Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/q-5ibDpVUhltkxLsvSFglzPGSuU.roa
File: q-5ibDpVUhltkxLsvSFglzPGSuU.roa (raw, json)
Hash identifier: kv9/Sxe3LmP6HVjKh0aJIPGnhfkZZv9fvqJDJy84nlQ=
Subject key identifier: AB:EE:62:6C:3A:55:52:19:6D:93:12:EC:BD:21:60:97:33:C6:4A:E5
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 018CC56E314864291516CE3688AA279164BF
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/q-5ibDpVUhltkxLsvSFglzPGSuU.roa
Signing time: Mon 01 Jan 2024 14:29:42 +0000
ROA not before: Mon 01 Jan 2024 14:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211761
IP address blocks: 45.154.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jan 2024 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:31:48:64:29:15:16:ce:36:88:aa:27:91:64:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Jan 1 14:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abee626c3a5552196d9312ecbd21609733c64ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e1:31:7a:d2:0f:58:99:8a:e1:f2:a8:fc:48:
11:c5:e7:58:cd:17:8d:2b:74:13:d1:36:58:c7:41:
bb:1f:39:97:79:97:99:4a:4b:6c:b5:4f:29:75:83:
eb:8e:2a:c2:62:75:28:13:26:3b:8c:a9:24:78:6e:
9c:95:69:a3:c6:f4:6e:1a:5b:16:a7:6a:a7:d8:9b:
83:0d:32:ed:44:e7:f2:cd:92:b6:f9:55:01:57:68:
ff:f4:64:b8:9d:8e:5b:49:88:f3:25:57:ba:60:1a:
a7:10:08:4f:4c:99:4a:f4:c6:f2:91:85:54:24:96:
da:c1:08:72:3a:31:ff:75:b8:ae:8a:cf:f3:15:e6:
75:48:d9:9a:ba:a1:8f:cc:5a:fb:ea:1d:97:53:48:
6e:71:68:f4:90:d0:40:e1:8a:9f:e6:86:8f:fa:e0:
26:04:e4:2d:04:d4:f8:a5:80:45:a1:8a:db:d3:f9:
23:a2:a3:80:e0:ab:74:d8:0e:52:9d:ae:71:b1:27:
ea:8f:b9:32:46:5a:44:9b:8e:d3:01:e8:8b:93:9e:
4f:e5:c3:33:97:62:05:72:df:fe:a6:c4:81:12:2a:
69:53:11:c3:60:33:e4:c2:f6:8e:08:d8:9f:c3:8e:
17:19:e3:95:ed:c2:be:b3:20:30:a0:d5:3e:56:5c:
9d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EE:62:6C:3A:55:52:19:6D:93:12:EC:BD:21:60:97:33:C6:4A:E5
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/q-5ibDpVUhltkxLsvSFglzPGSuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.207.0/24
Signature Algorithm: sha256WithRSAEncryption
20:c8:e4:b8:74:a3:06:40:98:c2:b7:e8:1c:ea:28:87:c1:ee:
b1:5e:4e:73:95:22:1c:c6:14:ff:d1:18:29:a6:ce:df:e5:63:
a4:ae:72:78:6c:f2:8a:b5:5b:d0:a3:c3:43:fb:ed:f6:48:0e:
0a:e6:5e:40:b4:21:24:e3:8e:be:1f:d1:a8:f7:38:02:cd:5f:
b5:81:49:35:4c:32:b4:d2:e0:6d:77:35:14:e9:26:88:80:ed:
8a:bc:09:79:e6:17:95:bf:d6:33:3c:49:d4:b2:9e:84:a2:23:
ca:db:b7:cf:9b:dd:8e:ca:11:15:be:39:1a:20:27:de:29:92:
3a:a3:fb:0c:66:64:b4:6c:1d:2c:77:d4:2e:d2:c1:f3:30:67:
d4:58:15:c5:f3:52:7d:f4:e8:8b:e7:a6:13:6c:20:73:75:15:
66:36:35:66:4b:82:39:46:74:fe:24:64:47:e6:c1:b5:f8:ee:
3b:a0:5e:2f:a5:4b:32:3f:93:1a:25:f6:fe:4d:4c:ca:2a:de:
7b:bc:1a:07:38:49:aa:d6:00:34:45:8b:99:4b:4f:c5:51:0f:
49:e0:c5:c2:55:29:ba:09:bc:d0:a5:b1:00:53:1d:db:9a:0a:
f2:db:fe:f5:bf:fd:b2:e6:5f:bd:fd:db:5f:42:73:6b:ed:a6:
7a:4b:6a:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbjFIZCkVFs42iKonkWS/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhNzk4ZjBmZTRmNGRmZmRmZWQyYzhlNjJkMjM1NDMwZjQ5
Mzc3Y2QwHhcNMjQwMTAxMTQyOTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmVlNjI2YzNhNTU1MjE5NmQ5MzEyZWNiZDIxNjA5NzMzYzY0YWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOExetIPWJmK4fKo/EgRxedYzReN
K3QT0TZYx0G7HzmXeZeZSktstU8pdYPrjirCYnUoEyY7jKkkeG6clWmjxvRuGlsW
p2qn2JuDDTLtROfyzZK2+VUBV2j/9GS4nY5bSYjzJVe6YBqnEAhPTJlK9MbykYVU
JJbawQhyOjH/dbiuis/zFeZ1SNmauqGPzFr76h2XU0hucWj0kNBA4Yqf5oaP+uAm
BOQtBNT4pYBFoYrb0/kjoqOA4Kt02A5Sna5xsSfqj7kyRlpEm47TAeiLk55P5cMz
l2IFct/+psSBEippUxHDYDPkwvaOCNifw44XGeOV7cK+syAwoNU+VlydWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKvuYmw6VVIZbZMS7L0hYJczxkrlMB8GA1UdIwQY
MBaAFGp5jw/k9N/9/tLI5i0jVDD0k3fNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMt
NzdjZjgxMDQxMDgzLzEvcS01aWJEcFZVaGx0a3hMc3ZTRmdselBHU3VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83Yjc4MjUtYTBmNy00ZjViLTljMjMtNzdjZjgxMDQxMDgz
LzEvYW5tUEQtVDAzXzMtMHNqbUxTTlVNUFNUZDgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZrPMA0G
CSqGSIb3DQEBCwUAA4IBAQAgyOS4dKMGQJjCt+gc6iiHwe6xXk5zlSIcxhT/0Rgp
ps7f5WOkrnJ4bPKKtVvQo8ND++32SA4K5l5AtCEk446+H9Go9zgCzV+1gUk1TDK0
0uBtdzUU6SaIgO2KvAl55heVv9YzPEnUsp6EoiPK27fPm92OyhEVvjkaICfeKZI6
o/sMZmS0bB0sd9Qu0sHzMGfUWBXF81J99OiL56YTbCBzdRVmNjVmS4I5RnT+JGRH
5sG1+O47oF4vpUsyP5MaJfb+TUzKKt57vBoHOEmq1gA0RYuZS0/FUQ9J4MXCVSm6
CbzQpbEAUx3bmgry2/71v/2y5l+9/dtfQnNr7aZ6S2p0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:45 2024 by rpki-client on console-fra.rpki-client.org