Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/D2QM1f_6LCDm6Vya13h4TCrSWtk.roa
File: D2QM1f_6LCDm6Vya13h4TCrSWtk.roa (raw, json)
Hash identifier: ovpzcW+A11EKR3SjO/LJ+vaXzKR8HojQwvRNTCsKUQE=
Subject key identifier: 0F:64:0C:D5:FF:FA:2C:20:E6:E9:5C:9A:D7:78:78:4C:2A:D2:5A:D9
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018EA3F71E180AC2013AF81D8012519212A0
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/D2QM1f_6LCDm6Vya13h4TCrSWtk.roa
Signing time: Wed 03 Apr 2024 12:37:45 +0000
ROA not before: Wed 03 Apr 2024 12:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51088
IP address blocks: 45.86.188.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 08 May 2024 05:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a3:f7:1e:18:0a:c2:01:3a:f8:1d:80:12:51:92:12:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Apr 3 12:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f640cd5fffa2c20e6e95c9ad778784c2ad25ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:49:79:d2:5a:1f:ae:2b:c1:52:7a:aa:1d:
bc:bc:6f:c8:15:4a:fa:06:29:bf:b5:30:34:18:9e:
6c:84:6b:08:af:c0:09:62:ae:84:81:5d:b6:1d:50:
ca:6d:a2:55:61:e4:ef:ac:f5:1c:70:32:3f:cd:d8:
c7:4d:ee:bb:ac:b6:d1:d6:36:83:74:89:0a:42:cb:
64:e3:f6:8a:51:ee:c2:0c:89:e6:65:cd:c0:4c:0e:
28:43:b5:82:f8:1c:29:db:e8:65:78:de:7d:b2:d8:
4e:e4:67:0f:8a:12:a9:66:3d:dc:f5:e5:6b:ac:d4:
e9:d5:e6:3c:63:39:85:55:41:fe:ee:cf:eb:e1:08:
46:e9:0a:30:d3:e7:ce:91:de:ab:c1:a3:de:fe:2d:
78:44:39:df:e3:73:d1:3d:94:a5:35:6c:f1:af:72:
f7:8f:63:6d:60:34:ee:8a:37:2d:0d:20:e6:f8:f9:
04:b4:52:ce:d2:76:2a:74:ca:e7:80:68:e2:af:e6:
9f:bd:b5:c9:9e:bc:f4:ec:7e:79:62:fc:f2:1e:ce:
a1:95:b5:d2:dd:74:34:2e:fc:93:c8:c0:84:08:d5:
3a:38:37:b4:f2:2f:4b:1d:21:fd:29:c2:d9:c9:46:
e6:8b:9f:b7:c3:51:7d:54:e7:1e:4f:27:07:a8:d3:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:64:0C:D5:FF:FA:2C:20:E6:E9:5C:9A:D7:78:78:4C:2A:D2:5A:D9
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/D2QM1f_6LCDm6Vya13h4TCrSWtk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.188.0/23
Signature Algorithm: sha256WithRSAEncryption
b8:b1:17:30:00:db:2e:3a:2e:bc:85:3c:d1:3b:ff:a9:88:03:
48:21:4e:24:61:9e:18:fb:1f:76:89:8d:7c:ed:a8:a7:51:29:
95:ff:a1:70:5a:54:c8:46:17:bd:16:24:2e:bf:01:47:a3:5a:
22:76:c6:ea:93:a4:9b:55:a9:c2:94:0b:b4:20:bc:9b:54:93:
1a:b4:ca:93:85:54:ca:51:b0:f5:2e:c9:40:6b:b0:e4:60:ba:
76:e9:94:58:31:99:83:e4:b3:56:f7:87:fa:bf:e7:10:25:b2:
ae:0d:5c:d8:07:a1:4a:7e:e1:58:26:e3:50:27:9b:d1:5e:0c:
84:cb:2f:0a:3f:22:da:a5:9b:29:86:99:ef:34:f1:f2:d7:34:
99:26:d1:6f:4b:8a:f4:78:1a:c0:bb:76:c9:7c:8a:39:3c:5e:
39:f0:1c:b9:91:a7:ff:db:22:19:d4:00:3f:1d:dd:9e:e2:d7:
c9:6d:6c:57:7c:47:b0:e5:6f:d3:3d:37:59:1c:0b:1d:11:37:
0b:22:8c:28:1d:e0:32:c0:c7:aa:66:8b:af:d9:39:f0:94:12:
f6:09:40:7c:b7:af:a6:b7:de:53:e2:eb:88:4b:10:c6:c5:61:
35:27:fb:55:88:ee:f7:49:da:f9:a4:cf:bc:98:1e:f8:8e:80:
c3:42:e1:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6j9x4YCsIBOvgdgBJRkhKgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl
MTdjMjcwHhcNMjQwNDAzMTIzNzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjY0MGNkNWZmZmEyYzIwZTZlOTVjOWFkNzc4Nzg0YzJhZDI1YWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFhJedJaH64rwVJ6qh28vG/IFUr6
Bim/tTA0GJ5shGsIr8AJYq6EgV22HVDKbaJVYeTvrPUccDI/zdjHTe67rLbR1jaD
dIkKQstk4/aKUe7CDInmZc3ATA4oQ7WC+Bwp2+hleN59sthO5GcPihKpZj3c9eVr
rNTp1eY8YzmFVUH+7s/r4QhG6Qow0+fOkd6rwaPe/i14RDnf43PRPZSlNWzxr3L3
j2NtYDTuijctDSDm+PkEtFLO0nYqdMrngGjir+afvbXJnrz07H55YvzyHs6hlbXS
3XQ0LvyTyMCECNU6ODe08i9LHSH9KcLZyUbmi5+3w1F9VOceTycHqNO0RwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA9kDNX/+iwg5ulcmtd4eEwq0lrZMB8GA1UdIwQY
MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It
ZDc4ZDU2MzFkN2Y2LzEvRDJRTTFmXzZMQ0RtNlZ5YTEzaDRUQ3JTV3RrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2
LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVa8MA0G
CSqGSIb3DQEBCwUAA4IBAQC4sRcwANsuOi68hTzRO/+piANIIU4kYZ4Y+x92iY18
7ainUSmV/6FwWlTIRhe9FiQuvwFHo1oidsbqk6SbVanClAu0ILybVJMatMqThVTK
UbD1LslAa7DkYLp26ZRYMZmD5LNW94f6v+cQJbKuDVzYB6FKfuFYJuNQJ5vRXgyE
yy8KPyLapZsphpnvNPHy1zSZJtFvS4r0eBrAu3bJfIo5PF458By5kaf/2yIZ1AA/
Hd2e4tfJbWxXfEew5W/TPTdZHAsdETcLIowoHeAywMeqZouv2TnwlBL2CUB8t6+m
t95T4uuISxDGxWE1J/tViO73Sdr5pM+8mB74joDDQuGt
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:37 2024 by rpki-client on console-ams.rpki-client.org