Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/RobpS4S7Dbcnvc3CA2vSfY_NdO0.roa
File: RobpS4S7Dbcnvc3CA2vSfY_NdO0.roa (raw, json)
Hash identifier: SqEdHm0Zs5FXOBuwhZewX+obuo5uwfq9X4801ZhrI6I=
Subject key identifier: 46:86:E9:4B:84:BB:0D:B7:27:BD:CD:C2:03:6B:D2:7D:8F:CD:74:ED
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 019264C02C2893803E363F8D37F0D08BDDF1
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/RobpS4S7Dbcnvc3CA2vSfY_NdO0.roa
Signing time: Mon 07 Oct 2024 02:12:48 +0000
ROA not before: Mon 07 Oct 2024 02:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62048
IP address blocks: 45.86.87.0/24 maxlen: 24
91.246.49.0/24 maxlen: 24
188.253.1.0/24 maxlen: 24
188.253.2.0/24 maxlen: 24
188.253.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 07:48:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:64:c0:2c:28:93:80:3e:36:3f:8d:37:f0:d0:8b:dd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Oct 7 02:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4686e94b84bb0db727bdcdc2036bd27d8fcd74ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:60:93:ec:8e:52:9a:2f:b2:55:be:8b:bb:
b7:36:6d:e8:44:0c:0a:8a:ac:b6:70:8a:e5:52:0d:
9b:7f:0b:0e:d7:94:d4:73:55:40:60:09:3b:d5:f2:
14:8a:6c:a4:a7:f4:8e:c9:fc:8a:f7:c7:e6:8c:06:
7f:1a:a8:44:a5:65:58:24:e7:3f:e8:cd:85:ca:96:
5a:f7:f1:41:cc:37:a0:d0:17:5f:0f:ba:6b:1b:d4:
1c:8d:49:08:c3:74:70:0f:14:94:a4:98:ba:c8:fb:
b4:fb:7c:19:50:80:70:9e:ca:f1:08:b3:c4:85:49:
1d:95:3b:bb:f2:78:fd:8e:b3:ce:44:d4:72:ea:83:
d0:e4:bf:4b:27:2b:36:8c:af:3d:8a:98:32:82:19:
71:39:25:b2:07:35:07:dd:27:f8:1a:2b:2d:b6:c7:
26:af:83:8a:71:13:44:50:ab:d4:43:31:2b:bd:f3:
e6:21:4c:fa:f3:58:52:cf:63:7a:14:45:e0:cb:61:
ad:02:cc:2f:c1:ff:b5:08:be:a7:46:12:b2:46:99:
62:50:f6:c2:e2:1b:77:dc:f4:26:71:e8:86:e8:55:
9d:04:ed:88:38:dd:c8:ed:99:f0:3c:6d:32:b2:ed:
65:94:a6:d1:c8:ec:5d:69:60:d7:08:63:9b:a9:e0:
b6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:86:E9:4B:84:BB:0D:B7:27:BD:CD:C2:03:6B:D2:7D:8F:CD:74:ED
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/RobpS4S7Dbcnvc3CA2vSfY_NdO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.87.0/24
91.246.49.0/24
188.253.1.0-188.253.3.255
Signature Algorithm: sha256WithRSAEncryption
70:19:b9:7c:bb:15:19:6c:1d:12:3f:80:b8:4e:b4:d6:43:5e:
5b:a6:d5:2e:7c:6a:3d:b9:69:57:69:53:1e:19:45:2f:f3:62:
43:7e:c6:fe:5a:bb:db:82:db:c5:42:7d:5a:64:90:b3:de:9d:
9b:ac:a7:9d:6d:ae:7e:38:01:30:0b:16:fa:a4:26:d0:ad:4e:
eb:9a:91:cd:36:8a:62:1f:c2:72:61:60:b1:4f:59:ca:3c:fc:
37:08:f7:22:8c:6f:88:a5:4d:0d:61:a9:b2:07:f4:b4:09:92:
4e:54:37:b6:07:55:f3:33:6d:99:6b:08:f3:e9:6b:0c:18:56:
83:52:a0:22:8d:a4:cc:bb:65:30:e6:b5:64:e2:d4:be:69:97:
46:0a:a4:92:43:90:4d:31:64:ea:e1:d1:71:34:e1:92:a6:35:
ff:ae:0a:6d:b9:81:06:8d:a1:92:a9:ef:7d:da:bd:36:d6:ff:
07:e4:f8:64:e6:2c:eb:97:b9:ef:0a:26:76:3c:d6:39:61:43:
8b:eb:ca:4b:42:fc:5c:d9:e2:9b:ed:05:92:a6:4f:cd:53:e0:
5f:f7:5c:b8:c1:73:98:8f:2a:be:81:46:5e:f9:d3:18:32:53:
52:d9:b7:23:34:f8:1a:29:fb:e3:02:c0:51:31:96:a2:33:4b:
d2:42:bb:5d
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZJkwCwok4A+Nj+NN/DQi93xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2
NWE0NzgwHhcNMjQxMDA3MDIxMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Njg2ZTk0Yjg0YmIwZGI3MjdiZGNkYzIwMzZiZDI3ZDhmY2Q3NGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMBgk+yOUpovslW+i7u3Nm3oRAwK
iqy2cIrlUg2bfwsO15TUc1VAYAk71fIUimykp/SOyfyK98fmjAZ/GqhEpWVYJOc/
6M2FypZa9/FBzDeg0BdfD7prG9QcjUkIw3RwDxSUpJi6yPu0+3wZUIBwnsrxCLPE
hUkdlTu78nj9jrPORNRy6oPQ5L9LJys2jK89ipgyghlxOSWyBzUH3Sf4Gisttscm
r4OKcRNEUKvUQzErvfPmIUz681hSz2N6FEXgy2GtAswvwf+1CL6nRhKyRpliUPbC
4ht33PQmceiG6FWdBO2ION3I7ZnwPG0ysu1llKbRyOxdaWDXCGObqeC2BQIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFEaG6UuEuw23J73NwgNr0n2PzXTtMB8GA1UdIwQY
MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt
ZmUwNjU5MTc2YTU2LzEvUm9icFM0UzdEYmNudmMzQ0EydlNmWV9OZE8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2
LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALVZXAwQA
W/YxMAwDBAC8/QEDBAK8/QAwDQYJKoZIhvcNAQELBQADggEBAHAZuXy7FRlsHRI/
gLhOtNZDXlum1S58aj25aVdpUx4ZRS/zYkN+xv5au9uC28VCfVpkkLPenZusp51t
rn44ATALFvqkJtCtTuuakc02imIfwnJhYLFPWco8/DcI9yKMb4ilTQ1hqbIH9LQJ
kk5UN7YHVfMzbZlrCPPpawwYVoNSoCKNpMy7ZTDmtWTi1L5pl0YKpJJDkE0xZOrh
0XE04ZKmNf+uCm25gQaNoZKp733avTbW/wfk+GTmLOuXue8KJnY81jlhQ4vryktC
/FzZ4pvtBZKmT81T4F/3XLjBc5iPKr6BRl750xgyU1LZtyM0+Bop++MCwFExlqIz
S9JCu10=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:18:36 2025 by rpki-client