Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/vcRVkzfBlY0POZ0UPgveNzv_6mE.roa
File: vcRVkzfBlY0POZ0UPgveNzv_6mE.roa (raw, json)
Hash identifier: AMe0c5FTNLMQaMwBul4xy4yvI8iEtrpG/A09ZfrTJI8=
Subject key identifier: BD:C4:55:93:37:C1:95:8D:0F:39:9D:14:3E:0B:DE:37:3B:FF:EA:61
Certificate issuer: /CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Certificate serial: 018F815A38401DB31E95249BA9379E2B6464
Authority key identifier: E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/vcRVkzfBlY0POZ0UPgveNzv_6mE.roa
Signing time: Thu 16 May 2024 12:22:04 +0000
ROA not before: Thu 16 May 2024 12:22:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56339
IP address blocks: 45.149.152.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 16 May 2024 12:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:81:5a:38:40:1d:b3:1e:95:24:9b:a9:37:9e:2b:64:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e795c9617ca5a6a3bff263fc1837992fd1ac47f2
Validity
Not Before: May 16 12:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bdc4559337c1958d0f399d143e0bde373bffea61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f1:69:bf:88:20:cf:9f:a5:40:fb:6d:18:9e:
f9:91:df:b1:0b:1f:f8:71:c4:a8:49:70:3e:70:fc:
fc:0c:97:ec:6d:e2:7d:b2:ea:2a:a0:85:a9:16:d3:
98:b4:d7:a0:49:e3:1f:13:7a:17:49:e0:35:f7:cc:
5c:0f:12:c8:55:b7:e9:2f:a0:a4:aa:4f:44:be:1c:
57:f8:e7:5d:4b:14:8a:33:5e:17:91:d4:20:93:67:
db:dd:41:94:d2:2b:98:bf:96:06:88:9c:42:c1:8f:
4b:76:23:ca:56:98:f2:dd:74:e2:16:bb:13:eb:da:
ba:26:c1:47:ac:02:e7:3d:7f:4a:6c:d2:fa:75:d2:
b8:73:b7:21:69:a1:3f:8a:39:25:2e:3f:41:f4:a5:
d5:1d:82:9b:f5:f7:7b:79:43:55:fd:f2:05:b5:71:
5a:f8:31:9e:4e:69:68:a2:1f:28:fd:c1:3f:64:d1:
e4:e9:ff:41:38:c8:db:4b:3a:53:65:c1:c5:b7:e5:
de:12:9b:b1:70:2f:3f:6b:f4:30:21:e0:3e:34:21:
5e:d8:93:8d:d0:f8:e4:44:d0:c1:8a:64:97:e9:83:
06:61:27:1c:4d:18:47:d5:6c:06:f5:6d:52:a5:e6:
12:d4:d1:9c:80:a5:0a:3c:0d:d6:3f:e0:15:a5:0a:
f9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C4:55:93:37:C1:95:8D:0F:39:9D:14:3E:0B:DE:37:3B:FF:EA:61
X509v3 Authority Key Identifier:
keyid:E7:95:C9:61:7C:A5:A6:A3:BF:F2:63:FC:18:37:99:2F:D1:AC:47:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/55XJYXylpqO_8mP8GDeZL9GsR_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/vcRVkzfBlY0POZ0UPgveNzv_6mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/986dde-5f68-4c21-b546-d540df886bab/1/55XJYXylpqO_8mP8GDeZL9GsR_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.152.0/22
Signature Algorithm: sha256WithRSAEncryption
b3:15:42:f6:68:b2:eb:4d:97:eb:74:11:2c:e7:71:c3:8e:69:
32:3d:c4:1b:77:92:34:9a:39:9e:d6:5a:38:b2:1f:c4:24:4b:
2d:b2:12:7b:5e:b5:21:5f:ff:56:ba:00:c3:9d:11:09:8f:04:
f5:19:c4:8d:f8:a0:b6:d9:d4:81:38:0e:d3:87:87:08:ee:c2:
cd:2f:25:90:08:20:05:df:c4:66:27:10:4d:ea:1f:fc:a6:2d:
39:bd:8f:59:76:67:a6:c1:e6:86:1b:f9:8c:9b:7f:ac:46:3f:
ad:00:fa:91:3e:8e:00:82:ec:1f:fc:cb:25:83:3c:3b:08:cd:
10:21:37:4c:29:aa:43:7c:da:43:3e:f2:eb:36:45:6f:cf:a1:
c7:e2:5d:19:d1:4a:ea:97:65:78:6d:c8:44:a1:3b:0b:f9:4b:
04:3f:0d:df:57:5c:28:53:77:2b:b3:b8:a5:0f:92:d0:db:15:
fb:07:df:6a:2b:20:40:8a:04:e8:72:43:01:05:53:d0:1b:c3:
5a:a3:c9:6d:03:f4:f9:b6:d3:08:51:ef:f0:5f:53:22:dd:20:
54:03:a2:11:3e:54:7a:88:15:92:5e:3f:a0:c4:0d:88:6f:21:
02:08:28:18:df:79:73:36:f7:d3:bc:41:f0:e0:13:64:3d:65:
39:8d:07:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+BWjhAHbMelSSbqTeeK2RkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OTVjOTYxN2NhNWE2YTNiZmYyNjNmYzE4Mzc5OTJmZDFh
YzQ3ZjIwHhcNMjQwNTE2MTIyMjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZGM0NTU5MzM3YzE5NThkMGYzOTlkMTQzZTBiZGUzNzNiZmZlYTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/Fpv4ggz5+lQPttGJ75kd+xCx/4
ccSoSXA+cPz8DJfsbeJ9suoqoIWpFtOYtNegSeMfE3oXSeA198xcDxLIVbfpL6Ck
qk9EvhxX+OddSxSKM14XkdQgk2fb3UGU0iuYv5YGiJxCwY9LdiPKVpjy3XTiFrsT
69q6JsFHrALnPX9KbNL6ddK4c7chaaE/ijklLj9B9KXVHYKb9fd7eUNV/fIFtXFa
+DGeTmlooh8o/cE/ZNHk6f9BOMjbSzpTZcHFt+XeEpuxcC8/a/QwIeA+NCFe2JON
0PjkRNDBimSX6YMGYSccTRhH1WwG9W1SpeYS1NGcgKUKPA3WP+AVpQr5ewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL3EVZM3wZWNDzmdFD4L3jc7/+phMB8GA1UdIwQY
MBaAFOeVyWF8paajv/Jj/Bg3mS/RrEfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85ODZkZGUtNWY2OC00YzIxLWI1NDYt
ZDU0MGRmODg2YmFiLzEvdmNSVmt6ZkJsWTBQT1owVVBndmVOenZfNm1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC85ODZkZGUtNWY2OC00YzIxLWI1NDYtZDU0MGRmODg2YmFi
LzEvNTVYSllYeWxwcU9fOG1QOEdEZVpMOUdzUl9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZWYMA0G
CSqGSIb3DQEBCwUAA4IBAQCzFUL2aLLrTZfrdBEs53HDjmkyPcQbd5I0mjme1lo4
sh/EJEstshJ7XrUhX/9WugDDnREJjwT1GcSN+KC22dSBOA7Th4cI7sLNLyWQCCAF
38RmJxBN6h/8pi05vY9ZdmemweaGG/mMm3+sRj+tAPqRPo4Aguwf/Mslgzw7CM0Q
ITdMKapDfNpDPvLrNkVvz6HH4l0Z0Urql2V4bchEoTsL+UsEPw3fV1woU3crs7il
D5LQ2xX7B99qKyBAigTockMBBVPQG8Nao8ltA/T5ttMIUe/wX1Mi3SBUA6IRPlR6
iBWSXj+gxA2IbyECCCgY33lzNvfTvEHw4BNkPWU5jQec
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:42 2024 by rpki-client on console-ams.rpki-client.org