Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/wB5EVIVa9FKqKfiK9FjgVA5CEVg.roa
File: wB5EVIVa9FKqKfiK9FjgVA5CEVg.roa (raw, json)
Hash identifier: M+dIRtQ9CzYB08CTAFPe9UispOttZl0Zcqx1yg8truQ=
Subject key identifier: C0:1E:44:54:85:5A:F4:52:AA:29:F8:8A:F4:58:E0:54:0E:42:11:58
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01856FB12824759976C1D16B349FF8355A9D
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/wB5EVIVa9FKqKfiK9FjgVA5CEVg.roa
Signing time: Sun 01 Jan 2023 23:35:59 +0000
ROA not before: Sun 01 Jan 2023 23:35:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3214
IP address blocks: 45.149.7.0/24 maxlen: 24
45.149.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 03 May 2023 11:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:b1:28:24:75:99:76:c1:d1:6b:34:9f:f8:35:5a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 23:35:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c01e4454855af452aa29f88af458e0540e421158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:40:a6:38:24:dc:7a:cc:cd:7f:67:7b:6c:ff:
9c:e6:71:36:a8:30:5f:7d:9e:10:12:19:9f:e5:8c:
9f:9e:e4:8c:b3:45:a9:e9:67:ec:97:dc:88:1a:42:
07:75:e7:5c:46:6e:a0:eb:d5:ff:94:2d:ec:dd:0b:
37:85:03:47:b5:f7:24:88:0e:bf:ec:c7:8d:ad:9a:
81:50:36:cf:dd:f0:17:bc:34:17:aa:b4:bc:c8:e4:
db:a7:cf:73:d9:9d:b8:2c:95:60:9a:90:aa:fa:05:
b9:44:56:25:6f:28:6c:c3:1d:5d:d1:63:d1:8a:4e:
02:03:b5:7c:84:cf:09:e4:7b:fd:86:55:e4:e8:a4:
c4:f2:71:0a:9e:ca:7f:c3:13:ff:c9:d8:8b:d8:c0:
ca:b1:bb:23:06:ed:55:63:e4:33:c3:8d:df:7e:0a:
53:32:15:d4:84:71:33:44:3a:f9:52:fb:83:55:09:
2b:a1:4d:ce:f1:08:1d:57:1b:35:97:ec:e1:30:b1:
26:bd:82:ce:3e:a7:0a:e7:74:92:13:e7:24:30:12:
38:e7:c1:89:fb:94:21:b5:e0:ee:d5:80:6b:88:b8:
10:12:91:ef:69:a1:cd:01:89:33:10:60:a1:91:1d:
bb:d6:3c:d4:34:0e:89:0f:cf:84:7d:c7:15:4d:96:
59:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1E:44:54:85:5A:F4:52:AA:29:F8:8A:F4:58:E0:54:0E:42:11:58
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/wB5EVIVa9FKqKfiK9FjgVA5CEVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.6.0/23
Signature Algorithm: sha256WithRSAEncryption
14:f7:5e:78:aa:df:ab:ee:1f:bc:bd:36:65:6e:38:cc:9b:4a:
46:10:8d:84:d1:9b:37:94:fc:d9:f3:fb:a6:28:9f:75:e1:32:
60:3d:36:69:4d:bd:e4:36:d7:82:54:01:ba:48:2d:d2:2f:26:
24:10:80:67:7d:63:c1:86:e9:7b:5e:f1:b2:32:2e:81:98:7f:
a3:6d:16:91:5d:9f:5a:81:4e:f3:be:85:20:1a:c6:a4:3a:2b:
a9:c8:d2:b0:ed:ca:34:9c:6b:36:27:e6:05:63:7c:de:93:05:
25:30:3a:b8:52:53:de:2d:f4:98:71:cd:d1:f1:c9:26:45:4b:
1d:e8:7e:01:d5:79:8c:9b:5b:10:23:07:f5:f0:cd:cd:1e:2e:
77:96:8d:0f:7b:c0:6b:2b:61:18:52:c9:c8:21:b5:05:87:3d:
8c:38:9f:fb:45:a6:9f:61:6f:85:f2:12:ce:79:b9:6e:9e:17:
fb:39:7e:ad:55:4d:92:8a:7b:5c:a0:28:b9:66:a0:02:b8:f0:
ab:10:37:40:0a:d8:42:c8:d6:ec:f9:79:80:f6:9d:c8:27:2b:
8c:89:69:a6:fd:6b:0a:f3:f4:8e:44:db:9c:09:8e:f3:aa:82:
65:cd:54:0d:58:e0:65:14:e7:0a:7a:09:55:5e:e6:4d:c1:bc:
7a:82:a2:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvsSgkdZl2wdFrNJ/4NVqdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5
M2UzMDkwHhcNMjMwMTAxMjMzNTU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDFlNDQ1NDg1NWFmNDUyYWEyOWY4OGFmNDU4ZTA1NDBlNDIxMTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlECmOCTceszNf2d7bP+c5nE2qDBf
fZ4QEhmf5YyfnuSMs0Wp6Wfsl9yIGkIHdedcRm6g69X/lC3s3Qs3hQNHtfckiA6/
7MeNrZqBUDbP3fAXvDQXqrS8yOTbp89z2Z24LJVgmpCq+gW5RFYlbyhswx1d0WPR
ik4CA7V8hM8J5Hv9hlXk6KTE8nEKnsp/wxP/ydiL2MDKsbsjBu1VY+Qzw43ffgpT
MhXUhHEzRDr5UvuDVQkroU3O8QgdVxs1l+zhMLEmvYLOPqcK53SSE+ckMBI458GJ
+5QhteDu1YBriLgQEpHvaaHNAYkzEGChkR271jzUNA6JD8+EfccVTZZZEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMAeRFSFWvRSqin4ivRY4FQOQhFYMB8GA1UdIwQY
MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt
ZTZiZjMxNmM5NGExLzEvd0I1RVZJVmE5RktxS2ZpSzlGamdWQTVDRVZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx
LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZUGMA0G
CSqGSIb3DQEBCwUAA4IBAQAU9154qt+r7h+8vTZlbjjMm0pGEI2E0Zs3lPzZ8/um
KJ914TJgPTZpTb3kNteCVAG6SC3SLyYkEIBnfWPBhul7XvGyMi6BmH+jbRaRXZ9a
gU7zvoUgGsakOiupyNKw7co0nGs2J+YFY3zekwUlMDq4UlPeLfSYcc3R8ckmRUsd
6H4B1XmMm1sQIwf18M3NHi53lo0Pe8BrK2EYUsnIIbUFhz2MOJ/7RaafYW+F8hLO
eblunhf7OX6tVU2SintcoCi5ZqACuPCrEDdACthCyNbs+XmA9p3IJyuMiWmm/WsK
8/SORNucCY7zqoJlzVQNWOBlFOcKeglVXuZNwbx6gqJU
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:56 2024 by rpki-client on console-ams.rpki-client.org