Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/yz4VvMIhVg-9S11mlpzIo7HCwSk.roa
File: yz4VvMIhVg-9S11mlpzIo7HCwSk.roa (raw, json)
Hash identifier: ZGBIPCEk3GUE9aJzLXl+Dp4WAYIW5J0lEMvt0MctXm0=
Subject key identifier: CB:3E:15:BC:C2:21:56:0F:BD:4B:5D:66:96:9C:C8:A3:B1:C2:C1:29
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 01920856F2AFDE9CD9EB540C5F2AA0189B7B
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/yz4VvMIhVg-9S11mlpzIo7HCwSk.roa
Signing time: Thu 19 Sep 2024 03:32:48 +0000
ROA not before: Thu 19 Sep 2024 03:32:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141718
IP address blocks: 45.155.90.0/24 maxlen: 24
45.155.226.0/24 maxlen: 24
103.211.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 09:48:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:08:56:f2:af:de:9c:d9:eb:54:0c:5f:2a:a0:18:9b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 19 03:32:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb3e15bcc221560fbd4b5d66969cc8a3b1c2c129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:99:8a:fc:ef:de:59:4b:5a:59:7b:b2:5f:f5:
53:f5:4e:35:51:4b:dd:4c:1b:83:25:7d:c9:75:71:
3b:76:70:47:92:60:39:f1:4b:94:87:b1:28:54:18:
ce:12:15:73:a3:9f:99:20:55:f7:92:f5:93:d5:3f:
4c:44:5b:0d:af:06:90:6d:d7:39:a0:c4:14:15:b3:
86:90:4f:3b:48:a4:bd:53:cd:02:5f:8b:57:cf:e5:
5e:f7:fd:0d:8d:4f:02:21:c0:1e:39:36:f4:be:da:
ba:6e:89:3b:e2:a6:a9:45:23:cd:14:34:e2:1e:50:
2a:36:48:3f:75:fe:98:5d:3a:99:ab:f8:2b:f8:22:
be:cd:b0:cb:06:11:f2:bf:8e:ba:7d:f1:5c:59:55:
12:f1:5c:bf:e0:97:a7:61:15:8f:7c:00:af:b8:b4:
d9:08:2a:e5:24:03:27:7e:95:08:ce:1e:69:cb:0e:
98:ac:20:52:b9:eb:75:c6:e4:d9:be:70:bc:85:ba:
7b:81:e4:5d:91:70:de:31:f4:74:c6:a6:48:e9:8f:
bf:16:da:13:a5:8c:a3:ab:0f:01:04:2c:dd:bb:2d:
13:a8:15:ce:50:09:09:4f:a3:11:58:85:0a:99:6b:
fd:f1:3e:f8:d9:10:3d:0d:85:98:4d:58:e7:f0:9e:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3E:15:BC:C2:21:56:0F:BD:4B:5D:66:96:9C:C8:A3:B1:C2:C1:29
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/yz4VvMIhVg-9S11mlpzIo7HCwSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.90.0/24
45.155.226.0/24
103.211.103.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:63:2c:36:e0:41:09:70:e6:75:d1:8f:2b:19:6e:9c:18:ac:
26:ca:99:3c:97:ab:87:26:9c:3f:98:26:bb:a8:0d:8b:3b:7b:
0a:32:4b:4a:a5:0a:5f:9a:c7:77:95:c0:26:f7:57:ec:17:d0:
2e:ff:d2:0b:09:bd:05:ab:e2:ab:68:58:ee:78:04:8f:f2:9f:
3f:ba:a4:f7:b0:7f:4d:76:a6:54:3d:e7:06:ec:b3:b5:e3:f7:
c3:90:ad:2e:61:c6:c2:db:7a:ac:05:04:5b:46:ed:85:39:de:
95:a6:45:2a:37:a3:a7:39:5b:8a:a3:63:dd:66:df:ad:61:33:
84:dc:cf:fb:46:45:ee:a3:c9:13:01:51:bc:d2:1b:dc:92:e6:
35:2f:ff:c6:1e:fc:a8:1c:f0:23:b8:af:47:50:44:f3:28:41:
0b:80:c1:30:ba:95:86:b5:f8:4c:b2:86:a4:30:2a:bc:8f:a9:
17:8c:0b:70:39:21:d0:4e:2b:df:e9:31:52:ca:ad:e0:b4:7e:
d3:5c:1c:bb:3e:92:01:da:7e:05:0d:08:c6:ca:a1:4d:a7:27:
fd:69:ab:47:85:c6:68:6e:da:00:db:82:fb:cd:1b:4c:4e:54:
ae:db:3c:a8:e8:fc:b9:2d:53:4f:cd:4f:8b:fa:c5:f8:1a:6a:
de:3e:a0:fe
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZIIVvKv3pzZ61QMXyqgGJt7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjQwOTE5MDMzMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjNlMTViY2MyMjE1NjBmYmQ0YjVkNjY5NjljYzhhM2IxYzJjMTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5mK/O/eWUtaWXuyX/VT9U41UUvd
TBuDJX3JdXE7dnBHkmA58UuUh7EoVBjOEhVzo5+ZIFX3kvWT1T9MRFsNrwaQbdc5
oMQUFbOGkE87SKS9U80CX4tXz+Ve9/0NjU8CIcAeOTb0vtq6bok74qapRSPNFDTi
HlAqNkg/df6YXTqZq/gr+CK+zbDLBhHyv466ffFcWVUS8Vy/4JenYRWPfACvuLTZ
CCrlJAMnfpUIzh5pyw6YrCBSuet1xuTZvnC8hbp7geRdkXDeMfR0xqZI6Y+/FtoT
pYyjqw8BBCzduy0TqBXOUAkJT6MRWIUKmWv98T742RA9DYWYTVjn8J50FwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMs+FbzCIVYPvUtdZpacyKOxwsEpMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEveXo0VnZNSWhWZy05UzExbWxweklvN0hDd1NrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZtaAwQA
LZviAwQAZ9NnMA0GCSqGSIb3DQEBCwUAA4IBAQC3Yyw24EEJcOZ10Y8rGW6cGKwm
ypk8l6uHJpw/mCa7qA2LO3sKMktKpQpfmsd3lcAm91fsF9Au/9ILCb0Fq+KraFju
eASP8p8/uqT3sH9NdqZUPecG7LO14/fDkK0uYcbC23qsBQRbRu2FOd6VpkUqN6On
OVuKo2PdZt+tYTOE3M/7RkXuo8kTAVG80hvckuY1L//GHvyoHPAjuK9HUETzKEEL
gMEwupWGtfhMsoakMCq8j6kXjAtwOSHQTivf6TFSyq3gtH7TXBy7PpIB2n4FDQjG
yqFNpyf9aatHhcZobtoA24L7zRtMTlSu2zyo6Py5LVNPzU+L+sX4GmrePqD+
-----END CERTIFICATE-----
Generated at Thu Sep 19 13:12:31 2024 by rpki-client on console-ams.rpki-client.org