Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/MaWPPQ3LSjbvYjDUxI-bhW1XZfg.roa
File: MaWPPQ3LSjbvYjDUxI-bhW1XZfg.roa (raw, json)
Hash identifier: 7iEbZjW33FoZhtkJv8ELJd6qcSRCZJvMH/XJAnGSl0E=
Subject key identifier: 31:A5:8F:3D:0D:CB:4A:36:EF:62:30:D4:C4:8F:9B:85:6D:57:65:F8
Certificate issuer: /CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Certificate serial: 01856CB84FB0AE1D7768619D5B7485D2A419
Authority key identifier: 37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/MaWPPQ3LSjbvYjDUxI-bhW1XZfg.roa
Signing time: Sun 01 Jan 2023 09:44:56 +0000
ROA not before: Sun 01 Jan 2023 09:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 702
IP address blocks: 145.32.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:4f:b0:ae:1d:77:68:61:9d:5b:74:85:d2:a4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Validity
Not Before: Jan 1 09:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=31a58f3d0dcb4a36ef6230d4c48f9b856d5765f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:24:56:c4:b5:0d:8e:fc:0a:42:7a:25:a0:d8:
ae:da:c6:b1:e4:31:66:b1:c9:7c:45:d2:94:9b:86:
48:e6:76:17:8f:e8:2f:12:94:58:fd:f2:68:70:71:
30:79:84:8e:92:b9:d0:e6:fa:4e:0e:61:58:96:5c:
a5:b6:24:d9:54:44:2b:32:83:61:1a:41:d2:3c:45:
27:a3:91:29:fe:66:af:da:57:26:c9:91:80:12:00:
01:2f:cd:81:f1:b8:26:c6:c2:9d:ee:d8:4a:74:80:
ef:3f:b9:a8:49:2a:d2:be:c9:c7:43:41:ae:6a:8b:
e7:c3:74:ed:ba:b2:4b:e1:7d:5d:94:90:c8:4a:94:
ff:de:37:fd:c5:b0:8b:8d:46:da:28:4e:db:ac:4b:
a5:1b:4d:c2:8a:1e:39:45:6e:ff:e0:66:53:89:8c:
12:48:1a:3f:5d:d9:52:6d:da:a3:a2:5e:18:27:db:
b5:87:a9:73:bf:2b:59:4c:2e:c7:31:16:1b:6f:51:
06:4f:39:c7:37:77:14:20:17:1f:6a:14:12:b1:73:
89:a1:0a:09:71:e5:37:60:c8:7b:6b:31:c2:2c:fb:
2c:5c:37:a6:48:06:08:2a:b8:c1:47:dd:32:7f:16:
2a:7b:6f:5f:49:c4:e2:ca:25:1b:0f:fd:e2:e1:fa:
52:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A5:8F:3D:0D:CB:4A:36:EF:62:30:D4:C4:8F:9B:85:6D:57:65:F8
X509v3 Authority Key Identifier:
keyid:37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/MaWPPQ3LSjbvYjDUxI-bhW1XZfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6d:a4:09:07:ed:92:89:ad:48:e3:04:d9:4b:3e:f9:8d:f9:02:
3e:72:32:f1:2b:2b:84:93:12:9d:ee:c8:7f:0b:ef:b4:d1:68:
de:d2:68:d0:d2:ce:27:0d:98:80:ff:fc:aa:2f:e9:72:f9:ee:
db:8c:2f:bb:d6:85:11:07:20:7d:48:09:7a:d9:ea:8a:5e:19:
1d:ee:3a:07:63:04:2e:c5:81:10:2e:20:86:95:f0:f9:eb:55:
1f:73:0b:18:bb:81:63:3e:73:36:74:65:7c:38:b1:ff:cd:a1:
a5:0b:10:ae:31:17:02:c0:14:cd:4f:ab:e8:3b:9f:83:63:83:
52:74:5b:e2:a6:bb:d2:3b:0a:21:ab:f2:5a:06:45:8b:c1:84:
08:ee:2d:02:c8:cd:70:2e:8d:33:be:bb:d5:23:cd:9a:6f:77:
03:7c:28:f5:3a:b3:35:d1:05:c9:4e:74:7e:6f:12:00:3f:2d:
9e:25:f9:b5:3b:18:b6:2f:c5:98:3d:44:d4:55:29:86:31:b1:
76:36:c3:f8:71:8b:1a:f3:81:70:34:b5:22:ed:8c:83:da:6b:
4b:71:59:59:08:bb:6d:d7:85:4c:56:38:5e:53:98:98:69:a0:
a6:0d:bc:71:7b:57:3e:8f:66:b8:b8:3b:87:2d:b9:c5:14:84:
d9:93:b5:c9
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAYVsuE+wrh13aGGdW3SF0qQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OTE1NjczYjI4YmRmYWRiMmMyMDE5YWM2OGQwNDY0ZmQy
MWI3MWEwHhcNMjMwMTAxMDk0NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMWE1OGYzZDBkY2I0YTM2ZWY2MjMwZDRjNDhmOWI4NTZkNTc2NWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyRWxLUNjvwKQnoloNiu2sax5DFm
scl8RdKUm4ZI5nYXj+gvEpRY/fJocHEweYSOkrnQ5vpODmFYllyltiTZVEQrMoNh
GkHSPEUno5Ep/mav2lcmyZGAEgABL82B8bgmxsKd7thKdIDvP7moSSrSvsnHQ0Gu
aovnw3TturJL4X1dlJDISpT/3jf9xbCLjUbaKE7brEulG03Cih45RW7/4GZTiYwS
SBo/XdlSbdqjol4YJ9u1h6lzvytZTC7HMRYbb1EGTznHN3cUIBcfahQSsXOJoQoJ
ceU3YMh7azHCLPssXDemSAYIKrjBR90yfxYqe29fScTiyiUbD/3i4fpSuQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFDGljz0Ny0o272Iw1MSPm4VtV2X4MB8GA1UdIwQY
MBaAFDeRVnOyi9+tssIBmsaNBGT9IbcaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjVGV2M3S0wzNjJ5d2dHYXhvMEVaUDBodHhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS80ZWE0ZjctZDcwZS00MmEyLWFmZDct
M2UzYTE4OGY0OWRlLzEvTWFXUFBRM0xTamJ2WWpEVXhJLWJoVzFYWmZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS80ZWE0ZjctZDcwZS00MmEyLWFmZDctM2UzYTE4OGY0OWRl
LzEvTjVGV2M3S0wzNjJ5d2dHYXhvMEVaUDBodHhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkSAwDQYJ
KoZIhvcNAQELBQADggEBAG2kCQftkomtSOME2Us++Y35Aj5yMvErK4STEp3uyH8L
77TRaN7SaNDSzicNmID//Kov6XL57tuML7vWhREHIH1ICXrZ6opeGR3uOgdjBC7F
gRAuIIaV8PnrVR9zCxi7gWM+czZ0ZXw4sf/NoaULEK4xFwLAFM1Pq+g7n4Njg1J0
W+Kmu9I7CiGr8loGRYvBhAjuLQLIzXAujTO+u9UjzZpvdwN8KPU6szXRBclOdH5v
EgA/LZ4l+bU7GLYvxZg9RNRVKYYxsXY2w/hxixrzgXA0tSLtjIPaa0txWVkIu23X
hUxWOF5TmJhpoKYNvHF7Vz6PZri4O4ctucUUhNmTtck=
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:01:41 2024 by rpki-client on console.sobornost.net