Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/6CHcgjjcFYftHoaN_JPBoJl21fA.roa
File: 6CHcgjjcFYftHoaN_JPBoJl21fA.roa (raw, json)
Hash identifier: 1GNPR/VN6iurSDtSuHCY9aNuKMzVUHA+r5aHl2GBv60=
Subject key identifier: E8:21:DC:82:38:DC:15:87:ED:1E:86:8D:FC:93:C1:A0:99:76:D5:F0
Certificate issuer: /CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Certificate serial: 0185708CB145FCCA3753DB84EA359FB82BB5
Authority key identifier: 11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/6CHcgjjcFYftHoaN_JPBoJl21fA.roa
Signing time: Mon 02 Jan 2023 03:35:46 +0000
ROA not before: Mon 02 Jan 2023 03:35:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208499
IP address blocks: 45.132.220.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:b1:45:fc:ca:37:53:db:84:ea:35:9f:b8:2b:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111014ce8ad38d15350096d549ee1c5805d09dc8
Validity
Not Before: Jan 2 03:35:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e821dc8238dc1587ed1e868dfc93c1a09976d5f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:93:77:0d:b2:a1:f0:9e:38:d4:2b:6d:9e:
e9:31:d1:1f:3b:b0:78:3e:40:37:bf:cc:e0:73:50:
a1:eb:89:e0:f2:66:a5:85:26:4e:67:ad:bb:ac:0b:
b8:62:89:ce:32:e8:99:79:2a:1c:82:01:75:d4:46:
e8:c9:fe:3b:b7:5b:3f:55:53:ed:ac:f8:61:86:5a:
ef:7a:e9:e7:49:38:10:0d:01:5f:99:44:cf:32:03:
a7:8e:97:10:a8:50:4a:fe:2c:1d:92:b5:81:c7:fc:
a2:f0:c8:a3:35:6b:c0:c5:e1:47:58:47:70:e6:1b:
52:15:5b:7e:82:88:3d:76:0f:fc:1b:38:d5:1f:ce:
5b:1f:24:9a:d4:23:f1:e8:8f:25:5a:f6:fc:5c:28:
3b:42:8c:72:68:d4:c3:31:12:89:62:74:82:0d:07:
80:c9:37:0b:29:e2:f7:c0:8b:4b:f7:c6:74:b5:77:
97:5d:81:00:6d:f9:f6:0f:9a:f3:93:69:ce:6a:44:
60:9f:7c:32:73:2d:b5:92:35:0e:03:c0:52:cd:ab:
fb:ac:69:8c:f1:33:fd:4a:e2:48:76:af:da:07:fc:
03:48:78:58:b6:0d:a1:a0:be:15:35:b5:18:57:79:
26:36:da:14:44:61:99:0b:af:90:3d:90:d9:b1:43:
5b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:21:DC:82:38:DC:15:87:ED:1E:86:8D:FC:93:C1:A0:99:76:D5:F0
X509v3 Authority Key Identifier:
keyid:11:10:14:CE:8A:D3:8D:15:35:00:96:D5:49:EE:1C:58:05:D0:9D:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ERAUzorTjRU1AJbVSe4cWAXQncg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/6CHcgjjcFYftHoaN_JPBoJl21fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d6c752-aa4b-4fa7-ab1f-91a394684644/1/ERAUzorTjRU1AJbVSe4cWAXQncg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.220.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:cd:c6:0c:7a:50:3d:2f:8d:1f:10:47:e9:3e:5f:3b:19:ab:
fb:f5:8f:8c:e0:94:d5:2f:a9:47:cd:04:51:6c:af:c4:4b:9e:
84:13:39:b7:0f:69:3c:da:ce:4e:86:9e:ec:4e:6a:81:b3:d4:
3c:8b:e4:ea:af:89:c5:e6:6b:a3:78:87:88:3f:f2:6e:c5:28:
a1:b8:e4:32:b0:d0:f8:d0:0c:7d:62:d8:76:20:00:41:6c:b3:
fe:ee:05:95:64:af:75:c8:f0:72:13:ee:5a:39:00:cd:6b:4d:
00:d9:75:98:94:58:7c:19:97:03:b1:11:96:45:1c:36:2f:02:
77:a5:3f:d9:93:8f:2c:08:92:11:c9:8f:ef:a5:9e:88:57:d4:
fb:7f:e2:f9:ee:d8:3c:4e:44:93:99:d1:8f:2e:82:fa:a2:ae:
cd:3f:f3:d9:a5:91:c6:30:15:e1:8a:6b:09:8d:09:25:20:32:
a8:19:2f:22:57:36:b4:84:4d:5e:b1:15:08:40:04:77:f8:52:
ef:06:57:41:b0:db:53:59:67:be:2d:1e:6e:f4:e9:a8:b9:2a:
ac:9e:0c:27:b5:d8:9d:b9:48:0d:0d:8d:fd:d3:00:eb:e9:f6:
23:7a:10:0e:ea:2b:11:9a:c0:da:b4:45:a1:28:61:5a:27:d0:
74:27:da:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwjLFF/Mo3U9uE6jWfuCu1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExMTAxNGNlOGFkMzhkMTUzNTAwOTZkNTQ5ZWUxYzU4MDVk
MDlkYzgwHhcNMjMwMTAyMDMzNTQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODIxZGM4MjM4ZGMxNTg3ZWQxZTg2OGRmYzkzYzFhMDk5NzZkNWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliOTdw2yofCeONQrbZ7pMdEfO7B4
PkA3v8zgc1Ch64ng8malhSZOZ627rAu4YonOMuiZeSocggF11Eboyf47t1s/VVPt
rPhhhlrveunnSTgQDQFfmUTPMgOnjpcQqFBK/iwdkrWBx/yi8MijNWvAxeFHWEdw
5htSFVt+gog9dg/8GzjVH85bHySa1CPx6I8lWvb8XCg7QoxyaNTDMRKJYnSCDQeA
yTcLKeL3wItL98Z0tXeXXYEAbfn2D5rzk2nOakRgn3wycy21kjUOA8BSzav7rGmM
8TP9SuJIdq/aB/wDSHhYtg2hoL4VNbUYV3kmNtoURGGZC6+QPZDZsUNbuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOgh3II43BWH7R6GjfyTwaCZdtXwMB8GA1UdIwQY
MBaAFBEQFM6K040VNQCW1UnuHFgF0J3IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9kNmM3NTItYWE0Yi00ZmE3LWFiMWYt
OTFhMzk0Njg0NjQ0LzEvNkNIY2dqamNGWWZ0SG9hTl9KUEJvSmwyMWZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9kNmM3NTItYWE0Yi00ZmE3LWFiMWYtOTFhMzk0Njg0NjQ0
LzEvRVJBVXpvclRqUlUxQUpiVlNlNGNXQVhRbmNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYTcMA0G
CSqGSIb3DQEBCwUAA4IBAQC0zcYMelA9L40fEEfpPl87Gav79Y+M4JTVL6lHzQRR
bK/ES56EEzm3D2k82s5Ohp7sTmqBs9Q8i+Tqr4nF5mujeIeIP/JuxSihuOQysND4
0Ax9Yth2IABBbLP+7gWVZK91yPByE+5aOQDNa00A2XWYlFh8GZcDsRGWRRw2LwJ3
pT/Zk48sCJIRyY/vpZ6IV9T7f+L57tg8TkSTmdGPLoL6oq7NP/PZpZHGMBXhimsJ
jQklIDKoGS8iVza0hE1esRUIQAR3+FLvBldBsNtTWWe+LR5u9OmouSqsngwntdid
uUgNDY390wDr6fYjehAO6isRmsDatEWhKGFaJ9B0J9pc
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:03:02 2024 by rpki-client on console-ams.rpki-client.org