Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/RBbXiEormBrJZtpwPiRjWp1PiVI.roa
File: RBbXiEormBrJZtpwPiRjWp1PiVI.roa (raw, json)
Hash identifier: v35EhHE+iCP2ENiT6IHsDcZ7wP9yEj8Itb65T2jRUjI=
Subject key identifier: 44:16:D7:88:4A:2B:98:1A:C9:66:DA:70:3E:24:63:5A:9D:4F:89:52
Certificate issuer: /CN=ebf385ced090dbf1d044734e12a270ee6b841c96
Certificate serial: 018D65061EAC3AF041A657388776C33A0834
Authority key identifier: EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/RBbXiEormBrJZtpwPiRjWp1PiVI.roa
Signing time: Thu 01 Feb 2024 14:15:16 +0000
ROA not before: Thu 01 Feb 2024 14:15:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.141.88.0/24 maxlen: 24
45.141.89.0/24 maxlen: 24
45.141.90.0/24 maxlen: 24
45.141.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 11:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:06:1e:ac:3a:f0:41:a6:57:38:87:76:c3:3a:08:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf385ced090dbf1d044734e12a270ee6b841c96
Validity
Not Before: Feb 1 14:15:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4416d7884a2b981ac966da703e24635a9d4f8952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6b:20:71:fb:90:6b:d6:98:38:f3:20:be:1d:
a6:31:96:dd:ad:14:a8:1e:aa:11:83:fd:06:bd:d2:
d3:de:5c:46:a5:f7:87:23:b8:0d:89:48:68:f0:47:
13:ef:3b:2a:46:eb:44:4f:76:f0:eb:69:7d:fd:5d:
76:c9:ab:8b:a1:bd:9e:f9:13:a2:0e:29:75:a3:54:
16:f4:50:54:dc:af:99:70:e5:99:78:8a:a3:a9:67:
04:22:8a:fd:52:1d:1f:19:8e:6c:d0:db:c9:98:10:
8d:22:e2:65:36:b9:23:b8:4a:c5:7e:04:72:32:cc:
6e:a7:5c:8f:6b:1a:af:46:5d:e2:e5:46:e6:f5:e9:
4f:4a:8b:70:b5:ec:1b:17:c9:26:0e:5a:da:86:31:
eb:0a:76:a6:df:89:c1:b9:da:bc:a8:03:02:4f:e7:
9c:88:d4:5b:bf:c4:1e:7f:d4:b5:70:67:da:c5:94:
28:01:83:50:e5:fe:7b:70:90:33:e3:93:b1:f9:f0:
9d:8c:57:53:f4:f2:a0:3f:04:0a:17:58:6d:22:15:
da:d3:7a:46:0b:1a:a0:db:4a:bd:96:56:0b:ba:cd:
55:bb:78:f0:88:68:79:4c:73:0c:a8:f1:db:0b:35:
fa:fe:49:a0:ef:20:79:eb:70:43:da:0d:22:a1:39:
f0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:16:D7:88:4A:2B:98:1A:C9:66:DA:70:3E:24:63:5A:9D:4F:89:52
X509v3 Authority Key Identifier:
keyid:EB:F3:85:CE:D0:90:DB:F1:D0:44:73:4E:12:A2:70:EE:6B:84:1C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_OFztCQ2_HQRHNOEqJw7muEHJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/RBbXiEormBrJZtpwPiRjWp1PiVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1a9e14-7fb4-489b-90be-465d223b232e/1/6_OFztCQ2_HQRHNOEqJw7muEHJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.88.0/22
Signature Algorithm: sha256WithRSAEncryption
45:47:aa:1c:25:08:98:46:06:85:b4:c0:00:f4:82:6d:74:83:
00:f2:9f:db:ea:91:69:09:c6:e4:eb:4f:51:f1:db:25:af:a3:
a6:2c:b9:43:2e:5e:ca:a5:40:07:d7:00:b1:a3:45:25:af:d2:
ee:1d:84:4e:56:f0:0d:94:be:0a:89:e1:e4:4a:66:5d:79:f3:
4b:49:45:b9:63:5d:5c:14:9a:40:0f:ac:df:69:19:bd:0e:cb:
19:81:0b:9c:d3:b4:50:3a:34:b5:45:ed:32:89:f2:6a:a8:a8:
54:db:8e:e7:11:d1:4b:bd:97:41:a0:bc:08:11:12:a4:91:79:
61:d5:cd:a7:4d:0e:b6:75:6b:ea:67:61:6a:c1:fb:b8:6a:03:
aa:20:3e:d8:98:6c:95:6e:27:ae:79:a9:ba:6a:c6:96:df:ab:
cf:be:9c:a2:88:e0:c9:06:f2:02:c8:6c:72:fd:26:b6:e5:42:
05:08:dd:4a:50:ea:f7:53:dd:fc:6b:4f:24:a8:41:45:2e:6e:
02:1c:da:15:14:06:3a:59:f5:db:ac:ea:36:8c:04:0c:94:af:
25:14:f6:4d:4a:50:8f:4b:70:3c:c9:e9:ed:63:1d:c9:d4:b8:
ba:49:a7:74:5f:9e:c4:a0:f2:b9:7c:bc:8c:e7:e4:f2:2b:df:
1c:95:58:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1lBh6sOvBBplc4h3bDOgg0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZjM4NWNlZDA5MGRiZjFkMDQ0NzM0ZTEyYTI3MGVlNmI4
NDFjOTYwHhcNMjQwMjAxMTQxNTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDE2ZDc4ODRhMmI5ODFhYzk2NmRhNzAzZTI0NjM1YTlkNGY4OTUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2sgcfuQa9aYOPMgvh2mMZbdrRSo
HqoRg/0GvdLT3lxGpfeHI7gNiUho8EcT7zsqRutET3bw62l9/V12yauLob2e+ROi
Dil1o1QW9FBU3K+ZcOWZeIqjqWcEIor9Uh0fGY5s0NvJmBCNIuJlNrkjuErFfgRy
Msxup1yPaxqvRl3i5Ubm9elPSotwtewbF8kmDlrahjHrCnam34nBudq8qAMCT+ec
iNRbv8Qef9S1cGfaxZQoAYNQ5f57cJAz45Ox+fCdjFdT9PKgPwQKF1htIhXa03pG
Cxqg20q9llYLus1Vu3jwiGh5THMMqPHbCzX6/kmg7yB563BD2g0ioTnwIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEQW14hKK5gayWbacD4kY1qdT4lSMB8GA1UdIwQY
MBaAFOvzhc7QkNvx0ERzThKicO5rhByWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8xYTllMTQtN2ZiNC00ODliLTkwYmUt
NDY1ZDIyM2IyMzJlLzEvUkJiWGlFb3JtQnJKWnRwd1BpUmpXcDFQaVZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8xYTllMTQtN2ZiNC00ODliLTkwYmUtNDY1ZDIyM2IyMzJl
LzEvNl9PRnp0Q1EyX0hRUkhOT0VxSnc3bXVFSEpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLY1YMA0G
CSqGSIb3DQEBCwUAA4IBAQBFR6ocJQiYRgaFtMAA9IJtdIMA8p/b6pFpCcbk609R
8dslr6OmLLlDLl7KpUAH1wCxo0Ulr9LuHYROVvANlL4KieHkSmZdefNLSUW5Y11c
FJpAD6zfaRm9DssZgQuc07RQOjS1Re0yifJqqKhU247nEdFLvZdBoLwIERKkkXlh
1c2nTQ62dWvqZ2Fqwfu4agOqID7YmGyVbieueam6asaW36vPvpyiiODJBvICyGxy
/Sa25UIFCN1KUOr3U938a08kqEFFLm4CHNoVFAY6WfXbrOo2jAQMlK8lFPZNSlCP
S3A8yentYx3J1Li6Sad0X57EoPK5fLyM5+TyK98clVje
-----END CERTIFICATE-----
Generated at Mon Apr 29 17:07:23 2024 by rpki-client on console-fra.rpki-client.org