Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/4usTuxiXHuCTX125BoRa-trL5Jk.roa
File: 4usTuxiXHuCTX125BoRa-trL5Jk.roa (raw, json)
Hash identifier: obra8FWjb+SaHBRyiaGMvMl0Nzu2qmGf7U9Z5+nqaPM=
Subject key identifier: E2:EB:13:BB:18:97:1E:E0:93:5F:5D:B9:06:84:5A:FA:DA:CB:E4:99
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018CC8DE1786FC563363E6D7CEE056FEAADF
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/4usTuxiXHuCTX125BoRa-trL5Jk.roa
Signing time: Tue 02 Jan 2024 06:30:47 +0000
ROA not before: Tue 02 Jan 2024 06:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198078
IP address blocks: 45.139.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 17:05:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:17:86:fc:56:33:63:e6:d7:ce:e0:56:fe:aa:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 2 06:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2eb13bb18971ee0935f5db906845afadacbe499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:05:2c:e6:8c:d8:ad:2d:b9:1d:be:08:db:4a:
23:77:96:80:d1:f2:ee:17:83:ed:c5:6e:25:f5:20:
4f:ea:bb:aa:39:1a:58:bc:d2:9b:78:96:bb:c7:e8:
2d:00:ba:c0:5e:1a:e4:12:20:48:a1:f9:df:57:36:
e8:93:25:85:28:de:d0:ab:2b:f6:38:53:a0:cf:d6:
07:89:8d:34:69:66:e8:74:4e:56:7d:09:5b:da:08:
90:bf:8a:48:53:0b:eb:c1:f9:c5:c7:6f:ee:90:97:
dc:8d:5c:9d:3b:0f:3f:b0:be:3c:a2:77:fe:c9:d4:
8b:2d:2f:f0:3f:bb:d5:98:21:fa:50:ad:9a:e3:f7:
73:ef:c9:68:a6:b5:89:f5:25:8b:6f:47:a3:84:3f:
51:95:a3:f5:16:8d:58:83:c6:82:06:74:e0:93:8f:
d7:86:f5:5f:a4:84:9d:a5:89:ce:70:10:4f:dc:4a:
1b:22:3e:26:6c:2c:8f:ee:54:cb:3a:24:a6:28:24:
19:26:70:04:b9:91:6a:8b:7c:fb:5e:58:69:ad:b3:
07:e0:b1:22:f5:a4:ad:00:cd:e1:00:1f:7f:81:83:
11:2e:6f:41:92:9a:11:e1:d3:9c:c9:41:ad:b7:97:
25:58:01:fb:3a:fb:96:01:fa:1d:ac:51:b0:b8:ef:
16:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:EB:13:BB:18:97:1E:E0:93:5F:5D:B9:06:84:5A:FA:DA:CB:E4:99
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/4usTuxiXHuCTX125BoRa-trL5Jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.199.0/24
Signature Algorithm: sha256WithRSAEncryption
21:78:fe:68:31:ff:b2:55:b7:23:ee:8b:5b:e2:0e:69:2e:6a:
32:78:63:59:12:95:02:ba:de:bf:3b:28:f4:24:2d:25:94:c5:
41:7e:2e:2b:e4:d7:f3:09:84:65:54:08:4d:f2:a7:42:9f:eb:
d6:51:da:40:a5:77:13:1e:54:66:27:65:2c:55:cd:65:7d:a0:
68:5f:0a:7b:59:2e:38:9a:88:a7:b7:0e:01:27:85:a9:86:54:
5b:6e:74:9e:58:66:4f:3f:5a:9f:4d:a5:06:43:57:b9:eb:23:
b8:eb:35:ae:7a:b1:21:30:92:f0:2e:73:4c:76:91:f9:2b:b0:
48:c3:39:2c:52:04:28:01:8d:7c:d5:b8:86:65:1a:84:82:ee:
bb:bb:2d:a2:9f:52:dd:d5:4a:36:f6:02:32:c7:24:2d:69:6c:
ad:46:6c:87:e3:72:d1:38:89:26:8d:fc:4a:a9:a8:9c:65:a1:
bc:61:9d:6b:4f:46:f9:0f:d9:88:02:5b:94:27:33:6f:18:5a:
68:6c:a7:a0:b2:2f:14:36:5f:85:02:e1:03:30:44:b4:57:5d:
7c:0e:d3:29:32:cf:ce:f5:d1:8c:a1:01:08:5e:9c:e7:7d:0a:
86:9f:39:37:9c:3f:cf:db:d4:6f:f4:f4:22:28:1c:cc:80:2a:
62:3d:c0:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3heG/FYzY+bXzuBW/qrfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjQwMTAyMDYzMDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmViMTNiYjE4OTcxZWUwOTM1ZjVkYjkwNjg0NWFmYWRhY2JlNDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQUs5ozYrS25Hb4I20ojd5aA0fLu
F4PtxW4l9SBP6ruqORpYvNKbeJa7x+gtALrAXhrkEiBIofnfVzbokyWFKN7Qqyv2
OFOgz9YHiY00aWbodE5WfQlb2giQv4pIUwvrwfnFx2/ukJfcjVydOw8/sL48onf+
ydSLLS/wP7vVmCH6UK2a4/dz78loprWJ9SWLb0ejhD9RlaP1Fo1Yg8aCBnTgk4/X
hvVfpISdpYnOcBBP3EobIj4mbCyP7lTLOiSmKCQZJnAEuZFqi3z7XlhprbMH4LEi
9aStAM3hAB9/gYMRLm9BkpoR4dOcyUGtt5clWAH7OvuWAfodrFGwuO8WywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOLrE7sYlx7gk19duQaEWvray+SZMB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvNHVzVHV4aVhIdUNUWDEyNUJvUmEtdHJMNUprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYvHMA0G
CSqGSIb3DQEBCwUAA4IBAQAheP5oMf+yVbcj7otb4g5pLmoyeGNZEpUCut6/Oyj0
JC0llMVBfi4r5NfzCYRlVAhN8qdCn+vWUdpApXcTHlRmJ2UsVc1lfaBoXwp7WS44
mointw4BJ4WphlRbbnSeWGZPP1qfTaUGQ1e56yO46zWuerEhMJLwLnNMdpH5K7BI
wzksUgQoAY181biGZRqEgu67uy2in1Ld1Uo29gIyxyQtaWytRmyH43LROIkmjfxK
qaicZaG8YZ1rT0b5D9mIAluUJzNvGFpobKegsi8UNl+FAuEDMES0V118DtMpMs/O
9dGMoQEIXpznfQqGnzk3nD/P29Rv9PQiKBzMgCpiPcDz
-----END CERTIFICATE-----
Generated at Tue Jan 9 21:33:18 2024 by rpki-client on console-fra.rpki-client.org