Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/k3W6mPel-JKxHuHPBzC9MYalQRg.roa
File: k3W6mPel-JKxHuHPBzC9MYalQRg.roa (raw, json)
Hash identifier: yNcurEImgrDy100CNVvf3vQ1HqPy7zdVr4fyoEGzWMM=
Subject key identifier: 93:75:BA:98:F7:A5:F8:92:B1:1E:E1:CF:07:30:BD:31:86:A5:41:18
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 018CC5003D67BC40CDB6C19A2FD00132BDB2
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/k3W6mPel-JKxHuHPBzC9MYalQRg.roa
Signing time: Mon 01 Jan 2024 12:29:36 +0000
ROA not before: Mon 01 Jan 2024 12:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48528
IP address blocks: 45.150.108.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 07:48:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:3d:67:bc:40:cd:b6:c1:9a:2f:d0:01:32:bd:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 12:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9375ba98f7a5f892b11ee1cf0730bd3186a54118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:61:e6:e6:d1:79:a2:eb:f2:24:6a:a5:25:2e:
35:cc:93:c7:0d:92:86:07:b5:72:9d:99:9e:e4:0d:
b4:0a:d1:40:d9:e9:ff:2f:bc:48:b0:06:13:a7:58:
aa:70:49:26:f7:12:3c:26:99:55:67:64:d3:d9:1a:
3a:05:fb:40:43:dc:36:46:1d:ee:4f:c6:eb:5c:41:
11:de:86:07:2e:af:a3:26:ca:6b:21:e7:d0:3e:e3:
24:66:97:5d:8c:f5:27:fa:a8:2a:e5:c6:6d:0c:f2:
2a:1b:19:c5:2b:fd:41:5e:ed:cb:59:a0:e1:40:74:
11:54:5f:6e:39:b0:67:58:52:5a:82:90:95:2b:fe:
9d:39:d4:d6:cd:23:62:79:01:07:6d:e7:fa:63:13:
b2:51:3b:e4:23:f6:a9:17:16:85:d4:f1:ed:81:2b:
3e:1b:e6:63:b6:7a:30:10:75:7e:cd:41:ee:5f:cb:
9d:27:60:7c:5f:60:a9:36:bb:9d:06:d7:e5:f6:9c:
13:42:1f:68:b3:4b:0e:1d:78:a7:16:02:57:8a:2b:
59:cb:b1:12:9a:19:2b:ce:e4:0c:9c:b8:12:cd:cf:
6b:63:43:59:f1:5d:af:ce:91:d3:b7:c0:c6:6a:82:
4d:8b:0e:7f:07:57:4d:7e:f9:2b:70:ce:c0:45:e6:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:75:BA:98:F7:A5:F8:92:B1:1E:E1:CF:07:30:BD:31:86:A5:41:18
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/k3W6mPel-JKxHuHPBzC9MYalQRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.108.0/24
Signature Algorithm: sha256WithRSAEncryption
34:81:6d:11:12:1d:0f:0d:6b:40:b5:d2:d9:f3:1d:66:b0:84:
24:6d:43:40:a3:1e:91:0b:29:0a:ba:cf:4b:1f:e7:1b:9a:ce:
e0:d3:eb:49:20:57:32:0c:e4:f5:fc:97:7f:4f:ad:70:05:fe:
f9:90:a9:d5:84:60:3a:07:28:e1:b1:0a:39:3c:fd:4d:59:0c:
7b:cd:76:08:91:5a:7c:0c:d9:31:02:46:85:33:85:4e:36:8d:
8d:9a:d4:dd:ac:ff:1b:b1:a0:84:fa:f3:16:6d:97:dd:67:68:
7b:0f:19:bf:58:01:63:7e:d4:97:68:18:94:18:53:81:82:c5:
0a:00:82:3c:cd:9f:39:a2:a9:bf:a8:25:1e:b1:6f:91:06:39:
32:d1:0b:27:cf:ae:6c:f9:ed:ff:55:0e:60:f6:85:0a:99:c7:
6e:96:0b:8f:ff:5b:83:b2:e0:f9:d9:d8:c3:63:6b:87:a6:40:
be:b8:61:6a:ec:0a:12:eb:9e:bb:ee:f9:9c:91:1f:27:a0:75:
a6:74:b0:64:94:45:f2:27:95:b8:11:99:95:00:e6:cc:a8:60:
d7:fb:4c:d7:47:41:f5:e7:26:70:2f:eb:a9:ef:5d:c9:da:63:
75:6d:cd:62:40:88:f5:4d:e5:99:35:d1:dd:14:72:bd:9d:61:
8a:1e:80:76
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAD1nvEDNtsGaL9ABMr2yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3
MjRmNzUwHhcNMjQwMTAxMTIyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Mzc1YmE5OGY3YTVmODkyYjExZWUxY2YwNzMwYmQzMTg2YTU0MTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmHm5tF5ouvyJGqlJS41zJPHDZKG
B7VynZme5A20CtFA2en/L7xIsAYTp1iqcEkm9xI8JplVZ2TT2Ro6BftAQ9w2Rh3u
T8brXEER3oYHLq+jJsprIefQPuMkZpddjPUn+qgq5cZtDPIqGxnFK/1BXu3LWaDh
QHQRVF9uObBnWFJagpCVK/6dOdTWzSNieQEHbef6YxOyUTvkI/apFxaF1PHtgSs+
G+ZjtnowEHV+zUHuX8udJ2B8X2CpNrudBtfl9pwTQh9os0sOHXinFgJXiitZy7ES
mhkrzuQMnLgSzc9rY0NZ8V2vzpHTt8DGaoJNiw5/B1dNfvkrcM7AReY+ZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJN1upj3pfiSsR7hzwcwvTGGpUEYMB8GA1UdIwQY
MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt
MzZkZTY1NzIzMmJlLzEvazNXNm1QZWwtSkt4SHVIUEJ6QzlNWWFsUVJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl
LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZZsMA0G
CSqGSIb3DQEBCwUAA4IBAQA0gW0REh0PDWtAtdLZ8x1msIQkbUNAox6RCykKus9L
H+cbms7g0+tJIFcyDOT1/Jd/T61wBf75kKnVhGA6ByjhsQo5PP1NWQx7zXYIkVp8
DNkxAkaFM4VONo2NmtTdrP8bsaCE+vMWbZfdZ2h7Dxm/WAFjftSXaBiUGFOBgsUK
AII8zZ85oqm/qCUesW+RBjky0Qsnz65s+e3/VQ5g9oUKmcdulguP/1uDsuD52djD
Y2uHpkC+uGFq7AoS65677vmckR8noHWmdLBklEXyJ5W4EZmVAObMqGDX+0zXR0H1
5yZwL+up713J2mN1bc1iQIj1TeWZNdHdFHK9nWGKHoB2
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org