Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/EOTCv5lQ3xxEhid-1YgJxY0xeT4.roa
File: EOTCv5lQ3xxEhid-1YgJxY0xeT4.roa (raw, json)
Hash identifier: +XjztjAmRS8Djntzpc2tuuzkCeuEYc7mjR7FycJnob4=
Subject key identifier: 10:E4:C2:BF:99:50:DF:1C:44:86:27:7E:D5:88:09:C5:8D:31:79:3E
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0188BC0C50F641BC668267947D224EB156DA
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/EOTCv5lQ3xxEhid-1YgJxY0xeT4.roa
Signing time: Wed 14 Jun 2023 22:35:03 +0000
ROA not before: Wed 14 Jun 2023 22:35:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58212
IP address blocks: 45.140.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bc:0c:50:f6:41:bc:66:82:67:94:7d:22:4e:b1:56:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jun 14 22:35:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10e4c2bf9950df1c4486277ed58809c58d31793e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:76:ca:3a:aa:6b:f9:9c:07:1d:36:a7:65:bc:
fc:eb:f0:2b:17:aa:56:33:81:2d:6f:12:89:60:22:
9e:92:1c:af:86:1d:c5:b3:22:b7:8c:25:54:67:52:
9f:66:77:44:cf:e6:d7:5a:97:f3:5e:ec:67:76:a7:
d8:d4:f4:b9:e9:7a:cd:b8:9c:8f:91:65:39:f2:43:
5a:da:79:80:f3:0a:e5:70:72:da:a7:21:24:0b:81:
92:01:38:99:1b:27:19:49:25:40:32:81:39:ca:8a:
4f:1b:bb:c5:87:a0:67:2f:7f:8e:3b:d4:4f:35:a2:
5f:78:88:06:b5:2e:2c:49:1b:95:70:bc:33:18:4e:
d6:72:34:5a:83:e0:dd:7e:e3:e4:d0:67:1d:84:8d:
d6:41:40:ca:7e:bc:3d:cc:c6:f9:63:c0:f3:09:1a:
86:be:f9:73:f8:b0:a2:90:bf:6c:1b:6c:4b:50:22:
3d:05:21:ab:6e:6b:9b:ab:8a:f2:34:bf:d5:e4:d0:
b3:ee:56:f2:54:c1:31:34:ee:fd:f3:ad:21:22:d9:
5c:81:a0:51:86:5e:d3:29:c5:77:8c:b7:ed:f7:9c:
d3:5e:4a:84:ae:00:c2:7c:6b:fe:49:7b:5e:c9:70:
26:b2:1c:26:dc:a9:c4:cd:31:05:d8:a4:27:14:a1:
c4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:E4:C2:BF:99:50:DF:1C:44:86:27:7E:D5:88:09:C5:8D:31:79:3E
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/EOTCv5lQ3xxEhid-1YgJxY0xeT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.56.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:61:32:a2:a0:65:09:12:02:94:50:3f:53:86:02:b4:d2:90:
da:46:89:b0:4f:54:a6:c0:1a:8f:70:60:95:b2:04:4a:85:7f:
0d:fd:7a:97:53:a9:e7:b4:0f:8d:42:c9:29:7c:ed:ae:26:c9:
8d:5a:a3:24:09:cc:40:5a:ee:e0:c1:e0:0b:cd:b1:e6:a9:39:
78:28:da:56:7c:46:78:7e:af:92:f5:cf:43:5a:2f:45:b9:f4:
68:85:b7:df:e8:2a:18:c2:34:23:f1:dd:61:bf:27:55:33:ba:
e3:b9:a1:32:64:6b:24:67:8e:5f:27:50:47:1a:b3:20:31:33:
69:07:36:55:40:b7:5d:59:76:b0:97:b9:c3:d2:98:3e:46:1d:
1e:55:fd:ad:b2:82:0b:c5:17:c6:d1:42:29:2c:4a:ac:d3:8b:
0c:12:f3:aa:2f:3e:52:68:97:72:d3:20:06:99:a0:90:e6:47:
3f:03:aa:95:e6:3c:e9:90:8b:64:71:9e:23:9b:63:79:ff:34:
5f:3f:51:6f:cc:b7:58:60:5e:d8:92:fe:56:0d:28:27:e3:60:
00:91:6b:aa:ce:d1:87:cc:2a:97:c5:03:dd:0b:64:2b:9e:4f:
86:8a:e0:41:5e:a0:b3:80:1f:74:c8:46:cb:6e:69:4c:eb:53:
5a:08:b0:f7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYi8DFD2QbxmgmeUfSJOsVbaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5
M2UzMDkwHhcNMjMwNjE0MjIzNTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGU0YzJiZjk5NTBkZjFjNDQ4NjI3N2VkNTg4MDljNThkMzE3OTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHbKOqpr+ZwHHTanZbz86/ArF6pW
M4EtbxKJYCKekhyvhh3FsyK3jCVUZ1KfZndEz+bXWpfzXuxndqfY1PS56XrNuJyP
kWU58kNa2nmA8wrlcHLapyEkC4GSATiZGycZSSVAMoE5yopPG7vFh6BnL3+OO9RP
NaJfeIgGtS4sSRuVcLwzGE7WcjRag+DdfuPk0GcdhI3WQUDKfrw9zMb5Y8DzCRqG
vvlz+LCikL9sG2xLUCI9BSGrbmubq4ryNL/V5NCz7lbyVMExNO79860hItlcgaBR
hl7TKcV3jLft95zTXkqErgDCfGv+SXteyXAmshwm3KnEzTEF2KQnFKHEGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBDkwr+ZUN8cRIYnftWICcWNMXk+MB8GA1UdIwQY
MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt
ZTZiZjMxNmM5NGExLzEvRU9UQ3Y1bFEzeHhFaGlkLTFZZ0p4WTB4ZVQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx
LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYw4MA0G
CSqGSIb3DQEBCwUAA4IBAQA7YTKioGUJEgKUUD9ThgK00pDaRomwT1SmwBqPcGCV
sgRKhX8N/XqXU6nntA+NQskpfO2uJsmNWqMkCcxAWu7gweALzbHmqTl4KNpWfEZ4
fq+S9c9DWi9FufRohbff6CoYwjQj8d1hvydVM7rjuaEyZGskZ45fJ1BHGrMgMTNp
BzZVQLddWXawl7nD0pg+Rh0eVf2tsoILxRfG0UIpLEqs04sMEvOqLz5SaJdy0yAG
maCQ5kc/A6qV5jzpkItkcZ4jm2N5/zRfP1FvzLdYYF7Ykv5WDSgn42AAkWuqztGH
zCqXxQPdC2Qrnk+GiuBBXqCzgB90yEbLbmlM61NaCLD3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:04 2024 by rpki-client on console-fra.rpki-client.org