Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/9mdxQ4szpyLdXLJTEM6UmuOnmho.roa
File: 9mdxQ4szpyLdXLJTEM6UmuOnmho.roa (raw, json)
Hash identifier: DKUW0gRdJ4ikdLkkXhlQ08+cKPaoYAF/+SdsxkGVHX0=
Subject key identifier: F6:67:71:43:8B:33:A7:22:DD:5C:B2:53:10:CE:94:9A:E3:A7:9A:1A
Certificate issuer: /CN=a1d71853324eb060fbafc988233860499c96c53a
Certificate serial: 0186238B2F211AFBC608EC8526BAFD0F83C3
Authority key identifier: A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/9mdxQ4szpyLdXLJTEM6UmuOnmho.roa
Signing time: Sun 05 Feb 2023 21:46:09 +0000
ROA not before: Sun 05 Feb 2023 21:46:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142594
IP address blocks: 45.148.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:23:8b:2f:21:1a:fb:c6:08:ec:85:26:ba:fd:0f:83:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d71853324eb060fbafc988233860499c96c53a
Validity
Not Before: Feb 5 21:46:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f66771438b33a722dd5cb25310ce949ae3a79a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:57:64:3f:62:c1:b0:55:39:e5:8e:e9:31:5e:
09:11:ff:42:ee:0d:63:68:86:bd:a6:e7:7a:aa:0d:
2f:a8:fc:c1:df:22:1e:60:f5:15:d3:21:33:68:c8:
c3:58:37:89:be:51:21:7e:f9:da:e3:7c:8a:e3:f0:
2d:36:8e:20:c9:46:09:65:ae:95:1b:ce:a1:95:2f:
7b:f6:c1:b2:0f:e5:1f:36:26:26:f2:07:ff:8d:8e:
77:db:64:e0:9e:b1:ef:7a:22:0f:b3:dd:ae:ce:dd:
f1:1c:37:f6:e0:06:6d:60:27:dc:0f:8b:8a:3e:56:
48:ae:5c:d3:fb:74:29:0c:63:62:60:aa:be:ef:cc:
b4:d5:9f:24:a8:c9:b3:a9:13:d2:9a:7d:66:a0:88:
a3:1d:e1:50:96:57:f8:21:e3:29:53:0c:d6:ec:95:
11:61:8d:5a:a6:8c:04:4b:d6:66:8d:b9:87:d3:b9:
4b:26:86:a2:65:48:62:2a:e7:85:65:2c:bb:aa:26:
a7:6e:79:43:b1:3e:48:9c:d0:b0:ac:65:90:64:f9:
0f:99:32:3b:21:d5:40:d4:d1:a6:cb:a1:98:be:69:
78:bb:5e:03:f2:4e:f3:00:3f:a7:aa:d2:01:9e:e0:
30:9f:16:eb:20:61:f8:92:88:bf:c8:dd:7d:47:8b:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:67:71:43:8B:33:A7:22:DD:5C:B2:53:10:CE:94:9A:E3:A7:9A:1A
X509v3 Authority Key Identifier:
keyid:A1:D7:18:53:32:4E:B0:60:FB:AF:C9:88:23:38:60:49:9C:96:C5:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odcYUzJOsGD7r8mIIzhgSZyWxTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/9mdxQ4szpyLdXLJTEM6UmuOnmho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7656db-94a5-45be-9435-7061356bef1b/1/odcYUzJOsGD7r8mIIzhgSZyWxTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.134.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:29:e6:f0:c4:39:a5:10:52:bc:df:d5:d1:ae:23:d5:88:a4:
2b:6c:a7:8d:81:08:85:b3:a2:55:a9:d3:21:10:a3:75:d1:94:
15:9b:a9:fc:a6:cc:cb:6e:07:6b:39:c4:ce:9e:c1:01:d2:88:
2b:0f:2b:56:2f:61:fd:a5:04:2c:94:28:6b:8f:8a:42:95:c0:
12:c2:1d:50:85:24:5e:15:3c:63:f9:8a:f2:88:80:36:c6:d6:
7d:07:82:10:b6:ea:65:b0:41:ab:9c:bf:0a:f6:f6:1d:f4:c6:
62:1f:95:86:76:3d:c9:1d:9c:5e:28:69:19:88:96:ff:f2:30:
0c:9e:b8:63:40:7a:4e:00:d1:ce:2d:2c:b8:ed:56:b0:f1:f9:
c4:29:c7:06:33:79:bc:ce:24:16:d5:80:c9:98:13:a0:c9:e4:
53:bb:0a:0c:03:0c:8a:13:6c:04:5a:31:40:d1:6d:c9:73:39:
f1:51:e1:96:86:17:5c:d3:5c:71:c2:a4:9a:31:e9:96:63:4d:
2b:2a:ec:74:01:03:4a:e3:15:38:1e:98:09:0e:36:e1:28:0a:
c7:07:c0:e9:38:6c:99:64:01:4f:be:fb:13:06:36:1d:c7:5c:
e0:f4:b6:8c:27:5d:bc:6c:c9:63:e7:ca:c2:c5:af:d4:da:f3:
e9:75:1a:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYjiy8hGvvGCOyFJrr9D4PDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZDcxODUzMzI0ZWIwNjBmYmFmYzk4ODIzMzg2MDQ5OWM5
NmM1M2EwHhcNMjMwMjA1MjE0NjA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjY3NzE0MzhiMzNhNzIyZGQ1Y2IyNTMxMGNlOTQ5YWUzYTc5YTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFdkP2LBsFU55Y7pMV4JEf9C7g1j
aIa9pud6qg0vqPzB3yIeYPUV0yEzaMjDWDeJvlEhfvna43yK4/AtNo4gyUYJZa6V
G86hlS979sGyD+UfNiYm8gf/jY5322TgnrHveiIPs92uzt3xHDf24AZtYCfcD4uK
PlZIrlzT+3QpDGNiYKq+78y01Z8kqMmzqRPSmn1moIijHeFQllf4IeMpUwzW7JUR
YY1apowES9ZmjbmH07lLJoaiZUhiKueFZSy7qianbnlDsT5InNCwrGWQZPkPmTI7
IdVA1NGmy6GYvml4u14D8k7zAD+nqtIBnuAwnxbrIGH4koi/yN19R4ugGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPZncUOLM6ci3VyyUxDOlJrjp5oaMB8GA1UdIwQY
MBaAFKHXGFMyTrBg+6/JiCM4YEmclsU6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUt
NzA2MTM1NmJlZjFiLzEvOW1keFE0c3pweUxkWExKVEVNNlVtdU9ubWhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy83NjU2ZGItOTRhNS00NWJlLTk0MzUtNzA2MTM1NmJlZjFi
LzEvb2RjWVV6Sk9zR0Q3cjhtSUl6aGdTWnlXeFRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZSGMA0G
CSqGSIb3DQEBCwUAA4IBAQCbKebwxDmlEFK839XRriPViKQrbKeNgQiFs6JVqdMh
EKN10ZQVm6n8pszLbgdrOcTOnsEB0ogrDytWL2H9pQQslChrj4pClcASwh1QhSRe
FTxj+YryiIA2xtZ9B4IQtuplsEGrnL8K9vYd9MZiH5WGdj3JHZxeKGkZiJb/8jAM
nrhjQHpOANHOLSy47Vaw8fnEKccGM3m8ziQW1YDJmBOgyeRTuwoMAwyKE2wEWjFA
0W3JcznxUeGWhhdc01xxwqSaMemWY00rKux0AQNK4xU4HpgJDjbhKArHB8DpOGyZ
ZAFPvvsTBjYdx1zg9LaMJ128bMlj58rCxa/U2vPpdRqE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:51 2024 by rpki-client on console-fra.rpki-client.org