Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/uyxTERFbbQ8jX-4-yzivuhIm60w.roa
File: uyxTERFbbQ8jX-4-yzivuhIm60w.roa (raw, json)
Hash identifier: w0ybE6W5WLJD0QdaZk8Xkj4krSyIL1oO7HZoFf9rIkE=
Subject key identifier: BB:2C:53:11:11:5B:6D:0F:23:5F:EE:3E:CB:38:AF:BA:12:26:EB:4C
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01935AA6A5D7302DB865E7ADADC673136E90
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/uyxTERFbbQ8jX-4-yzivuhIm60w.roa
Signing time: Sat 23 Nov 2024 20:11:31 +0000
ROA not before: Sat 23 Nov 2024 20:11:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.139.196.0/24 maxlen: 24
45.150.173.0/24 maxlen: 24
45.150.175.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Nov 2024 01:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:5a:a6:a5:d7:30:2d:b8:65:e7:ad:ad:c6:73:13:6e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Nov 23 20:11:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb2c5311115b6d0f235fee3ecb38afba1226eb4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:af:62:96:94:55:42:06:99:d7:54:d8:41:
7f:e0:0c:28:fa:02:e5:10:26:86:df:29:b9:bb:b8:
74:6b:9c:f0:b7:59:07:bb:0c:27:b4:60:44:d0:61:
78:c1:f2:8e:52:56:b2:2d:01:59:6f:fe:a4:73:09:
b4:4b:79:4e:d7:32:01:5d:63:1f:84:ef:48:04:5f:
39:2e:83:b6:3d:71:d8:a8:46:19:60:20:eb:b0:2b:
4e:36:25:88:c0:68:c7:db:79:06:f5:4a:1d:1c:27:
5b:30:cf:29:bb:6b:de:4a:e2:43:6b:06:11:b2:1e:
0b:e6:79:c4:ff:dd:ba:6f:6b:b5:74:96:e4:ab:9b:
d2:ba:78:93:aa:47:0a:be:8f:d2:59:a1:dd:a8:31:
9f:2b:67:b4:ca:d5:e0:f2:38:73:06:ae:c7:e1:19:
17:be:d6:99:0f:04:60:91:f6:90:bc:f5:d7:3b:e8:
79:06:9b:60:5c:4b:ef:d8:51:d7:06:9c:d4:2d:89:
26:60:0b:2c:61:9a:cb:08:91:78:e0:5f:48:0f:b2:
ad:0d:d1:97:42:14:98:17:c9:32:39:5f:91:00:df:
39:38:65:7e:0a:45:55:2d:29:cb:57:a3:46:22:95:
9b:d0:3c:20:d7:47:f1:86:15:e7:4a:0b:30:98:31:
d7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:2C:53:11:11:5B:6D:0F:23:5F:EE:3E:CB:38:AF:BA:12:26:EB:4C
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/uyxTERFbbQ8jX-4-yzivuhIm60w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.196.0/24
45.150.173.0/24
45.150.175.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:96:e9:51:cc:ca:c4:24:49:cb:9b:62:f8:42:32:93:a4:3e:
10:a8:95:09:40:60:c5:fd:7f:15:53:f8:d7:ea:fc:f7:ae:36:
98:f9:3a:c4:9a:af:a2:cf:75:a5:fe:ed:9e:da:20:cd:b9:a2:
fe:fc:e0:7e:16:e2:71:db:e6:78:4a:bc:0d:25:09:94:1f:14:
b0:db:02:7c:96:54:49:8e:a0:45:f9:13:e2:3a:cf:ad:ad:8e:
12:78:0a:5a:44:5f:1f:9d:5a:69:1f:1f:9a:b6:e7:0f:43:1a:
bf:dd:80:db:13:7f:14:85:d5:95:95:cd:8a:6e:25:a9:2a:81:
5c:0b:cd:89:57:80:ef:44:1a:eb:9e:06:ce:4c:fe:49:73:77:
85:ec:a9:8a:13:93:23:e1:b2:e4:bd:ee:88:ae:53:ed:57:35:
68:54:e1:c4:73:d5:f0:6c:28:e5:91:d0:63:52:ca:a1:9e:08:
72:ce:cc:77:6a:f1:bc:cc:0b:92:79:b2:18:00:a1:bd:80:e8:
5c:aa:e3:eb:b6:ce:d4:39:a3:ca:06:7d:80:1c:8a:69:f6:f4:
3a:23:ab:51:a7:df:96:86:af:db:0a:61:12:6c:e4:41:04:d8:
47:b0:5b:38:ff:0a:13:c2:59:93:06:ec:68:3c:fc:ee:eb:76:
03:99:af:41
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZNapqXXMC24ZeetrcZzE26QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MTA3YWI2OTIxZWY4Y2IyZGVjYTNlYjc2NjQ3OGNmZjNl
NWZjNmQwHhcNMjQxMTIzMjAxMTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjJjNTMxMTExNWI2ZDBmMjM1ZmVlM2VjYjM4YWZiYTEyMjZlYjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpmvYpaUVUIGmddU2EF/4Awo+gLl
ECaG3ym5u7h0a5zwt1kHuwwntGBE0GF4wfKOUlayLQFZb/6kcwm0S3lO1zIBXWMf
hO9IBF85LoO2PXHYqEYZYCDrsCtONiWIwGjH23kG9UodHCdbMM8pu2veSuJDawYR
sh4L5nnE/926b2u1dJbkq5vSuniTqkcKvo/SWaHdqDGfK2e0ytXg8jhzBq7H4RkX
vtaZDwRgkfaQvPXXO+h5BptgXEvv2FHXBpzULYkmYAssYZrLCJF44F9ID7KtDdGX
QhSYF8kyOV+RAN85OGV+CkVVLSnLV6NGIpWb0Dwg10fxhhXnSgswmDHXJwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLssUxERW20PI1/uPss4r7oSJutMMB8GA1UdIwQY
MBaAFCgQeraSHvjLLeyj63ZkeM/z5fxtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzIt
YzBmYjNlZjc2NDBlLzEvdXl4VEVSRmJiUThqWC00LXl6aXZ1aEltNjB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8wODgyNmUtNzdkMC00MzdiLWExYzItYzBmYjNlZjc2NDBl
LzEvS0JCNnRwSWUtTXN0N0tQcmRtUjR6X1BsX0cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYvEAwQA
LZatAwQALZavMA0GCSqGSIb3DQEBCwUAA4IBAQA9lulRzMrEJEnLm2L4QjKTpD4Q
qJUJQGDF/X8VU/jX6vz3rjaY+TrEmq+iz3Wl/u2e2iDNuaL+/OB+FuJx2+Z4SrwN
JQmUHxSw2wJ8llRJjqBF+RPiOs+trY4SeApaRF8fnVppHx+atucPQxq/3YDbE38U
hdWVlc2KbiWpKoFcC82JV4DvRBrrngbOTP5Jc3eF7KmKE5Mj4bLkve6IrlPtVzVo
VOHEc9XwbCjlkdBjUsqhnghyzsx3avG8zAuSebIYAKG9gOhcquPrts7UOaPKBn2A
HIpp9vQ6I6tRp9+Whq/bCmESbORBBNhHsFs4/woTwlmTBuxoPPzu63YDma9B
-----END CERTIFICATE-----
Generated at Sun Nov 24 03:21:36 2024 by rpki-client on console-fra.rpki-client.org