Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8sloVrdF2VlyMY2KdkgZAiw45p4.roa
File: 8sloVrdF2VlyMY2KdkgZAiw45p4.roa (raw, json)
Hash identifier: Xd88wotuscHX8DIBzzpQrkuKKSwHAFaKmQkEqVYdgUU=
Subject key identifier: F2:C9:68:56:B7:45:D9:59:72:31:8D:8A:76:48:19:02:2C:38:E6:9E
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018FE4E47231D90C164FC94E899856F3EEC7
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8sloVrdF2VlyMY2KdkgZAiw45p4.roa
Signing time: Tue 04 Jun 2024 20:15:27 +0000
ROA not before: Tue 04 Jun 2024 20:15:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49217
IP address blocks: 45.151.3.0/24 maxlen: 24
146.19.125.0/24 maxlen: 24
2a07:9206::/32 maxlen: 32
2a07:9207::/32 maxlen: 32
2a0c:a580::/32 maxlen: 32
2a0c:a581::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 14 Jun 2024 07:36:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e4:e4:72:31:d9:0c:16:4f:c9:4e:89:98:56:f3:ee:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 4 20:15:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2c96856b745d95972318d8a764819022c38e69e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e1:e9:bc:ec:e8:43:25:ad:f0:d4:9e:fa:c3:
63:df:fa:2a:ba:ed:d6:44:49:32:2f:1c:54:7b:c7:
56:03:9c:4b:24:f6:10:00:42:c1:4c:2a:e8:da:cc:
fb:3e:33:93:91:48:d9:5d:af:ae:01:bf:57:e8:f1:
9c:ae:a2:ea:ad:21:ba:a8:6f:51:77:b4:20:8d:e7:
23:12:03:30:15:f6:63:4a:f0:e5:31:53:20:fc:9f:
fa:ff:b5:c4:91:7d:cd:0f:e7:74:d2:c3:43:c0:97:
ec:b1:99:02:49:40:83:36:4f:b5:13:60:3e:91:7d:
fc:02:73:26:34:4f:7b:24:3d:ac:42:a4:d7:37:75:
43:b8:a2:b4:7b:8d:70:c6:3e:f7:56:73:72:e3:61:
26:f8:e3:59:26:da:eb:ac:7c:fc:c6:39:cc:48:a6:
f3:d4:30:ee:ca:20:59:92:09:94:2c:b9:3c:57:54:
a4:76:2d:9a:a1:82:3e:1f:77:e1:5f:c2:5e:da:17:
46:64:a3:1b:93:87:f9:a7:b4:31:30:59:91:41:fc:
32:de:c7:f1:b9:be:70:04:33:fa:78:af:c0:e0:92:
a3:e2:9d:b2:24:12:1a:d0:4b:cb:f4:23:15:ac:17:
3b:be:a4:94:65:03:ea:bf:44:6f:1c:fa:8d:0d:ca:
77:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:C9:68:56:B7:45:D9:59:72:31:8D:8A:76:48:19:02:2C:38:E6:9E
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/8sloVrdF2VlyMY2KdkgZAiw45p4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.3.0/24
146.19.125.0/24
IPv6:
2a07:9206::/31
2a0c:a580::/31
Signature Algorithm: sha256WithRSAEncryption
18:05:1a:09:56:c5:cc:b0:2f:d1:8b:07:bc:3a:ce:55:2d:94:
33:77:4f:c2:24:90:1e:af:52:31:18:9d:65:74:c0:a8:df:75:
0f:0a:ce:09:13:1e:fe:55:55:09:28:54:05:c0:97:c7:24:de:
44:16:f9:4b:7b:47:41:25:ec:a1:7e:75:60:32:21:ce:7b:80:
dd:c2:1f:5b:b8:5b:83:0e:3d:bf:bc:90:01:7e:d0:5c:43:e5:
b3:78:34:9e:8f:8a:ca:59:0d:94:80:22:3e:39:80:c2:30:05:
34:75:7a:96:6e:c9:68:a5:fd:e5:d4:b6:7b:ec:af:93:fb:c1:
bd:2f:ef:ce:c7:2c:d3:b8:b8:e7:c2:b6:20:d7:4f:8c:25:93:
bd:83:1c:a3:e9:0e:7b:e6:95:1d:12:dd:bf:14:a2:f2:99:5a:
da:c3:bf:14:89:55:34:d7:b5:86:1c:65:64:2f:d5:af:29:84:
9d:ff:3b:99:c0:e7:12:bb:b5:01:1c:40:ba:76:82:ce:30:c1:
4a:6c:6d:6a:1e:d9:26:e4:da:ce:0e:38:2c:2a:c8:78:17:b4:
fb:0a:43:8a:09:50:80:f8:0d:77:6e:b6:eb:9b:39:d4:f7:c5:
fd:a2:2b:12:71:bf:42:1e:9e:4e:7b:8c:6e:0a:67:e0:66:fd:
ca:d1:8b:8e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAY/k5HIx2QwWT8lOiZhW8+7HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwNjA0MjAxNTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmM5Njg1NmI3NDVkOTU5NzIzMThkOGE3NjQ4MTkwMjJjMzhlNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuHpvOzoQyWt8NSe+sNj3/oquu3W
REkyLxxUe8dWA5xLJPYQAELBTCro2sz7PjOTkUjZXa+uAb9X6PGcrqLqrSG6qG9R
d7QgjecjEgMwFfZjSvDlMVMg/J/6/7XEkX3ND+d00sNDwJfssZkCSUCDNk+1E2A+
kX38AnMmNE97JD2sQqTXN3VDuKK0e41wxj73VnNy42Em+ONZJtrrrHz8xjnMSKbz
1DDuyiBZkgmULLk8V1Skdi2aoYI+H3fhX8Je2hdGZKMbk4f5p7QxMFmRQfwy3sfx
ub5wBDP6eK/A4JKj4p2yJBIa0EvL9CMVrBc7vqSUZQPqv0RvHPqNDcp3IwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPLJaFa3RdlZcjGNinZIGQIsOOaeMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvOHNsb1ZyZEYyVmx5TVkyS2RrZ1pBaXc0NXA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQALZcDAwQA
khN9MBQEAgACMA4DBQEqB5IGAwUBKgylgDANBgkqhkiG9w0BAQsFAAOCAQEAGAUa
CVbFzLAv0YsHvDrOVS2UM3dPwiSQHq9SMRidZXTAqN91DwrOCRMe/lVVCShUBcCX
xyTeRBb5S3tHQSXsoX51YDIhznuA3cIfW7hbgw49v7yQAX7QXEPls3g0no+KylkN
lIAiPjmAwjAFNHV6lm7JaKX95dS2e+yvk/vBvS/vzscs07i458K2INdPjCWTvYMc
o+kOe+aVHRLdvxSi8pla2sO/FIlVNNe1hhxlZC/VrymEnf87mcDnEru1ARxAunaC
zjDBSmxtah7ZJuTazg44LCrIeBe0+wpDiglQgPgNd26265s51PfF/aIrEnG/Qh6e
TnuMbgpn4Gb9ytGLjg==
-----END CERTIFICATE-----
Generated at Fri Jun 14 09:35:07 2024 by rpki-client on console-fra.rpki-client.org