Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/2Kh0tMe8V72F0RVwNiDBo3D5GUU.roa
File: 2Kh0tMe8V72F0RVwNiDBo3D5GUU.roa (raw, json)
Hash identifier: oaKMOwghrdkNOyZsTOMujlGtVIIlRhUaT5Z1Yoi2SJs=
Subject key identifier: D8:A8:74:B4:C7:BC:57:BD:85:D1:15:70:36:20:C1:A3:70:F9:19:45
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 018CC3B6885CE5FB2E556128515E95994ED3
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/2Kh0tMe8V72F0RVwNiDBo3D5GUU.roa
Signing time: Mon 01 Jan 2024 06:29:28 +0000
ROA not before: Mon 01 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197706
IP address blocks: 188.68.0.0/23 maxlen: 32
45.67.0.0/22 maxlen: 32
Validation: Failed, certificate revoked on Thu 11 Jan 2024 10:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:88:5c:e5:fb:2e:55:61:28:51:5e:95:99:4e:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 1 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d8a874b4c7bc57bd85d115703620c1a370f91945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:83:9a:68:5b:2c:74:5f:a1:d9:a5:49:3c:
53:15:67:25:3b:0a:49:7e:d0:83:91:94:2b:e9:5c:
e9:0a:41:8d:89:4e:1b:15:f4:77:3a:65:65:0d:17:
2c:f7:64:9c:bf:18:5c:09:bf:46:b3:6b:e3:7c:02:
3b:a8:4c:8d:fe:bf:1d:8d:9a:bc:ce:ac:ce:9c:59:
73:94:90:af:36:27:ab:8c:6d:85:36:be:d0:59:88:
a2:f5:50:4a:85:6d:0d:e0:b8:c1:69:67:c3:93:40:
c4:dc:53:4f:b2:34:63:5c:5c:28:7e:ed:f3:b2:8f:
ae:ef:37:8c:c8:0a:8e:44:b4:72:f7:26:5e:0e:ab:
2f:6c:f7:6f:3e:75:0d:db:01:5c:c0:6d:98:74:32:
26:25:7c:b2:bd:fd:62:86:5b:6f:34:35:6d:4d:79:
b5:8b:97:b2:76:74:c5:8e:8c:9a:9e:85:28:15:55:
ee:ba:a8:82:39:6d:46:b8:e2:a7:36:eb:d9:aa:c7:
21:8d:4f:1c:fc:5c:a8:1b:48:eb:44:ae:c2:5a:73:
82:46:d7:58:f5:41:53:2e:ca:86:18:98:aa:a5:dd:
7f:56:39:21:3a:98:a2:dc:84:72:dd:98:c8:33:5d:
1a:b2:f7:3e:a3:73:a3:fa:cf:8b:00:f8:9a:15:ce:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A8:74:B4:C7:BC:57:BD:85:D1:15:70:36:20:C1:A3:70:F9:19:45
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/2Kh0tMe8V72F0RVwNiDBo3D5GUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.0.0/22
188.68.0.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:cd:e0:42:0f:8d:97:7c:20:ec:a0:de:df:95:66:13:8f:39:
ab:26:02:d1:63:29:8c:80:86:f7:e9:d2:e6:4f:bb:d0:c5:88:
b2:d4:ee:40:ca:aa:0b:ba:4e:08:26:19:2c:20:20:3d:3c:d7:
23:bd:a6:a2:7b:1f:1e:fa:bb:93:e0:c6:27:75:c6:a7:15:7e:
7d:5c:d6:0e:d9:cf:e2:bd:f0:f8:a2:87:d1:21:a9:85:40:27:
a9:d8:0d:7f:62:3a:ef:89:0b:59:ef:59:05:a9:7f:05:75:3e:
85:41:bd:c1:e8:7d:18:9e:f0:9e:fe:69:ba:a8:e0:3d:ae:23:
1e:d8:92:98:42:e9:06:a2:51:b7:10:9c:20:ae:0e:de:95:84:
c6:21:38:63:3e:a4:a8:6a:44:b7:94:15:29:a9:44:cb:95:7f:
56:b4:ee:4d:03:c5:18:69:d8:6c:8e:6f:fd:13:a6:b6:86:b6:
cd:a9:ef:43:fa:58:65:45:2f:ff:99:fa:ea:bb:17:57:71:02:
a7:64:63:12:d6:12:2c:4f:27:b7:49:21:9c:03:16:27:37:c2:
01:e6:4c:ec:cc:a2:14:89:dd:5d:5c:d2:1f:75:fc:2f:91:b6:
dc:24:3f:50:55:82:56:93:a0:ff:33:28:0e:e6:d6:be:b1:89:
51:72:29:19
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDtohc5fsuVWEoUV6VmU7TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx
OWE3NGUwHhcNMjQwMTAxMDYyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOGE4NzRiNGM3YmM1N2JkODVkMTE1NzAzNjIwYzFhMzcwZjkxOTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwC2DmmhbLHRfodmlSTxTFWclOwpJ
ftCDkZQr6VzpCkGNiU4bFfR3OmVlDRcs92ScvxhcCb9Gs2vjfAI7qEyN/r8djZq8
zqzOnFlzlJCvNierjG2FNr7QWYii9VBKhW0N4LjBaWfDk0DE3FNPsjRjXFwofu3z
so+u7zeMyAqORLRy9yZeDqsvbPdvPnUN2wFcwG2YdDImJXyyvf1ihltvNDVtTXm1
i5eydnTFjoyanoUoFVXuuqiCOW1GuOKnNuvZqschjU8c/FyoG0jrRK7CWnOCRtdY
9UFTLsqGGJiqpd1/VjkhOpii3IRy3ZjIM10asvc+o3Oj+s+LAPiaFc4+KwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNiodLTHvFe9hdEVcDYgwaNw+RlFMB8GA1UdIwQY
MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct
OTViMDhlMzY2MGNmLzEvMktoMHRNZThWNzJGMFJWd05pREJvM0Q1R1VVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm
LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLUMAAwQB
vEQAMA0GCSqGSIb3DQEBCwUAA4IBAQA9zeBCD42XfCDsoN7flWYTjzmrJgLRYymM
gIb36dLmT7vQxYiy1O5AyqoLuk4IJhksICA9PNcjvaaiex8e+ruT4MYndcanFX59
XNYO2c/ivfD4oofRIamFQCep2A1/YjrviQtZ71kFqX8FdT6FQb3B6H0YnvCe/mm6
qOA9riMe2JKYQukGolG3EJwgrg7elYTGIThjPqSoakS3lBUpqUTLlX9WtO5NA8UY
adhsjm/9E6a2hrbNqe9D+lhlRS//mfrquxdXcQKnZGMS1hIsTye3SSGcAxYnN8IB
5kzszKIUid1dXNIfdfwvkbbcJD9QVYJWk6D/MygO5ta+sYlRcikZ
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:47 2024 by rpki-client on console-ams.rpki-client.org