Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/3NsSUKfpNEVA5cCUO0bRqxKkE34.roa
File: 3NsSUKfpNEVA5cCUO0bRqxKkE34.roa (raw, json)
Hash identifier: 9hI6Kz9VJ/w3gmzUhypcduA7ZJ0Z19PYRvZVNO9F6vg=
Subject key identifier: DC:DB:12:50:A7:E9:34:45:40:E5:C0:94:3B:46:D1:AB:12:A4:13:7E
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 0191C0F58AB05DD86CAE8A6A02EBF58EF280
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/3NsSUKfpNEVA5cCUO0bRqxKkE34.roa
Signing time: Thu 05 Sep 2024 06:53:22 +0000
ROA not before: Thu 05 Sep 2024 06:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62020
IP address blocks: 45.159.13.0/24 maxlen: 24
45.159.15.0/24 maxlen: 24
91.246.55.0/24 maxlen: 24
185.9.0.0/22 maxlen: 22
185.9.0.0/24 maxlen: 24
2a03:4440::/32 maxlen: 32
Validation: Failed, certificate revoked on Thu 05 Sep 2024 06:54:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c0:f5:8a:b0:5d:d8:6c:ae:8a:6a:02:eb:f5:8e:f2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Sep 5 06:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dcdb1250a7e9344540e5c0943b46d1ab12a4137e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:bc:37:98:f8:67:c9:8e:f7:ee:61:6b:c1:20:
f1:db:2d:c2:7c:97:04:bd:16:ec:ef:e1:0f:3c:6c:
98:cd:c5:e0:54:35:cc:7f:15:1e:a6:9b:ff:b8:67:
b6:50:b9:48:86:87:f0:14:8f:0d:50:c6:a0:62:93:
b4:bb:b9:05:01:e4:bb:23:55:08:e5:68:5f:53:89:
d1:2a:21:4c:c5:bb:76:6f:2f:aa:c6:3e:c5:fb:62:
2d:aa:e2:c3:f9:eb:28:ac:25:4e:5f:d7:22:d4:48:
8f:82:d9:8b:85:5f:58:ac:5c:5c:6f:ec:e1:31:e7:
8c:95:5c:9e:25:bf:9e:5a:36:56:4d:d8:c5:f4:e8:
39:1e:4c:a4:c7:f8:80:6e:33:c1:7c:26:81:b6:e8:
6a:3b:ae:8c:a7:6d:4d:41:2c:ca:c5:78:c5:68:5e:
02:51:89:60:dc:87:65:5b:c1:10:15:4e:e2:94:80:
2c:19:73:98:97:51:da:e1:f8:65:66:22:17:05:48:
ab:64:a6:ac:94:8a:f3:ad:e7:16:e3:47:f5:7c:25:
87:a8:07:15:64:65:70:48:7c:36:0c:61:45:ef:56:
66:99:03:33:62:92:de:80:d7:69:39:b3:70:6c:5a:
7a:4d:ce:84:2f:95:80:85:8b:48:6d:13:f0:2c:2f:
ba:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DB:12:50:A7:E9:34:45:40:E5:C0:94:3B:46:D1:AB:12:A4:13:7E
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/3NsSUKfpNEVA5cCUO0bRqxKkE34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.13.0/24
45.159.15.0/24
91.246.55.0/24
185.9.0.0/22
IPv6:
2a03:4440::/32
Signature Algorithm: sha256WithRSAEncryption
06:8c:2d:74:c4:74:06:8a:85:43:1d:90:30:64:4b:e5:5f:12:
08:01:0e:e2:2d:1b:7b:5d:90:38:ca:be:4f:f2:18:32:d0:8b:
ce:11:be:d4:3a:3a:f6:db:79:16:7a:e6:32:85:e2:9a:94:30:
76:99:7d:69:81:fe:1f:5c:32:1b:e3:28:92:68:08:49:61:bf:
91:29:45:27:0c:fe:36:f5:ba:2c:5b:f4:0a:0b:7f:80:6a:a6:
2a:ad:9d:f6:71:c4:e5:a6:c7:4a:61:b6:a6:ac:a6:31:d3:23:
9f:dc:2c:94:b2:b9:d8:29:27:87:50:4a:f2:bc:da:7a:75:49:
7e:7a:44:c6:74:e7:ba:ab:e4:61:7b:16:28:ec:1e:8f:83:6e:
b5:38:06:8c:2d:4b:aa:4e:d1:b1:86:9f:a7:c1:da:d2:4e:a4:
b9:59:f8:37:7e:fe:2c:c8:cb:7d:39:ce:82:91:45:c1:3c:0a:
ce:d5:eb:bd:3c:9e:ec:15:eb:f6:f8:7f:1a:12:30:53:cc:d6:
0c:0c:4c:d3:6a:82:4b:1a:49:4f:f8:f5:55:9c:ba:2b:04:8c:
f6:2b:f6:ec:b9:f0:da:74:f6:46:6b:1b:9e:89:dc:e7:cd:b6:
6b:c4:33:be:52:bc:95:ff:31:59:87:f3:6f:db:3a:e9:61:5e:
45:cf:04:6b
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZHA9YqwXdhsropqAuv1jvKAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0
NDNiZDQwHhcNMjQwOTA1MDY1MzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkY2RiMTI1MGE3ZTkzNDQ1NDBlNWMwOTQzYjQ2ZDFhYjEyYTQxMzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobw3mPhnyY737mFrwSDx2y3CfJcE
vRbs7+EPPGyYzcXgVDXMfxUeppv/uGe2ULlIhofwFI8NUMagYpO0u7kFAeS7I1UI
5WhfU4nRKiFMxbt2by+qxj7F+2ItquLD+esorCVOX9ci1EiPgtmLhV9YrFxcb+zh
MeeMlVyeJb+eWjZWTdjF9Og5Hkykx/iAbjPBfCaBtuhqO66Mp21NQSzKxXjFaF4C
UYlg3IdlW8EQFU7ilIAsGXOYl1Ha4fhlZiIXBUirZKaslIrzrecW40f1fCWHqAcV
ZGVwSHw2DGFF71ZmmQMzYpLegNdpObNwbFp6Tc6EL5WAhYtIbRPwLC+6wwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFNzbElCn6TRFQOXAlDtG0asSpBN+MB8GA1UdIwQY
MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct
Y2RhNWMzNzY2ZjAzLzEvM05zU1VLZnBORVZBNWNDVU8wYlJxeEtrRTM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz
LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQALZ8NAwQA
LZ8PAwQAW/Y3AwQCuQkAMA0EAgACMAcDBQAqA0RAMA0GCSqGSIb3DQEBCwUAA4IB
AQAGjC10xHQGioVDHZAwZEvlXxIIAQ7iLRt7XZA4yr5P8hgy0IvOEb7UOjr223kW
euYyheKalDB2mX1pgf4fXDIb4yiSaAhJYb+RKUUnDP429bosW/QKC3+AaqYqrZ32
ccTlpsdKYbamrKYx0yOf3CyUsrnYKSeHUEryvNp6dUl+ekTGdOe6q+RhexYo7B6P
g261OAaMLUuqTtGxhp+nwdrSTqS5Wfg3fv4syMt9Oc6CkUXBPArO1eu9PJ7sFev2
+H8aEjBTzNYMDEzTaoJLGklP+PVVnLorBIz2K/bsufDadPZGaxueidznzbZrxDO+
UryV/zFZh/Nv2zrpYV5FzwRr
-----END CERTIFICATE-----
Generated at Thu Sep 5 09:30:18 2024 by rpki-client on console-fra.rpki-client.org