Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/wP_mBYQttgm7CtDAFtlq1m8eVOQ.roa
File: wP_mBYQttgm7CtDAFtlq1m8eVOQ.roa (raw, json)
Hash identifier: z1wBtJ4x18CUXYeqJtgHoN8tuuJ0q/2XCeJDB58V25M=
Subject key identifier: C0:FF:E6:05:84:2D:B6:09:BB:0A:D0:C0:16:D9:6A:D6:6F:1E:54:E4
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 018963C685DA6C9560996F2DA414C525D674
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/wP_mBYQttgm7CtDAFtlq1m8eVOQ.roa
Signing time: Mon 17 Jul 2023 12:15:02 +0000
ROA not before: Mon 17 Jul 2023 12:15:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 45.152.58.0/23 maxlen: 23
45.152.56.0/23 maxlen: 23
45.149.90.0/23 maxlen: 23
45.149.88.0/23 maxlen: 23
45.141.204.0/23 maxlen: 23
195.88.190.0/23 maxlen: 24
195.88.210.0/23 maxlen: 24
45.148.51.0/24 maxlen: 24
45.148.64.0/23 maxlen: 23
45.148.66.0/23 maxlen: 23
45.152.36.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 18 Oct 2023 11:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:63:c6:85:da:6c:95:60:99:6f:2d:a4:14:c5:25:d6:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Jul 17 12:15:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c0ffe605842db609bb0ad0c016d96ad66f1e54e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cf:d4:1f:a1:f0:e5:a7:36:64:1b:f6:b5:0b:
33:30:10:7f:6c:9e:fb:1f:91:f9:75:5a:cb:8e:70:
a0:7d:ac:b9:ed:6d:03:b2:0c:13:03:9b:a5:4c:c4:
ad:dd:3f:4c:ed:f4:58:21:fb:af:06:84:8a:a6:d9:
32:be:7d:f6:ff:62:70:f8:9f:bb:05:a2:bc:52:cf:
c5:15:18:12:1d:d8:e2:9a:fd:40:be:c6:19:ea:78:
e7:fd:d0:18:ee:dc:28:ac:b6:72:d8:27:6b:20:c8:
f6:1e:84:9f:a9:bf:07:d3:45:59:d4:e3:f2:3e:46:
d9:58:9f:b1:c6:36:8c:f6:d6:2f:d3:a9:b5:c5:48:
9b:57:70:8a:7b:d9:32:00:e7:40:ab:b9:78:d7:3b:
fb:0b:9d:09:df:49:63:5b:02:31:90:73:15:e4:95:
5a:a4:c5:50:3d:ac:95:8d:7e:2e:76:f3:25:16:6f:
51:94:e7:57:e8:76:f5:e3:cb:dc:5f:fa:32:ba:8d:
de:b2:64:36:5d:14:6e:81:b1:0f:79:45:64:94:9a:
e4:5b:29:95:d3:64:13:b6:a2:eb:80:69:14:5c:ab:
51:37:06:c0:aa:03:77:35:c7:e3:6c:89:d1:f0:2f:
fa:0b:2c:5b:32:3a:30:08:a9:30:8e:bd:b3:85:8d:
2a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FF:E6:05:84:2D:B6:09:BB:0A:D0:C0:16:D9:6A:D6:6F:1E:54:E4
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/wP_mBYQttgm7CtDAFtlq1m8eVOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.204.0/23
45.148.51.0/24
45.148.64.0/22
45.149.88.0/22
45.152.36.0/23
45.152.56.0/22
195.88.190.0/23
195.88.210.0/23
Signature Algorithm: sha256WithRSAEncryption
81:98:5d:16:eb:da:22:7c:be:ed:14:5d:f7:e4:a5:e7:72:45:
e2:b9:e3:2a:4c:67:75:28:99:ec:1d:b3:94:7c:e9:27:e9:d2:
7a:c1:5b:73:c0:80:6b:72:5f:78:f0:77:9e:50:46:88:a9:05:
88:f1:6c:81:8b:b5:4f:88:e7:60:0c:2b:80:fe:af:97:79:5f:
1a:4e:9b:e2:3b:2b:f0:3c:f2:98:0f:73:6d:54:ae:f9:d0:c7:
f7:5d:6b:40:2f:72:77:70:d2:d6:34:7d:cd:80:3b:2b:04:89:
b9:dd:ce:ed:cf:c7:0f:59:61:00:25:12:51:0c:1e:2a:79:84:
0c:29:ca:ae:41:ec:42:64:2a:1c:c0:eb:df:22:cd:f1:82:1b:
84:f7:f5:6a:9b:f3:16:6b:3b:6b:9a:cc:59:22:c5:a6:7a:e7:
df:2f:8d:7c:19:5e:6d:0e:d3:ea:e8:a5:ab:f0:de:1c:e8:01:
97:af:23:84:32:29:3e:6e:40:a7:fd:17:ea:af:66:17:c0:df:
b8:2b:e2:fb:fd:a8:5a:eb:47:9c:02:14:c0:42:a9:9e:d5:a8:
bc:69:cd:09:3d:11:c6:24:90:3d:db:e6:5d:dc:ed:33:0f:71:
19:c8:6c:2e:3d:fb:51:3f:54:5c:7b:61:cb:af:01:f4:88:94:
89:c5:02:32
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAYljxoXabJVgmW8tpBTFJdZ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjMwNzE3MTIxNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGZmZTYwNTg0MmRiNjA5YmIwYWQwYzAxNmQ5NmFkNjZmMWU1NGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28/UH6Hw5ac2ZBv2tQszMBB/bJ77
H5H5dVrLjnCgfay57W0DsgwTA5ulTMSt3T9M7fRYIfuvBoSKptkyvn32/2Jw+J+7
BaK8Us/FFRgSHdjimv1AvsYZ6njn/dAY7tworLZy2CdrIMj2HoSfqb8H00VZ1OPy
PkbZWJ+xxjaM9tYv06m1xUibV3CKe9kyAOdAq7l41zv7C50J30ljWwIxkHMV5JVa
pMVQPayVjX4udvMlFm9RlOdX6Hb148vcX/oyuo3esmQ2XRRugbEPeUVklJrkWymV
02QTtqLrgGkUXKtRNwbAqgN3NcfjbInR8C/6CyxbMjowCKkwjr2zhY0qOQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFMD/5gWELbYJuwrQwBbZatZvHlTkMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvd1BfbUJZUXR0Z203Q3REQUZ0bHExbThlVk9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBLY3MAwQA
LZQzAwQCLZRAAwQCLZVYAwQBLZgkAwQCLZg4AwQBw1i+AwQBw1jSMA0GCSqGSIb3
DQEBCwUAA4IBAQCBmF0W69oifL7tFF335KXnckXiueMqTGd1KJnsHbOUfOkn6dJ6
wVtzwIBrcl948HeeUEaIqQWI8WyBi7VPiOdgDCuA/q+XeV8aTpviOyvwPPKYD3Nt
VK750Mf3XWtAL3J3cNLWNH3NgDsrBIm53c7tz8cPWWEAJRJRDB4qeYQMKcquQexC
ZCocwOvfIs3xghuE9/Vqm/MWaztrmsxZIsWmeuffL418GV5tDtPq6KWr8N4c6AGX
ryOEMik+bkCn/Rfqr2YXwN+4K+L7/aha60ecAhTAQqme1ai8ac0JPRHGJJA92+Zd
3O0zD3EZyGwuPftRP1Rce2HLrwH0iJSJxQIy
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:26 2024 by rpki-client on console-fra.rpki-client.org