Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/hcQv63dI6KmSnSjzCsmux43phGY.roa
File: hcQv63dI6KmSnSjzCsmux43phGY.roa (raw, json)
Hash identifier: rLdSssGZUGMbIgIxYjqMZ8R+cLQnImvHngFigMUZyTM=
Subject key identifier: 85:C4:2F:EB:77:48:E8:A9:92:9D:28:F3:0A:C9:AE:C7:8D:E9:84:66
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 0191CB72C79E4CE02B41F8DC12EC97547C98
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/hcQv63dI6KmSnSjzCsmux43phGY.roa
Signing time: Sat 07 Sep 2024 07:46:22 +0000
ROA not before: Sat 07 Sep 2024 07:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.159.13.0/24 maxlen: 24
45.159.15.0/24 maxlen: 24
91.246.55.0/24 maxlen: 24
185.9.1.0/24 maxlen: 24
185.9.3.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 09 Sep 2024 19:24:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:cb:72:c7:9e:4c:e0:2b:41:f8:dc:12:ec:97:54:7c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Sep 7 07:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85c42feb7748e8a9929d28f30ac9aec78de98466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ed:3c:34:35:55:51:74:16:d9:47:20:ae:9c:
34:49:95:6e:8e:ca:ac:bb:7d:2b:d8:1f:be:ea:bc:
0f:25:80:87:4d:d7:73:33:5a:85:21:a2:d8:35:d4:
cd:c6:83:1e:cf:7b:8a:c3:25:02:4f:6f:7d:1d:55:
4d:96:ce:36:7d:08:8e:6d:32:5c:dc:60:16:2b:5b:
27:53:b8:6a:0c:54:43:d6:bc:01:3e:04:62:64:02:
a2:09:4a:ef:18:2a:5e:17:c6:6b:ce:61:97:be:9f:
d9:19:0b:ed:e1:53:c7:5c:d3:95:81:fb:9a:4b:c0:
d9:62:78:cb:b1:20:40:76:c0:23:06:c5:40:3d:74:
af:9c:05:87:e6:47:cd:00:74:6a:be:fd:55:26:c0:
4a:c6:d6:7d:49:3a:84:53:05:98:35:f2:ce:40:c6:
f0:df:60:ea:5e:9c:f2:49:2d:b5:c8:46:7c:ed:cb:
9a:39:33:52:58:85:60:56:e7:32:66:19:17:41:e0:
ce:1c:71:17:72:fa:33:1f:15:6c:48:40:48:7c:11:
af:90:4b:68:8c:6b:5a:d9:52:e3:ab:d2:7e:2d:6b:
a8:35:bb:55:18:d5:09:64:ac:36:b9:d6:3a:30:f1:
3f:1d:83:6c:ad:42:0a:ff:05:2b:e1:be:9f:95:f6:
7d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C4:2F:EB:77:48:E8:A9:92:9D:28:F3:0A:C9:AE:C7:8D:E9:84:66
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/hcQv63dI6KmSnSjzCsmux43phGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.13.0/24
45.159.15.0/24
91.246.55.0/24
185.9.1.0/24
185.9.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:eb:5c:fd:5a:1d:19:01:63:c8:a9:fd:05:04:6d:bf:89:6b:
15:7e:1e:53:d6:20:5f:89:4a:6d:8e:28:fc:44:b1:f8:73:b2:
7c:66:8d:d7:bb:bd:8a:38:d1:ca:48:64:ca:ef:85:92:15:29:
5c:39:09:81:38:9f:3c:52:86:ca:63:1e:37:23:0f:c2:3f:b2:
de:7c:d3:7e:2b:d8:59:31:c0:d2:38:08:15:7d:88:85:17:f2:
08:67:39:8e:0f:68:0f:ff:66:04:5a:f7:82:57:e1:4e:56:83:
d2:ef:da:0d:81:67:fd:86:4c:4d:23:39:61:94:cd:a6:f7:49:
14:74:06:6f:dc:b0:d8:9c:23:30:6e:65:ae:e3:90:91:67:ce:
2d:f9:b3:5f:ba:cf:5b:e6:55:f4:04:77:12:96:26:8b:48:0e:
f7:1d:75:fb:00:fe:ed:66:76:47:48:f7:5d:40:42:2b:fe:12:
3c:57:d5:2b:23:14:ee:c8:d0:1e:ec:fa:4b:85:dc:07:85:6c:
7e:4d:8c:20:df:59:02:03:90:a3:70:9a:a1:2e:84:2e:96:c3:
73:4a:de:3a:97:6a:d0:7b:e6:b6:77:de:da:03:64:d6:18:64:
c1:16:99:60:02:3e:72:70:4e:05:41:07:e8:e9:3f:f4:7f:2d:
30:d4:5f:24
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZHLcseeTOArQfjcEuyXVHyYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzM1YmM5YjdmODU1MGJlM2U0NjdjNTRhOWQzYTY2ZTI0
NDNiZDQwHhcNMjQwOTA3MDc0NjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NWM0MmZlYjc3NDhlOGE5OTI5ZDI4ZjMwYWM5YWVjNzhkZTk4NDY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+08NDVVUXQW2Ucgrpw0SZVujsqs
u30r2B++6rwPJYCHTddzM1qFIaLYNdTNxoMez3uKwyUCT299HVVNls42fQiObTJc
3GAWK1snU7hqDFRD1rwBPgRiZAKiCUrvGCpeF8ZrzmGXvp/ZGQvt4VPHXNOVgfua
S8DZYnjLsSBAdsAjBsVAPXSvnAWH5kfNAHRqvv1VJsBKxtZ9STqEUwWYNfLOQMbw
32DqXpzySS21yEZ87cuaOTNSWIVgVucyZhkXQeDOHHEXcvozHxVsSEBIfBGvkEto
jGta2VLjq9J+LWuoNbtVGNUJZKw2udY6MPE/HYNsrUIK/wUr4b6flfZ9WQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFIXEL+t3SOipkp0o8wrJrseN6YRmMB8GA1UdIwQY
MBaAFNPDW8m3+FUL4+RnxUqdOmbiRDvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTct
Y2RhNWMzNzY2ZjAzLzEvaGNRdjYzZEk2S21TblNqekNzbXV4NDNwaEdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84YmE4YmItYzFjMC00ZDM1LTkwYTctY2RhNWMzNzY2ZjAz
LzEvMDhOYnliZjRWUXZqNUdmRlNwMDZadUpFTzlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALZ8NAwQA
LZ8PAwQAW/Y3AwQAuQkBAwQAuQkDMA0GCSqGSIb3DQEBCwUAA4IBAQBd61z9Wh0Z
AWPIqf0FBG2/iWsVfh5T1iBfiUptjij8RLH4c7J8Zo3Xu72KONHKSGTK74WSFSlc
OQmBOJ88UobKYx43Iw/CP7LefNN+K9hZMcDSOAgVfYiFF/IIZzmOD2gP/2YEWveC
V+FOVoPS79oNgWf9hkxNIzlhlM2m90kUdAZv3LDYnCMwbmWu45CRZ84t+bNfus9b
5lX0BHcSliaLSA73HXX7AP7tZnZHSPddQEIr/hI8V9UrIxTuyNAe7PpLhdwHhWx+
TYwg31kCA5CjcJqhLoQulsNzSt46l2rQe+a2d97aA2TWGGTBFplgAj5ycE4FQQfo
6T/0fy0w1F8k
-----END CERTIFICATE-----
Generated at Mon Sep 9 23:00:19 2024 by rpki-client on console-ams.rpki-client.org