Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/rqwCR91twtIiiIpLkvAWAiWM_lE.roa
File: rqwCR91twtIiiIpLkvAWAiWM_lE.roa (raw, json)
Hash identifier: EKh2DDedemBK13H1s3tN+UxVjUVhoW6GlpmPsZFr/Rw=
Subject key identifier: AE:AC:02:47:DD:6D:C2:D2:22:88:8A:4B:92:F0:16:02:25:8C:FE:51
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018CC8DE1B304D0974BC5214A62468F689A8
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/rqwCR91twtIiiIpLkvAWAiWM_lE.roa
Signing time: Tue 02 Jan 2024 06:30:48 +0000
ROA not before: Tue 02 Jan 2024 06:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212477
IP address blocks: 45.150.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Mar 2024 23:25:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:1b:30:4d:09:74:bc:52:14:a6:24:68:f6:89:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 2 06:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aeac0247dd6dc2d222888a4b92f01602258cfe51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5f:23:b7:36:b2:bd:f2:4a:74:92:f7:d9:a3:
c0:bd:e2:98:49:0a:00:03:de:3b:af:65:05:40:15:
91:7f:62:d8:bd:99:5a:64:72:47:ba:b5:85:f7:30:
27:1a:c1:43:39:d8:f9:26:05:18:41:b3:6f:d1:de:
18:38:05:f1:3a:1e:ed:1b:71:97:48:8e:72:df:b6:
fc:79:11:ed:12:eb:d1:20:c0:8b:11:72:60:e6:07:
3c:bd:a3:34:29:55:d5:58:e3:d2:f2:23:e0:4e:6c:
de:72:b0:ab:9a:0b:36:d9:b6:15:46:22:2b:f7:00:
8a:2c:a7:ab:08:78:45:1f:b6:a4:7d:31:d6:70:c1:
f7:f3:dd:89:9e:fb:ad:ff:96:9c:4c:b0:6e:a0:a4:
16:7a:d3:17:99:52:42:70:82:0e:a6:dc:f6:22:83:
28:0a:f5:a0:f4:63:13:27:13:f8:dc:31:a8:f4:8d:
1d:82:ae:ee:b4:2e:92:43:01:92:eb:e7:7c:3d:d2:
c0:9d:6d:9f:ba:3e:23:6b:bf:79:1c:37:78:a9:55:
38:9e:c7:12:9f:7c:17:80:48:d3:b4:2d:35:a9:6f:
06:05:40:7f:f1:8b:56:b2:9d:f6:f7:3b:f4:d0:f5:
e9:4b:dc:3f:a4:1d:2c:20:c1:92:00:9a:0c:53:f8:
84:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AC:02:47:DD:6D:C2:D2:22:88:8A:4B:92:F0:16:02:25:8C:FE:51
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/rqwCR91twtIiiIpLkvAWAiWM_lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.172.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e1:9b:3d:9f:92:91:2d:3f:5f:4e:0b:8c:85:34:07:1c:1e:
66:5f:03:cf:d8:17:27:92:22:8c:1f:3d:ca:1a:66:fb:49:95:
ed:0f:c7:4a:ec:4f:a0:62:1c:b3:fc:90:15:d4:b2:bc:31:11:
79:79:47:89:f5:14:f0:ea:93:9b:2a:9e:28:ad:f0:16:d0:43:
1f:5c:c9:fd:80:7b:39:0e:88:b3:9b:31:55:12:e7:f5:0f:5d:
fc:c9:12:f3:8c:90:9c:03:9f:d2:13:bd:cc:31:e6:58:2a:64:
fd:24:db:ee:a5:2c:f7:80:6c:1b:a6:80:86:b0:13:46:e4:58:
a0:b9:57:de:70:91:d1:98:c8:35:f6:d3:6e:34:50:62:42:90:
0f:9a:25:33:11:33:33:54:fc:87:98:2a:6a:01:43:92:a4:81:
97:c3:e1:3d:e0:b4:0e:ac:8a:e2:7a:81:20:a4:3d:2c:b1:47:
70:f8:43:3f:4c:4e:a9:6a:a9:a0:9c:36:2c:c6:d8:5f:c7:e3:
a2:83:b3:c0:b1:30:59:57:9e:21:09:05:5f:ca:b8:61:58:84:
ee:41:8b:85:02:c6:99:b2:7e:75:a6:23:dd:a4:85:08:ff:0b:
90:3b:34:78:2e:f8:0b:e5:d5:4a:06:eb:cd:fd:a5:ec:6a:8c:
a6:7e:6c:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3hswTQl0vFIUpiRo9omoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjQwMTAyMDYzMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWFjMDI0N2RkNmRjMmQyMjI4ODhhNGI5MmYwMTYwMjI1OGNmZTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF8jtzayvfJKdJL32aPAveKYSQoA
A947r2UFQBWRf2LYvZlaZHJHurWF9zAnGsFDOdj5JgUYQbNv0d4YOAXxOh7tG3GX
SI5y37b8eRHtEuvRIMCLEXJg5gc8vaM0KVXVWOPS8iPgTmzecrCrmgs22bYVRiIr
9wCKLKerCHhFH7akfTHWcMH3892Jnvut/5acTLBuoKQWetMXmVJCcIIOptz2IoMo
CvWg9GMTJxP43DGo9I0dgq7utC6SQwGS6+d8PdLAnW2fuj4ja795HDd4qVU4nscS
n3wXgEjTtC01qW8GBUB/8YtWsp329zv00PXpS9w/pB0sIMGSAJoMU/iE8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK6sAkfdbcLSIoiKS5LwFgIljP5RMB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvcnF3Q1I5MXR3dElpaUlwTGt2QVdBaVdNX2xFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZasMA0G
CSqGSIb3DQEBCwUAA4IBAQBE4Zs9n5KRLT9fTguMhTQHHB5mXwPP2BcnkiKMHz3K
Gmb7SZXtD8dK7E+gYhyz/JAV1LK8MRF5eUeJ9RTw6pObKp4orfAW0EMfXMn9gHs5
DoizmzFVEuf1D138yRLzjJCcA5/SE73MMeZYKmT9JNvupSz3gGwbpoCGsBNG5Fig
uVfecJHRmMg19tNuNFBiQpAPmiUzETMzVPyHmCpqAUOSpIGXw+E94LQOrIrieoEg
pD0ssUdw+EM/TE6paqmgnDYsxthfx+Oig7PAsTBZV54hCQVfyrhhWITuQYuFAsaZ
sn51piPdpIUI/wuQOzR4LvgL5dVKBuvN/aXsaoymfmyy
-----END CERTIFICATE-----
Generated at Fri Mar 8 02:24:09 2024 by rpki-client on console-fra.rpki-client.org