Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/AkYU67GwSxd7f018v-sPpcIKoxs.roa
File: AkYU67GwSxd7f018v-sPpcIKoxs.roa (raw, json)
Hash identifier: qJwY8PkaKM4tK6uocbDzOcOipFYlekzAZ50RQKZW9PA=
Subject key identifier: 02:46:14:EB:B1:B0:4B:17:7B:7F:4D:7C:BF:EB:0F:A5:C2:0A:A3:1B
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0191E0BC656F68D48AB8A0C0621DA156DBF1
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/AkYU67GwSxd7f018v-sPpcIKoxs.roa
Signing time: Wed 11 Sep 2024 10:58:48 +0000
ROA not before: Wed 11 Sep 2024 10:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214766
IP address blocks: 45.134.146.0/23 maxlen: 23
45.134.146.0/24 maxlen: 24
45.134.147.0/24 maxlen: 24
45.156.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 14 Sep 2024 03:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e0:bc:65:6f:68:d4:8a:b8:a0:c0:62:1d:a1:56:db:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 11 10:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=024614ebb1b04b177b7f4d7cbfeb0fa5c20aa31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fe:c1:02:8f:f2:c4:74:aa:6d:1f:0d:eb:28:
ac:b5:78:25:fc:0e:32:11:4f:67:de:6e:7a:cd:4f:
85:c0:0f:c8:d7:90:c9:dc:99:4c:2b:39:32:bf:40:
1a:78:c0:3c:15:3a:2a:eb:f3:09:0f:09:ec:1c:d0:
ea:49:1c:a2:ef:86:d0:bb:90:54:6b:5d:75:b1:42:
db:e1:d4:e0:1f:24:a2:13:73:92:df:ec:1a:c0:be:
da:91:c0:a1:64:5e:39:ba:50:65:3f:cd:6f:86:c8:
2a:e4:4d:29:34:87:5d:4b:82:b2:be:b6:2e:aa:1c:
b7:17:f6:88:87:55:67:a1:ae:60:68:90:de:3d:18:
fc:b1:d3:a6:94:08:9f:68:9d:a3:4d:30:d9:ba:93:
0e:81:ad:fc:8e:37:45:fb:e8:fc:bb:13:5a:5a:1e:
75:57:a0:43:ed:05:f5:82:e0:95:80:23:cb:33:2b:
cb:cd:d0:b5:74:05:1d:df:18:89:54:9f:16:49:fc:
20:f1:7c:04:73:ec:32:5c:41:d2:46:bb:ee:83:c6:
08:3b:00:d9:0d:cc:2a:65:1e:26:31:20:7c:44:64:
73:9c:8d:2f:78:06:e8:6e:16:4e:b2:7d:dc:37:a5:
d6:3a:77:c5:93:3b:00:2e:55:9b:bc:e3:80:84:e3:
dd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:46:14:EB:B1:B0:4B:17:7B:7F:4D:7C:BF:EB:0F:A5:C2:0A:A3:1B
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/AkYU67GwSxd7f018v-sPpcIKoxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.146.0/23
45.156.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:83:06:75:c3:df:6e:5e:6c:69:62:cc:41:2f:27:f6:a3:5e:
13:1f:1e:df:68:4a:c3:fe:d1:28:db:7b:4f:40:d5:7a:82:93:
ce:f6:e9:5f:ba:22:a8:65:4e:9f:f5:4f:3f:43:1f:9f:dc:8c:
f6:78:0d:98:45:e2:49:22:19:90:4d:17:95:ae:ee:01:41:9d:
3b:f4:b8:97:d6:61:85:c8:89:b4:f3:8f:88:7a:a7:a3:7c:a0:
28:c0:1b:03:7f:7e:59:99:dd:3f:2b:4d:6d:b8:d1:c5:fa:21:
a6:06:31:8e:07:d2:e6:97:c6:ff:3b:b5:da:42:e2:f8:41:e8:
86:d7:13:3b:fe:8c:40:dd:7a:84:da:04:1a:c1:af:c1:40:71:
ff:c3:bf:4f:05:2f:02:e6:42:64:b0:99:43:f6:a0:fd:51:1f:
75:84:44:d7:48:f4:dc:55:37:f0:a6:48:53:71:26:f9:21:41:
20:26:35:59:9d:ea:21:6f:e2:84:59:48:eb:8e:1d:a9:eb:5b:
24:51:13:c3:07:7b:a6:c7:d8:38:c7:3f:14:2c:f2:01:f3:07:
c7:98:bf:7b:13:58:a0:fb:93:0d:0f:f7:86:fc:c3:e9:34:af:
24:50:6a:f0:ef:0c:b1:02:02:e1:4d:2f:33:ef:45:03:2d:6d:
05:f5:23:1a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZHgvGVvaNSKuKDAYh2hVtvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjQwOTExMTA1ODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjQ2MTRlYmIxYjA0YjE3N2I3ZjRkN2NiZmViMGZhNWMyMGFhMzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv7BAo/yxHSqbR8N6yistXgl/A4y
EU9n3m56zU+FwA/I15DJ3JlMKzkyv0AaeMA8FToq6/MJDwnsHNDqSRyi74bQu5BU
a111sULb4dTgHySiE3OS3+wawL7akcChZF45ulBlP81vhsgq5E0pNIddS4KyvrYu
qhy3F/aIh1Vnoa5gaJDePRj8sdOmlAifaJ2jTTDZupMOga38jjdF++j8uxNaWh51
V6BD7QX1guCVgCPLMyvLzdC1dAUd3xiJVJ8WSfwg8XwEc+wyXEHSRrvug8YIOwDZ
DcwqZR4mMSB8RGRznI0veAbobhZOsn3cN6XWOnfFkzsALlWbvOOAhOPdrQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAJGFOuxsEsXe39NfL/rD6XCCqMbMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvQWtZVTY3R3dTeGQ3ZjAxOHYtc1BwY0lLb3hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLYaSAwQA
LZzfMA0GCSqGSIb3DQEBCwUAA4IBAQCkgwZ1w99uXmxpYsxBLyf2o14THx7faErD
/tEo23tPQNV6gpPO9ulfuiKoZU6f9U8/Qx+f3Iz2eA2YReJJIhmQTReVru4BQZ07
9LiX1mGFyIm084+IeqejfKAowBsDf35Zmd0/K01tuNHF+iGmBjGOB9Lml8b/O7Xa
QuL4QeiG1xM7/oxA3XqE2gQawa/BQHH/w79PBS8C5kJksJlD9qD9UR91hETXSPTc
VTfwpkhTcSb5IUEgJjVZneohb+KEWUjrjh2p61skURPDB3umx9g4xz8ULPIB8wfH
mL97E1ig+5MND/eG/MPpNK8kUGrw7wyxAgLhTS8z70UDLW0F9SMa
-----END CERTIFICATE-----
Generated at Sat Sep 14 06:09:42 2024 by rpki-client on console-fra.rpki-client.org