Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/1QrT-Ng8r4Sc7ZBz3LEwVBVPoPM.roa
File: 1QrT-Ng8r4Sc7ZBz3LEwVBVPoPM.roa (raw, json)
Hash identifier: 8ktEM2W1CgLMKm7fwnZroA4TPiZWkVxWgKerzJ5xJH4=
Subject key identifier: D5:0A:D3:F8:D8:3C:AF:84:9C:ED:90:73:DC:B1:30:54:15:4F:A0:F3
Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672
Certificate serial: 018BC8AF5C5A93BDB0CDAFB22D9F4967EDDF
Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/1QrT-Ng8r4Sc7ZBz3LEwVBVPoPM.roa
Signing time: Mon 13 Nov 2023 12:36:57 +0000
ROA not before: Mon 13 Nov 2023 12:36:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44877
IP address blocks: 139.45.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c8:af:5c:5a:93:bd:b0:cd:af:b2:2d:9f:49:67:ed:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672
Validity
Not Before: Nov 13 12:36:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d50ad3f8d83caf849ced9073dcb13054154fa0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bd:46:bf:56:cf:7b:87:d6:5d:8b:40:d1:21:
98:02:a1:be:5d:ed:c7:99:f6:4b:1e:fc:38:e7:93:
a0:19:79:64:5b:bd:6b:0b:49:e9:70:2e:80:fa:17:
e8:61:34:38:61:8b:24:07:98:df:ac:aa:8a:c9:3f:
1c:c7:a9:10:91:35:dd:21:0e:cc:ef:a6:ff:5a:c1:
3a:3f:a4:4e:d6:36:45:2f:b3:76:c3:0b:1c:0c:ed:
d7:e7:5a:0c:ba:e8:e3:d9:46:a5:c6:3f:b5:b6:6b:
6b:ce:6e:73:25:fc:c3:7a:ed:08:82:56:61:64:82:
c3:76:bd:89:26:31:ce:c4:eb:99:06:33:68:37:e5:
e2:8c:b4:ea:14:3e:72:1d:34:c0:38:83:4b:cb:b0:
f8:0d:f4:8f:86:b3:cc:a1:9d:d2:15:7a:b1:42:7e:
72:36:e2:cf:97:f4:a8:7c:b3:db:c4:be:14:af:65:
10:28:76:34:d4:f8:39:0a:fd:08:51:08:f7:ce:23:
44:3c:c8:9d:cd:6e:f3:0b:d1:aa:81:cb:3f:66:80:
50:3e:3a:3f:ca:53:63:b3:37:27:28:5b:b7:4a:18:
4c:2f:6b:92:05:ea:64:74:47:42:99:78:db:d0:19:
fc:4b:b9:61:bb:3b:a5:b6:15:9a:ac:ab:b5:30:3f:
f3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:0A:D3:F8:D8:3C:AF:84:9C:ED:90:73:DC:B1:30:54:15:4F:A0:F3
X509v3 Authority Key Identifier:
keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/1QrT-Ng8r4Sc7ZBz3LEwVBVPoPM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.45.211.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:17:8d:d6:87:cb:5d:06:fe:a2:84:cf:58:0b:10:c8:a8:2c:
47:f0:6c:38:e9:86:c5:68:0d:40:29:67:9a:fa:a0:b3:67:0c:
43:1e:20:aa:ff:82:6c:ef:1a:2e:85:55:c6:90:74:40:e2:3c:
0d:8f:94:8e:c7:ea:0a:18:98:2d:fc:c7:b2:25:36:eb:4c:71:
04:56:3b:85:48:ae:14:c8:84:60:54:b2:af:ca:41:09:47:fe:
7f:98:46:4d:6a:ce:86:f1:6c:1c:32:f8:75:ac:12:b9:87:f5:
dc:0c:b3:07:df:f0:67:68:5c:3e:3b:2a:c9:01:74:18:ea:f4:
22:43:c3:05:e4:0f:32:74:d0:81:0f:07:9b:76:9f:4a:34:77:
6c:e8:f5:45:59:cd:f1:a5:18:2a:fc:71:63:dd:6a:41:7c:80:
e8:c5:c8:dd:0f:25:be:ad:1e:e9:5b:a6:2d:ad:3b:33:88:3e:
ba:42:10:9e:e5:a7:ba:ea:ef:de:c4:e5:7c:d1:bb:da:bf:64:
75:1d:8e:8a:3c:65:d2:f2:27:cd:79:cf:80:6b:17:ec:f2:23:
50:ca:0d:4f:32:91:ee:24:c7:ee:63:d4:24:dd:96:d8:d5:8f:
75:99:ea:6d:eb:83:e6:92:e8:7e:d0:66:5e:13:db:96:1e:b0:
9d:4a:40:f3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYvIr1xak72wza+yLZ9JZ+3fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3
Y2M2NzIwHhcNMjMxMTEzMTIzNjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTBhZDNmOGQ4M2NhZjg0OWNlZDkwNzNkY2IxMzA1NDE1NGZhMGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn71Gv1bPe4fWXYtA0SGYAqG+Xe3H
mfZLHvw455OgGXlkW71rC0npcC6A+hfoYTQ4YYskB5jfrKqKyT8cx6kQkTXdIQ7M
76b/WsE6P6RO1jZFL7N2wwscDO3X51oMuujj2Ualxj+1tmtrzm5zJfzDeu0IglZh
ZILDdr2JJjHOxOuZBjNoN+XijLTqFD5yHTTAOINLy7D4DfSPhrPMoZ3SFXqxQn5y
NuLPl/SofLPbxL4Ur2UQKHY01Pg5Cv0IUQj3ziNEPMidzW7zC9Gqgcs/ZoBQPjo/
ylNjszcnKFu3ShhML2uSBepkdEdCmXjb0Bn8S7lhuzulthWarKu1MD/zlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNUK0/jYPK+EnO2Qc9yxMFQVT6DzMB8GA1UdIwQY
MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt
MDAzYTE1NjhiZjNmLzEvMVFyVC1OZzhyNFNjN1pCejNMRXdWQlZQb1BNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm
LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiy3TMA0G
CSqGSIb3DQEBCwUAA4IBAQCKF43Wh8tdBv6ihM9YCxDIqCxH8Gw46YbFaA1AKWea
+qCzZwxDHiCq/4Js7xouhVXGkHRA4jwNj5SOx+oKGJgt/MeyJTbrTHEEVjuFSK4U
yIRgVLKvykEJR/5/mEZNas6G8WwcMvh1rBK5h/XcDLMH3/BnaFw+OyrJAXQY6vQi
Q8MF5A8ydNCBDwebdp9KNHds6PVFWc3xpRgq/HFj3WpBfIDoxcjdDyW+rR7pW6Yt
rTsziD66QhCe5ae66u/exOV80bvav2R1HY6KPGXS8ifNec+Aaxfs8iNQyg1PMpHu
JMfuY9Qk3ZbY1Y91mept64Pmkuh+0GZeE9uWHrCdSkDz
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:09 2024 by rpki-client on console-ams.rpki-client.org