Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/JFBLMOcG2IiZi9q-q3A9W8NvJrk.roa
File: JFBLMOcG2IiZi9q-q3A9W8NvJrk.roa (raw, json)
Hash identifier: +rf7v7SCHZtZRQDsWXh2LIXFWg8vYnBmmoclQ7z/Zes=
Subject key identifier: 24:50:4B:30:E7:06:D8:88:99:8B:DA:BE:AB:70:3D:5B:C3:6F:26:B9
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 01856E2F83578D4A414E9071030F60338FBF
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/JFBLMOcG2IiZi9q-q3A9W8NvJrk.roa
Signing time: Sun 01 Jan 2023 16:34:45 +0000
ROA not before: Sun 01 Jan 2023 16:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34309
IP address blocks: 45.82.172.0/24 maxlen: 24
45.82.174.0/24 maxlen: 24
45.82.173.0/24 maxlen: 24
45.82.175.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:83:57:8d:4a:41:4e:90:71:03:0f:60:33:8f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Jan 1 16:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24504b30e706d888998bdabeab703d5bc36f26b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:92:f7:e9:6d:18:b6:5c:9e:df:e2:0a:09:65:
81:27:43:c0:ad:fa:51:d5:37:67:6d:2a:49:ab:1c:
04:7f:b2:1f:f3:9d:b2:81:60:ec:d4:90:84:99:86:
1e:eb:ef:63:54:3b:be:c1:52:4d:fe:bc:1b:dd:ea:
ed:e3:65:77:9d:56:5c:c7:df:46:37:f3:f9:c7:70:
51:d8:b2:7e:13:f4:dd:88:3d:26:07:4d:cc:16:0f:
5d:f4:15:b0:db:fd:b9:e1:4e:15:61:bb:f0:02:e5:
c8:16:b4:93:89:36:e3:c8:e8:ba:2e:0d:63:66:f1:
4e:84:95:43:d9:6b:3b:5a:27:fa:a3:91:a4:01:ef:
55:01:8d:6c:78:fe:9d:f3:b1:8d:a8:2e:3c:e7:94:
a3:44:46:b8:0f:5f:7c:93:d8:6b:2c:42:ce:a1:b7:
32:48:b4:9e:33:94:be:20:84:60:eb:9c:fc:cc:d4:
c6:8a:2d:7f:05:db:12:57:f6:88:75:95:1c:3b:02:
19:bd:93:d3:d5:cc:da:11:9a:9b:eb:93:3f:bc:96:
3d:ca:1d:ac:d8:5c:c0:75:a5:c5:47:a7:d6:2a:56:
7f:4a:21:0c:8e:ed:ca:f8:aa:d5:2a:a9:07:77:e0:
7d:a8:f8:b2:ae:9f:c4:cf:a5:8a:8b:52:01:c4:90:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:50:4B:30:E7:06:D8:88:99:8B:DA:BE:AB:70:3D:5B:C3:6F:26:B9
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/JFBLMOcG2IiZi9q-q3A9W8NvJrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.172.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:0f:2b:7c:cf:61:49:8a:d9:ed:12:92:e6:6a:c4:f9:bf:e1:
ca:c4:86:65:bc:c1:e6:9b:60:b8:0a:8f:12:19:cb:24:37:21:
38:88:e3:db:9b:51:34:eb:21:70:a2:c3:22:67:2b:89:9d:3d:
00:a1:a4:16:f3:b5:f8:d6:d7:e4:d0:6c:76:94:3b:f2:45:22:
51:10:c1:2b:75:49:dd:22:aa:c9:42:3a:7d:6e:7c:d3:f5:7a:
7c:5e:92:50:a6:31:38:43:df:b5:2f:ad:b4:2b:0b:a3:d3:86:
76:f0:2b:bd:14:de:91:e8:79:f7:00:df:69:3f:f2:0e:21:07:
8f:e5:44:4e:29:73:15:b2:27:65:2b:6e:17:68:51:76:e4:eb:
dc:29:9c:b2:da:52:0f:76:35:14:4f:b0:78:d9:a9:ce:ed:2f:
39:6a:bf:8e:e0:50:97:da:cc:ad:35:48:2d:08:ff:9c:a6:aa:
bf:8b:97:b9:76:48:28:8b:99:d8:44:77:c4:c6:91:d4:9b:49:
2c:a0:08:8d:d3:78:36:93:6c:48:b2:2a:86:56:8e:c0:12:1a:
3f:d6:87:ce:2e:17:be:e0:f8:d9:fe:b5:2d:bc:a9:32:0c:15:
66:e2:7b:4e:3d:26:0c:55:9d:ac:14:85:69:aa:9a:fd:ed:d9:
9d:09:88:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuL4NXjUpBTpBxAw9gM4+/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZmU2ZjJhOTM3ODM4ZGYyYjE1ZGExNzQzYmNkOWZiMGUy
OWNmMmUwHhcNMjMwMTAxMTYzNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNDUwNGIzMGU3MDZkODg4OTk4YmRhYmVhYjcwM2Q1YmMzNmYyNmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5L36W0Ytlye3+IKCWWBJ0PArfpR
1TdnbSpJqxwEf7If852ygWDs1JCEmYYe6+9jVDu+wVJN/rwb3ert42V3nVZcx99G
N/P5x3BR2LJ+E/TdiD0mB03MFg9d9BWw2/254U4VYbvwAuXIFrSTiTbjyOi6Lg1j
ZvFOhJVD2Ws7Wif6o5GkAe9VAY1seP6d87GNqC4855SjREa4D198k9hrLELOobcy
SLSeM5S+IIRg65z8zNTGii1/BdsSV/aIdZUcOwIZvZPT1czaEZqb65M/vJY9yh2s
2FzAdaXFR6fWKlZ/SiEMju3K+KrVKqkHd+B9qPiyrp/Ez6WKi1IBxJCrGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCRQSzDnBtiImYvavqtwPVvDbya5MB8GA1UdIwQY
MBaAFPL+byqTeDjfKxXaF0O82fsOKc8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHY1dktwTjRPTjhyRmRvWFE3elotdzRwenk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yYWI3ODUtMmY4Ni00ODllLWFjMWMt
YjcyNTU3NjY4YjAxLzEvSkZCTE1PY0cySWlaaTlxLXEzQTlXOE52SnJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yYWI3ODUtMmY4Ni00ODllLWFjMWMtYjcyNTU3NjY4YjAx
LzEvOHY1dktwTjRPTjhyRmRvWFE3elotdzRwenk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVKsMA0G
CSqGSIb3DQEBCwUAA4IBAQAuDyt8z2FJitntEpLmasT5v+HKxIZlvMHmm2C4Co8S
GcskNyE4iOPbm1E06yFwosMiZyuJnT0AoaQW87X41tfk0Gx2lDvyRSJREMErdUnd
IqrJQjp9bnzT9Xp8XpJQpjE4Q9+1L620Kwuj04Z28Cu9FN6R6Hn3AN9pP/IOIQeP
5UROKXMVsidlK24XaFF25OvcKZyy2lIPdjUUT7B42anO7S85ar+O4FCX2sytNUgt
CP+cpqq/i5e5dkgoi5nYRHfExpHUm0ksoAiN03g2k2xIsiqGVo7AEho/1ofOLhe+
4PjZ/rUtvKkyDBVm4ntOPSYMVZ2sFIVpqpr97dmdCYhr
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:38 2024 by rpki-client on console-ams.rpki-client.org