Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/GyGHdMJVajxHGLqVXB-_gVu6SF4.roa
File: GyGHdMJVajxHGLqVXB-_gVu6SF4.roa (raw, json)
Hash identifier: KDTF2M2NY9R6movAU4Bwc5ls19FyHliPO5uzQ8VgtAE=
Subject key identifier: 1B:21:87:74:C2:55:6A:3C:47:18:BA:95:5C:1F:BF:81:5B:BA:48:5E
Certificate issuer: /CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Certificate serial: 01856E389DF28D111101153622984EB5F82F
Authority key identifier: 12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/GyGHdMJVajxHGLqVXB-_gVu6SF4.roa
Signing time: Sun 01 Jan 2023 16:44:42 +0000
ROA not before: Sun 01 Jan 2023 16:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39591
IP address blocks: 45.84.4.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:9d:f2:8d:11:11:01:15:36:22:98:4e:b5:f8:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12c45bd38d4bdc68e3d79de0244df06d2ecb6609
Validity
Not Before: Jan 1 16:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1b218774c2556a3c4718ba955c1fbf815bba485e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d2:a4:9a:9d:c6:b5:30:b2:a0:f5:f6:b8:25:
bd:21:5a:7e:02:3c:68:29:d1:87:0a:60:0e:b9:96:
73:1d:c4:54:93:c1:20:a9:f0:29:da:02:cb:a5:0c:
a2:81:32:6f:9e:b0:d6:86:6b:23:e1:c2:96:20:fa:
08:99:8f:ac:47:e8:4f:37:98:af:02:ac:9d:89:aa:
9d:5d:51:e7:59:e6:72:99:ad:57:c1:7c:6f:5d:cf:
8b:0c:cf:42:7d:33:e5:bf:e2:81:16:38:ca:1d:ad:
d5:5e:c9:eb:26:3a:66:ef:5f:db:0b:f5:e9:92:03:
23:b3:b0:19:57:79:48:75:ba:92:2f:9e:a4:94:b4:
73:04:d1:1c:f5:b2:77:f1:6f:58:a3:7a:af:c4:60:
6b:be:69:67:c3:65:c0:37:a0:33:26:8e:20:3f:4b:
90:25:01:df:f0:4a:cc:8b:72:a0:93:5f:08:f2:a1:
4f:42:2a:34:f7:9d:3b:c8:49:2d:c5:04:65:89:bf:
a4:b2:85:fb:9b:96:74:c9:03:df:64:1d:60:8f:bb:
01:5e:3f:de:e1:9f:a9:c0:ea:79:b4:56:a1:08:12:
91:e2:3b:8e:71:fd:c1:69:ff:0f:13:ad:10:36:51:
f2:80:72:a9:45:47:39:6c:dc:0d:35:46:d9:13:0e:
b4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:21:87:74:C2:55:6A:3C:47:18:BA:95:5C:1F:BF:81:5B:BA:48:5E
X509v3 Authority Key Identifier:
keyid:12:C4:5B:D3:8D:4B:DC:68:E3:D7:9D:E0:24:4D:F0:6D:2E:CB:66:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsRb041L3Gjj153gJE3wbS7LZgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/GyGHdMJVajxHGLqVXB-_gVu6SF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5cb544-504f-48bf-b105-22028a786f60/1/EsRb041L3Gjj153gJE3wbS7LZgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.4.0/22
Signature Algorithm: sha256WithRSAEncryption
13:29:ec:54:2a:59:38:99:1f:56:62:fe:fa:e0:98:33:b2:2e:
0e:d6:d0:78:3c:cd:02:65:01:5f:70:f7:e2:14:36:fc:73:62:
3a:17:a8:16:8b:07:36:01:7f:bc:86:7c:6c:ee:eb:92:eb:bc:
0d:84:6f:c3:38:b7:9e:0a:3b:4f:d7:6b:85:54:e2:66:cb:e5:
f0:48:b6:d1:b6:ef:00:02:8f:da:61:07:f8:e3:ad:49:04:05:
1b:42:26:71:84:03:da:11:05:b0:73:7e:d8:cb:e8:ef:e4:bd:
24:ed:ff:31:c8:dd:11:7c:57:c1:98:18:e3:56:14:f8:18:32:
4c:16:ae:63:fc:2b:5b:f6:65:fe:60:0f:60:2a:6f:3d:3a:e1:
ba:69:85:eb:d6:d3:9e:cb:aa:3e:9a:76:c7:55:6a:a5:1a:fc:
93:2e:46:b2:d5:19:07:34:a0:16:51:26:11:e2:ec:0b:27:2d:
e7:e6:41:fb:37:98:7f:0e:26:97:c9:71:74:8f:0e:3c:f5:93:
d8:1d:5b:ee:84:63:cb:83:eb:ab:ad:74:3b:3b:0f:27:c2:c3:
96:da:33:9f:7a:43:f6:2a:9b:b1:62:ef:6f:07:80:76:c4:51:
03:a2:66:2c:f6:75:ab:5d:3c:65:b8:49:76:57:63:48:55:7c:
ae:bd:28:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuOJ3yjRERARU2IphOtfgvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyYzQ1YmQzOGQ0YmRjNjhlM2Q3OWRlMDI0NGRmMDZkMmVj
YjY2MDkwHhcNMjMwMTAxMTY0NDQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjIxODc3NGMyNTU2YTNjNDcxOGJhOTU1YzFmYmY4MTViYmE0ODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNKkmp3GtTCyoPX2uCW9IVp+Ajxo
KdGHCmAOuZZzHcRUk8EgqfAp2gLLpQyigTJvnrDWhmsj4cKWIPoImY+sR+hPN5iv
AqydiaqdXVHnWeZyma1XwXxvXc+LDM9CfTPlv+KBFjjKHa3VXsnrJjpm71/bC/Xp
kgMjs7AZV3lIdbqSL56klLRzBNEc9bJ38W9Yo3qvxGBrvmlnw2XAN6AzJo4gP0uQ
JQHf8ErMi3Kgk18I8qFPQio09507yEktxQRlib+ksoX7m5Z0yQPfZB1gj7sBXj/e
4Z+pwOp5tFahCBKR4juOcf3Baf8PE60QNlHygHKpRUc5bNwNNUbZEw60/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBshh3TCVWo8Rxi6lVwfv4FbukheMB8GA1UdIwQY
MBaAFBLEW9ONS9xo49ed4CRN8G0uy2YJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS81Y2I1NDQtNTA0Zi00OGJmLWIxMDUt
MjIwMjhhNzg2ZjYwLzEvR3lHSGRNSlZhanhIR0xxVlhCLV9nVnU2U0Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS81Y2I1NDQtNTA0Zi00OGJmLWIxMDUtMjIwMjhhNzg2ZjYw
LzEvRXNSYjA0MUwzR2pqMTUzZ0pFM3diUzdMWmdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVQEMA0G
CSqGSIb3DQEBCwUAA4IBAQATKexUKlk4mR9WYv764Jgzsi4O1tB4PM0CZQFfcPfi
FDb8c2I6F6gWiwc2AX+8hnxs7uuS67wNhG/DOLeeCjtP12uFVOJmy+XwSLbRtu8A
Ao/aYQf4461JBAUbQiZxhAPaEQWwc37Yy+jv5L0k7f8xyN0RfFfBmBjjVhT4GDJM
Fq5j/Ctb9mX+YA9gKm89OuG6aYXr1tOey6o+mnbHVWqlGvyTLkay1RkHNKAWUSYR
4uwLJy3n5kH7N5h/DiaXyXF0jw489ZPYHVvuhGPLg+urrXQ7Ow8nwsOW2jOfekP2
KpuxYu9vB4B2xFEDomYs9nWrXTxluEl2V2NIVXyuvSj8
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:02:51 2024 by rpki-client on console-ams.rpki-client.org