Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/hFfs9BqY6YOH8xk0Hx4Ntmoyd5s.roa
File: hFfs9BqY6YOH8xk0Hx4Ntmoyd5s.roa (raw, json)
Hash identifier: GgzR9GH7CphQpSHvG0Nyd92FXWby7yIUqFlSB7SJpVU=
Subject key identifier: 84:57:EC:F4:1A:98:E9:83:87:F3:19:34:1F:1E:0D:B6:6A:32:77:9B
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D65BF100EBE2D3FDDCF155BD9E6919CAB
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/hFfs9BqY6YOH8xk0Hx4Ntmoyd5s.roa
Signing time: Thu 01 Feb 2024 17:37:16 +0000
ROA not before: Thu 01 Feb 2024 17:37:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 45.10.64.0/22 maxlen: 22
45.10.80.0/22 maxlen: 22
185.188.41.0/24 maxlen: 24
195.216.132.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 02 Feb 2024 09:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:bf:10:0e:be:2d:3f:dd:cf:15:5b:d9:e6:91:9c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 1 17:37:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8457ecf41a98e98387f319341f1e0db66a32779b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:58:d2:43:87:16:a5:84:2e:6f:b3:2c:3f:4f:
32:3d:1a:46:dd:47:dd:bf:15:fd:7a:a8:85:d2:ec:
f1:f0:71:9f:27:43:e5:e1:fa:30:9c:b6:55:91:52:
81:b2:1a:49:36:9a:1e:21:5e:ea:21:21:de:23:db:
00:0b:24:46:3c:78:65:13:86:de:15:c1:09:e5:92:
97:b5:83:2e:e5:03:fc:2f:66:6e:c4:53:f3:dd:ae:
e9:03:30:e3:1d:f0:dc:33:67:b7:26:98:49:96:ea:
ab:a9:2b:a6:95:52:74:3f:b4:f7:94:74:ab:97:59:
3b:20:69:98:46:94:18:88:49:4d:e0:63:0c:a6:56:
21:bb:1c:86:5c:26:a9:2a:6e:25:14:6d:a6:37:77:
5b:b6:1e:d8:b0:40:9e:1b:f1:f0:33:6b:d2:3f:90:
10:2d:a3:7f:08:ac:8d:1f:aa:f3:14:42:d9:32:a3:
ac:79:a4:b3:d1:a0:57:3f:de:ab:03:5c:e6:09:b0:
f2:73:bc:d5:4a:b8:ab:5e:d5:7d:be:49:59:85:8e:
b6:25:94:4e:19:69:af:0b:45:10:6a:e5:bc:a0:c2:
6b:cc:b5:b7:bd:13:2e:a5:64:0c:68:f8:e3:9d:bf:
8d:ae:28:ca:bd:f3:68:1f:39:e0:1e:23:02:65:d0:
60:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:57:EC:F4:1A:98:E9:83:87:F3:19:34:1F:1E:0D:B6:6A:32:77:9B
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/hFfs9BqY6YOH8xk0Hx4Ntmoyd5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.64.0/22
45.10.80.0/22
185.188.41.0/24
195.216.132.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:dc:82:d8:a7:99:b4:8a:b9:1c:5e:5d:ab:a2:8b:32:2d:99:
7d:6d:bb:f3:73:a7:ba:44:88:96:4e:d6:18:fa:5e:05:cc:78:
4e:66:d5:b4:fb:37:c1:1d:ef:8e:18:23:4b:d6:09:c7:bd:b2:
32:bd:8d:38:9e:e0:3c:f0:f3:8b:1f:fd:70:dd:ff:39:e0:b3:
82:fe:9b:06:59:13:65:f9:ec:41:07:0b:35:e0:f3:ab:da:63:
46:d5:ab:33:f5:4b:0b:41:ba:3d:b2:23:fb:0e:c9:4b:db:b6:
17:5b:44:d6:ab:77:c9:66:80:b5:0b:6d:42:a3:e7:68:b2:ad:
c7:92:49:3a:d7:8a:97:35:c4:d8:d2:83:4b:5b:1d:db:a8:8c:
26:63:ce:75:16:26:68:b5:00:c8:a7:c6:c1:d4:74:70:08:52:
9d:cb:3c:69:41:1f:4e:f5:e7:d4:b7:2d:05:67:a2:84:dd:18:
78:db:04:94:a9:95:2a:37:fa:ed:47:0c:9f:3e:fb:e8:74:b2:
8f:03:dd:20:14:21:2b:29:36:f6:15:18:06:83:3c:8c:d9:73:
ad:15:c4:c1:c3:03:a6:d4:cc:88:99:75:f8:8f:0b:a7:f0:8c:
cf:3d:6d:4d:09:b8:5a:74:f7:4f:46:93:27:41:c0:c8:a7:b1:
f0:f5:37:fe
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY1lvxAOvi0/3c8VW9nmkZyrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwMjAxMTczNzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NDU3ZWNmNDFhOThlOTgzODdmMzE5MzQxZjFlMGRiNjZhMzI3NzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgljSQ4cWpYQub7MsP08yPRpG3Ufd
vxX9eqiF0uzx8HGfJ0Pl4fownLZVkVKBshpJNpoeIV7qISHeI9sACyRGPHhlE4be
FcEJ5ZKXtYMu5QP8L2ZuxFPz3a7pAzDjHfDcM2e3JphJluqrqSumlVJ0P7T3lHSr
l1k7IGmYRpQYiElN4GMMplYhuxyGXCapKm4lFG2mN3dbth7YsECeG/HwM2vSP5AQ
LaN/CKyNH6rzFELZMqOseaSz0aBXP96rA1zmCbDyc7zVSrirXtV9vklZhY62JZRO
GWmvC0UQauW8oMJrzLW3vRMupWQMaPjjnb+NrijKvfNoHzngHiMCZdBghQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIRX7PQamOmDh/MZNB8eDbZqMnebMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvaEZmczlCcVk2WU9IOHhrMEh4NE50bW95ZDVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLQpAAwQC
LQpQAwQAubwpAwQCw9iEMA0GCSqGSIb3DQEBCwUAA4IBAQAb3ILYp5m0irkcXl2r
oosyLZl9bbvzc6e6RIiWTtYY+l4FzHhOZtW0+zfBHe+OGCNL1gnHvbIyvY04nuA8
8POLH/1w3f854LOC/psGWRNl+exBBws14POr2mNG1asz9UsLQbo9siP7DslL27YX
W0TWq3fJZoC1C21Co+dosq3Hkkk614qXNcTY0oNLWx3bqIwmY851FiZotQDIp8bB
1HRwCFKdyzxpQR9O9efUty0FZ6KE3Rh42wSUqZUqN/rtRwyfPvvodLKPA90gFCEr
KTb2FRgGgzyM2XOtFcTBwwOm1MyImXX4jwun8IzPPW1NCbhadPdPRpMnQcDIp7Hw
9Tf+
-----END CERTIFICATE-----
Generated at Fri Feb 2 12:05:18 2024 by rpki-client on console-ams.rpki-client.org