Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/GVlbRqtJdMDP_lwBoVe4CmS0VmI.roa
File: GVlbRqtJdMDP_lwBoVe4CmS0VmI.roa (raw, json)
Hash identifier: cYmiqmfC+99HenTVMSYGK/NHhcd7fRxCpCzrXQ70sPY=
Subject key identifier: 19:59:5B:46:AB:49:74:C0:CF:FE:5C:01:A1:57:B8:0A:64:B4:56:62
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018905700F5DB5039C63EEA08D72D6344BBA
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/GVlbRqtJdMDP_lwBoVe4CmS0VmI.roa
Signing time: Thu 29 Jun 2023 04:36:17 +0000
ROA not before: Thu 29 Jun 2023 04:36:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.155.66.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:05:70:0f:5d:b5:03:9c:63:ee:a0:8d:72:d6:34:4b:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Jun 29 04:36:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=19595b46ab4974c0cffe5c01a157b80a64b45662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:54:e8:2e:db:b1:d9:36:8b:4b:1c:ea:84:
c6:37:74:2b:12:59:a2:e1:a1:84:8b:78:d2:79:fd:
b9:6f:a2:70:8e:47:34:c8:a5:20:ed:5a:c9:18:c8:
3b:1a:fd:1b:c1:77:23:cc:68:96:d8:cf:68:7a:c6:
c1:0b:7c:9f:59:78:8e:57:90:3f:bb:b3:77:8a:97:
09:45:bc:c8:02:63:35:24:4e:a1:69:89:48:c2:65:
94:5d:b8:31:0c:87:39:31:9d:e9:63:ee:60:57:99:
17:1b:e9:db:c9:3d:de:1f:bb:19:06:ed:a3:dd:a0:
30:b4:18:3b:7b:26:5e:49:51:03:5d:9e:66:eb:29:
e0:54:3a:0d:19:24:67:d5:08:34:fd:19:7b:6a:2e:
24:98:2d:94:2d:f0:80:6f:da:cb:cf:51:1c:c7:7f:
00:2f:37:12:bd:91:91:db:7b:80:16:a4:20:66:54:
f2:aa:a3:f2:a8:b0:d1:b5:e8:f4:4e:4d:89:6e:6c:
cf:63:be:8c:bd:a1:b9:0a:5a:95:8b:53:08:b8:0d:
57:5f:83:75:9a:a9:05:64:c5:9c:fd:fc:43:72:fa:
a7:00:96:4b:e6:e0:14:00:a4:6b:71:03:c6:0d:94:
24:7f:4f:ac:fd:84:23:a1:6d:c9:cd:5e:f0:c4:ec:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:59:5B:46:AB:49:74:C0:CF:FE:5C:01:A1:57:B8:0A:64:B4:56:62
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/GVlbRqtJdMDP_lwBoVe4CmS0VmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.66.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:0c:e6:ea:b1:41:bc:c9:36:1a:2f:cf:f2:d5:7a:fb:aa:93:
8c:51:f8:0c:04:8e:9b:8f:3a:68:c6:6d:19:45:1b:78:bd:7d:
dc:5b:42:de:cc:72:e9:a6:b7:0a:e1:02:d2:d0:f7:cc:94:20:
c3:b8:36:91:ca:a2:fc:de:36:8b:3e:86:65:38:32:b0:f3:5f:
9c:ee:a4:a0:96:80:ef:17:fe:e3:c2:22:bc:97:a5:c3:a9:54:
88:47:5d:45:7a:11:6e:fd:95:b7:e5:d2:24:27:b8:d6:bf:db:
75:ae:a2:2e:b0:6e:c1:55:57:5e:70:89:da:be:99:d0:bf:e8:
db:1c:c5:c1:dd:9e:d4:76:3a:05:df:1d:b6:a5:c2:34:9b:3f:
8e:f4:7b:3f:24:a9:0c:cf:73:5c:b2:8b:c7:4b:34:54:89:91:
13:17:44:1f:93:97:3a:1f:6b:47:97:e6:85:ad:3f:66:87:b3:
a1:47:5f:98:61:77:d0:c7:1a:d7:fb:02:7e:50:cd:e5:75:78:
7c:e0:0e:62:9b:9a:05:7f:ba:02:b7:84:13:07:0e:fa:ba:5f:
55:e5:dd:80:17:4c:a9:38:41:cd:bf:66:15:d4:b0:57:29:b3:
8e:e2:dc:0d:31:f3:44:9b:c2:54:8b:46:20:d2:34:b2:a8:e5:
18:a3:49:31
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkFcA9dtQOcY+6gjXLWNEu6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMTQ1YThiZGYyYmNhMTUwZjI1ZWQ1NGEyNzdiOGY2NTNl
ZmRiM2UwHhcNMjMwNjI5MDQzNjE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTU5NWI0NmFiNDk3NGMwY2ZmZTVjMDFhMTU3YjgwYTY0YjQ1NjYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAne1U6C7bsdk2i0sc6oTGN3QrElmi
4aGEi3jSef25b6Jwjkc0yKUg7VrJGMg7Gv0bwXcjzGiW2M9oesbBC3yfWXiOV5A/
u7N3ipcJRbzIAmM1JE6haYlIwmWUXbgxDIc5MZ3pY+5gV5kXG+nbyT3eH7sZBu2j
3aAwtBg7eyZeSVEDXZ5m6yngVDoNGSRn1Qg0/Rl7ai4kmC2ULfCAb9rLz1Ecx38A
LzcSvZGR23uAFqQgZlTyqqPyqLDRtej0Tk2JbmzPY76MvaG5ClqVi1MIuA1XX4N1
mqkFZMWc/fxDcvqnAJZL5uAUAKRrcQPGDZQkf0+s/YQjoW3JzV7wxOzngwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBlZW0arSXTAz/5cAaFXuApktFZiMB8GA1UdIwQY
MBaAFCsUWovfK8oVDyXtVKJ3uPZT79s+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMt
MzA0MGJlZDNjY2NkLzEvR1ZsYlJxdEpkTURQX2x3Qm9WZTRDbVMwVm1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wZDhjOGYtZmYyYy00ZGE4LWI0NDMtMzA0MGJlZDNjY2Nk
LzEvS3hSYWk5OHJ5aFVQSmUxVW9uZTQ5bFB2Mno0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZtCMA0G
CSqGSIb3DQEBCwUAA4IBAQB9DObqsUG8yTYaL8/y1Xr7qpOMUfgMBI6bjzpoxm0Z
RRt4vX3cW0LezHLpprcK4QLS0PfMlCDDuDaRyqL83jaLPoZlODKw81+c7qSgloDv
F/7jwiK8l6XDqVSIR11FehFu/ZW35dIkJ7jWv9t1rqIusG7BVVdecInavpnQv+jb
HMXB3Z7UdjoF3x22pcI0mz+O9Hs/JKkMz3NcsovHSzRUiZETF0Qfk5c6H2tHl+aF
rT9mh7OhR1+YYXfQxxrX+wJ+UM3ldXh84A5im5oFf7oCt4QTBw76ul9V5d2AF0yp
OEHNv2YV1LBXKbOO4twNMfNEm8JUi0Yg0jSyqOUYo0kx
-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:33 2023 by rpki-client on console.sobornost.net