Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/h9VqZ-9WIVhwJszso-kwiNRy1Kg.roa
File: h9VqZ-9WIVhwJszso-kwiNRy1Kg.roa (raw, json)
Hash identifier: DSQZ58ZmLgpMcvzhFNS3uRYqudHeHLUtr6JuIcTa0os=
Subject key identifier: 87:D5:6A:67:EF:56:21:58:70:26:CC:EC:A3:E9:30:88:D4:72:D4:A8
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 018B4825C2CCC66A291433EBD7B49DA63F2A
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/h9VqZ-9WIVhwJszso-kwiNRy1Kg.roa
Signing time: Thu 19 Oct 2023 13:35:16 +0000
ROA not before: Thu 19 Oct 2023 13:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62300
IP address blocks: 45.67.214.0/24 maxlen: 24
45.136.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:25:c2:cc:c6:6a:29:14:33:eb:d7:b4:9d:a6:3f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Oct 19 13:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=87d56a67ef5621587026cceca3e93088d472d4a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:33:16:90:23:ca:8d:47:ce:4e:17:7d:f2:
4b:5a:9a:1f:00:e9:a2:f6:41:37:e5:4f:43:ef:22:
f1:69:ac:f6:4c:db:4b:11:27:c7:b2:58:07:48:1f:
f4:18:06:74:df:4b:1a:ce:6a:1c:09:72:2a:72:47:
dc:ff:91:28:59:c4:9c:7f:00:10:ba:12:42:8f:05:
4e:d3:de:a3:d7:0e:2c:9a:4e:ee:00:98:c0:e7:02:
0d:55:db:cc:d8:e8:28:04:fd:8b:67:bb:49:2e:76:
bc:35:53:99:90:5e:d9:e5:72:28:57:11:a9:2b:d6:
48:d4:f0:5e:bc:17:cb:98:bc:fe:f4:ca:f5:42:d6:
f7:9a:0d:3d:43:6e:c0:17:9d:47:fa:ea:6f:6d:68:
6e:17:85:fc:00:8e:18:44:1d:f0:a8:db:28:90:74:
2d:cd:5f:1b:ad:31:76:99:0b:d9:05:91:f2:51:0a:
07:11:44:4c:de:1d:ea:8e:41:71:e4:16:6d:ea:96:
47:73:39:a3:66:19:07:7c:29:56:2a:de:65:43:4d:
f3:70:65:d0:57:76:30:3a:e9:82:58:10:1b:de:6f:
ee:ea:fb:0f:51:06:c3:85:b8:67:b5:3d:c9:df:06:
78:ba:36:83:97:97:c7:73:f7:7b:07:8f:5b:25:48:
44:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D5:6A:67:EF:56:21:58:70:26:CC:EC:A3:E9:30:88:D4:72:D4:A8
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/h9VqZ-9WIVhwJszso-kwiNRy1Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.214.0/24
45.136.146.0/24
Signature Algorithm: sha256WithRSAEncryption
11:0e:84:a2:4f:cc:19:e8:b3:29:a5:d8:7a:fe:9d:d5:7f:62:
d8:9f:fb:cd:53:bf:da:53:95:98:9f:d1:58:95:fd:ef:00:9f:
bb:40:62:5c:5e:2f:66:62:71:bc:60:67:0a:61:7b:e5:25:95:
b8:fd:6c:9f:88:31:64:06:3a:8b:a6:9b:11:39:d0:2e:9c:54:
e6:d1:9d:46:6b:54:07:d3:c7:b0:d2:6a:68:4b:eb:ba:18:24:
a7:5f:69:0a:9d:a8:46:29:fb:dc:1f:a3:1a:03:2f:5b:91:f6:
7c:fe:8f:be:8d:ed:30:ed:3c:b4:02:4a:65:07:10:bb:2e:ce:
af:45:e2:50:04:f0:bf:a5:72:87:6f:5d:e8:7b:35:29:95:1f:
4e:2f:be:98:00:0a:06:eb:f6:a1:6f:61:f4:31:ae:be:2b:98:
d7:e1:e8:15:cd:4a:06:df:ad:fd:47:40:ca:ac:13:b6:cf:54:
19:e9:e3:a6:aa:86:8c:16:f7:8f:5c:ad:20:28:28:91:b6:6c:
f8:ea:1c:2f:65:29:d8:a3:23:56:da:c5:a8:ff:a1:50:57:5e:
0a:34:47:ae:11:36:6d:6b:cb:08:f2:10:c8:e1:56:fd:35:7c:
df:dc:39:c2:57:71:01:57:a6:52:3f:04:3f:1d:29:60:79:87:
47:f7:32:a6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYtIJcLMxmopFDPr17Sdpj8qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy
ZGVhYWIwHhcNMjMxMDE5MTMzNTE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2Q1NmE2N2VmNTYyMTU4NzAyNmNjZWNhM2U5MzA4OGQ0NzJkNGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuEzFpAjyo1Hzk4XffJLWpofAOmi
9kE35U9D7yLxaaz2TNtLESfHslgHSB/0GAZ030sazmocCXIqckfc/5EoWcScfwAQ
uhJCjwVO096j1w4smk7uAJjA5wINVdvM2OgoBP2LZ7tJLna8NVOZkF7Z5XIoVxGp
K9ZI1PBevBfLmLz+9Mr1Qtb3mg09Q27AF51H+upvbWhuF4X8AI4YRB3wqNsokHQt
zV8brTF2mQvZBZHyUQoHEURM3h3qjkFx5BZt6pZHczmjZhkHfClWKt5lQ03zcGXQ
V3YwOumCWBAb3m/u6vsPUQbDhbhntT3J3wZ4ujaDl5fHc/d7B49bJUhEgwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIfVamfvViFYcCbM7KPpMIjUctSoMB8GA1UdIwQY
MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt
ZjExYTM5ZjI2YzNiLzEvaDlWcVotOVdJVmh3SnN6c28ta3dpTlJ5MUtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi
LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALUPWAwQA
LYiSMA0GCSqGSIb3DQEBCwUAA4IBAQARDoSiT8wZ6LMppdh6/p3Vf2LYn/vNU7/a
U5WYn9FYlf3vAJ+7QGJcXi9mYnG8YGcKYXvlJZW4/WyfiDFkBjqLppsROdAunFTm
0Z1Ga1QH08ew0mpoS+u6GCSnX2kKnahGKfvcH6MaAy9bkfZ8/o++je0w7Ty0Akpl
BxC7Ls6vReJQBPC/pXKHb13oezUplR9OL76YAAoG6/ahb2H0Ma6+K5jX4egVzUoG
3639R0DKrBO2z1QZ6eOmqoaMFvePXK0gKCiRtmz46hwvZSnYoyNW2sWo/6FQV14K
NEeuETZta8sI8hDI4Vb9NXzf3DnCV3EBV6ZSPwQ/HSlgeYdH9zKm
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org