Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/5Yq_8sR6zq3PyGGw65YESSTjVEo.roa
File: 5Yq_8sR6zq3PyGGw65YESSTjVEo.roa (raw, json)
Hash identifier: M/Srqm4AnhH7F7zq5a7te3KL+rv+lemYGnhbGzSssTw=
Subject key identifier: E5:8A:BF:F2:C4:7A:CE:AD:CF:C8:61:B0:EB:96:04:49:24:E3:54:4A
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 018571276CEC3444328838BE7C2C65DD27BE
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/5Yq_8sR6zq3PyGGw65YESSTjVEo.roa
Signing time: Mon 02 Jan 2023 06:24:47 +0000
ROA not before: Mon 02 Jan 2023 06:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208178
IP address blocks: 45.155.104.0/24 maxlen: 24
45.155.105.0/24 maxlen: 24
45.155.107.0/24 maxlen: 24
45.155.106.0/24 maxlen: 24
2a0f:fb00::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:6c:ec:34:44:32:88:38:be:7c:2c:65:dd:27:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Jan 2 06:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e58abff2c47aceadcfc861b0eb96044924e3544a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:32:0c:2b:b8:31:56:9b:e4:7d:43:d1:25:37:
6c:1d:82:05:5d:63:e1:6f:81:3c:58:fd:80:02:11:
54:a5:a9:1b:11:be:df:24:a1:db:64:f4:1e:85:53:
49:18:9c:5d:b9:d7:51:ba:36:2a:82:b4:3d:2b:f5:
45:e9:db:2c:ac:30:45:3a:fb:c8:ff:1c:41:b9:fc:
5a:2b:ec:12:27:66:2f:98:39:dc:21:b7:4b:3b:fd:
13:4d:14:17:28:14:2c:57:3c:85:35:dc:7e:be:9f:
9f:ce:bc:86:9b:94:eb:70:15:f1:29:46:34:19:2d:
3a:21:c3:50:62:56:aa:99:4e:1b:4b:73:1d:ff:70:
02:5a:e4:34:41:78:a6:bf:3f:53:00:50:db:c5:a4:
a7:27:29:ec:2c:2b:48:bb:80:24:4b:2b:09:d7:2e:
6e:da:fb:c7:62:1d:b5:0b:d8:01:7a:78:3e:d3:9c:
8d:b2:d6:dc:79:30:a5:d5:39:d0:3f:9e:3d:d4:2b:
a7:ff:9c:39:e1:2c:45:71:cc:d8:61:87:19:46:eb:
5a:b7:2f:53:c0:4b:94:e3:2f:68:c0:d9:4e:7d:d9:
5f:a7:4e:28:c1:18:b3:5e:fc:6d:30:10:3b:57:33:
47:00:72:bc:8c:88:dd:ed:9b:b5:a8:98:fb:70:17:
82:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8A:BF:F2:C4:7A:CE:AD:CF:C8:61:B0:EB:96:04:49:24:E3:54:4A
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/5Yq_8sR6zq3PyGGw65YESSTjVEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.104.0/22
IPv6:
2a0f:fb00::/29
Signature Algorithm: sha256WithRSAEncryption
92:83:2f:bf:30:8c:6f:27:77:de:20:a3:8f:f7:2b:b4:79:db:
f0:a7:b5:27:35:b3:eb:a1:28:6c:ad:bb:e8:51:63:91:02:76:
21:6c:b3:71:88:37:12:07:15:5a:d8:1d:29:53:dd:6f:38:d9:
aa:d0:bf:5d:ab:f2:45:2f:30:a5:c0:ad:03:29:d1:1e:92:6b:
ec:f3:85:6a:5c:b7:07:e2:22:b1:75:50:72:c0:63:75:bb:91:
09:2c:5f:67:14:58:80:92:eb:2a:bf:30:aa:fb:4a:de:a3:03:
6b:cf:21:54:b0:c8:7a:87:c6:27:39:30:9b:91:bc:7f:5e:1d:
ef:71:31:78:7d:dc:4a:ef:31:7d:09:b4:22:65:c7:9c:7a:9b:
29:6b:2a:bd:cb:84:d4:d4:75:64:ca:1f:1b:01:9e:eb:b6:56:
6d:34:75:af:7c:eb:14:f2:30:18:51:3f:bd:82:c4:44:ee:a6:
91:7b:f0:76:f3:ca:4b:a7:46:ed:02:27:49:26:be:3b:67:82:
d3:fc:ab:f6:d7:d2:a8:d7:2e:18:51:45:d5:a8:69:8f:b6:2e:
5f:9e:97:ab:b3:6c:3b:75:a0:11:b4:79:93:0c:23:31:11:44:
ef:88:ac:f6:68:7e:59:d4:1f:7c:56:fd:e5:07:13:eb:77:c4:
f9:49:32:11
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVxJ2zsNEQyiDi+fCxl3Se+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZGRkM2NiNjQ4YmViNDI1MWQ0N2NjNGI2NWJjZDY0YjA5
YThkNGIwHhcNMjMwMTAyMDYyNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNThhYmZmMmM0N2FjZWFkY2ZjODYxYjBlYjk2MDQ0OTI0ZTM1NDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszIMK7gxVpvkfUPRJTdsHYIFXWPh
b4E8WP2AAhFUpakbEb7fJKHbZPQehVNJGJxduddRujYqgrQ9K/VF6dssrDBFOvvI
/xxBufxaK+wSJ2YvmDncIbdLO/0TTRQXKBQsVzyFNdx+vp+fzryGm5TrcBXxKUY0
GS06IcNQYlaqmU4bS3Md/3ACWuQ0QXimvz9TAFDbxaSnJynsLCtIu4AkSysJ1y5u
2vvHYh21C9gBeng+05yNstbceTCl1TnQP5491Cun/5w54SxFcczYYYcZRutaty9T
wEuU4y9owNlOfdlfp04owRizXvxtMBA7VzNHAHK8jIjd7Zu1qJj7cBeC4QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFOWKv/LEes6tz8hhsOuWBEkk41RKMB8GA1UdIwQY
MBaAFOPd08tki+tCUdR8xLZbzWSwmo1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTIt
YjZiNzZlMjJmZmFjLzEvNVlxXzhzUjZ6cTNQeUdHdzY1WUVTU1RqVkVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9mYzE0N2EtODNmYy00YTUzLWE5MTItYjZiNzZlMjJmZmFj
LzEvNDkzVHkyU0w2MEpSMUh6RXRsdk5aTENhalVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLZtoMA0E
AgACMAcDBQMqD/sAMA0GCSqGSIb3DQEBCwUAA4IBAQCSgy+/MIxvJ3feIKOP9yu0
edvwp7UnNbProShsrbvoUWORAnYhbLNxiDcSBxVa2B0pU91vONmq0L9dq/JFLzCl
wK0DKdEekmvs84VqXLcH4iKxdVBywGN1u5EJLF9nFFiAkusqvzCq+0reowNrzyFU
sMh6h8YnOTCbkbx/Xh3vcTF4fdxK7zF9CbQiZcecepspayq9y4TU1HVkyh8bAZ7r
tlZtNHWvfOsU8jAYUT+9gsRE7qaRe/B288pLp0btAidJJr47Z4LT/Kv219Ko1y4Y
UUXVqGmPti5fnpers2w7daARtHmTDCMxEUTviKz2aH5Z1B98Vv3lBxPrd8T5STIR
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:13 2024 by rpki-client on console-ams.rpki-client.org