Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/226996-4b3f-4f5f-8a7e-0b1b6641b8a2/1/clnzxArdaSpNnfplgI4zT0qs7U8.roa
File: clnzxArdaSpNnfplgI4zT0qs7U8.roa (raw, json)
Hash identifier: qihB1PqSxwj8oMQMo7ZxVBaaVWoeQ3kaF2kXKq6GGrw=
Subject key identifier: 72:59:F3:C4:0A:DD:69:2A:4D:9D:FA:65:80:8E:33:4F:4A:AC:ED:4F
Certificate issuer: /CN=f97a546b66e2449ce628432dd80ad6d4d00cd03e
Certificate serial: 0189DE986D71D274F0E43E2FF6EE7012544B
Authority key identifier: F9:7A:54:6B:66:E2:44:9C:E6:28:43:2D:D8:0A:D6:D4:D0:0C:D0:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XpUa2biRJzmKEMt2ArW1NAM0D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/226996-4b3f-4f5f-8a7e-0b1b6641b8a2/1/clnzxArdaSpNnfplgI4zT0qs7U8.roa
Signing time: Thu 10 Aug 2023 08:37:58 +0000
ROA not before: Thu 10 Aug 2023 08:37:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209984
IP address blocks: 45.132.48.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:de:98:6d:71:d2:74:f0:e4:3e:2f:f6:ee:70:12:54:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97a546b66e2449ce628432dd80ad6d4d00cd03e
Validity
Not Before: Aug 10 08:37:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7259f3c40add692a4d9dfa65808e334f4aaced4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:23:ee:42:94:19:3f:0e:bd:0d:6f:97:91:
dc:e5:ca:56:cc:e9:aa:c8:f5:bf:aa:ad:bf:aa:51:
20:27:57:63:ba:6e:c2:6d:6b:68:1c:33:2b:70:f5:
69:b7:36:87:1c:e4:7f:1d:f0:4f:1e:3b:11:d8:84:
13:3d:8d:94:55:88:c5:94:fd:58:d9:21:20:c0:7b:
ff:14:1b:d1:73:7d:ee:7b:15:31:a5:7b:0f:7a:49:
81:45:55:08:96:de:96:69:78:4b:1b:b1:39:17:d2:
9b:2a:5a:0a:0b:aa:fa:86:bc:89:4a:03:31:22:4e:
b3:40:c6:9e:fd:59:c1:30:a8:da:5c:d9:9c:50:2f:
88:e4:57:30:42:40:3b:15:12:23:21:2b:cf:1f:1a:
f2:78:47:53:66:0d:7c:04:00:62:19:2a:26:13:d9:
56:4c:6e:22:38:15:4e:f2:13:7d:8d:3e:6c:83:be:
a7:c4:de:d7:ea:ca:68:29:d6:70:96:16:bb:9d:37:
a6:59:6c:0a:7f:a4:fe:d6:6e:ae:49:ad:32:98:bf:
d9:64:fa:3a:c1:fa:af:a9:4c:9d:e6:72:54:be:e8:
45:83:6a:0d:7f:c1:2f:48:fd:b8:40:3d:a1:71:c6:
da:e6:37:31:03:ee:24:01:cb:c6:8d:47:c5:e5:b2:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:59:F3:C4:0A:DD:69:2A:4D:9D:FA:65:80:8E:33:4F:4A:AC:ED:4F
X509v3 Authority Key Identifier:
keyid:F9:7A:54:6B:66:E2:44:9C:E6:28:43:2D:D8:0A:D6:D4:D0:0C:D0:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XpUa2biRJzmKEMt2ArW1NAM0D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/226996-4b3f-4f5f-8a7e-0b1b6641b8a2/1/clnzxArdaSpNnfplgI4zT0qs7U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/226996-4b3f-4f5f-8a7e-0b1b6641b8a2/1/1-XpUa2biRJzmKEMt2ArW1NAM0D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.48.0/23
Signature Algorithm: sha256WithRSAEncryption
94:28:f1:16:f9:ab:d7:80:de:eb:53:65:b5:63:45:02:be:77:
8f:ea:39:f7:6a:b4:8c:c8:59:2e:7c:a4:22:f6:83:bd:de:c8:
f7:4e:9e:80:4e:d6:2e:3a:13:a8:d5:b5:7e:0b:e3:b0:ee:a0:
81:7f:b1:78:27:57:bb:66:55:a2:eb:10:22:71:2b:08:8b:90:
d5:d9:26:4d:4f:92:f7:4c:c6:26:91:93:2e:a7:ee:e6:af:c5:
b9:78:e7:e1:44:32:75:37:21:95:cf:62:c8:02:ff:a7:a9:8a:
48:3c:1b:bd:a1:dc:ef:76:d0:04:4f:30:4b:21:30:b8:c2:ef:
78:f1:8e:c6:31:64:70:e5:a0:2c:68:d3:0d:6c:ba:d6:cc:29:
fe:41:e1:5c:c1:41:04:fb:fc:4f:e8:12:5d:27:b9:a7:90:19:
67:13:a4:db:16:14:08:44:68:30:cf:26:45:94:f2:1f:69:17:
c3:28:20:4b:83:34:b1:16:56:2f:f2:b9:a1:7a:42:ea:9f:b3:
f4:ad:db:9c:17:a3:71:ed:74:c4:85:1f:a2:de:a8:0b:88:e8:
72:15:1c:09:de:64:3a:15:48:88:0f:86:bf:fd:d4:f5:1c:ff:
63:92:71:c7:f4:bb:bb:33:08:86:15:b9:d1:4c:c4:79:98:5e:
36:a5:e7:04
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYnemG1x0nTw5D4v9u5wElRLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5N2E1NDZiNjZlMjQ0OWNlNjI4NDMyZGQ4MGFkNmQ0ZDAw
Y2QwM2UwHhcNMjMwODEwMDgzNzU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjU5ZjNjNDBhZGQ2OTJhNGQ5ZGZhNjU4MDhlMzM0ZjRhYWNlZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNYj7kKUGT8OvQ1vl5Hc5cpWzOmq
yPW/qq2/qlEgJ1djum7CbWtoHDMrcPVptzaHHOR/HfBPHjsR2IQTPY2UVYjFlP1Y
2SEgwHv/FBvRc33uexUxpXsPekmBRVUIlt6WaXhLG7E5F9KbKloKC6r6hryJSgMx
Ik6zQMae/VnBMKjaXNmcUC+I5FcwQkA7FRIjISvPHxryeEdTZg18BABiGSomE9lW
TG4iOBVO8hN9jT5sg76nxN7X6spoKdZwlha7nTemWWwKf6T+1m6uSa0ymL/ZZPo6
wfqvqUyd5nJUvuhFg2oNf8EvSP24QD2hccba5jcxA+4kAcvGjUfF5bLVOQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFHJZ88QK3WkqTZ36ZYCOM09KrO1PMB8GA1UdIwQY
MBaAFPl6VGtm4kSc5ihDLdgK1tTQDNA+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YcFVhMmJpUkp6bUtFTXQyQXJXMU5BTTBENC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWQvMjI2OTk2LTRiM2YtNGY1Zi04YTdl
LTBiMWI2NjQxYjhhMi8xL2Nsbnp4QXJkYVNwTm5mcGxnSTR6VDBxczdVOC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZWQvMjI2OTk2LTRiM2YtNGY1Zi04YTdlLTBiMWI2NjQxYjhh
Mi8xLzEtWHBVYTJiaVJKem1LRU10MkFyVzFOQU0wRDQuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEthDAw
DQYJKoZIhvcNAQELBQADggEBAJQo8Rb5q9eA3utTZbVjRQK+d4/qOfdqtIzIWS58
pCL2g73eyPdOnoBO1i46E6jVtX4L47DuoIF/sXgnV7tmVaLrECJxKwiLkNXZJk1P
kvdMxiaRky6n7uavxbl45+FEMnU3IZXPYsgC/6epikg8G72h3O920ARPMEshMLjC
73jxjsYxZHDloCxo0w1sutbMKf5B4VzBQQT7/E/oEl0nuaeQGWcTpNsWFAhEaDDP
JkWU8h9pF8MoIEuDNLEWVi/yuaF6Quqfs/St25wXo3HtdMSFH6LeqAuI6HIVHAne
ZDoVSIgPhr/91PUc/2OSccf0u7szCIYVudFMxHmYXjal5wQ=
-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:50 2024 by rpki-client on console-ams.rpki-client.org