Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/3StcuvcyC8fQsl1SP6m7xTfKUZQ.roa
File: 3StcuvcyC8fQsl1SP6m7xTfKUZQ.roa (raw, json)
Hash identifier: 8B16kbSZZjUP6JwmtG99qwjLh5KsRVhSfBmPH2Oz53o=
Subject key identifier: DD:2B:5C:BA:F7:32:0B:C7:D0:B2:5D:52:3F:A9:BB:C5:37:CA:51:94
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: 01894940D21F7D6052BE5C31E16922E135E2
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/3StcuvcyC8fQsl1SP6m7xTfKUZQ.roa
Signing time: Wed 12 Jul 2023 08:38:52 +0000
ROA not before: Wed 12 Jul 2023 08:38:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50124
IP address blocks: 45.11.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:40:d2:1f:7d:60:52:be:5c:31:e1:69:22:e1:35:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: Jul 12 08:38:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd2b5cbaf7320bc7d0b25d523fa9bbc537ca5194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e1:5d:1d:d8:2f:8a:25:b3:78:4f:51:d8:7a:
9b:cc:f5:3f:a3:e8:96:8c:5c:47:fb:80:f8:16:1e:
fc:75:69:3c:64:f2:1d:3e:22:e2:9d:38:8e:98:6e:
43:3b:0b:67:de:40:af:ab:51:a3:57:ca:2e:a1:75:
3e:28:47:ab:d1:79:38:14:e6:46:f8:16:9a:4b:d5:
bb:f6:b6:ac:01:83:45:e8:79:bc:c1:da:6f:18:c1:
f2:9e:fa:b2:85:44:d9:0c:ae:ec:da:43:6f:a0:e8:
29:72:67:24:df:94:9d:04:e0:90:34:0c:6e:6b:2e:
fd:8c:9f:14:34:8f:7a:50:04:a5:81:e1:6a:a6:ea:
de:e5:20:21:ed:d1:60:b5:62:6a:f4:71:70:a5:ef:
7c:b5:02:97:9b:48:78:7b:89:df:ea:75:ac:32:da:
88:6f:a5:30:74:8c:45:81:26:1e:dd:a9:3c:cb:3f:
b3:d9:b4:ab:8c:e6:0e:59:5f:b5:af:66:d7:11:cc:
1b:ef:5e:d8:20:a7:38:af:d2:18:ea:cd:01:e5:d6:
bf:42:7e:e5:fc:e2:ee:94:cf:9d:bb:ae:9e:84:1e:
46:3a:3a:a3:ba:4d:1e:12:47:46:43:db:12:70:d4:
50:66:20:ad:35:d3:79:63:e8:41:6c:22:4d:e7:1b:
c4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2B:5C:BA:F7:32:0B:C7:D0:B2:5D:52:3F:A9:BB:C5:37:CA:51:94
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/3StcuvcyC8fQsl1SP6m7xTfKUZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.185.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:32:1d:96:27:64:89:7c:21:54:e9:a6:f3:53:b0:00:fd:7a:
12:bb:53:39:ea:27:91:17:e1:b2:ae:49:90:1a:23:8a:f3:0b:
96:d1:34:5b:1b:41:f9:e7:bd:7e:70:ab:48:9f:f2:16:74:1e:
8d:c7:d0:c7:00:ff:66:fd:58:82:32:bd:a3:e9:df:cb:cf:e3:
79:65:7e:0c:91:a6:80:2a:d6:a2:9b:96:ec:93:4d:10:de:5d:
d5:39:77:5d:cc:8c:93:ff:af:5f:b6:55:86:ea:bd:8a:ed:30:
af:91:2f:8c:68:83:ed:a0:0b:c4:25:ca:56:92:6e:67:f4:59:
e0:73:b9:19:98:ee:dc:5a:d6:48:5c:6d:c9:be:07:e8:e1:e6:
3e:85:b6:86:e5:09:ac:e8:71:cb:44:3e:6b:f2:2c:47:e1:45:
66:81:f4:9c:f3:0d:8b:dc:47:1d:98:ca:2d:83:34:2d:3f:77:
cb:50:09:c9:c8:2a:6c:86:72:25:e8:cf:14:d3:85:58:2c:4f:
f9:c4:55:bb:35:a3:a1:1b:68:42:08:7c:11:6a:6e:b6:16:76:
b9:a6:5b:5b:d8:17:6b:1e:18:56:18:7d:b6:6d:a9:de:58:77:
23:6e:5d:72:5e:6f:b2:97:29:1b:19:15:9f:36:af:04:9f:72:
64:96:25:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYlJQNIffWBSvlwx4Wki4TXiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2OTAwMTgzY2YwOGE2ZTViYzgwNzg0NjI5NGE0NjA2MmUx
OTBlM2IwHhcNMjMwNzEyMDgzODUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDJiNWNiYWY3MzIwYmM3ZDBiMjVkNTIzZmE5YmJjNTM3Y2E1MTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+FdHdgviiWzeE9R2HqbzPU/o+iW
jFxH+4D4Fh78dWk8ZPIdPiLinTiOmG5DOwtn3kCvq1GjV8ouoXU+KEer0Xk4FOZG
+BaaS9W79rasAYNF6Hm8wdpvGMHynvqyhUTZDK7s2kNvoOgpcmck35SdBOCQNAxu
ay79jJ8UNI96UASlgeFqpure5SAh7dFgtWJq9HFwpe98tQKXm0h4e4nf6nWsMtqI
b6UwdIxFgSYe3ak8yz+z2bSrjOYOWV+1r2bXEcwb717YIKc4r9IY6s0B5da/Qn7l
/OLulM+du66ehB5GOjqjuk0eEkdGQ9sScNRQZiCtNdN5Y+hBbCJN5xvE5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN0rXLr3MgvH0LJdUj+pu8U3ylGUMB8GA1UdIwQY
MBaAFDaQAYPPCKblvIB4RilKRgYuGQ47MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnBBQmc4OElwdVc4Z0hoR0tVcEdCaTRaRGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC81YTMyYmMtMDgzNi00N2VjLWI1YjMt
MmY1YjZhODNmYWYzLzEvM1N0Y3V2Y3lDOGZRc2wxU1A2bTd4VGZLVVpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC81YTMyYmMtMDgzNi00N2VjLWI1YjMtMmY1YjZhODNmYWYz
LzEvTnBBQmc4OElwdVc4Z0hoR0tVcEdCaTRaRGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQu5MA0G
CSqGSIb3DQEBCwUAA4IBAQDSMh2WJ2SJfCFU6abzU7AA/XoSu1M56ieRF+GyrkmQ
GiOK8wuW0TRbG0H5571+cKtIn/IWdB6Nx9DHAP9m/ViCMr2j6d/Lz+N5ZX4MkaaA
Ktaim5bsk00Q3l3VOXddzIyT/69ftlWG6r2K7TCvkS+MaIPtoAvEJcpWkm5n9Fng
c7kZmO7cWtZIXG3Jvgfo4eY+hbaG5Qms6HHLRD5r8ixH4UVmgfSc8w2L3EcdmMot
gzQtP3fLUAnJyCpshnIl6M8U04VYLE/5xFW7NaOhG2hCCHwRam62Fna5pltb2Bdr
HhhWGH22baneWHcjbl1yXm+ylykbGRWfNq8En3JkliUK
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:52 2024 by rpki-client on console-ams.rpki-client.org