Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/LhY8w-WIp0nyq9OcnupQ6IYJM1w.roa
File: LhY8w-WIp0nyq9OcnupQ6IYJM1w.roa (raw, json)
Hash identifier: V2vbWc+hV8NIGiBdEBl4gr5CdeBVwWfiUHCI2EOJYnw=
Subject key identifier: 2E:16:3C:C3:E5:88:A7:49:F2:AB:D3:9C:9E:EA:50:E8:86:09:33:5C
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01917E82281B8F9B430FE63088086677ADB1
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/LhY8w-WIp0nyq9OcnupQ6IYJM1w.roa
Signing time: Fri 23 Aug 2024 09:12:24 +0000
ROA not before: Fri 23 Aug 2024 09:12:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141718
IP address blocks: 45.155.90.0/24 maxlen: 24
45.155.226.0/24 maxlen: 24
103.211.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Sep 2024 03:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7e:82:28:1b:8f:9b:43:0f:e6:30:88:08:66:77:ad:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Aug 23 09:12:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2e163cc3e588a749f2abd39c9eea50e88609335c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:34:44:a6:f3:29:bc:f1:0e:92:2b:61:85:
6b:73:fe:08:4c:75:f1:1e:75:26:06:e8:1a:25:cf:
7e:c9:17:1b:2c:7c:87:a6:ef:f4:7e:fb:ec:56:48:
1d:73:07:9f:97:91:d6:88:6b:1e:e8:86:39:73:40:
e3:07:d1:36:98:7b:c5:d3:e9:cf:6b:5d:fe:cb:98:
0c:2d:80:b2:a7:02:2b:2d:b1:e7:cd:28:3e:e1:de:
14:ee:88:02:42:33:b6:be:d6:b7:ec:86:e5:5a:0e:
3b:58:e7:e5:99:88:97:9d:82:53:5c:cb:71:2e:03:
ed:84:f6:d3:87:f1:b2:96:44:25:10:40:1c:ff:c8:
d4:a9:c9:5c:4f:e2:fa:b6:64:59:72:e5:ad:b4:0b:
65:c2:98:a7:b9:60:9c:4e:d5:bc:88:30:3e:16:f8:
6a:99:8c:40:d2:73:81:b8:52:46:a2:f0:cf:d3:55:
05:c4:55:b7:fb:61:64:c5:cc:c6:a7:3b:14:bf:9f:
8e:ae:35:b7:c2:d6:d2:09:e3:eb:ad:bc:bd:29:46:
3e:83:70:0c:6c:06:b5:e4:1c:05:ce:7b:0e:a7:18:
bb:08:be:b7:ba:57:82:47:6c:2f:4a:54:fc:b3:1f:
c1:5b:f3:6a:75:d1:d1:be:a5:9f:53:98:43:12:9b:
e0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:16:3C:C3:E5:88:A7:49:F2:AB:D3:9C:9E:EA:50:E8:86:09:33:5C
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/LhY8w-WIp0nyq9OcnupQ6IYJM1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.90.0/24
45.155.226.0/24
103.211.103.0/24
Signature Algorithm: sha256WithRSAEncryption
43:cf:61:eb:ed:99:b7:08:7b:45:27:84:eb:cb:3b:e8:fe:ce:
f9:8e:98:b8:28:1e:06:bc:0d:23:46:73:26:fd:62:8f:ef:56:
a1:16:fc:fa:3d:a9:b4:5f:df:8a:14:0c:7e:a2:c0:f9:7f:74:
48:1d:79:5c:a2:94:95:8f:b8:e7:ef:13:b4:cb:b6:06:31:21:
a5:8a:e3:bd:dc:ab:1f:6c:df:8c:58:72:c0:19:af:0c:8a:b2:
dc:8c:e1:e8:4f:ce:f8:9a:dc:25:18:2e:fd:0f:45:d0:c6:b0:
94:97:2d:80:ac:c2:ce:0d:e1:66:8f:21:49:a3:ed:2a:d8:4f:
1b:19:57:31:7b:e1:dc:b4:20:b2:a3:a3:fc:ee:af:33:05:ed:
1e:2e:8b:1a:62:ee:29:8a:b0:d8:45:f6:39:f6:52:cd:c1:7e:
e6:16:11:a9:be:7a:f3:4c:71:4c:56:4b:52:24:9f:a8:0a:9f:
d8:17:44:1f:b9:9b:cb:30:a3:25:3e:89:7f:6e:6c:a0:29:ec:
f0:9c:cf:a4:6c:8e:47:ab:69:bd:35:c3:f5:92:a9:4d:06:02:
54:9c:6e:f7:36:69:10:0f:d7:21:1c:88:17:c7:2b:5b:ea:96:
39:ee:e0:54:21:33:b5:d9:58:bf:9b:49:21:61:8a:09:45:ab:
0b:60:54:c9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZF+gigbj5tDD+YwiAhmd62xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjQwODIzMDkxMjI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZTE2M2NjM2U1ODhhNzQ5ZjJhYmQzOWM5ZWVhNTBlODg2MDkzMzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Q0RKbzKbzxDpIrYYVrc/4ITHXx
HnUmBugaJc9+yRcbLHyHpu/0fvvsVkgdcwefl5HWiGse6IY5c0DjB9E2mHvF0+nP
a13+y5gMLYCypwIrLbHnzSg+4d4U7ogCQjO2vta37IblWg47WOflmYiXnYJTXMtx
LgPthPbTh/GylkQlEEAc/8jUqclcT+L6tmRZcuWttAtlwpinuWCcTtW8iDA+Fvhq
mYxA0nOBuFJGovDP01UFxFW3+2FkxczGpzsUv5+OrjW3wtbSCePrrby9KUY+g3AM
bAa15BwFznsOpxi7CL63uleCR2wvSlT8sx/BW/NqddHRvqWfU5hDEpvg2QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFC4WPMPliKdJ8qvTnJ7qUOiGCTNcMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvTGhZOHctV0lwMG55cTlPY251cFE2SVlKTTF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZtaAwQA
LZviAwQAZ9NnMA0GCSqGSIb3DQEBCwUAA4IBAQBDz2Hr7Zm3CHtFJ4Tryzvo/s75
jpi4KB4GvA0jRnMm/WKP71ahFvz6Pam0X9+KFAx+osD5f3RIHXlcopSVj7jn7xO0
y7YGMSGliuO93KsfbN+MWHLAGa8MirLcjOHoT874mtwlGC79D0XQxrCUly2ArMLO
DeFmjyFJo+0q2E8bGVcxe+HctCCyo6P87q8zBe0eLosaYu4pirDYRfY59lLNwX7m
FhGpvnrzTHFMVktSJJ+oCp/YF0QfuZvLMKMlPol/bmygKezwnM+kbI5Hq2m9NcP1
kqlNBgJUnG73NmkQD9chHIgXxytb6pY57uBUITO12Vi/m0khYYoJRasLYFTJ
-----END CERTIFICATE-----
Generated at Sun Sep 15 07:27:39 2024 by rpki-client on console-fra.rpki-client.org