Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/gNTFDGwKaC3Y1mzBQ5tLpluoEB8.roa
File: gNTFDGwKaC3Y1mzBQ5tLpluoEB8.roa (raw, json)
Hash identifier: x3G7cW9PI/cdmRkPHrYUFkIasM11wZM8w99AtWUkROE=
Subject key identifier: 80:D4:C5:0C:6C:0A:68:2D:D8:D6:6C:C1:43:9B:4B:A6:5B:A8:10:1F
Certificate issuer: /CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Certificate serial: 018CC500820CE5A80D6B605543A988DDE582
Authority key identifier: 48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/gNTFDGwKaC3Y1mzBQ5tLpluoEB8.roa
Signing time: Mon 01 Jan 2024 12:29:54 +0000
ROA not before: Mon 01 Jan 2024 12:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 800
IP address blocks: 45.147.188.0/22 maxlen: 24
2a09:4880::/32 maxlen: 32
Validation: Failed, certificate revoked on Wed 24 Jan 2024 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:82:0c:e5:a8:0d:6b:60:55:43:a9:88:dd:e5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48ea30c0f28e02269c5765bf4a045677ca2794a5
Validity
Not Before: Jan 1 12:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=80d4c50c6c0a682dd8d66cc1439b4ba65ba8101f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:dd:4c:e7:96:9c:65:b1:c6:96:a4:e0:64:a4:
9e:3c:21:b5:7a:de:ff:d9:dd:81:2b:3d:7d:e3:4d:
0e:2e:9c:10:ce:d5:67:59:bc:4b:81:c5:7b:d9:81:
8f:36:02:33:a9:ca:50:51:0e:d8:21:58:c9:6a:11:
a0:6a:f5:e8:f4:c5:18:0d:0f:80:7b:23:3c:92:c7:
74:79:5b:fa:a8:94:88:4c:7e:fe:70:40:6d:87:6c:
f8:f2:22:15:49:0d:2a:9b:9c:0e:52:f0:b6:ce:8c:
d0:3a:bf:4e:14:4b:65:92:60:00:c7:e2:82:28:f5:
8d:6b:f3:4d:bb:ab:6f:a5:01:a7:cc:e4:d4:a9:3f:
96:cd:04:e5:e7:55:7c:ed:5c:1f:f5:b3:37:c5:d5:
4d:d3:31:69:75:34:bf:0f:1c:8b:92:d0:ca:4d:79:
4e:82:93:bf:17:5e:a0:c1:36:36:88:ae:28:2f:51:
48:6c:7b:53:28:df:cd:28:d8:80:e6:bd:4e:66:19:
b5:1d:ac:16:af:9d:17:5d:6b:0b:bb:ad:91:15:b8:
7d:5d:84:6a:10:32:91:98:6a:61:02:48:12:e1:0c:
40:88:63:92:f2:87:ba:7d:71:e6:ef:31:43:b4:13:
71:fc:45:3a:f9:1b:a7:b5:25:cc:4a:88:9e:d7:52:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D4:C5:0C:6C:0A:68:2D:D8:D6:6C:C1:43:9B:4B:A6:5B:A8:10:1F
X509v3 Authority Key Identifier:
keyid:48:EA:30:C0:F2:8E:02:26:9C:57:65:BF:4A:04:56:77:CA:27:94:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SOowwPKOAiacV2W_SgRWd8onlKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/gNTFDGwKaC3Y1mzBQ5tLpluoEB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/1153f8-1994-4b2d-9645-f28b4d640a49/1/SOowwPKOAiacV2W_SgRWd8onlKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.188.0/22
IPv6:
2a09:4880::/32
Signature Algorithm: sha256WithRSAEncryption
98:a8:72:30:7e:40:59:00:94:ac:13:48:10:f0:b2:5c:a3:7b:
75:70:a7:8f:00:aa:80:ce:58:70:b7:d5:70:1c:5a:84:1c:50:
84:dd:1a:ed:7f:4c:50:92:49:a0:8b:86:21:86:ec:b9:8c:de:
be:c2:97:de:00:88:03:20:9f:b4:34:db:ea:36:c6:ec:98:e0:
2b:24:e7:8b:15:20:1f:71:2f:ed:c5:79:39:96:52:33:f5:1d:
ea:c0:2d:1b:a1:bd:96:10:25:ae:80:fb:86:71:09:e7:84:a0:
63:f3:ec:ed:ce:d4:19:42:c3:b7:b1:c7:32:f2:2c:06:86:50:
54:80:e0:7e:6b:ef:a4:a3:4d:1a:70:a5:e7:93:f6:e3:2c:41:
a4:6b:2a:a2:da:93:0d:8b:41:5f:19:48:15:54:b2:30:b2:79:
fc:1f:59:bd:d8:3b:85:6a:88:c0:29:c0:91:cb:24:17:15:fb:
63:14:55:0b:eb:80:10:a5:a4:d5:63:b4:d1:7a:72:e5:a3:84:
d4:15:f8:39:f1:cd:95:98:ad:96:71:93:13:ab:54:f4:48:f9:
80:7a:17:41:14:a4:4d:dc:03:7d:02:e6:7d:7a:9d:3c:f5:86:
36:98:f9:e8:d3:14:98:94:86:e5:33:21:17:1e:bd:fd:c4:ed:
9c:23:68:31
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzFAIIM5agNa2BVQ6mI3eWCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4ZWEzMGMwZjI4ZTAyMjY5YzU3NjViZjRhMDQ1Njc3Y2Ey
Nzk0YTUwHhcNMjQwMTAxMTIyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MGQ0YzUwYzZjMGE2ODJkZDhkNjZjYzE0MzliNGJhNjViYTgxMDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN1M55acZbHGlqTgZKSePCG1et7/
2d2BKz19400OLpwQztVnWbxLgcV72YGPNgIzqcpQUQ7YIVjJahGgavXo9MUYDQ+A
eyM8ksd0eVv6qJSITH7+cEBth2z48iIVSQ0qm5wOUvC2zozQOr9OFEtlkmAAx+KC
KPWNa/NNu6tvpQGnzOTUqT+WzQTl51V87Vwf9bM3xdVN0zFpdTS/DxyLktDKTXlO
gpO/F16gwTY2iK4oL1FIbHtTKN/NKNiA5r1OZhm1HawWr50XXWsLu62RFbh9XYRq
EDKRmGphAkgS4QxAiGOS8oe6fXHm7zFDtBNx/EU6+RuntSXMSoie11KchQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIDUxQxsCmgt2NZswUObS6ZbqBAfMB8GA1UdIwQY
MBaAFEjqMMDyjgImnFdlv0oEVnfKJ5SlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8xMTUzZjgtMTk5NC00YjJkLTk2NDUt
ZjI4YjRkNjQwYTQ5LzEvZ05URkRHd0thQzNZMW16QlE1dExwbHVvRUI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC8xMTUzZjgtMTk5NC00YjJkLTk2NDUtZjI4YjRkNjQwYTQ5
LzEvU09vd3dQS09BaWFjVjJXX1NnUldkOG9ubEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZO8MA0E
AgACMAcDBQAqCUiAMA0GCSqGSIb3DQEBCwUAA4IBAQCYqHIwfkBZAJSsE0gQ8LJc
o3t1cKePAKqAzlhwt9VwHFqEHFCE3Rrtf0xQkkmgi4Yhhuy5jN6+wpfeAIgDIJ+0
NNvqNsbsmOArJOeLFSAfcS/txXk5llIz9R3qwC0bob2WECWugPuGcQnnhKBj8+zt
ztQZQsO3sccy8iwGhlBUgOB+a++ko00acKXnk/bjLEGkayqi2pMNi0FfGUgVVLIw
snn8H1m92DuFaojAKcCRyyQXFftjFFUL64AQpaTVY7TRenLlo4TUFfg58c2VmK2W
cZMTq1T0SPmAehdBFKRN3AN9AuZ9ep089YY2mPno0xSYlIblMyEXHr39xO2cI2gx
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:11 2024 by rpki-client on console-fra.rpki-client.org