Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/dX4j4OqEGFt22APWGjcvPcqeW1Q.roa
File: dX4j4OqEGFt22APWGjcvPcqeW1Q.roa (raw, json)
Hash identifier: 9BMWxsVmz/1RbfcmQx/xcOfiHuDcUiJ9WkX2cAGzEm8=
Subject key identifier: 75:7E:23:E0:EA:84:18:5B:76:D8:03:D6:1A:37:2F:3D:CA:9E:5B:54
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018FBFB280FC1C1062C3C2EAC00488ACFF0A
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/dX4j4OqEGFt22APWGjcvPcqeW1Q.roa
Signing time: Tue 28 May 2024 14:54:57 +0000
ROA not before: Tue 28 May 2024 14:54:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216463
IP address blocks: 45.153.24.0/22 maxlen: 22
45.153.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 May 2024 09:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bf:b2:80:fc:1c:10:62:c3:c2:ea:c0:04:88:ac:ff:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: May 28 14:54:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=757e23e0ea84185b76d803d61a372f3dca9e5b54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:1a:fe:5f:3d:47:83:dd:cb:45:5e:d6:c9:
e9:75:a0:ab:84:11:5a:36:6e:0a:5f:97:e1:2e:e6:
55:8a:92:9c:29:a3:83:d8:48:90:33:8a:f1:02:56:
3a:f8:ed:7e:ca:62:e6:ee:e4:b4:43:72:4c:30:c6:
4f:01:8b:c3:67:88:2c:f6:da:7c:b6:3c:36:5b:17:
cb:f7:71:3e:9d:27:6f:6c:4f:53:0c:26:dd:78:49:
ce:e9:5c:89:f0:4b:96:80:35:00:e3:42:a4:07:20:
20:c2:ed:87:e4:99:c8:0e:27:9b:b2:13:66:f0:ee:
bc:db:48:ae:46:4c:25:ba:70:1a:84:16:61:67:e6:
7f:75:13:a2:43:d1:d7:97:50:d1:5e:d6:c5:d0:2a:
60:3f:9a:af:7a:42:90:b2:a0:c3:1e:dc:90:9e:89:
15:ac:e0:b8:69:f7:ec:6f:e0:b6:68:e2:96:71:a5:
8c:55:18:1f:cf:d3:73:ce:3b:36:97:ce:6b:06:83:
1d:6a:b3:42:8a:b6:a2:0c:10:2b:62:6f:70:84:2b:
85:bd:8e:8c:b3:ad:14:77:01:5d:5e:74:93:b7:33:
a9:64:9b:6b:d0:78:dd:6d:32:88:e7:27:83:a2:ad:
14:85:41:7c:07:22:8d:8b:a2:44:d3:18:81:fe:d8:
cf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7E:23:E0:EA:84:18:5B:76:D8:03:D6:1A:37:2F:3D:CA:9E:5B:54
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/dX4j4OqEGFt22APWGjcvPcqeW1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.24.0/22
Signature Algorithm: sha256WithRSAEncryption
27:1c:26:b3:f1:1d:79:33:55:d5:a2:04:8f:3d:57:ca:b8:f7:
49:24:6b:fe:14:57:ec:8f:03:70:8b:e9:d7:ce:94:36:98:aa:
61:47:da:08:aa:76:2a:5c:95:5c:40:9e:a7:17:8c:e6:b6:91:
b1:78:8e:97:95:d9:47:9c:11:4f:ea:31:51:0c:26:68:ea:4a:
e8:69:c2:3b:eb:6d:27:40:c5:94:cb:ee:23:fc:da:39:15:3c:
68:60:a6:6a:96:22:c8:93:e6:00:05:60:7c:73:65:1d:05:9f:
c6:28:69:5f:db:51:d2:00:15:00:90:ef:a7:ee:fe:ea:1f:32:
0f:1d:0f:15:26:e9:f8:9f:82:83:98:c4:e4:21:44:4d:52:af:
28:b2:d4:b1:2c:03:8d:07:e9:43:3a:17:4b:02:5e:10:b2:e5:
6f:8c:8d:56:21:02:92:61:ad:dd:cb:b6:3d:36:1c:ac:5d:43:
47:19:9f:06:94:76:dc:f9:4b:a4:8f:f1:63:b1:bc:08:f1:2f:
70:ed:08:b0:0d:ca:f7:ca:40:dd:24:5c:27:19:74:76:64:b9:
ba:e6:6c:09:33:83:55:fe:fe:b1:0a:25:5f:67:c5:bf:79:22:
34:70:9b:a2:96:02:20:f3:ae:d4:d8:b5:20:22:c9:5d:b4:23:
30:3a:c0:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+/soD8HBBiw8LqwASIrP8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjQwNTI4MTQ1NDU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTdlMjNlMGVhODQxODViNzZkODAzZDYxYTM3MmYzZGNhOWU1YjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufAa/l89R4Pdy0Ve1snpdaCrhBFa
Nm4KX5fhLuZVipKcKaOD2EiQM4rxAlY6+O1+ymLm7uS0Q3JMMMZPAYvDZ4gs9tp8
tjw2WxfL93E+nSdvbE9TDCbdeEnO6VyJ8EuWgDUA40KkByAgwu2H5JnIDiebshNm
8O6820iuRkwlunAahBZhZ+Z/dROiQ9HXl1DRXtbF0CpgP5qvekKQsqDDHtyQnokV
rOC4affsb+C2aOKWcaWMVRgfz9Nzzjs2l85rBoMdarNCiraiDBArYm9whCuFvY6M
s60UdwFdXnSTtzOpZJtr0HjdbTKI5yeDoq0UhUF8ByKNi6JE0xiB/tjPzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHV+I+DqhBhbdtgD1ho3Lz3KnltUMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEvZFg0ajRPcUVHRnQyMkFQV0dqY3ZQY3FlVzFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZkYMA0G
CSqGSIb3DQEBCwUAA4IBAQAnHCaz8R15M1XVogSPPVfKuPdJJGv+FFfsjwNwi+nX
zpQ2mKphR9oIqnYqXJVcQJ6nF4zmtpGxeI6XldlHnBFP6jFRDCZo6kroacI7620n
QMWUy+4j/No5FTxoYKZqliLIk+YABWB8c2UdBZ/GKGlf21HSABUAkO+n7v7qHzIP
HQ8VJun4n4KDmMTkIURNUq8ostSxLAONB+lDOhdLAl4QsuVvjI1WIQKSYa3dy7Y9
NhysXUNHGZ8GlHbc+Uukj/FjsbwI8S9w7QiwDcr3ykDdJFwnGXR2ZLm65mwJM4NV
/v6xCiVfZ8W/eSI0cJuilgIg867U2LUgIsldtCMwOsDE
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org