Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/PFb9T3Lp7OB0op00nF_p4EZrEKM.roa
File: PFb9T3Lp7OB0op00nF_p4EZrEKM.roa (raw, json)
Hash identifier: Am2yKdeNULR0xvJBTc06Xxh5UCwotxwRqEzVG4wxdUY=
Subject key identifier: 3C:56:FD:4F:72:E9:EC:E0:74:A2:9D:34:9C:5F:E9:E0:46:6B:10:A3
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 018E9B61D9E884A3142331ABEC44592148D6
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/PFb9T3Lp7OB0op00nF_p4EZrEKM.roa
Signing time: Mon 01 Apr 2024 20:37:45 +0000
ROA not before: Mon 01 Apr 2024 20:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39521
IP address blocks: 45.10.16.0/23 maxlen: 23
45.10.18.0/23 maxlen: 23
45.10.18.0/24 maxlen: 24
45.88.5.0/24 maxlen: 24
45.88.6.0/24 maxlen: 24
45.88.7.0/24 maxlen: 24
45.95.40.0/22 maxlen: 22
45.130.100.0/22 maxlen: 22
83.229.23.0/24 maxlen: 24
83.229.34.0/24 maxlen: 24
95.178.107.0/24 maxlen: 24
185.90.223.0/24 maxlen: 24
185.144.56.0/22 maxlen: 24
188.191.48.0/22 maxlen: 22
217.194.153.0/24 maxlen: 24
2a05:e4c0::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Apr 2024 09:13:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9b:61:d9:e8:84:a3:14:23:31:ab:ec:44:59:21:48:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Apr 1 20:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c56fd4f72e9ece074a29d349c5fe9e0466b10a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:36:05:fe:ba:6c:9d:94:22:69:49:ad:bc:68:
33:c6:c6:23:7b:f1:e7:c8:7e:5e:cd:d0:bc:29:ed:
56:60:6f:34:a1:c2:11:72:f9:21:51:0f:1f:34:8b:
84:f3:8d:f3:8c:ee:ee:cc:dc:3b:24:ed:4c:11:d4:
42:6c:dd:26:4a:dc:9f:52:ca:a3:ba:53:e0:3a:a0:
03:8a:63:61:b3:24:50:a7:8e:e8:da:d0:b0:68:1f:
7d:d0:93:4b:04:9b:29:fc:40:a3:fb:66:e6:b6:e5:
94:ea:db:0c:b0:95:65:aa:42:5c:07:ba:e0:d8:bd:
e5:4a:01:ca:3d:ea:e3:39:94:8d:36:e1:75:00:a7:
00:ec:bc:32:02:76:ac:c3:1b:10:7a:44:b6:88:2c:
f6:8d:6b:d5:2f:72:c1:60:88:72:89:42:dd:89:fd:
1c:92:6a:94:8e:8e:a5:16:ff:8f:6d:09:ff:01:e8:
15:77:d9:e2:b4:8c:49:6f:6b:b0:3d:c8:d0:73:c5:
44:20:36:83:98:c6:06:38:96:a6:4a:d5:0f:18:35:
cc:a7:80:65:07:5f:08:83:81:4d:4b:32:fd:d1:dd:
df:ac:86:b9:5f:3a:5f:ee:7e:73:a8:d9:64:27:85:
5b:f4:92:2e:14:a8:05:8c:e3:4c:ea:be:52:d8:60:
71:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:56:FD:4F:72:E9:EC:E0:74:A2:9D:34:9C:5F:E9:E0:46:6B:10:A3
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/PFb9T3Lp7OB0op00nF_p4EZrEKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.16.0/22
45.88.5.0-45.88.7.255
45.95.40.0/22
45.130.100.0/22
83.229.23.0/24
83.229.34.0/24
95.178.107.0/24
185.90.223.0/24
185.144.56.0/22
188.191.48.0/22
217.194.153.0/24
IPv6:
2a05:e4c0::/29
Signature Algorithm: sha256WithRSAEncryption
6b:40:17:1a:e6:14:1b:f0:a8:3f:38:15:dd:ab:39:6a:b7:37:
01:77:67:11:43:fe:f1:af:5a:aa:f9:11:bd:a4:0b:10:22:b6:
51:92:db:9d:b6:10:3d:fe:df:00:b9:9d:8f:76:72:5a:e0:f2:
02:74:1f:e5:2f:ef:59:55:3a:93:26:43:53:ba:d5:3b:d2:5d:
dc:2b:2b:71:47:87:a8:73:23:ba:c1:ba:f8:3d:27:45:e5:fb:
17:59:eb:31:55:84:a1:b4:6a:fd:d9:98:25:41:13:1e:21:88:
ba:a6:06:b7:19:db:b6:02:2e:8b:1d:f1:60:f4:bc:84:a6:c1:
31:e8:ae:e1:8f:94:69:1c:d8:a5:64:f2:67:50:f6:cb:70:a8:
33:6d:43:27:0b:12:cd:36:1f:5a:8f:0a:ad:34:a3:55:09:03:
14:be:aa:09:f8:e7:79:8e:5d:cb:b9:b3:8a:80:52:1c:7b:b1:
21:6f:b0:f1:63:4e:b9:5c:f7:45:ab:d5:f3:51:87:9b:07:b9:
6a:85:60:34:e9:b8:1b:2b:c9:63:26:f9:f8:61:2e:4f:d2:7b:
e4:94:2e:a8:84:82:b8:cd:1e:73:05:09:a0:56:d3:8c:f4:9b:
da:e9:5e:7a:60:5b:72:3b:1e:52:cc:48:6a:da:e3:c3:a4:b0:
e2:b0:51:cd
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgISAY6bYdnohKMUIzGr7ERZIUjWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky
ZDMwYTkwHhcNMjQwNDAxMjAzNzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzU2ZmQ0ZjcyZTllY2UwNzRhMjlkMzQ5YzVmZTllMDQ2NmIxMGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTYF/rpsnZQiaUmtvGgzxsYje/Hn
yH5ezdC8Ke1WYG80ocIRcvkhUQ8fNIuE843zjO7uzNw7JO1MEdRCbN0mStyfUsqj
ulPgOqADimNhsyRQp47o2tCwaB990JNLBJsp/ECj+2bmtuWU6tsMsJVlqkJcB7rg
2L3lSgHKPerjOZSNNuF1AKcA7LwyAnaswxsQekS2iCz2jWvVL3LBYIhyiULdif0c
kmqUjo6lFv+PbQn/AegVd9nitIxJb2uwPcjQc8VEIDaDmMYGOJamStUPGDXMp4Bl
B18Ig4FNSzL90d3frIa5Xzpf7n5zqNlkJ4Vb9JIuFKgFjONM6r5S2GBxQQIDAQAB
o4ICXDCCAlgwHQYDVR0OBBYEFDxW/U9y6ezgdKKdNJxf6eBGaxCjMB8GA1UdIwQY
MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt
Yjk0NjQ3MThiYTM3LzEvUEZiOVQzTHA3T0Iwb3AwMG5GX3A0RVpyRUtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3
LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHIGCCsGAQUFBwEHAQH/BGMwYTBQBAIAATBKAwQCLQoQMAwD
BAAtWAUDBAMtWAADBAItXygDBAItgmQDBABT5RcDBABT5SIDBABfsmsDBAC5Wt8D
BAK5kDgDBAK8vzADBADZwpkwDQQCAAIwBwMFAyoF5MAwDQYJKoZIhvcNAQELBQAD
ggEBAGtAFxrmFBvwqD84Fd2rOWq3NwF3ZxFD/vGvWqr5Eb2kCxAitlGS2522ED3+
3wC5nY92clrg8gJ0H+Uv71lVOpMmQ1O61TvSXdwrK3FHh6hzI7rBuvg9J0Xl+xdZ
6zFVhKG0av3ZmCVBEx4hiLqmBrcZ27YCLosd8WD0vISmwTHoruGPlGkc2KVk8mdQ
9stwqDNtQycLEs02H1qPCq00o1UJAxS+qgn453mOXcu5s4qAUhx7sSFvsPFjTrlc
90Wr1fNRh5sHuWqFYDTpuBsryWMm+fhhLk/Se+SULqiEgrjNHnMFCaBW04z0m9rp
XnpgW3I7HlLMSGra48OksOKwUc0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org