Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/JOIVBj0ssTMjEjVAdWrWWCniFHQ.roa
File: JOIVBj0ssTMjEjVAdWrWWCniFHQ.roa (raw, json)
Hash identifier: 4R/pjLSqkvSBja4nOGDLB4kihqqHpoC6veLToJBSgQU=
Subject key identifier: 24:E2:15:06:3D:2C:B1:33:23:12:35:40:75:6A:D6:58:29:E2:14:74
Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial: 018FAAD515D14553527CD8EF216D7658C641
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/JOIVBj0ssTMjEjVAdWrWWCniFHQ.roa
Signing time: Fri 24 May 2024 13:40:42 +0000
ROA not before: Fri 24 May 2024 13:40:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 45.144.198.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 May 2024 05:38:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:aa:d5:15:d1:45:53:52:7c:d8:ef:21:6d:76:58:c6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Validity
Not Before: May 24 13:40:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=24e215063d2cb13323123540756ad65829e21474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:90:c0:91:b3:3b:74:1c:90:32:ee:a7:04:a0:
82:d7:42:89:4f:94:4a:1f:19:b9:9b:ab:26:d6:2a:
fe:5d:b9:30:22:a3:14:a7:6f:e0:7a:bb:54:d8:57:
00:c9:b7:19:75:be:4d:ab:eb:61:bd:52:29:c9:39:
51:ca:bc:e0:e0:4f:77:d8:66:28:97:a2:d1:5a:59:
6c:e9:7e:63:01:1a:77:c8:ca:f8:29:17:38:8a:91:
7a:04:a0:54:65:53:44:df:9b:21:4d:f2:10:d4:d1:
35:42:d3:39:3f:4e:cf:f7:e6:56:56:1a:a4:43:cb:
ee:57:18:b9:24:a7:6b:51:1e:72:0a:c2:36:7d:0d:
6c:9f:ac:cc:3f:25:d6:e2:1b:a5:d3:98:5a:fb:b8:
a1:19:cd:43:0d:17:7c:d8:14:00:56:7d:0e:81:bb:
28:fb:22:1d:ae:f0:0e:14:b4:b4:c2:31:f6:1f:73:
af:f2:a5:94:97:ce:84:4c:3a:c3:dc:a6:07:13:ef:
f6:fb:eb:1c:39:5d:29:f8:42:68:c8:b9:06:b1:00:
2a:46:1c:b4:7c:a3:f3:b1:86:c5:b8:b8:da:4f:8b:
61:4f:2f:a8:4f:fb:09:64:ab:1f:4d:42:57:6e:27:
92:44:94:b3:39:21:af:fa:ed:04:4c:e8:92:4d:27:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E2:15:06:3D:2C:B1:33:23:12:35:40:75:6A:D6:58:29:E2:14:74
X509v3 Authority Key Identifier:
keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/JOIVBj0ssTMjEjVAdWrWWCniFHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.198.0/23
Signature Algorithm: sha256WithRSAEncryption
90:25:26:a8:48:29:b0:f9:b0:fd:4f:3f:6b:02:5b:3d:a6:42:
9a:50:5d:33:cb:bf:76:90:b1:cf:d3:fe:24:62:f4:86:ff:64:
56:ce:e6:b5:0a:15:b0:6c:ae:c8:01:71:ce:7c:0b:9e:e4:a1:
71:d2:6d:eb:8a:82:d9:b3:8e:77:db:3c:8f:5e:41:53:fc:54:
4b:2c:de:4d:30:61:e7:96:48:31:41:09:58:97:74:19:8c:cd:
be:e8:2b:ae:0f:d3:a0:61:98:04:8e:e8:30:0f:f2:63:93:c4:
5f:82:74:40:4f:43:16:41:05:f5:9f:2c:ed:6e:5a:ea:e6:7d:
0e:20:f1:c2:b1:0f:0e:82:79:a9:e0:fa:67:24:16:ff:68:f9:
02:5f:cf:9a:ef:c8:b9:8c:b7:6a:b6:53:af:e1:b2:ab:b9:54:
67:a5:be:66:56:88:75:04:e7:1d:a6:61:db:5c:ee:c2:28:ac:
52:27:90:0d:9d:6d:cb:78:05:c5:9b:13:07:c4:dc:fd:70:b6:
c5:e2:7b:c0:16:02:26:9d:fb:80:5b:2b:98:c5:f2:04:ec:30:
c6:f8:da:25:75:f4:5b:0a:8c:84:aa:b9:6e:ff:8f:25:ce:64:
f1:70:53:97:6c:ea:a3:ad:a3:ca:6f:48:c9:fb:3b:42:65:ec:
5c:98:40:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+q1RXRRVNSfNjvIW12WMZBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNWU3ZDdiYjY5ZWZhY2IwYzczOTAyOTcyYzc0ZDcyZDI5
YmY3N2YwHhcNMjQwNTI0MTM0MDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNGUyMTUwNjNkMmNiMTMzMjMxMjM1NDA3NTZhZDY1ODI5ZTIxNDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpDAkbM7dByQMu6nBKCC10KJT5RK
Hxm5m6sm1ir+XbkwIqMUp2/gertU2FcAybcZdb5Nq+thvVIpyTlRyrzg4E932GYo
l6LRWlls6X5jARp3yMr4KRc4ipF6BKBUZVNE35shTfIQ1NE1QtM5P07P9+ZWVhqk
Q8vuVxi5JKdrUR5yCsI2fQ1sn6zMPyXW4hul05ha+7ihGc1DDRd82BQAVn0Ogbso
+yIdrvAOFLS0wjH2H3Ov8qWUl86ETDrD3KYHE+/2++scOV0p+EJoyLkGsQAqRhy0
fKPzsYbFuLjaT4thTy+oT/sJZKsfTUJXbieSRJSzOSGv+u0ETOiSTScxFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCTiFQY9LLEzIxI1QHVq1lgp4hR0MB8GA1UdIwQY
MBaAFMFefXu2nvrLDHOQKXLHTXLSm/d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAt
MzQ3YTBmN2M1YjA4LzEvSk9JVkJqMHNzVE1qRWpWQWRXcldXQ25pRkhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAtMzQ3YTBmN2M1YjA4
LzEvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZDGMA0G
CSqGSIb3DQEBCwUAA4IBAQCQJSaoSCmw+bD9Tz9rAls9pkKaUF0zy792kLHP0/4k
YvSG/2RWzua1ChWwbK7IAXHOfAue5KFx0m3rioLZs4532zyPXkFT/FRLLN5NMGHn
lkgxQQlYl3QZjM2+6CuuD9OgYZgEjugwD/Jjk8RfgnRAT0MWQQX1nyztblrq5n0O
IPHCsQ8Ognmp4PpnJBb/aPkCX8+a78i5jLdqtlOv4bKruVRnpb5mVoh1BOcdpmHb
XO7CKKxSJ5ANnW3LeAXFmxMHxNz9cLbF4nvAFgImnfuAWyuYxfIE7DDG+NoldfRb
CoyEqrlu/48lzmTxcFOXbOqjraPKb0jJ+ztCZexcmEDe
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:02 2024 by rpki-client on console-fra.rpki-client.org