Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/IaME7BT1QRFPnQZ4WmaY0IkpabI.roa
File: IaME7BT1QRFPnQZ4WmaY0IkpabI.roa (raw, json)
Hash identifier: z2S5UVyy4E4aUlStR0x9geGmcFMAMw0reqUyyuhqZaw=
Subject key identifier: 21:A3:04:EC:14:F5:41:11:4F:9D:06:78:5A:66:98:D0:89:29:69:B2
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0189DDC98516636A439CA8D24E09B388FC81
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/IaME7BT1QRFPnQZ4WmaY0IkpabI.roa
Signing time: Thu 10 Aug 2023 04:51:58 +0000
ROA not before: Thu 10 Aug 2023 04:51:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 55154
IP address blocks: 45.135.236.0/23 maxlen: 23
45.135.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 10 Aug 2023 10:13:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:dd:c9:85:16:63:6a:43:9c:a8:d2:4e:09:b3:88:fc:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Aug 10 04:51:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21a304ec14f541114f9d06785a6698d0892969b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:df:eb:c9:4b:ae:c7:7a:17:3b:43:b8:00:33:
70:a1:68:7d:e3:39:2e:28:2f:22:75:e2:4d:bf:cb:
8a:a2:71:45:8a:c6:f9:a8:c5:de:e2:35:68:9f:5c:
ae:19:8d:ca:05:98:e4:06:7e:78:33:77:78:47:ac:
68:9f:68:de:93:f7:e8:9a:c8:87:a1:b0:01:93:47:
bb:d4:5a:d4:ac:de:29:7a:c5:82:40:c4:0d:70:75:
f8:13:55:60:cd:03:3e:46:3b:33:2a:72:98:ab:e3:
fc:e5:f7:c6:a8:44:66:6a:8c:17:27:67:90:ac:e8:
df:d5:4a:b1:06:90:0c:83:e3:e7:ee:68:ad:01:4c:
48:07:02:1b:64:c9:5c:fa:d9:1f:16:90:ab:cd:ed:
59:46:2d:ef:7d:59:91:9b:40:5c:af:d6:9e:03:69:
5d:3e:4c:29:f7:74:f9:15:0f:10:7d:c6:21:8a:5a:
78:b5:a8:d2:c5:f4:f1:77:c0:69:fa:ab:cd:49:94:
ae:d6:6c:2c:e9:20:3c:21:76:31:f3:14:11:9a:97:
25:1b:88:71:7f:76:2e:da:ed:22:bd:e0:4e:2e:a7:
4f:ae:57:7b:f7:c2:f5:fd:86:4d:0f:4b:20:3f:9b:
5a:c4:3e:70:97:85:c5:68:2a:d6:f4:f9:50:18:bb:
5c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A3:04:EC:14:F5:41:11:4F:9D:06:78:5A:66:98:D0:89:29:69:B2
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/IaME7BT1QRFPnQZ4WmaY0IkpabI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.236.0/23
Signature Algorithm: sha256WithRSAEncryption
58:aa:f4:00:f4:1f:7a:e3:36:bf:bf:a0:ea:49:25:56:ce:d8:
04:db:bf:6e:1f:4d:4a:ee:83:21:b4:a1:35:ac:c1:94:96:b3:
25:20:12:6c:03:5c:8a:cf:1f:ff:fa:bd:4d:3d:29:b2:8c:81:
12:93:23:98:1a:19:b8:52:6d:dd:53:f9:7f:b5:eb:b1:01:c3:
94:21:c1:a4:54:aa:13:7f:92:6a:0f:1d:34:f9:d4:72:3d:2e:
d2:ee:a4:42:a5:af:a2:85:05:33:bd:6a:f9:ce:12:51:34:a0:
0a:cb:5d:55:a1:a1:66:ed:37:9d:06:59:b0:ce:ff:94:9a:49:
9f:12:54:c0:3d:6e:e6:05:ff:6d:2d:78:50:2b:c2:b6:13:9d:
5d:4b:1f:7b:66:99:22:f4:12:bf:20:53:7e:b8:03:3d:e8:4e:
aa:1c:93:57:20:63:01:ca:23:fe:b0:7c:fd:8f:e0:2e:f8:94:
58:e4:5f:9e:cc:b7:b2:ff:fe:4f:1a:fc:18:11:9d:2f:71:21:
95:52:45:f6:fd:e9:ae:6a:48:80:d7:55:28:f2:3f:a5:6f:6c:
b1:01:9d:9c:25:94:66:e1:2e:d1:b8:b3:c4:2e:40:7d:e9:93:
a0:42:7a:21:41:33:0f:73:27:2a:f7:45:bf:4f:47:f9:e0:0d:
90:9c:53:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYndyYUWY2pDnKjSTgmziPyBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjMwODEwMDQ1MTU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWEzMDRlYzE0ZjU0MTExNGY5ZDA2Nzg1YTY2OThkMDg5Mjk2OWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd/ryUuux3oXO0O4ADNwoWh94zku
KC8ideJNv8uKonFFisb5qMXe4jVon1yuGY3KBZjkBn54M3d4R6xon2jek/fomsiH
obABk0e71FrUrN4pesWCQMQNcHX4E1VgzQM+RjszKnKYq+P85ffGqERmaowXJ2eQ
rOjf1UqxBpAMg+Pn7mitAUxIBwIbZMlc+tkfFpCrze1ZRi3vfVmRm0Bcr9aeA2ld
Pkwp93T5FQ8QfcYhilp4tajSxfTxd8Bp+qvNSZSu1mws6SA8IXYx8xQRmpclG4hx
f3Yu2u0iveBOLqdPrld798L1/YZND0sgP5taxD5wl4XFaCrW9PlQGLtcewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCGjBOwU9UERT50GeFpmmNCJKWmyMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvSWFNRTdCVDFRUkZQblFaNFdtYVkwSWtwYWJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYfsMA0G
CSqGSIb3DQEBCwUAA4IBAQBYqvQA9B964za/v6DqSSVWztgE279uH01K7oMhtKE1
rMGUlrMlIBJsA1yKzx//+r1NPSmyjIESkyOYGhm4Um3dU/l/teuxAcOUIcGkVKoT
f5JqDx00+dRyPS7S7qRCpa+ihQUzvWr5zhJRNKAKy11VoaFm7TedBlmwzv+Umkmf
ElTAPW7mBf9tLXhQK8K2E51dSx97Zpki9BK/IFN+uAM96E6qHJNXIGMByiP+sHz9
j+Au+JRY5F+ezLey//5PGvwYEZ0vcSGVUkX2/emuakiA11Uo8j+lb2yxAZ2cJZRm
4S7RuLPELkB96ZOgQnohQTMPcycq90W/T0f54A2QnFOG
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org