHW924pPy3t1yFSFtmBXcjxRF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:53 2024 by rpki-client on console-fra.rpki-client.org