Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ia7mxHwBiI0syLx5HotCyHGclYU.roa
File: Ia7mxHwBiI0syLx5HotCyHGclYU.roa (raw, json)
Hash identifier: aspsru+Cq3BGkTSzo/j+JKnZ283dy37iKNBzQWP/t5g=
Subject key identifier: 21:AE:E6:C4:7C:01:88:8D:2C:C8:BC:79:1E:8B:42:C8:71:9C:95:85
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019029CFAEB824D0DEBB699FB035AF10A555
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ia7mxHwBiI0syLx5HotCyHGclYU.roa
Signing time: Tue 18 Jun 2024 05:26:34 +0000
ROA not before: Tue 18 Jun 2024 05:26:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 5.252.132.0/22 maxlen: 24
45.90.88.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Oct 2024 08:45:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:29:cf:ae:b8:24:d0:de:bb:69:9f:b0:35:af:10:a5:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 18 05:26:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21aee6c47c01888d2cc8bc791e8b42c8719c9585
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:81:4d:fa:69:44:b0:b0:76:45:41:0b:01:2c:
fb:b9:3e:38:6d:da:e7:7a:83:4d:d7:a8:47:9a:03:
e1:be:5c:6a:9d:35:e7:9e:85:73:45:68:1b:ba:da:
bb:ad:38:a9:3f:7b:b1:45:0b:10:9e:d8:33:33:89:
17:d5:e9:90:f4:65:6a:98:0f:c6:90:a0:fc:09:d8:
94:19:8b:c5:06:81:74:52:ce:75:77:04:19:b9:f4:
6a:fd:ee:d6:2f:3a:a6:1e:90:0f:b6:4a:95:1b:3b:
a2:d0:37:63:70:67:21:0e:7d:72:49:ec:ff:fa:a7:
06:6e:87:89:20:c3:a3:37:5f:75:89:b2:df:42:6c:
fa:96:d4:4d:3f:3a:95:13:3d:4b:8e:61:ab:82:5b:
3e:10:28:b4:8f:13:61:17:f7:13:27:a9:54:14:17:
bd:34:61:1d:75:0b:14:9f:08:46:ed:78:97:29:45:
21:64:0e:f6:6d:96:bf:d8:4a:72:d1:9e:1f:58:38:
c8:a1:bb:22:f5:90:26:18:99:e5:ed:ed:f5:7b:56:
b2:3f:cc:b4:a6:a2:09:43:d7:cd:32:c1:96:99:6a:
30:2b:6d:33:d8:39:4d:93:10:79:7a:af:77:1c:1c:
74:7c:99:86:81:a2:87:ac:c2:36:5b:97:fa:5f:d2:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:AE:E6:C4:7C:01:88:8D:2C:C8:BC:79:1E:8B:42:C8:71:9C:95:85
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Ia7mxHwBiI0syLx5HotCyHGclYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.132.0/22
45.90.88.0/23
Signature Algorithm: sha256WithRSAEncryption
69:ce:53:5e:3f:74:37:a2:e7:15:8f:00:d0:38:17:70:02:cf:
30:82:f9:63:da:d8:c2:9c:cf:27:27:2a:c7:db:4d:a0:5c:f7:
a9:01:53:ac:b0:0c:bb:ac:a6:b4:bf:65:18:da:dd:0f:a0:8d:
90:0e:bb:e6:3e:0d:b4:e9:89:16:e8:bd:73:8b:96:3f:3a:13:
00:43:2b:f1:f7:6a:3b:ac:f3:2f:8c:ca:12:c7:5f:01:39:c8:
a0:8c:5e:db:b6:ee:c9:b3:d0:e5:db:b5:bc:39:0f:e8:87:fd:
ea:10:9e:76:df:cd:0d:30:64:5f:e5:82:97:43:2f:ff:c7:3c:
8e:fc:fe:e5:bd:6a:8c:be:26:ce:9f:4d:99:f9:e6:e2:0a:f5:
19:52:2c:ae:22:82:1f:39:5f:ca:2d:2b:c3:ae:ab:53:60:9e:
4e:d5:af:52:b8:05:13:c9:6f:fc:0c:0f:8c:1e:f5:4d:b8:ab:
11:ee:02:2c:da:08:2c:e3:25:42:26:4b:c9:9d:6b:d6:75:a5:
a4:73:74:41:c4:3e:0a:c0:85:16:6a:0f:66:cd:94:93:0d:d0:
df:b5:8a:30:d0:47:17:8e:ae:a1:ab:3f:df:86:ce:b1:2a:90:
23:65:5f:1f:7b:95:fa:90:e6:2a:1b:fd:70:47:d4:67:7d:3c:
90:64:07:8a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZApz664JNDeu2mfsDWvEKVVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNjE4MDUyNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWFlZTZjNDdjMDE4ODhkMmNjOGJjNzkxZThiNDJjODcxOWM5NTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54FN+mlEsLB2RUELASz7uT44bdrn
eoNN16hHmgPhvlxqnTXnnoVzRWgbutq7rTipP3uxRQsQntgzM4kX1emQ9GVqmA/G
kKD8CdiUGYvFBoF0Us51dwQZufRq/e7WLzqmHpAPtkqVGzui0DdjcGchDn1ySez/
+qcGboeJIMOjN191ibLfQmz6ltRNPzqVEz1LjmGrgls+ECi0jxNhF/cTJ6lUFBe9
NGEddQsUnwhG7XiXKUUhZA72bZa/2Epy0Z4fWDjIobsi9ZAmGJnl7e31e1ayP8y0
pqIJQ9fNMsGWmWowK20z2DlNkxB5eq93HBx0fJmGgaKHrMI2W5f6X9K76wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCGu5sR8AYiNLMi8eR6LQshxnJWFMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvSWE3bXhId0JpSTBzeUx4NUhvdEN5SEdjbFlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCBfyEAwQB
LVpYMA0GCSqGSIb3DQEBCwUAA4IBAQBpzlNeP3Q3oucVjwDQOBdwAs8wgvlj2tjC
nM8nJyrH202gXPepAVOssAy7rKa0v2UY2t0PoI2QDrvmPg206YkW6L1zi5Y/OhMA
Qyvx92o7rPMvjMoSx18BOcigjF7btu7Js9Dl27W8OQ/oh/3qEJ52380NMGRf5YKX
Qy//xzyO/P7lvWqMvibOn02Z+ebiCvUZUiyuIoIfOV/KLSvDrqtTYJ5O1a9SuAUT
yW/8DA+MHvVNuKsR7gIs2ggs4yVCJkvJnWvWdaWkc3RBxD4KwIUWag9mzZSTDdDf
tYow0EcXjq6hqz/fhs6xKpAjZV8fe5X6kOYqG/1wR9RnfTyQZAeK
-----END CERTIFICATE-----
Generated at Sat Oct 12 10:59:27 2024 by rpki-client on console-ams.rpki-client.org