Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k1nofw2AN4WZMCCZhGOaKp7euP4.roa
File: k1nofw2AN4WZMCCZhGOaKp7euP4.roa (raw, json)
Hash identifier: xXZW0VX8wHYZL9z6gkqDVlMjdEX+0t1C3V7Z3l+uGCA=
Subject key identifier: 93:59:E8:7F:0D:80:37:85:99:30:20:99:84:63:9A:2A:9E:DE:B8:FE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018D5BD6F76CAB32755865BE965442DA02E4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k1nofw2AN4WZMCCZhGOaKp7euP4.roa
Signing time: Tue 30 Jan 2024 19:27:11 +0000
ROA not before: Tue 30 Jan 2024 19:27:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203168
IP address blocks: 45.128.96.0/24 maxlen: 24
193.222.96.0/24 maxlen: 24
194.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 08:08:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5b:d6:f7:6c:ab:32:75:58:65:be:96:54:42:da:02:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 30 19:27:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9359e87f0d8037859930209984639a2a9edeb8fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:48:74:9f:5a:1a:60:51:66:ac:e3:2a:ef:e7:
39:eb:b8:6e:71:f5:9b:1b:aa:00:cd:b3:03:d6:4a:
6b:e7:8f:cb:14:9a:62:20:ee:90:94:89:e6:70:3a:
00:1f:52:89:a8:5e:34:f4:01:cf:84:f9:83:6e:bc:
45:36:86:22:7b:f8:61:9a:73:02:38:40:52:3f:7c:
25:bb:29:47:b7:c3:44:0d:45:6a:49:a2:7e:c6:ef:
a8:02:61:51:01:17:17:c0:d3:9c:23:45:bd:ec:e1:
a3:bf:3c:e1:7e:69:ba:ac:25:d2:5b:77:78:f8:12:
01:f4:f8:ea:a3:7b:03:62:d0:26:f8:b7:75:d5:18:
16:35:e2:5e:82:8a:7d:55:0b:8e:19:15:51:8d:0b:
e1:ba:50:98:1f:d8:6d:63:f8:0f:e0:3b:69:c4:a9:
cb:2a:27:55:3e:3c:4e:c4:a7:0b:a1:fd:4c:1c:04:
95:f0:51:8f:62:83:40:19:df:90:34:2b:52:73:4c:
7c:0a:9f:30:0a:09:a5:4f:37:ce:e3:74:45:3f:0d:
f9:be:22:21:f5:9a:cd:10:43:f8:b6:26:ad:f1:b1:
db:55:8d:db:a2:f9:08:70:bb:19:f6:d0:f9:a0:50:
d8:7d:4e:4e:27:8f:0c:ef:78:8d:d3:a2:80:aa:0f:
84:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:59:E8:7F:0D:80:37:85:99:30:20:99:84:63:9A:2A:9E:DE:B8:FE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/k1nofw2AN4WZMCCZhGOaKp7euP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.96.0/24
193.222.96.0/24
194.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
29:91:af:99:66:6e:f9:09:da:0e:82:10:3b:10:0c:0e:79:b9:
49:44:85:b6:36:57:3e:fc:56:6e:b2:ea:c6:12:43:36:58:6f:
7a:8f:15:d7:2c:6f:d7:bd:8f:8d:6d:11:58:a1:61:03:a3:12:
5c:69:06:ca:61:e2:18:7c:75:6d:05:67:05:39:1b:f3:25:93:
1f:7f:9d:05:7b:a0:6c:29:7b:0d:a4:79:c4:03:fb:60:a4:a3:
45:4e:89:1e:6d:79:91:a6:ee:18:5f:c1:a5:ac:6e:a2:fc:2f:
06:14:9a:40:f7:63:6f:cf:2a:7c:7c:c6:ef:6b:03:45:75:f7:
6b:f4:5c:a3:f8:b7:14:af:a3:ce:e7:6e:e4:3b:13:02:20:b9:
dd:d7:84:ee:85:c7:9b:c8:df:bd:4e:83:94:fa:a9:91:c1:79:
57:81:d1:92:10:f8:81:d0:3e:ba:16:f9:1f:60:23:d8:90:44:
54:72:18:6d:b5:32:6a:a2:d0:ef:bc:2e:7b:bf:72:38:fb:25:
d4:8f:03:af:ac:5c:fa:8b:02:a5:b0:1e:4e:58:97:88:10:86:
67:4d:d3:f1:e1:a3:f1:02:b2:4c:9e:09:14:ce:ba:75:1d:51:
f7:2c:e9:47:aa:b0:0e:52:d3:91:82:92:d4:f5:c6:c6:36:35:
75:a6:43:4c
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY1b1vdsqzJ1WGW+llRC2gLkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTMwMTkyNzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzU5ZTg3ZjBkODAzNzg1OTkzMDIwOTk4NDYzOWEyYTllZGViOGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUh0n1oaYFFmrOMq7+c567hucfWb
G6oAzbMD1kpr54/LFJpiIO6QlInmcDoAH1KJqF409AHPhPmDbrxFNoYie/hhmnMC
OEBSP3wluylHt8NEDUVqSaJ+xu+oAmFRARcXwNOcI0W97OGjvzzhfmm6rCXSW3d4
+BIB9Pjqo3sDYtAm+Ld11RgWNeJegop9VQuOGRVRjQvhulCYH9htY/gP4DtpxKnL
KidVPjxOxKcLof1MHASV8FGPYoNAGd+QNCtSc0x8Cp8wCgmlTzfO43RFPw35viIh
9ZrNEEP4tiat8bHbVY3bovkIcLsZ9tD5oFDYfU5OJ48M73iN06KAqg+EfwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFJNZ6H8NgDeFmTAgmYRjmiqe3rj+MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvazFub2Z3MkFONFdaTUNDWmhHT2FLcDdldVA0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYBgAwQA
wd5gAwQAwjD7MA0GCSqGSIb3DQEBCwUAA4IBAQApka+ZZm75CdoOghA7EAwOeblJ
RIW2Nlc+/FZusurGEkM2WG96jxXXLG/XvY+NbRFYoWEDoxJcaQbKYeIYfHVtBWcF
ORvzJZMff50Fe6BsKXsNpHnEA/tgpKNFTokebXmRpu4YX8GlrG6i/C8GFJpA92Nv
zyp8fMbvawNFdfdr9Fyj+LcUr6PO527kOxMCILnd14TuhcebyN+9ToOU+qmRwXlX
gdGSEPiB0D66FvkfYCPYkERUchhttTJqotDvvC57v3I4+yXUjwOvrFz6iwKlsB5O
WJeIEIZnTdPx4aPxArJMngkUzrp1HVH3LOlHqrAOUtORgpLU9cbGNjV1pkNM
-----END CERTIFICATE-----
Generated at Tue Feb 6 12:06:55 2024 by rpki-client on console-ams.rpki-client.org