Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/rcKBHWQU52NHbQwOqgbrTVfPPZM.roa
File: rcKBHWQU52NHbQwOqgbrTVfPPZM.roa (raw, json)
Hash identifier: inrKrbWp/uBLyVyLHz1xvqahfClpYnrRgll08/s3xdQ=
Subject key identifier: AD:C2:81:1D:64:14:E7:63:47:6D:0C:0E:AA:06:EB:4D:57:CF:3D:93
Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Certificate serial: 018E659DD0ECAC927A8C851F07079E99E0E9
Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/rcKBHWQU52NHbQwOqgbrTVfPPZM.roa
Signing time: Fri 22 Mar 2024 10:03:45 +0000
ROA not before: Fri 22 Mar 2024 10:03:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24875
IP address blocks: 45.94.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 07 May 2024 19:44:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:65:9d:d0:ec:ac:92:7a:8c:85:1f:07:07:9e:99:e0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f
Validity
Not Before: Mar 22 10:03:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adc2811d6414e763476d0c0eaa06eb4d57cf3d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:de:13:f0:65:61:a0:bf:1b:4c:a4:f5:0c:
b7:cd:05:ed:10:8f:94:09:da:e4:96:fb:0b:49:c2:
ec:7c:8e:4e:83:f2:29:60:ff:cd:a8:a7:57:62:e4:
51:23:31:0b:b6:d2:3f:c9:ef:e1:0b:d0:5e:ee:90:
e1:2e:09:8a:0c:67:87:b5:9a:30:03:0b:62:2c:fb:
6b:8d:ad:4e:f9:63:62:b7:ec:8c:ec:3f:28:11:30:
f1:35:05:2a:bc:13:6a:dd:b4:cd:b6:52:85:96:b5:
26:11:0f:bf:ba:d7:14:16:40:22:18:ff:41:37:7b:
1a:d4:e5:b5:b4:72:0c:8e:0b:c8:b4:3a:00:43:be:
c4:22:fd:c2:0e:10:94:66:6e:68:8d:4c:d0:0e:f3:
3b:ac:98:5e:56:5c:21:89:7b:eb:ff:7a:a5:61:57:
cd:4e:92:bb:41:d4:6e:01:b6:39:52:cc:f4:3d:97:
66:8f:d5:6f:3b:f1:23:a5:2a:4b:47:05:f8:b8:d8:
b9:c0:ac:df:65:bf:b4:56:2d:02:00:73:b2:da:f1:
b1:ff:ea:1f:26:18:b4:f0:74:ac:ee:06:ae:71:c6:
b0:84:01:7d:4f:6a:2c:34:eb:a6:de:b7:41:b0:ea:
f6:d4:97:c0:e6:f2:88:ec:4d:15:98:2c:44:96:8a:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C2:81:1D:64:14:E7:63:47:6D:0C:0E:AA:06:EB:4D:57:CF:3D:93
X509v3 Authority Key Identifier:
keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/rcKBHWQU52NHbQwOqgbrTVfPPZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.54.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:72:ed:75:aa:46:69:b5:e4:84:a8:81:fa:1f:78:ce:a1:95:
e6:42:e4:30:7e:9b:4a:99:8f:2b:44:9f:8b:39:cb:b1:9a:9e:
be:3c:d8:5c:4d:b6:22:9a:a1:f8:4d:de:da:d4:eb:0c:2e:30:
d1:da:09:a7:d4:fd:8f:05:29:b0:f5:60:cb:9e:fc:9a:9a:b3:
f4:7e:82:9e:0d:be:42:32:27:d9:dc:53:6d:bd:6b:00:92:1a:
94:bb:a3:e1:4e:36:8d:dd:42:a5:0a:5e:43:e0:97:3c:af:b1:
03:5f:a1:0f:9e:05:1d:b8:02:8b:5a:8b:5b:25:fe:6f:45:b3:
16:90:23:c2:c0:74:ab:a5:32:f3:e5:c0:3a:37:3f:5e:d9:86:
d0:4f:1e:0b:ac:54:6e:1c:4a:59:17:26:99:70:b8:4f:8d:69:
61:b4:69:e1:66:40:5c:5b:99:53:f1:e3:3b:87:00:5f:97:ab:
41:51:b5:f7:8a:6d:e5:d7:70:bf:c0:54:8b:7b:c3:1f:86:0a:
8e:ce:c0:79:ad:e3:f3:03:fd:53:d9:3c:7f:37:de:64:35:90:
78:ab:56:d0:b5:bd:cc:0c:33:44:b3:66:dc:95:50:82:55:c6:
8c:80:88:3e:00:a8:11:9b:be:a2:7d:08:fd:58:38:30:a3:12:
16:b2:f0:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5lndDsrJJ6jIUfBweemeDpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy
MzQxMmYwHhcNMjQwMzIyMTAwMzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGMyODExZDY0MTRlNzYzNDc2ZDBjMGVhYTA2ZWI0ZDU3Y2YzZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XneE/BlYaC/G0yk9Qy3zQXtEI+U
CdrklvsLScLsfI5Og/IpYP/NqKdXYuRRIzELttI/ye/hC9Be7pDhLgmKDGeHtZow
AwtiLPtrja1O+WNit+yM7D8oETDxNQUqvBNq3bTNtlKFlrUmEQ+/utcUFkAiGP9B
N3sa1OW1tHIMjgvItDoAQ77EIv3CDhCUZm5ojUzQDvM7rJheVlwhiXvr/3qlYVfN
TpK7QdRuAbY5Usz0PZdmj9VvO/EjpSpLRwX4uNi5wKzfZb+0Vi0CAHOy2vGx/+of
Jhi08HSs7gauccawhAF9T2osNOum3rdBsOr21JfA5vKI7E0VmCxEloqLYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK3CgR1kFOdjR20MDqoG601Xzz2TMB8GA1UdIwQY
MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt
MWUwNDY1NTEzYjYzLzEvcmNLQkhXUVU1Mk5IYlF3T3FnYnJUVmZQUFpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz
LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV42MA0G
CSqGSIb3DQEBCwUAA4IBAQC4cu11qkZpteSEqIH6H3jOoZXmQuQwfptKmY8rRJ+L
Ocuxmp6+PNhcTbYimqH4Td7a1OsMLjDR2gmn1P2PBSmw9WDLnvyamrP0foKeDb5C
MifZ3FNtvWsAkhqUu6PhTjaN3UKlCl5D4Jc8r7EDX6EPngUduAKLWotbJf5vRbMW
kCPCwHSrpTLz5cA6Nz9e2YbQTx4LrFRuHEpZFyaZcLhPjWlhtGnhZkBcW5lT8eM7
hwBfl6tBUbX3im3l13C/wFSLe8MfhgqOzsB5rePzA/1T2Tx/N95kNZB4q1bQtb3M
DDNEs2bclVCCVcaMgIg+AKgRm76ifQj9WDgwoxIWsvAq
-----END CERTIFICATE-----
Generated at Tue May 7 21:49:29 2024 by rpki-client on console-ams.rpki-client.org