Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/TesdpPn6sGiOW_8oIqUGNwkEQIY.roa
File: TesdpPn6sGiOW_8oIqUGNwkEQIY.roa (raw, json)
Hash identifier: jmwQBgR1eHj6kGd67PpZy1+/bLNcAKpTrGMCmNsIhTs=
Subject key identifier: 4D:EB:1D:A4:F9:FA:B0:68:8E:5B:FF:28:22:A5:06:37:09:04:40:86
Certificate issuer: /CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
Certificate serial: 01856D8AB97D60857104E60CFC0211A02B13
Authority key identifier: 59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/TesdpPn6sGiOW_8oIqUGNwkEQIY.roa
Signing time: Sun 01 Jan 2023 13:34:46 +0000
ROA not before: Sun 01 Jan 2023 13:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210869
IP address blocks: 45.13.68.0/22 maxlen: 23
Validation: Failed, certificate revoked on Fri 29 Dec 2023 10:09:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:b9:7d:60:85:71:04:e6:0c:fc:02:11:a0:2b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
Validity
Not Before: Jan 1 13:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4deb1da4f9fab0688e5bff2822a5063709044086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:be:8f:48:5c:1d:8d:0c:ae:71:54:24:8e:03:
d1:63:d5:0a:8f:f2:a4:51:d4:30:9d:0f:43:70:a0:
02:3e:80:84:b8:68:25:d7:bd:b7:db:e1:6e:70:d0:
9f:fb:6f:6a:01:50:4d:21:e1:01:6e:1b:db:83:b7:
f0:4d:21:aa:0a:c2:52:0e:a3:fa:e0:16:f8:66:89:
2d:01:81:be:2f:28:ba:2d:76:a5:89:2e:65:2c:46:
1a:2e:0b:85:ce:1f:fa:72:3f:3d:0b:a8:fa:c6:05:
69:d4:2d:d7:03:bf:1e:f2:33:cc:eb:05:82:b4:eb:
1f:64:9f:fa:3f:7b:54:17:16:60:54:da:c7:f0:df:
fd:1b:3c:35:b3:da:d1:59:b6:1b:ac:1a:c2:b4:71:
2c:b7:1d:0e:69:84:5f:61:0b:54:df:7c:16:d1:65:
0e:ec:78:0e:cd:d7:99:5a:44:f6:1b:b5:51:a4:dd:
55:f3:44:6b:3e:39:44:9d:73:1d:69:f9:f7:ab:2e:
e2:cc:16:cf:90:dc:93:b8:50:ca:99:7e:dd:d5:a5:
7a:24:40:6b:cf:3d:96:99:ec:a6:07:20:96:ba:08:
a5:5f:d9:51:1e:c8:7d:ab:96:e9:6f:b8:82:b8:e3:
fa:62:2d:10:42:21:99:3e:15:a3:16:89:cf:b9:72:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EB:1D:A4:F9:FA:B0:68:8E:5B:FF:28:22:A5:06:37:09:04:40:86
X509v3 Authority Key Identifier:
keyid:59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/TesdpPn6sGiOW_8oIqUGNwkEQIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.68.0/22
Signature Algorithm: sha256WithRSAEncryption
86:0c:91:36:57:9c:fb:b8:5c:c3:d3:b3:35:eb:d8:0e:8a:32:
19:a8:87:b1:5a:2d:f3:98:03:05:7f:97:27:ca:5d:61:7c:54:
ac:f2:b9:bb:28:27:5e:03:72:01:fc:1c:00:d8:58:b2:0d:0d:
6c:9f:75:e8:8d:66:10:07:96:b5:13:c5:44:b9:8e:aa:fe:1a:
4f:e5:53:6d:2c:d6:f4:6b:68:81:6e:20:4b:d8:d2:49:f4:8e:
19:6e:f0:04:0c:7f:03:a8:4c:a2:7d:28:66:44:1c:71:72:39:
ba:2a:47:c6:82:ef:ee:f4:9b:1a:43:c1:7e:f5:56:4d:aa:f3:
ca:74:70:c0:05:43:e0:21:48:31:0d:2c:97:93:f6:ab:64:60:
30:21:02:4f:33:1f:45:60:51:e5:81:51:1e:54:38:ea:ad:0f:
60:10:85:da:cd:89:b8:56:b4:97:62:8e:f5:46:c0:f7:93:ed:
1b:1b:f0:c0:31:a8:95:c7:82:40:ee:6f:62:c5:c2:30:5e:5d:
75:64:f0:11:e5:f3:d6:3b:dd:1e:85:87:04:a3:3a:14:b6:19:
ac:82:33:f0:f1:07:fa:fc:2c:d4:7a:19:3c:5d:6d:00:fb:7c:
94:82:8c:0f:5e:65:43:0c:52:d7:45:fa:0a:6f:59:2a:54:6b:
8c:eb:01:0e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtirl9YIVxBOYM/AIRoCsTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YzRjZmJkODcxYzQyZGQ1NWE1N2JkMGZmNTY3MTM0ZjMy
MmIyM2UwHhcNMjMwMTAxMTMzNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGViMWRhNGY5ZmFiMDY4OGU1YmZmMjgyMmE1MDYzNzA5MDQ0MDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8r6PSFwdjQyucVQkjgPRY9UKj/Kk
UdQwnQ9DcKACPoCEuGgl17232+FucNCf+29qAVBNIeEBbhvbg7fwTSGqCsJSDqP6
4Bb4ZoktAYG+Lyi6LXaliS5lLEYaLguFzh/6cj89C6j6xgVp1C3XA78e8jPM6wWC
tOsfZJ/6P3tUFxZgVNrH8N/9Gzw1s9rRWbYbrBrCtHEstx0OaYRfYQtU33wW0WUO
7HgOzdeZWkT2G7VRpN1V80RrPjlEnXMdafn3qy7izBbPkNyTuFDKmX7d1aV6JEBr
zz2WmeymByCWugilX9lRHsh9q5bpb7iCuOP6Yi0QQiGZPhWjFonPuXKsIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE3rHaT5+rBojlv/KCKlBjcJBECGMB8GA1UdIwQY
MBaAFFnEz72HHELdVaV70P9WcTTzIrI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2NUUHZZY2NRdDFWcFh2UV8xWnhOUE1pc2o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85MGY2MmItN2FlMi00OWQ2LWE0MmMt
ODk5ZjFlMWI3MzYwLzEvVGVzZHBQbjZzR2lPV184b0lxVUdOd2tFUUlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy85MGY2MmItN2FlMi00OWQ2LWE0MmMtODk5ZjFlMWI3MzYw
LzEvV2NUUHZZY2NRdDFWcFh2UV8xWnhOUE1pc2o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ1EMA0G
CSqGSIb3DQEBCwUAA4IBAQCGDJE2V5z7uFzD07M169gOijIZqIexWi3zmAMFf5cn
yl1hfFSs8rm7KCdeA3IB/BwA2FiyDQ1sn3XojWYQB5a1E8VEuY6q/hpP5VNtLNb0
a2iBbiBL2NJJ9I4ZbvAEDH8DqEyifShmRBxxcjm6KkfGgu/u9JsaQ8F+9VZNqvPK
dHDABUPgIUgxDSyXk/arZGAwIQJPMx9FYFHlgVEeVDjqrQ9gEIXazYm4VrSXYo71
RsD3k+0bG/DAMaiVx4JA7m9ixcIwXl11ZPAR5fPWO90ehYcEozoUthmsgjPw8Qf6
/CzUehk8XW0A+3yUgowPXmVDDFLXRfoKb1kqVGuM6wEO
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:09 2024 by rpki-client on console-ams.rpki-client.org