Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Ss-Ut3HwG_bCaIVp0dJdaN5f-AI.roa
File: Ss-Ut3HwG_bCaIVp0dJdaN5f-AI.roa (raw, json)
Hash identifier: aUd20DMiIgmRXi8oQGa2y38xoptuFbvXqCCDDpRaN1s=
Subject key identifier: 4A:CF:94:B7:71:F0:1B:F6:C2:68:85:69:D1:D2:5D:68:DE:5F:F8:02
Certificate issuer: /CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Certificate serial: 018570D5173751755461E4067CB1053DB5A2
Authority key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Ss-Ut3HwG_bCaIVp0dJdaN5f-AI.roa
Signing time: Mon 02 Jan 2023 04:54:51 +0000
ROA not before: Mon 02 Jan 2023 04:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34947
IP address blocks: 45.89.200.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:17:37:51:75:54:61:e4:06:7c:b1:05:3d:b5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Validity
Not Before: Jan 2 04:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4acf94b771f01bf6c2688569d1d25d68de5ff802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:64:ae:4f:00:e6:d3:91:58:47:e8:a3:08:
3b:0b:f6:6d:ed:10:bc:d0:a6:1c:11:eb:e1:82:93:
a8:7f:56:1c:15:a1:67:7b:47:6a:dd:b3:b4:24:8b:
10:85:0b:87:b8:98:a3:57:e3:b7:4b:81:17:a3:75:
a9:2c:ac:d8:db:77:95:37:ca:2d:86:16:3e:2a:51:
99:f7:73:ca:03:34:be:07:84:04:8c:35:e4:bd:85:
05:e6:83:a9:6f:95:2d:b1:ac:cd:de:bf:b6:5b:c8:
8f:cd:74:a2:3c:9f:a8:28:93:59:ca:e5:96:ac:2d:
09:60:b8:f8:cd:c8:f3:04:3f:8b:87:81:01:7a:c3:
9f:d4:40:bc:b8:4b:0e:e0:9c:96:ab:f7:51:5e:90:
84:e2:bf:aa:c0:25:ac:18:9f:ef:1f:d2:e6:3c:88:
36:19:70:72:57:bb:9b:dc:b6:f4:05:9f:17:8e:95:
c2:35:d8:4c:99:c2:8b:c1:cf:61:50:05:02:8e:18:
bd:d2:97:48:13:0a:0f:aa:35:bf:cd:5c:72:af:54:
4e:b0:02:65:c0:b9:09:c1:5c:0e:5b:12:95:65:4a:
92:f1:53:0c:71:90:7c:ce:23:92:4e:4c:f9:2e:16:
ba:6e:7f:78:1d:4e:e6:51:00:ef:5e:ca:5b:fe:f0:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:CF:94:B7:71:F0:1B:F6:C2:68:85:69:D1:D2:5D:68:DE:5F:F8:02
X509v3 Authority Key Identifier:
keyid:4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Ss-Ut3HwG_bCaIVp0dJdaN5f-AI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.200.0/22
Signature Algorithm: sha256WithRSAEncryption
53:76:1c:ad:fe:e3:f5:6e:e3:a4:c9:be:f8:65:48:54:bf:ce:
c9:03:bc:ec:a4:f8:d8:94:ee:bd:c2:78:fa:bc:09:08:f6:df:
d2:3e:9e:83:a5:ba:79:20:8a:ce:2c:76:35:73:06:a9:d9:95:
b6:6d:ce:ef:dc:24:11:87:98:f2:66:8e:da:76:ac:7a:61:0c:
bb:ae:70:c2:12:45:63:72:37:b0:6f:e1:05:0d:df:1a:89:41:
12:38:8f:18:54:74:c9:18:e0:45:59:41:a4:ff:34:63:6f:89:
ea:78:5d:66:78:92:7f:63:07:25:66:ee:d0:7e:e1:4a:cf:9d:
32:97:8c:bd:86:78:37:c0:49:67:79:60:7e:ad:07:b9:ba:1d:
64:65:76:bb:a8:84:42:62:0f:cc:47:28:19:aa:18:c6:39:bb:
40:24:98:de:7d:9d:30:1b:fc:4a:2a:2a:ba:11:4c:c2:5b:34:
5b:99:26:dc:05:f6:90:ce:e6:ce:79:4c:94:88:d5:03:2c:9a:
c6:32:d7:82:46:77:0c:d9:4d:bf:b6:3b:a3:8c:a9:04:ac:3c:
49:34:bd:81:8c:e1:21:b8:18:d9:fc:78:38:ec:c1:fd:71:84:
d3:4e:17:61:6a:d4:74:ef:4f:e2:0c:a5:c1:d4:8f:a5:88:63:
d6:b9:14:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw1Rc3UXVUYeQGfLEFPbWiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkY2ZkMDAxYTY2N2UxNjQ1YWI0MGM1YmJlZDg5ZjU5Mjcw
MDRmODUwHhcNMjMwMTAyMDQ1NDUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWNmOTRiNzcxZjAxYmY2YzI2ODg1NjlkMWQyNWQ2OGRlNWZmODAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHZkrk8A5tORWEfoowg7C/Zt7RC8
0KYcEevhgpOof1YcFaFne0dq3bO0JIsQhQuHuJijV+O3S4EXo3WpLKzY23eVN8ot
hhY+KlGZ93PKAzS+B4QEjDXkvYUF5oOpb5UtsazN3r+2W8iPzXSiPJ+oKJNZyuWW
rC0JYLj4zcjzBD+Lh4EBesOf1EC8uEsO4JyWq/dRXpCE4r+qwCWsGJ/vH9LmPIg2
GXByV7ub3Lb0BZ8XjpXCNdhMmcKLwc9hUAUCjhi90pdIEwoPqjW/zVxyr1ROsAJl
wLkJwVwOWxKVZUqS8VMMcZB8ziOSTkz5Lha6bn94HU7mUQDvXspb/vBVhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFErPlLdx8Bv2wmiFadHSXWjeX/gCMB8GA1UdIwQY
MBaAFE3P0AGmZ+FkWrQMW77Yn1knAE+FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC81YmE4MWUtZTI3NC00YmEzLTk1NGQt
YmRmOTRhM2ZiMzJkLzEvU3MtVXQzSHdHX2JDYUlWcDBkSmRhTjVmLUFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC81YmE4MWUtZTI3NC00YmEzLTk1NGQtYmRmOTRhM2ZiMzJk
LzEvVGNfUUFhWm40V1JhdEF4YnZ0aWZXU2NBVDRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVnIMA0G
CSqGSIb3DQEBCwUAA4IBAQBTdhyt/uP1buOkyb74ZUhUv87JA7zspPjYlO69wnj6
vAkI9t/SPp6Dpbp5IIrOLHY1cwap2ZW2bc7v3CQRh5jyZo7adqx6YQy7rnDCEkVj
cjewb+EFDd8aiUESOI8YVHTJGOBFWUGk/zRjb4nqeF1meJJ/YwclZu7QfuFKz50y
l4y9hng3wElneWB+rQe5uh1kZXa7qIRCYg/MRygZqhjGObtAJJjefZ0wG/xKKiq6
EUzCWzRbmSbcBfaQzubOeUyUiNUDLJrGMteCRncM2U2/tjujjKkErDxJNL2BjOEh
uBjZ/Hg47MH9cYTTThdhatR070/iDKXB1I+liGPWuRT6
-----END CERTIFICATE-----
Generated at Mon Jan 1 18:01:02 2024 by rpki-client on console.sobornost.net