Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/rPDuEEo-O_MTrnJIplrEK2ciy34.roa
File: rPDuEEo-O_MTrnJIplrEK2ciy34.roa (raw, json)
Hash identifier: D8j/ENdpiiVEX4savj7IjQ6hrGsUEJvuWXdmTmBWwvo=
Subject key identifier: AC:F0:EE:10:4A:3E:3B:F3:13:AE:72:48:A6:5A:C4:2B:67:22:CB:7E
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 0191880CBFF6B8D7093E1480FFD5679E38F7
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/rPDuEEo-O_MTrnJIplrEK2ciy34.roa
Signing time: Sun 25 Aug 2024 05:40:22 +0000
ROA not before: Sun 25 Aug 2024 05:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.140.208.0/24 maxlen: 24
82.115.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 25 Aug 2024 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:88:0c:bf:f6:b8:d7:09:3e:14:80:ff:d5:67:9e:38:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Aug 25 05:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acf0ee104a3e3bf313ae7248a65ac42b6722cb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:27:26:1b:ae:bc:9a:98:e3:74:1c:b2:8b:3e:
ab:5d:f0:6f:7b:d3:08:22:bd:81:b8:b0:de:4f:b3:
bd:fa:89:39:00:44:83:47:99:74:1a:e4:dd:aa:d8:
f6:97:fc:00:13:d5:b9:e5:41:67:fd:81:80:92:db:
fa:6d:e2:da:a5:99:94:03:f4:7e:76:8e:c4:0d:6d:
c3:78:20:0b:f2:9a:17:78:d7:2c:5e:df:f6:6b:60:
34:45:e4:6f:70:b6:59:29:2c:bd:49:81:6f:05:5f:
ec:39:7e:d0:04:38:f3:b5:88:fd:0f:52:43:08:22:
ba:63:77:d0:ca:72:19:4c:1d:f7:c4:f4:0c:49:60:
0c:72:a3:3b:5a:49:de:56:9e:25:78:7d:f8:b6:bf:
1a:a4:6e:14:38:b7:a2:3c:94:5b:ed:d9:8c:41:fd:
fa:12:16:6f:b9:a2:37:ec:22:bf:e8:aa:03:46:12:
83:28:a0:9c:3e:8c:b0:0d:f0:ca:61:a6:09:b7:01:
de:26:bf:ad:94:86:55:50:3e:db:c1:98:bd:f0:e9:
2f:60:cf:d9:c5:04:10:f6:06:cd:f6:16:f2:f7:2d:
83:02:4f:28:de:dc:44:84:c3:3f:db:31:40:72:ba:
cf:24:32:36:ed:e8:b2:67:7b:3d:b6:90:0a:28:3c:
d4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F0:EE:10:4A:3E:3B:F3:13:AE:72:48:A6:5A:C4:2B:67:22:CB:7E
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/rPDuEEo-O_MTrnJIplrEK2ciy34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.208.0/24
82.115.217.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:67:d5:b1:7e:fb:33:da:1b:80:f3:1f:ea:60:85:0c:d6:3e:
f2:5c:c3:d9:c2:74:80:16:9c:3b:f6:c7:d1:65:f0:2b:0e:ff:
d3:bc:f6:cf:9a:fd:a0:09:5a:87:d9:ce:a8:b3:3c:a8:eb:f6:
7a:83:0d:15:a6:f9:14:54:c1:ff:4c:52:3b:cf:b1:06:35:da:
85:21:07:8c:a0:7c:40:2b:51:4b:dd:95:9f:02:cb:8f:54:f1:
fa:00:28:48:67:9e:56:44:72:0f:de:be:11:ad:ae:43:d1:a6:
1d:59:20:31:e6:ed:12:c2:f1:4f:69:6b:e9:84:f1:91:e1:01:
4b:a9:55:44:2b:17:0a:5e:42:84:f2:07:95:36:05:c7:0e:4d:
63:82:98:ee:cd:98:79:db:b0:9b:e2:22:d9:e0:b5:17:29:2f:
0a:e5:b9:3d:e6:63:bb:f8:d2:9c:56:95:dd:26:6a:45:fa:80:
8e:b0:d0:4b:84:ce:d1:2f:9d:8b:03:44:ff:b4:fa:d3:60:2f:
1a:2f:cf:5f:fc:61:f1:3c:37:5a:d1:27:19:9e:10:7d:4b:d9:
8e:ea:ab:f8:e8:0c:e8:94:8e:89:33:45:c3:52:d9:e2:66:39:
68:19:c1:10:f6:7d:2d:a6:2e:f1:cb:dc:b7:b0:b7:79:15:cb:
59:6a:19:e5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZGIDL/2uNcJPhSA/9Vnnjj3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2OGM2NWU2OTliNTc2YWIxMTNhNzliZTg4Mjg5NDhmMWU2
Y2MyNjAwHhcNMjQwODI1MDU0MDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2YwZWUxMDRhM2UzYmYzMTNhZTcyNDhhNjVhYzQyYjY3MjJjYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsicmG668mpjjdByyiz6rXfBve9MI
Ir2BuLDeT7O9+ok5AESDR5l0GuTdqtj2l/wAE9W55UFn/YGAktv6beLapZmUA/R+
do7EDW3DeCAL8poXeNcsXt/2a2A0ReRvcLZZKSy9SYFvBV/sOX7QBDjztYj9D1JD
CCK6Y3fQynIZTB33xPQMSWAMcqM7WkneVp4leH34tr8apG4UOLeiPJRb7dmMQf36
EhZvuaI37CK/6KoDRhKDKKCcPoywDfDKYaYJtwHeJr+tlIZVUD7bwZi98OkvYM/Z
xQQQ9gbN9hby9y2DAk8o3txEhMM/2zFAcrrPJDI27eiyZ3s9tpAKKDzUkwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKzw7hBKPjvzE65ySKZaxCtnIst+MB8GA1UdIwQY
MBaAFMaMZeaZtXarETp5vogolI8ebMJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYt
NjA3ZDRmMzdmNTlmLzEvclBEdUVFby1PX01Ucm5KSXBsckVLMmNpeTM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8zNDBjNzMtNzllZS00OTI2LThlNGYtNjA3ZDRmMzdmNTlm
LzEveG94bDVwbTFkcXNST25tLWlDaVVqeDVzd21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYzQAwQA
UnPZMA0GCSqGSIb3DQEBCwUAA4IBAQAsZ9Wxfvsz2huA8x/qYIUM1j7yXMPZwnSA
Fpw79sfRZfArDv/TvPbPmv2gCVqH2c6oszyo6/Z6gw0VpvkUVMH/TFI7z7EGNdqF
IQeMoHxAK1FL3ZWfAsuPVPH6AChIZ55WRHIP3r4Rra5D0aYdWSAx5u0SwvFPaWvp
hPGR4QFLqVVEKxcKXkKE8geVNgXHDk1jgpjuzZh527Cb4iLZ4LUXKS8K5bk95mO7
+NKcVpXdJmpF+oCOsNBLhM7RL52LA0T/tPrTYC8aL89f/GHxPDda0ScZnhB9S9mO
6qv46AzolI6JM0XDUtniZjloGcEQ9n0tpi7xy9y3sLd5FctZahnl
-----END CERTIFICATE-----
Generated at Sun Aug 25 22:20:00 2024 by rpki-client on console-fra.rpki-client.org