Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/M_XR19T_wq9oKMoQrcH_104Ug4I.roa
File: M_XR19T_wq9oKMoQrcH_104Ug4I.roa (raw, json)
Hash identifier: jHy7IHLc0JwocDuVIAQDEn43P7uQrU8tvlDaDe958Ng=
Subject key identifier: 33:F5:D1:D7:D4:FF:C2:AF:68:28:CA:10:AD:C1:FF:D7:4E:14:83:82
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018E848EF69A09E23C3752B0DD2D38A65AEF
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/M_XR19T_wq9oKMoQrcH_104Ug4I.roa
Signing time: Thu 28 Mar 2024 10:15:45 +0000
ROA not before: Thu 28 Mar 2024 10:15:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212219
IP address blocks: 45.136.6.0/24 maxlen: 24
45.141.151.0/24 maxlen: 24
45.147.46.0/24 maxlen: 24
45.147.47.0/24 maxlen: 24
194.116.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jun 2024 07:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:84:8e:f6:9a:09:e2:3c:37:52:b0:dd:2d:38:a6:5a:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Mar 28 10:15:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33f5d1d7d4ffc2af6828ca10adc1ffd74e148382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:17:49:49:d3:da:87:99:32:6f:5c:75:d9:78:
16:f9:3d:a0:dc:bb:d8:d9:f3:1c:54:47:ac:e8:08:
23:3a:d8:1b:39:8c:09:15:02:9c:52:0e:1d:f6:d1:
19:4f:59:69:27:0f:d1:fc:f4:fd:d3:f9:b6:f7:6d:
02:8d:c9:10:13:a0:67:10:03:66:10:89:4d:ed:e2:
84:c1:73:49:01:70:ac:12:6b:01:ba:f8:35:1b:be:
59:ec:7f:30:e2:ba:98:88:4d:c4:40:54:ff:3f:de:
6a:ec:86:b4:63:c4:96:9c:c5:47:bc:fa:4c:36:f6:
14:d0:30:ef:e7:b4:4b:d5:99:e3:14:17:0b:5f:80:
fd:6e:2b:a4:4e:27:06:38:e6:0c:82:41:f1:2a:38:
f3:e8:14:36:f6:1a:44:7b:e7:29:aa:cc:5a:9f:2d:
e5:23:46:74:e6:fa:ef:b3:9e:ac:20:d0:39:ac:85:
ce:74:63:33:96:5f:f6:ff:a8:23:55:49:c8:00:62:
04:ef:a1:f8:18:92:fd:0c:78:9d:6e:02:bf:cb:df:
ef:e1:12:2e:e3:60:c2:1d:83:ec:b5:92:9c:7f:2d:
a6:4e:db:06:f9:fa:37:e9:09:71:28:40:23:bf:e3:
7d:db:b9:7d:35:f9:7c:34:3c:78:cc:a1:94:f0:2b:
95:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F5:D1:D7:D4:FF:C2:AF:68:28:CA:10:AD:C1:FF:D7:4E:14:83:82
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/M_XR19T_wq9oKMoQrcH_104Ug4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.6.0/24
45.141.151.0/24
45.147.46.0/23
194.116.229.0/24
Signature Algorithm: sha256WithRSAEncryption
14:7a:ed:3b:a7:a6:2b:12:ca:1e:1f:6a:b1:3a:c7:8e:17:37:
ec:a2:da:df:dd:75:d2:c3:8e:73:06:fc:1c:cc:a8:76:09:2d:
0e:0f:53:de:23:81:97:ed:fb:df:72:c0:53:ae:47:4d:bf:09:
9d:cd:7f:1a:d9:f3:04:fc:6b:24:8a:5f:fc:81:f9:b2:a5:1e:
da:b3:55:ee:8c:65:49:0f:3b:1d:d6:b1:77:92:40:da:64:bf:
ba:58:62:ef:8b:ab:63:26:71:f6:71:81:55:c0:4f:02:0b:6e:
57:a3:d5:bf:25:31:d2:2f:4f:e9:be:8d:3c:d6:40:20:e5:02:
16:74:af:cb:b1:2f:a5:ee:ad:96:8e:ac:ab:b1:b2:39:7a:f6:
b1:18:33:c9:95:0e:ad:a5:04:08:16:a2:c6:c4:26:1b:31:9d:
89:c5:1d:97:1d:79:30:76:30:2b:e8:80:d9:e0:2b:9f:1f:e0:
d1:42:88:5e:cb:36:40:68:e7:27:3a:12:95:f0:02:10:38:01:
ac:08:da:74:31:da:ce:ba:7b:ef:b8:b7:5d:cc:1e:4e:e5:bb:
fc:cd:64:cb:12:3a:0c:4e:14:b3:01:c7:1d:22:92:41:6f:db:
88:41:57:1e:53:92:05:83:6e:a1:9e:0c:d3:f6:4d:c9:c7:e7:
46:f3:6d:ba
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY6EjvaaCeI8N1Kw3S04plrvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjQwMzI4MTAxNTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2Y1ZDFkN2Q0ZmZjMmFmNjgyOGNhMTBhZGMxZmZkNzRlMTQ4MzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hdJSdPah5kyb1x12XgW+T2g3LvY
2fMcVEes6AgjOtgbOYwJFQKcUg4d9tEZT1lpJw/R/PT90/m2920CjckQE6BnEANm
EIlN7eKEwXNJAXCsEmsBuvg1G75Z7H8w4rqYiE3EQFT/P95q7Ia0Y8SWnMVHvPpM
NvYU0DDv57RL1ZnjFBcLX4D9biukTicGOOYMgkHxKjjz6BQ29hpEe+cpqsxany3l
I0Z05vrvs56sINA5rIXOdGMzll/2/6gjVUnIAGIE76H4GJL9DHidbgK/y9/v4RIu
42DCHYPstZKcfy2mTtsG+fo36QlxKEAjv+N927l9Nfl8NDx4zKGU8CuVWwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDP10dfU/8KvaCjKEK3B/9dOFIOCMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvTV9YUjE5VF93cTlvS01vUXJjSF8xMDRVZzRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYgGAwQA
LY2XAwQBLZMuAwQAwnTlMA0GCSqGSIb3DQEBCwUAA4IBAQAUeu07p6YrEsoeH2qx
OseOFzfsotrf3XXSw45zBvwczKh2CS0OD1PeI4GX7fvfcsBTrkdNvwmdzX8a2fME
/Gskil/8gfmypR7as1XujGVJDzsd1rF3kkDaZL+6WGLvi6tjJnH2cYFVwE8CC25X
o9W/JTHSL0/pvo081kAg5QIWdK/LsS+l7q2WjqyrsbI5evaxGDPJlQ6tpQQIFqLG
xCYbMZ2JxR2XHXkwdjAr6IDZ4CufH+DRQoheyzZAaOcnOhKV8AIQOAGsCNp0MdrO
unvvuLddzB5O5bv8zWTLEjoMThSzAccdIpJBb9uIQVceU5IFg26hngzT9k3Jx+dG
8226
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:11 2024 by rpki-client on console-fra.rpki-client.org