Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/3lmsn7zV1XNbCDb1IhLxItEykXQ.roa
File: 3lmsn7zV1XNbCDb1IhLxItEykXQ.roa (raw, json)
Hash identifier: lp+dWaulcyjCVOu1/+Ky0mTfyePrYeHThqA7dONBZvA=
Subject key identifier: DE:59:AC:9F:BC:D5:D5:73:5B:08:36:F5:22:12:F1:22:D1:32:91:74
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018B121E6575A8D39647FED2766AEF627F2C
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/3lmsn7zV1XNbCDb1IhLxItEykXQ.roa
Signing time: Mon 09 Oct 2023 01:47:43 +0000
ROA not before: Mon 09 Oct 2023 01:47:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212517
IP address blocks: 45.135.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 28 Dec 2023 08:35:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:12:1e:65:75:a8:d3:96:47:fe:d2:76:6a:ef:62:7f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Oct 9 01:47:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de59ac9fbcd5d5735b0836f52212f122d1329174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fa:68:e0:1a:a7:0d:b8:2b:a8:5d:6a:12:88:
e4:52:ab:68:06:69:83:9f:47:5a:9c:4e:01:eb:2a:
4c:38:ec:3d:e4:5e:8f:86:92:ae:0b:87:2c:f2:31:
fb:50:82:84:95:54:76:ee:c0:6c:98:36:bd:13:1d:
75:b5:c1:1c:d3:66:30:e3:d6:e4:1c:f3:88:74:a4:
62:cb:5a:c4:39:bc:67:9d:bf:68:eb:64:dd:bf:ed:
c8:eb:e6:1c:de:2b:a2:44:ad:0d:c9:2b:bc:56:55:
87:48:63:66:7f:f5:de:a9:49:d2:ae:23:4a:17:fa:
2b:bd:43:e2:4b:73:b1:af:3a:0b:3d:e8:f3:f2:4e:
d3:46:80:20:f2:a0:4f:6c:32:84:25:a0:d8:6a:56:
2d:65:10:24:2f:88:07:3f:84:dc:7f:49:80:47:c6:
41:8c:e4:ff:1a:aa:6b:ed:1e:c8:22:25:b9:f7:e4:
16:2f:ba:e4:63:d5:e3:d6:85:c0:66:c3:6f:21:87:
f9:11:23:18:40:30:d4:c8:89:f3:57:b0:7d:b7:86:
ed:c6:7a:d2:c5:f8:39:3f:cc:50:d2:ef:e0:95:68:
58:5b:50:47:f2:57:0f:46:43:5a:1b:cc:ea:94:8b:
7f:6b:ec:2b:9d:12:cc:b5:e3:86:34:31:70:90:99:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:59:AC:9F:BC:D5:D5:73:5B:08:36:F5:22:12:F1:22:D1:32:91:74
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/3lmsn7zV1XNbCDb1IhLxItEykXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.238.0/24
Signature Algorithm: sha256WithRSAEncryption
03:67:0e:6b:7d:09:31:8a:77:13:6f:08:ed:ec:45:db:1f:3a:
6a:26:67:37:bc:d9:87:36:62:62:01:93:05:df:cf:cc:b0:bb:
c9:e2:73:dc:33:00:fe:2b:2a:61:60:39:ec:88:17:ff:e4:dc:
61:ed:40:9f:c9:03:50:88:8e:83:1b:05:fa:5f:8c:db:04:b5:
9f:39:ec:e1:4a:42:4e:2a:87:4c:19:0a:b4:80:ca:dd:40:d0:
50:f0:d0:d5:61:92:62:75:6a:54:e0:c6:9f:59:fa:ab:89:7e:
72:92:eb:df:78:89:ee:c4:53:f8:55:52:17:df:e3:9c:ad:22:
51:3d:4e:1b:c0:17:e6:f2:96:ea:d8:bb:c6:0b:76:0c:3c:49:
78:64:9f:4f:43:6d:fa:03:2a:4c:83:11:72:56:a3:d8:14:e9:
43:83:be:86:ce:66:99:76:e2:50:64:4f:65:d0:71:ff:6c:71:
9a:c2:57:54:52:17:1e:6f:0a:bd:69:56:4b:bc:a5:0f:ee:73:
5f:d9:95:ad:3b:a3:1c:7e:f2:16:40:d0:45:7b:17:e8:6f:03:
d2:50:f1:b7:3e:e7:0d:ac:79:3c:58:52:34:76:7b:54:96:f7:
0c:ae:49:e4:d0:ad:1e:09:af:89:67:83:11:3d:cf:25:e0:43:
20:86:e8:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYsSHmV1qNOWR/7SdmrvYn8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjMxMDA5MDE0NzQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZTU5YWM5ZmJjZDVkNTczNWIwODM2ZjUyMjEyZjEyMmQxMzI5MTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/po4BqnDbgrqF1qEojkUqtoBmmD
n0danE4B6ypMOOw95F6PhpKuC4cs8jH7UIKElVR27sBsmDa9Ex11tcEc02Yw49bk
HPOIdKRiy1rEObxnnb9o62Tdv+3I6+Yc3iuiRK0NySu8VlWHSGNmf/XeqUnSriNK
F/orvUPiS3OxrzoLPejz8k7TRoAg8qBPbDKEJaDYalYtZRAkL4gHP4Tcf0mAR8ZB
jOT/Gqpr7R7IIiW59+QWL7rkY9Xj1oXAZsNvIYf5ESMYQDDUyInzV7B9t4btxnrS
xfg5P8xQ0u/glWhYW1BH8lcPRkNaG8zqlIt/a+wrnRLMteOGNDFwkJmh8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN5ZrJ+81dVzWwg29SIS8SLRMpF0MB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvM2xtc243elYxWE5iQ0RiMUloTHhJdEV5a1hRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYfuMA0G
CSqGSIb3DQEBCwUAA4IBAQADZw5rfQkxincTbwjt7EXbHzpqJmc3vNmHNmJiAZMF
38/MsLvJ4nPcMwD+KyphYDnsiBf/5Nxh7UCfyQNQiI6DGwX6X4zbBLWfOezhSkJO
KodMGQq0gMrdQNBQ8NDVYZJidWpU4MafWfqriX5ykuvfeInuxFP4VVIX3+OcrSJR
PU4bwBfm8pbq2LvGC3YMPEl4ZJ9PQ236AypMgxFyVqPYFOlDg76GzmaZduJQZE9l
0HH/bHGawldUUhcebwq9aVZLvKUP7nNf2ZWtO6McfvIWQNBFexfobwPSUPG3PucN
rHk8WFI0dntUlvcMrknk0K0eCa+JZ4MRPc8l4EMghuhe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:03 2024 by rpki-client on console-ams.rpki-client.org