Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/Y-vNaxgvkSfi-vABMuWRCw-_exc.roa
File: Y-vNaxgvkSfi-vABMuWRCw-_exc.roa (raw, json)
Hash identifier: Ijk88h2PSq1A36Nvo30u9BjH1mYiPpmGRJTZX/IiiN8=
Subject key identifier: 63:EB:CD:6B:18:2F:91:27:E2:FA:F0:01:32:E5:91:0B:0F:BF:7B:17
Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial: 01856B2E942CC7AE8B59FB67ADA2777A3E22
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/Y-vNaxgvkSfi-vABMuWRCw-_exc.roa
Signing time: Sun 01 Jan 2023 02:34:52 +0000
ROA not before: Sun 01 Jan 2023 02:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41634
IP address blocks: 45.154.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:2e:94:2c:c7:ae:8b:59:fb:67:ad:a2:77:7a:3e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Validity
Not Before: Jan 1 02:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=63ebcd6b182f9127e2faf00132e5910b0fbf7b17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a1:6b:5f:c0:8c:17:8b:c4:96:c6:ce:de:ef:
c6:cd:f0:25:67:3e:40:8a:e0:86:c1:a2:db:6b:f9:
44:2d:64:d7:75:f5:a7:da:97:fc:f8:71:06:e7:1f:
ca:2e:bf:95:68:8e:b5:e9:49:83:45:5b:6a:6a:4c:
fb:24:07:5c:8a:00:72:88:4d:17:57:a2:c9:f7:14:
ea:27:39:d3:21:39:1f:3e:4d:7e:15:d9:94:ca:51:
b0:71:7d:26:58:f1:b2:24:69:ee:2c:e4:e0:28:31:
8c:01:f2:4c:8c:26:33:49:6e:19:3f:2a:8c:43:79:
e3:13:59:d9:31:15:35:76:4f:5d:fc:30:fd:ab:76:
2c:17:65:6d:cc:dd:4b:d5:c6:72:92:da:07:b0:61:
55:38:5f:89:52:cc:f6:e1:8b:30:62:d9:4d:29:6d:
2b:c4:eb:b2:1e:b1:3c:ad:d4:77:e0:6a:51:7e:07:
86:6b:81:6c:25:0a:0b:53:df:7e:7a:43:4d:40:93:
3e:a3:a3:43:92:4b:f3:67:da:03:c7:a5:74:5d:de:
86:db:e8:9b:89:6e:8d:4c:8a:1d:fe:01:0d:e8:32:
51:e2:79:d0:47:59:17:0a:fe:f8:3d:8f:30:7e:58:
1f:66:e4:6d:fc:81:3a:55:c0:6b:e4:aa:a0:3a:08:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:EB:CD:6B:18:2F:91:27:E2:FA:F0:01:32:E5:91:0B:0F:BF:7B:17
X509v3 Authority Key Identifier:
keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/Y-vNaxgvkSfi-vABMuWRCw-_exc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.253.0/24
Signature Algorithm: sha256WithRSAEncryption
01:81:ef:03:dd:3e:0e:a2:3b:a5:ba:29:f8:1e:2c:97:8c:b2:
3f:51:47:77:c1:34:8d:e9:85:f0:a8:26:95:4c:36:d2:7c:90:
77:01:c2:f9:35:1c:c8:b3:b8:e7:fa:65:b1:4d:e8:0f:5c:bc:
2d:1b:b0:c0:0c:d4:4d:bc:dd:46:c9:a0:6c:ef:16:cf:6b:bd:
5f:4e:e4:b8:36:47:8a:98:92:0e:6e:e3:09:02:87:33:f6:80:
94:53:48:d6:61:09:e7:bf:cb:c3:15:cb:4d:95:67:12:41:4c:
bc:2b:05:a3:e7:d0:c0:f4:61:13:37:b2:c2:8a:5d:38:1e:55:
cb:b4:6c:ef:d0:61:1c:21:33:20:34:62:68:39:3a:cb:df:8c:
9a:d5:fe:48:f7:03:0b:43:bd:3a:f4:5c:0e:90:cc:28:f0:7b:
d9:dc:b7:79:39:79:24:d5:21:b0:84:7e:94:aa:24:4b:fa:83:
b3:c9:39:2b:56:a8:34:c9:34:58:4e:ce:cf:cb:3f:a7:b0:0f:
8f:88:c9:e2:f0:a9:12:bd:e6:8d:7f:3b:40:4f:17:2f:d0:1b:
db:fb:7d:66:c1:1b:f8:82:df:87:a5:51:c1:3f:bb:0c:2f:a0:
56:04:a0:2b:94:4e:32:db:29:2a:6d:52:64:56:fa:38:a5:a9:
6f:3e:23:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrLpQsx66LWftnraJ3ej4iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4N2UzMWNlNWQ1MDFkMWE5NGFmZGFiYmQ0ZTAyNGNjMmE3
ODhlZjUwHhcNMjMwMTAxMDIzNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2M2ViY2Q2YjE4MmY5MTI3ZTJmYWYwMDEzMmU1OTEwYjBmYmY3YjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqFrX8CMF4vElsbO3u/GzfAlZz5A
iuCGwaLba/lELWTXdfWn2pf8+HEG5x/KLr+VaI616UmDRVtqakz7JAdcigByiE0X
V6LJ9xTqJznTITkfPk1+FdmUylGwcX0mWPGyJGnuLOTgKDGMAfJMjCYzSW4ZPyqM
Q3njE1nZMRU1dk9d/DD9q3YsF2VtzN1L1cZyktoHsGFVOF+JUsz24YswYtlNKW0r
xOuyHrE8rdR34GpRfgeGa4FsJQoLU99+ekNNQJM+o6NDkkvzZ9oDx6V0Xd6G2+ib
iW6NTIod/gEN6DJR4nnQR1kXCv74PY8wflgfZuRt/IE6VcBr5KqgOgiPRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGPrzWsYL5En4vrwATLlkQsPv3sXMB8GA1UdIwQY
MBaAFHh+Mc5dUB0alK/au9TgJMwqeI71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUt
MjMwN2JiNTkyMjVmLzEvWS12TmF4Z3ZrU2ZpLXZBQk11V1JDdy1fZXhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi83YzU1ZDItMzgxYy00ZTg3LThjYTUtMjMwN2JiNTkyMjVm
LzEvZUg0eHpsMVFIUnFVcjlxNzFPQWt6Q3A0anZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZr9MA0G
CSqGSIb3DQEBCwUAA4IBAQABge8D3T4Oojuluin4HiyXjLI/UUd3wTSN6YXwqCaV
TDbSfJB3AcL5NRzIs7jn+mWxTegPXLwtG7DADNRNvN1GyaBs7xbPa71fTuS4NkeK
mJIObuMJAocz9oCUU0jWYQnnv8vDFctNlWcSQUy8KwWj59DA9GETN7LCil04HlXL
tGzv0GEcITMgNGJoOTrL34ya1f5I9wMLQ7069FwOkMwo8HvZ3Ld5OXkk1SGwhH6U
qiRL+oOzyTkrVqg0yTRYTs7Pyz+nsA+PiMni8KkSveaNfztATxcv0Bvb+31mwRv4
gt+HpVHBP7sML6BWBKArlE4y2ykqbVJkVvo4palvPiOU
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:53:23 2024 by rpki-client on console-fra.rpki-client.org