Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/oVf4vvr1qCaDKdlnNq0MfNkqwaI.roa
File: oVf4vvr1qCaDKdlnNq0MfNkqwaI.roa (raw, json)
Hash identifier: 9+6/6mblGafKww6qLdcX7/DIPD9K32aNNx1T5wrC0pI=
Subject key identifier: A1:57:F8:BE:FA:F5:A8:26:83:29:D9:67:36:AD:0C:7C:D9:2A:C1:A2
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 01856E2F8497C8939922665AC7367737639C
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/oVf4vvr1qCaDKdlnNq0MfNkqwaI.roa
Signing time: Sun 01 Jan 2023 16:34:45 +0000
ROA not before: Sun 01 Jan 2023 16:34:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206341
IP address blocks: 45.82.172.0/22 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:84:97:c8:93:99:22:66:5a:c7:36:77:37:63:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Jan 1 16:34:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a157f8befaf5a8268329d96736ad0c7cd92ac1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:9b:0c:0a:47:6f:f9:11:bb:2b:54:d4:60:
62:07:f7:17:a8:cf:71:20:dc:40:7a:4b:31:9e:9d:
f9:d6:b1:77:47:2e:6e:7d:ed:f0:06:96:8e:98:70:
94:2f:0a:6f:d6:84:29:e7:b4:c4:1f:45:b3:a4:4a:
32:72:09:91:19:aa:16:1c:d0:37:21:f8:0a:71:2d:
a4:ba:f3:aa:94:c3:3e:a4:45:8c:96:46:33:20:1e:
d7:ea:d7:d4:87:7b:f7:ac:28:97:8d:a2:f7:62:1f:
a2:c0:8a:ce:3c:40:2d:dd:09:9a:82:b6:08:f7:d1:
f6:9c:23:54:72:e9:96:34:09:99:ce:cf:30:0e:36:
13:7f:f8:f1:1f:4a:fe:1a:e5:52:0b:fe:96:d8:cb:
f8:1e:1d:0b:6d:08:44:29:13:ea:30:ba:5a:81:8a:
d1:18:c0:68:f5:fb:91:a5:d8:d0:41:3f:97:56:01:
56:72:27:0f:d2:ff:48:58:a8:e9:ef:9a:fd:e7:af:
13:78:49:69:75:5e:54:f8:be:74:23:28:af:cc:5a:
c7:07:31:b8:3b:82:f3:ae:ea:d9:10:c7:7f:3e:52:
16:1e:47:e0:6d:11:25:5e:28:ed:bb:d6:4f:91:1d:
95:ac:36:ab:a9:82:53:92:f8:09:ee:d0:93:31:c6:
20:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:57:F8:BE:FA:F5:A8:26:83:29:D9:67:36:AD:0C:7C:D9:2A:C1:A2
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/oVf4vvr1qCaDKdlnNq0MfNkqwaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.172.0/22
Signature Algorithm: sha256WithRSAEncryption
69:c8:a3:bf:eb:25:9c:45:2b:46:69:c9:22:46:44:5b:2d:2d:
3c:e4:1d:80:5c:4d:a2:85:f6:e5:c3:4b:b2:15:95:22:65:fd:
a6:cd:a6:15:52:ce:99:0f:9e:73:49:5a:ee:0d:13:a4:72:ef:
81:9f:a1:a3:ad:a4:1e:55:01:48:0e:27:85:e0:0d:d0:13:61:
b3:4d:62:08:a0:b4:50:82:b7:98:53:eb:3d:37:eb:54:c5:37:
08:37:07:b2:32:3e:93:76:bd:0f:99:1d:c2:f8:6f:6f:4f:f8:
55:92:fe:11:8b:a0:2c:0f:4c:1e:56:61:74:2e:fd:96:5e:23:
22:7c:54:fe:e1:da:67:5a:ba:32:8f:47:d4:03:35:15:a6:b5:
c8:a2:d9:1d:cb:25:23:a8:da:6a:52:d4:61:93:d4:72:fd:4b:
d9:b3:23:ad:3e:f8:2d:73:08:0b:31:07:11:fc:98:53:ae:40:
c9:d5:35:58:5b:25:b9:01:82:50:68:d4:97:de:8e:c2:b1:a2:
48:cb:aa:15:c4:0c:94:24:11:41:19:c6:3c:6b:d5:3a:24:7a:
bf:1f:98:2f:ef:a0:3e:97:95:20:1c:29:34:1e:4a:2b:96:d6:
6b:e7:4c:d8:90:2c:a1:a0:e7:ae:8e:aa:8e:f9:b6:e9:90:e1:
3a:c8:0d:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuL4SXyJOZImZaxzZ3N2OcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyZmU2ZjJhOTM3ODM4ZGYyYjE1ZGExNzQzYmNkOWZiMGUy
OWNmMmUwHhcNMjMwMTAxMTYzNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTU3ZjhiZWZhZjVhODI2ODMyOWQ5NjczNmFkMGM3Y2Q5MmFjMWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPibDApHb/kRuytU1GBiB/cXqM9x
INxAeksxnp351rF3Ry5ufe3wBpaOmHCULwpv1oQp57TEH0WzpEoycgmRGaoWHNA3
IfgKcS2kuvOqlMM+pEWMlkYzIB7X6tfUh3v3rCiXjaL3Yh+iwIrOPEAt3QmagrYI
99H2nCNUcumWNAmZzs8wDjYTf/jxH0r+GuVSC/6W2Mv4Hh0LbQhEKRPqMLpagYrR
GMBo9fuRpdjQQT+XVgFWcicP0v9IWKjp75r9568TeElpdV5U+L50IyivzFrHBzG4
O4LzrurZEMd/PlIWHkfgbRElXijtu9ZPkR2VrDarqYJTkvgJ7tCTMcYgcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKFX+L769agmgynZZzatDHzZKsGiMB8GA1UdIwQY
MBaAFPL+byqTeDjfKxXaF0O82fsOKc8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHY1dktwTjRPTjhyRmRvWFE3elotdzRwenk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yYWI3ODUtMmY4Ni00ODllLWFjMWMt
YjcyNTU3NjY4YjAxLzEvb1ZmNHZ2cjFxQ2FES2Rsbk5xME1mTmtxd2FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yYWI3ODUtMmY4Ni00ODllLWFjMWMtYjcyNTU3NjY4YjAx
LzEvOHY1dktwTjRPTjhyRmRvWFE3elotdzRwenk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVKsMA0G
CSqGSIb3DQEBCwUAA4IBAQBpyKO/6yWcRStGackiRkRbLS085B2AXE2ihfblw0uy
FZUiZf2mzaYVUs6ZD55zSVruDROkcu+Bn6GjraQeVQFIDieF4A3QE2GzTWIIoLRQ
greYU+s9N+tUxTcINweyMj6Tdr0PmR3C+G9vT/hVkv4Ri6AsD0weVmF0Lv2WXiMi
fFT+4dpnWroyj0fUAzUVprXIotkdyyUjqNpqUtRhk9Ry/UvZsyOtPvgtcwgLMQcR
/JhTrkDJ1TVYWyW5AYJQaNSX3o7CsaJIy6oVxAyUJBFBGcY8a9U6JHq/H5gv76A+
l5UgHCk0HkorltZr50zYkCyhoOeujqqO+bbpkOE6yA3V
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:24 2024 by rpki-client on console-ams.rpki-client.org