Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/VkBcIstz9H66zf5IBrqO9LpfVe8.roa
File: VkBcIstz9H66zf5IBrqO9LpfVe8.roa (raw, json)
Hash identifier: Va10gwk1E50a5I3VpV1ufc+CDkpzFq+mRd0KVNhsTWc=
Subject key identifier: 56:40:5C:22:CB:73:F4:7E:BA:CD:FE:48:06:BA:8E:F4:BA:5F:55:EF
Certificate issuer: /CN=884b5e16490b9a68d09fbcb45574350000149afa
Certificate serial: 01856CB86CC2C17E16639AFD15328CBD4F9D
Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/VkBcIstz9H66zf5IBrqO9LpfVe8.roa
Signing time: Sun 01 Jan 2023 09:45:03 +0000
ROA not before: Sun 01 Jan 2023 09:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201188
IP address blocks: 45.151.184.0/24 maxlen: 24
45.151.184.0/22 maxlen: 22
45.151.185.0/24 maxlen: 24
45.151.186.0/24 maxlen: 24
45.151.187.0/24 maxlen: 24
2a0f:3500::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:6c:c2:c1:7e:16:63:9a:fd:15:32:8c:bd:4f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa
Validity
Not Before: Jan 1 09:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=56405c22cb73f47ebacdfe4806ba8ef4ba5f55ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:83:7a:cc:f4:82:24:2d:e0:ba:bd:8a:b9:
76:5c:2d:ce:1f:d0:87:72:f7:36:f1:26:88:51:04:
b6:73:f7:49:cb:72:ad:20:10:70:fd:c9:e5:aa:cb:
45:ba:1c:82:f8:b0:c1:12:f7:a7:80:39:74:92:6d:
a8:b1:51:bb:07:3f:1a:2a:9a:ce:42:50:81:68:9f:
91:26:c6:9e:80:3c:d1:3a:d5:30:77:b5:e7:2b:e1:
c1:73:0d:f5:0f:66:6f:89:03:69:20:3c:d1:74:bb:
44:ac:2a:4b:40:12:64:13:2a:e3:4a:0d:bc:f0:59:
c3:44:8f:0b:db:46:dc:5c:a0:cc:b8:3c:ff:f7:7b:
28:1a:74:69:3f:c3:fa:d0:3a:01:45:e4:03:2a:8e:
09:9f:79:26:83:f3:e2:d4:0e:0f:53:32:33:90:19:
48:80:ae:2d:26:4a:48:42:de:cf:89:5d:28:72:4c:
5f:e6:50:83:b7:9c:7f:98:cf:0f:5d:ad:d1:c1:26:
17:4d:e1:4a:11:97:b8:31:e4:59:f8:e0:d2:eb:1f:
1c:fa:db:aa:63:ba:d0:6a:1d:e0:09:e9:7d:21:9a:
06:5e:1a:a6:a4:a5:41:16:e3:39:0d:50:bf:4b:38:
6b:5a:7e:15:65:52:ea:be:5c:ac:f0:8e:b0:9a:97:
b5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:40:5C:22:CB:73:F4:7E:BA:CD:FE:48:06:BA:8E:F4:BA:5F:55:EF
X509v3 Authority Key Identifier:
keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/VkBcIstz9H66zf5IBrqO9LpfVe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.184.0/22
IPv6:
2a0f:3500::/29
Signature Algorithm: sha256WithRSAEncryption
20:7d:61:f7:63:13:f9:9d:5a:1b:f1:d7:c3:a5:5f:84:34:09:
51:21:e7:61:d9:eb:a7:4d:54:a4:bd:d4:88:d0:06:03:ab:94:
12:2f:a7:d8:b3:2f:0e:c4:e5:4d:34:e4:7e:41:b9:fe:c1:2f:
d7:85:1c:90:d8:3c:75:5f:20:fb:72:77:89:69:96:08:ca:46:
55:a7:9a:08:30:d9:61:fa:59:9a:77:7a:3a:0a:d2:8d:a7:f0:
17:5f:6c:16:63:15:cf:a2:9d:f3:76:f3:d3:e4:e9:2d:3b:66:
8b:a5:b1:1a:c3:11:ae:2b:ac:98:9f:92:19:1b:94:6a:62:ba:
0b:81:32:69:21:65:39:bb:81:fc:99:a8:65:ac:a8:06:78:ec:
6d:48:87:b9:71:47:82:dc:4b:86:9a:f5:e1:44:b6:28:90:67:
f3:84:9f:b8:35:5f:d0:e1:bb:43:6c:ef:45:84:f7:a0:d9:db:
c7:4c:4d:d1:81:7d:b0:8a:93:d8:09:56:3a:3e:52:4e:04:7b:
91:25:ad:dc:0f:18:bc:81:24:6c:a2:f0:f4:ff:59:bc:c4:46:
17:65:30:2b:f9:47:59:0e:ac:24:ae:c5:c3:d9:60:d3:0f:b3:
12:ca:f2:88:e5:4d:a4:7c:74:64:69:b1:60:8c:df:45:c4:16:
83:4c:b8:1b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVsuGzCwX4WY5r9FTKMvU+dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NGI1ZTE2NDkwYjlhNjhkMDlmYmNiNDU1NzQzNTAwMDAx
NDlhZmEwHhcNMjMwMTAxMDk0NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjQwNWMyMmNiNzNmNDdlYmFjZGZlNDgwNmJhOGVmNGJhNWY1NWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2iDesz0giQt4Lq9irl2XC3OH9CH
cvc28SaIUQS2c/dJy3KtIBBw/cnlqstFuhyC+LDBEvengDl0km2osVG7Bz8aKprO
QlCBaJ+RJsaegDzROtUwd7XnK+HBcw31D2ZviQNpIDzRdLtErCpLQBJkEyrjSg28
8FnDRI8L20bcXKDMuDz/93soGnRpP8P60DoBReQDKo4Jn3kmg/Pi1A4PUzIzkBlI
gK4tJkpIQt7PiV0ockxf5lCDt5x/mM8PXa3RwSYXTeFKEZe4MeRZ+ODS6x8c+tuq
Y7rQah3gCel9IZoGXhqmpKVBFuM5DVC/SzhrWn4VZVLqvlys8I6wmpe1iQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFZAXCLLc/R+us3+SAa6jvS6X1XvMB8GA1UdIwQY
MBaAFIhLXhZJC5po0J+8tFV0NQAAFJr6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5Nzgt
ZWYyZDUzYjVhMzRkLzEvVmtCY0lzdHo5SDY2emY1SUJycU85THBmVmU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8wN2I3ZjctYzQxZC00OTE3LWI5NzgtZWYyZDUzYjVhMzRk
LzEvaUV0ZUZra0xtbWpRbjd5MFZYUTFBQUFVbXZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZe4MA0E
AgACMAcDBQMqDzUAMA0GCSqGSIb3DQEBCwUAA4IBAQAgfWH3YxP5nVob8dfDpV+E
NAlRIedh2eunTVSkvdSI0AYDq5QSL6fYsy8OxOVNNOR+Qbn+wS/XhRyQ2Dx1XyD7
cneJaZYIykZVp5oIMNlh+lmad3o6CtKNp/AXX2wWYxXPop3zdvPT5OktO2aLpbEa
wxGuK6yYn5IZG5RqYroLgTJpIWU5u4H8mahlrKgGeOxtSIe5cUeC3EuGmvXhRLYo
kGfzhJ+4NV/Q4btDbO9FhPeg2dvHTE3RgX2wipPYCVY6PlJOBHuRJa3cDxi8gSRs
ovD0/1m8xEYXZTAr+UdZDqwkrsXD2WDTD7MSyvKI5U2kfHRkabFgjN9FxBaDTLgb
-----END CERTIFICATE-----
Generated at Tue Jan 2 09:03:05 2024 by rpki-client on console-ams.rpki-client.org