Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DN5LcheHHYnn0APrYkGxHUixDSs.roa
File: DN5LcheHHYnn0APrYkGxHUixDSs.roa (raw, json)
Hash identifier: OhadQaF0IEB7lol8I2BmAgJrYzRrWaBNluzM0EdD5ps=
Subject key identifier: 0C:DE:4B:72:17:87:1D:89:E7:D0:03:EB:62:41:B1:1D:48:B1:0D:2B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018E764DAA987D49AE82F01EA810FBF93145
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DN5LcheHHYnn0APrYkGxHUixDSs.roa
Signing time: Mon 25 Mar 2024 15:49:45 +0000
ROA not before: Mon 25 Mar 2024 15:49:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198361
IP address blocks: 45.88.138.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Apr 2024 22:07:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:76:4d:aa:98:7d:49:ae:82:f0:1e:a8:10:fb:f9:31:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 25 15:49:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cde4b7217871d89e7d003eb6241b11d48b10d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:05:f4:7c:44:1b:73:de:2d:ae:a3:a5:b0:15:
db:10:6b:e5:05:00:d8:f0:88:18:62:bc:52:eb:3c:
86:5e:26:ae:c3:8e:d1:af:19:69:40:73:06:71:d4:
5d:e6:f6:6c:9b:16:ec:46:41:fc:d2:91:5d:09:e1:
5a:aa:cf:71:d2:eb:48:ae:5b:34:fb:31:07:45:41:
14:56:b5:1f:2f:10:55:12:64:d9:20:8a:17:ca:a8:
9b:8d:75:9d:8f:c2:c6:c3:38:ee:f8:63:5b:ba:af:
39:09:98:3a:cf:bf:84:c0:b8:5e:eb:2a:fd:d6:55:
0c:c2:97:cc:ee:89:d8:e2:09:f8:e3:4a:dc:7b:49:
12:0d:c4:27:8f:52:69:c0:e4:79:bf:69:8b:f6:06:
de:da:60:fb:71:68:8d:e5:5d:f2:2e:b7:1f:d8:12:
c3:f6:38:72:45:bf:57:f5:64:78:fb:3b:ae:ab:39:
b0:db:52:df:81:9d:62:cd:e9:cb:c1:bf:72:04:ca:
63:43:5b:b5:7c:f7:b9:76:1d:cd:42:cb:14:88:cc:
ee:b0:d4:45:0a:2c:4c:d1:e8:2d:32:01:8b:67:c2:
5f:69:2b:e9:2d:4e:96:d9:db:d0:f6:00:c2:e7:f7:
77:95:4d:ee:f0:95:2a:16:dc:91:16:50:60:d6:71:
90:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DE:4B:72:17:87:1D:89:E7:D0:03:EB:62:41:B1:1D:48:B1:0D:2B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/DN5LcheHHYnn0APrYkGxHUixDSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.138.0/24
77.83.38.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:aa:f5:9c:ae:e4:1d:4d:24:2c:28:7e:ac:bc:a1:26:fd:98:
a3:e9:88:58:d4:44:b1:88:57:d5:39:39:4b:cb:11:ba:f1:21:
06:ff:db:51:21:18:d3:9f:2a:67:15:9c:37:ad:91:aa:6a:f1:
3b:c0:2b:1d:be:a9:8b:17:0c:1c:b8:16:80:7f:75:35:68:be:
5a:3a:cf:4a:ae:90:18:df:b1:db:3d:8c:cb:53:f9:59:46:3a:
ac:6c:33:96:13:e8:a7:b0:f3:fb:97:69:5e:01:b7:5c:19:d4:
93:bb:f8:ac:8a:27:7e:8d:76:2a:c7:29:97:cb:ac:06:28:49:
42:39:77:ce:3e:da:73:58:0f:3c:64:d1:4a:4b:1f:8d:9c:39:
c0:f4:cf:80:3f:fe:b7:92:dc:42:91:f0:e3:29:27:a9:66:0e:
85:73:f3:2e:31:f2:04:fc:2c:2c:ac:e0:90:3a:86:b5:ef:af:
3b:51:1c:d8:1f:a8:99:b8:1e:7c:1f:ef:79:21:2f:68:1a:eb:
31:4c:db:e6:86:9a:ae:ec:bd:4d:1b:d6:ea:46:a8:16:ef:50:
47:a6:4c:ac:e1:4a:a2:49:f1:a8:90:b3:e8:7a:d0:41:f0:d2:
a1:c0:2c:7f:d0:09:a4:31:d0:55:ee:82:0b:d5:3d:e5:8d:58:
ae:0c:e7:e4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY52TaqYfUmugvAeqBD7+TFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQwMzI1MTU0OTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2RlNGI3MjE3ODcxZDg5ZTdkMDAzZWI2MjQxYjExZDQ4YjEwZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwX0fEQbc94trqOlsBXbEGvlBQDY
8IgYYrxS6zyGXiauw47RrxlpQHMGcdRd5vZsmxbsRkH80pFdCeFaqs9x0utIrls0
+zEHRUEUVrUfLxBVEmTZIIoXyqibjXWdj8LGwzju+GNbuq85CZg6z7+EwLhe6yr9
1lUMwpfM7onY4gn440rce0kSDcQnj1JpwOR5v2mL9gbe2mD7cWiN5V3yLrcf2BLD
9jhyRb9X9WR4+zuuqzmw21LfgZ1izenLwb9yBMpjQ1u1fPe5dh3NQssUiMzusNRF
CixM0egtMgGLZ8JfaSvpLU6W2dvQ9gDC5/d3lU3u8JUqFtyRFlBg1nGQ8wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAzeS3IXhx2J59AD62JBsR1IsQ0rMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvRE41TGNoZUhIWW5uMEFQcllrR3hIVWl4RFNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALViKAwQA
TVMmMA0GCSqGSIb3DQEBCwUAA4IBAQBtqvWcruQdTSQsKH6svKEm/Zij6YhY1ESx
iFfVOTlLyxG68SEG/9tRIRjTnypnFZw3rZGqavE7wCsdvqmLFwwcuBaAf3U1aL5a
Os9KrpAY37HbPYzLU/lZRjqsbDOWE+insPP7l2leAbdcGdSTu/isiid+jXYqxymX
y6wGKElCOXfOPtpzWA88ZNFKSx+NnDnA9M+AP/63ktxCkfDjKSepZg6Fc/MuMfIE
/CwsrOCQOoa17687URzYH6iZuB58H+95IS9oGusxTNvmhpqu7L1NG9bqRqgW71BH
pkys4UqiSfGokLPoetBB8NKhwCx/0AmkMdBV7oIL1T3ljViuDOfk
-----END CERTIFICATE-----
Generated at Mon Apr 15 23:49:46 2024 by rpki-client on console-ams.rpki-client.org