Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/DE0p7E9VFJ7mites1q4SPI3C4hw.roa
File: DE0p7E9VFJ7mites1q4SPI3C4hw.roa (raw, json)
Hash identifier: V69wHXPengmw7cyau8N0zK5L/pAn3Yz+9D957H7J0nA=
Subject key identifier: 0C:4D:29:EC:4F:55:14:9E:E6:8A:D7:AC:D6:AE:12:3C:8D:C2:E2:1C
Certificate issuer: /CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Certificate serial: 018CC9BBA96D6AD97BD4E7EEFD61B0AB0D1C
Authority key identifier: 81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/DE0p7E9VFJ7mites1q4SPI3C4hw.roa
Signing time: Tue 02 Jan 2024 10:32:48 +0000
ROA not before: Tue 02 Jan 2024 10:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12552
IP address blocks: 45.92.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Nov 2024 14:51:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:a9:6d:6a:d9:7b:d4:e7:ee:fd:61:b0:ab:0d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=814edbd19634cbb91a0d2dafd759d4c9a7e77b7a
Validity
Not Before: Jan 2 10:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c4d29ec4f55149ee68ad7acd6ae123c8dc2e21c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:1a:f6:09:45:36:fb:73:2d:f0:f3:12:74:
22:c6:31:dc:19:1b:fb:cd:d3:c3:7f:3e:3e:93:5f:
07:e2:03:74:65:54:96:86:93:ce:d9:e7:21:8d:47:
8b:e8:04:4b:d7:ab:25:93:1b:2b:d0:dc:3f:9c:45:
61:0c:64:24:0b:b0:dd:99:d3:bb:bf:07:30:5c:59:
6c:97:e2:ac:aa:58:c9:f3:d5:76:ed:7c:a2:04:47:
cb:d0:88:d4:0c:39:41:62:18:f3:ad:2d:3b:2c:43:
cc:45:06:ca:6d:e5:de:d2:76:23:d9:7f:a4:78:22:
9b:7f:52:20:54:1e:18:f7:90:15:3e:a3:65:d5:04:
d6:bc:f8:f9:25:7e:9e:59:67:6e:ce:4b:36:7f:d9:
0a:a3:a7:e9:1f:30:47:c2:b8:04:19:14:da:6a:0e:
d7:4c:e3:2c:7e:32:b9:f4:c8:c0:25:c2:9f:ef:ab:
cf:d7:a4:95:c2:13:ff:28:bf:5d:73:38:12:ab:c6:
3a:5a:02:87:48:3f:29:13:c8:9a:c5:fb:f7:f1:ee:
ee:76:6f:3d:b6:3e:ab:65:88:5e:ad:5f:34:32:c5:
25:7a:6b:8d:16:b6:53:99:53:e7:71:63:7d:7e:0b:
01:7f:e6:c0:60:cd:f7:7d:06:5b:52:42:93:e3:1d:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:4D:29:EC:4F:55:14:9E:E6:8A:D7:AC:D6:AE:12:3C:8D:C2:E2:1C
X509v3 Authority Key Identifier:
keyid:81:4E:DB:D1:96:34:CB:B9:1A:0D:2D:AF:D7:59:D4:C9:A7:E7:7B:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gU7b0ZY0y7kaDS2v11nUyafne3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/DE0p7E9VFJ7mites1q4SPI3C4hw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/e82de9-25f4-466e-9c0c-c08997a7a08f/1/gU7b0ZY0y7kaDS2v11nUyafne3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.12.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:61:7f:c7:66:c9:fa:b5:ab:22:23:2c:43:e3:6b:29:fe:57:
d9:1f:96:8f:b6:9c:63:f7:ab:21:f7:09:79:17:38:7e:63:fb:
0d:70:27:1c:2c:27:cd:fa:24:3b:94:87:92:07:48:23:1c:d3:
50:69:0b:1b:79:5a:a9:49:b6:bd:59:9e:78:28:4e:12:dd:94:
8f:02:7c:e2:eb:90:47:89:38:5c:65:24:e7:c9:7d:46:f2:23:
84:f7:93:be:92:c3:21:66:8d:5d:c4:43:ea:b0:1d:e4:df:93:
b6:e7:4e:29:e3:36:09:ba:3c:c2:f0:b0:68:5b:9b:2d:97:61:
9b:18:ce:87:47:50:96:03:98:28:b1:e8:33:b3:84:ba:07:58:
55:cf:e6:c3:e5:1b:50:fe:df:20:f0:49:13:0a:36:99:9d:30:
9d:b0:17:dc:00:d9:81:cc:e3:7d:82:ca:d0:8d:4d:e0:d4:13:
98:1d:aa:37:48:bf:47:5a:16:a4:f4:13:0d:67:44:66:a2:a0:
05:a9:73:eb:8d:61:7b:3e:b7:57:5d:d1:02:2a:1c:50:07:6e:
41:07:fe:4a:d9:0c:1e:09:29:e9:42:a4:3f:f2:7e:7e:07:ed:
bc:c7:60:78:af:73:c7:92:a3:cc:49:ab:0a:68:22:16:a0:7e:
3e:9f:96:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJu6ltatl71Ofu/WGwqw0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNGVkYmQxOTYzNGNiYjkxYTBkMmRhZmQ3NTlkNGM5YTdl
NzdiN2EwHhcNMjQwMTAyMTAzMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzRkMjllYzRmNTUxNDllZTY4YWQ3YWNkNmFlMTIzYzhkYzJlMjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPEa9glFNvtzLfDzEnQixjHcGRv7
zdPDfz4+k18H4gN0ZVSWhpPO2echjUeL6ARL16slkxsr0Nw/nEVhDGQkC7DdmdO7
vwcwXFlsl+KsqljJ89V27XyiBEfL0IjUDDlBYhjzrS07LEPMRQbKbeXe0nYj2X+k
eCKbf1IgVB4Y95AVPqNl1QTWvPj5JX6eWWduzks2f9kKo6fpHzBHwrgEGRTaag7X
TOMsfjK59MjAJcKf76vP16SVwhP/KL9dczgSq8Y6WgKHSD8pE8iaxfv38e7udm89
tj6rZYherV80MsUlemuNFrZTmVPncWN9fgsBf+bAYM33fQZbUkKT4x2BnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAxNKexPVRSe5orXrNauEjyNwuIcMB8GA1UdIwQY
MBaAFIFO29GWNMu5Gg0tr9dZ1Mmn53t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9lODJkZTktMjVmNC00NjZlLTljMGMt
YzA4OTk3YTdhMDhmLzEvREUwcDdFOVZGSjdtaXRlczFxNFNQSTNDNGh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9lODJkZTktMjVmNC00NjZlLTljMGMtYzA4OTk3YTdhMDhm
LzEvZ1U3YjBaWTB5N2thRFMydjExblV5YWZuZTNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVwMMA0G
CSqGSIb3DQEBCwUAA4IBAQCPYX/HZsn6tasiIyxD42sp/lfZH5aPtpxj96sh9wl5
Fzh+Y/sNcCccLCfN+iQ7lIeSB0gjHNNQaQsbeVqpSba9WZ54KE4S3ZSPAnzi65BH
iThcZSTnyX1G8iOE95O+ksMhZo1dxEPqsB3k35O2504p4zYJujzC8LBoW5stl2Gb
GM6HR1CWA5gosegzs4S6B1hVz+bD5RtQ/t8g8EkTCjaZnTCdsBfcANmBzON9gsrQ
jU3g1BOYHao3SL9HWhak9BMNZ0RmoqAFqXPrjWF7PrdXXdECKhxQB25BB/5K2Qwe
CSnpQqQ/8n5+B+28x2B4r3PHkqPMSasKaCIWoH4+n5bV
-----END CERTIFICATE-----
Generated at Wed Nov 27 20:01:28 2024 by rpki-client on console-ams.rpki-client.org