Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/m5qHhE_w_3AIUDZRN8b1n08FF80.roa
File: m5qHhE_w_3AIUDZRN8b1n08FF80.roa (raw, json)
Hash identifier: PFluVptoF11JoDnjDON2wM4bvkVSbSrm9z/1SdaEV/c=
Subject key identifier: 9B:9A:87:84:4F:F0:FF:70:08:50:36:51:37:C6:F5:9F:4F:05:17:CD
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 018D6AA9E7AB42E1D57006E15EE2897BD9E1
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/m5qHhE_w_3AIUDZRN8b1n08FF80.roa
Signing time: Fri 02 Feb 2024 16:32:16 +0000
ROA not before: Fri 02 Feb 2024 16:32:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215649
IP address blocks: 45.89.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 08:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6a:a9:e7:ab:42:e1:d5:70:06:e1:5e:e2:89:7b:d9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Feb 2 16:32:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9b9a87844ff0ff700850365137c6f59f4f0517cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0d:4f:12:96:f5:12:93:58:1c:37:85:a8:66:
2b:be:09:a5:9e:1a:ad:8e:7e:e3:e6:e3:03:93:50:
0f:98:fd:56:6f:01:78:6b:4b:08:69:89:ab:ff:59:
dd:01:76:48:7c:a4:b2:2b:2f:e1:10:92:cc:37:c9:
61:6e:23:d1:60:8e:72:34:b0:d2:d5:cb:19:44:9b:
67:d6:20:01:ef:14:40:2a:e6:cf:ba:7a:44:23:83:
90:80:b2:e6:27:b2:07:27:27:80:6d:87:c9:7a:44:
4d:61:33:fe:cf:41:c8:0e:39:2b:46:d8:19:bd:b8:
38:fb:e3:1a:93:cf:71:a8:23:00:3c:23:3c:46:26:
f9:59:22:91:32:96:c3:be:a7:96:78:5f:13:61:fe:
98:38:71:ff:41:ae:0c:48:f0:84:89:76:12:03:f5:
21:d1:e6:1f:21:b8:f2:77:dd:88:90:86:1d:35:6a:
55:fd:9a:f7:e4:1d:83:b9:53:d0:6f:6e:00:cf:e1:
6a:eb:2a:a1:0f:08:e3:8e:e4:b8:ce:bc:b6:49:9d:
9e:db:a5:68:74:11:cf:d3:53:8c:73:40:f2:e1:a5:
01:56:8b:80:d1:26:06:68:f4:51:37:f5:25:aa:95:
e7:b3:19:09:64:4d:3e:6f:b7:5c:13:ca:da:3d:e4:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9A:87:84:4F:F0:FF:70:08:50:36:51:37:C6:F5:9F:4F:05:17:CD
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/m5qHhE_w_3AIUDZRN8b1n08FF80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.29.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:19:80:10:31:e7:fc:b9:90:be:13:f7:e3:ee:06:f2:e6:36:
04:d5:7b:85:e0:3b:0e:cc:45:4a:b7:62:e6:c5:c9:22:56:18:
3b:25:97:62:78:93:57:4d:6c:01:fa:60:98:da:ff:e5:7f:1c:
d0:75:d5:1e:8c:61:d0:5f:5b:a9:3e:59:fa:4a:28:71:66:f7:
78:21:0a:76:4c:3e:8c:66:15:b2:cd:06:4f:ee:b7:f8:68:66:
ab:f0:9b:6f:49:95:4d:c7:7c:21:cb:c8:24:26:2e:95:2b:ca:
9b:ca:8c:d2:bc:4f:40:a3:4e:be:c3:e2:40:f6:1e:b9:66:0a:
07:4a:3b:c0:68:8a:85:aa:45:e6:1f:79:dd:24:64:5f:8e:50:
ad:00:5c:9f:09:6a:a3:23:42:af:37:16:df:d2:35:d7:fd:c2:
73:ff:f2:42:e1:d2:96:ac:7d:22:d8:b1:60:37:b9:04:12:63:
93:87:f4:aa:22:ca:b4:73:23:25:b3:51:af:82:c6:e7:1a:2c:
23:ea:80:af:15:0c:e9:50:f2:91:89:a0:60:c4:52:b2:b3:cc:
c7:bb:ec:b7:0b:83:4d:f1:00:48:e1:e9:b5:c2:cd:e3:07:fa:
41:80:32:c2:5a:12:f3:55:b6:ac:03:5f:57:4f:da:df:78:b6:
a1:dc:39:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1qqeerQuHVcAbhXuKJe9nhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz
NjliYTQwHhcNMjQwMjAyMTYzMjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjlhODc4NDRmZjBmZjcwMDg1MDM2NTEzN2M2ZjU5ZjRmMDUxN2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAig1PEpb1EpNYHDeFqGYrvgmlnhqt
jn7j5uMDk1APmP1WbwF4a0sIaYmr/1ndAXZIfKSyKy/hEJLMN8lhbiPRYI5yNLDS
1csZRJtn1iAB7xRAKubPunpEI4OQgLLmJ7IHJyeAbYfJekRNYTP+z0HIDjkrRtgZ
vbg4++Mak89xqCMAPCM8Rib5WSKRMpbDvqeWeF8TYf6YOHH/Qa4MSPCEiXYSA/Uh
0eYfIbjyd92IkIYdNWpV/Zr35B2DuVPQb24Az+Fq6yqhDwjjjuS4zry2SZ2e26Vo
dBHP01OMc0Dy4aUBVouA0SYGaPRRN/UlqpXnsxkJZE0+b7dcE8raPeRaPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJuah4RP8P9wCFA2UTfG9Z9PBRfNMB8GA1UdIwQY
MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt
ZGRjMjY2NTY0NmNjLzEvbTVxSGhFX3dfM0FJVURaUk44YjFuMDhGRjgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj
LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVkdMA0G
CSqGSIb3DQEBCwUAA4IBAQChGYAQMef8uZC+E/fj7gby5jYE1XuF4DsOzEVKt2Lm
xckiVhg7JZdieJNXTWwB+mCY2v/lfxzQddUejGHQX1upPln6SihxZvd4IQp2TD6M
ZhWyzQZP7rf4aGar8JtvSZVNx3why8gkJi6VK8qbyozSvE9Ao06+w+JA9h65ZgoH
SjvAaIqFqkXmH3ndJGRfjlCtAFyfCWqjI0KvNxbf0jXX/cJz//JC4dKWrH0i2LFg
N7kEEmOTh/SqIsq0cyMls1GvgsbnGiwj6oCvFQzpUPKRiaBgxFKys8zHu+y3C4NN
8QBI4em1ws3jB/pBgDLCWhLzVbasA19XT9rfeLah3Dlp
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:11 2024 by rpki-client on console-ams.rpki-client.org