Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/ksrmaMupwh-2Ta8pP-QW1riwCkI.roa
File: ksrmaMupwh-2Ta8pP-QW1riwCkI.roa (raw, json)
Hash identifier: CoC7rH0X5aA5nRJGldDaCF6l+CXc0S4IfMuVFXZnnyo=
Subject key identifier: 92:CA:E6:68:CB:A9:C2:1F:B6:4D:AF:29:3F:E4:16:D6:B8:B0:0A:42
Certificate issuer: /CN=8fd57a75dd7e952bee283935d6df2925d282a070
Certificate serial: 018739030F60D9AC5E883DF92A7430960859
Authority key identifier: 8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/ksrmaMupwh-2Ta8pP-QW1riwCkI.roa
Signing time: Fri 31 Mar 2023 18:51:54 +0000
ROA not before: Fri 31 Mar 2023 18:51:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 45.66.82.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:39:03:0f:60:d9:ac:5e:88:3d:f9:2a:74:30:96:08:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fd57a75dd7e952bee283935d6df2925d282a070
Validity
Not Before: Mar 31 18:51:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92cae668cba9c21fb64daf293fe416d6b8b00a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7d:a7:b7:72:92:37:47:ae:c3:52:24:1a:31:
5a:1a:51:b1:d3:bb:39:76:9c:ef:6d:db:08:ef:f5:
36:f8:ea:b2:69:47:86:79:e5:42:57:42:a1:01:42:
7b:d2:48:76:23:81:44:09:65:28:06:18:fd:18:6a:
73:6f:4c:72:d1:25:be:db:74:93:6f:77:87:e2:18:
07:51:11:09:51:c9:70:a8:cc:d5:d5:56:1a:a4:19:
73:57:f8:8b:8b:86:74:44:21:5a:c2:4c:96:74:e4:
54:9c:17:56:96:8f:73:1b:7f:98:bb:fd:9f:be:01:
c7:15:68:5a:f9:c7:a5:ac:96:05:32:06:39:17:36:
41:ed:b2:d4:88:4b:1f:40:e8:07:ee:2b:51:1b:59:
35:37:1b:4d:89:f3:da:f3:fd:df:63:fd:c2:03:ef:
c6:b2:93:19:b9:f8:e9:ea:a0:09:75:1a:7a:91:1e:
b8:4d:80:52:a8:ce:7a:ec:78:94:5f:ab:a6:39:89:
69:60:a8:df:c1:22:77:e9:c3:2d:1c:53:83:01:b9:
32:8a:6b:23:24:21:ae:11:9f:b0:f7:47:e5:4b:69:
7a:e6:87:59:87:7c:46:e1:20:32:0a:11:49:20:26:
24:67:73:f4:38:af:82:89:ad:1d:5d:96:3f:be:b5:
94:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:CA:E6:68:CB:A9:C2:1F:B6:4D:AF:29:3F:E4:16:D6:B8:B0:0A:42
X509v3 Authority Key Identifier:
keyid:8F:D5:7A:75:DD:7E:95:2B:EE:28:39:35:D6:DF:29:25:D2:82:A0:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9V6dd1-lSvuKDk11t8pJdKCoHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/ksrmaMupwh-2Ta8pP-QW1riwCkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/39d4b5-b5c9-480a-9405-d9a539b8b7ad/1/j9V6dd1-lSvuKDk11t8pJdKCoHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.82.0/24
Signature Algorithm: sha256WithRSAEncryption
22:20:c8:50:c5:01:f2:ea:0c:49:ac:fa:82:7e:95:a4:a0:02:
a1:04:18:6b:b2:92:bf:bf:33:c8:58:5a:47:8e:05:2a:13:74:
fe:14:ce:fd:aa:6f:e4:b5:de:71:02:70:93:05:70:fb:cf:3e:
c8:bd:64:1a:bc:cb:12:9f:16:4a:60:a2:d9:bb:db:06:e2:81:
68:1e:40:a9:e2:f3:b1:ee:15:bf:e7:36:10:db:c1:e0:3f:f5:
9f:4f:92:bf:df:ff:52:51:35:26:69:17:03:a4:0c:82:b3:14:
dc:d3:1b:41:f6:6d:44:11:19:fe:b4:f9:d8:a9:d7:89:b0:62:
e6:2e:ec:a1:03:be:6f:cf:d8:6e:ce:05:b4:8c:b6:d4:dc:ab:
41:53:40:9c:96:d6:3b:40:c4:be:9c:92:d5:89:b4:6d:ba:95:
8c:8d:ed:43:61:0f:9d:16:7f:e6:6c:c1:5f:30:1f:a2:88:28:
c7:48:d7:49:8b:18:c1:a5:bb:2f:6c:79:66:b6:03:61:91:0d:
41:d9:26:9d:c3:b7:80:4f:18:b6:b0:eb:41:df:20:f8:98:6d:
e9:fb:db:df:d4:a6:8a:a3:cb:7a:c1:df:9b:0b:b4:6d:f2:84:
c2:78:7e:d9:3d:4e:5b:37:c0:fc:19:b3:2e:63:fa:38:96:85:
6d:f8:6c:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYc5Aw9g2axeiD35KnQwlghZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZDU3YTc1ZGQ3ZTk1MmJlZTI4MzkzNWQ2ZGYyOTI1ZDI4
MmEwNzAwHhcNMjMwMzMxMTg1MTU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MmNhZTY2OGNiYTljMjFmYjY0ZGFmMjkzZmU0MTZkNmI4YjAwYTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX2nt3KSN0euw1IkGjFaGlGx07s5
dpzvbdsI7/U2+OqyaUeGeeVCV0KhAUJ70kh2I4FECWUoBhj9GGpzb0xy0SW+23ST
b3eH4hgHUREJUclwqMzV1VYapBlzV/iLi4Z0RCFawkyWdORUnBdWlo9zG3+Yu/2f
vgHHFWha+celrJYFMgY5FzZB7bLUiEsfQOgH7itRG1k1NxtNifPa8/3fY/3CA+/G
spMZufjp6qAJdRp6kR64TYBSqM567HiUX6umOYlpYKjfwSJ36cMtHFODAbkyimsj
JCGuEZ+w90flS2l65odZh3xG4SAyChFJICYkZ3P0OK+Cia0dXZY/vrWUowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJLK5mjLqcIftk2vKT/kFta4sApCMB8GA1UdIwQY
MBaAFI/VenXdfpUr7ig5NdbfKSXSgqBwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUt
ZDlhNTM5YjhiN2FkLzEva3NybWFNdXB3aC0yVGE4cFAtUVcxcml3Q2tJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8zOWQ0YjUtYjVjOS00ODBhLTk0MDUtZDlhNTM5YjhiN2Fk
LzEvajlWNmRkMS1sU3Z1S0RrMTF0OHBKZEtDb0hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUJSMA0G
CSqGSIb3DQEBCwUAA4IBAQAiIMhQxQHy6gxJrPqCfpWkoAKhBBhrspK/vzPIWFpH
jgUqE3T+FM79qm/ktd5xAnCTBXD7zz7IvWQavMsSnxZKYKLZu9sG4oFoHkCp4vOx
7hW/5zYQ28HgP/WfT5K/3/9SUTUmaRcDpAyCsxTc0xtB9m1EERn+tPnYqdeJsGLm
LuyhA75vz9huzgW0jLbU3KtBU0CcltY7QMS+nJLVibRtupWMje1DYQ+dFn/mbMFf
MB+iiCjHSNdJixjBpbsvbHlmtgNhkQ1B2Sadw7eATxi2sOtB3yD4mG3p+9vf1KaK
o8t6wd+bC7Rt8oTCeH7ZPU5bN8D8GbMuY/o4loVt+GyF
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org