Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/M-tVdPdLSiqr5RoHWd9cdpDBjpM.roa
File: M-tVdPdLSiqr5RoHWd9cdpDBjpM.roa (raw, json)
Hash identifier: IH11qKcx9kpRd7COLm8EZsZaL48vBM5EHW9pLgAQ7o0=
Subject key identifier: 33:EB:55:74:F7:4B:4A:2A:AB:E5:1A:07:59:DF:5C:76:90:C1:8E:93
Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Certificate serial: 018EBEF63D8D5223F2B319BB9C33A0DDADC4
Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/M-tVdPdLSiqr5RoHWd9cdpDBjpM.roa
Signing time: Mon 08 Apr 2024 18:26:32 +0000
ROA not before: Mon 08 Apr 2024 18:26:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57844
IP address blocks: 45.141.208.0/22 maxlen: 24
45.150.8.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 03:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:be:f6:3d:8d:52:23:f2:b3:19:bb:9c:33:a0:dd:ad:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8
Validity
Not Before: Apr 8 18:26:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33eb5574f74b4a2aabe51a0759df5c7690c18e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:8d:00:55:35:15:01:eb:8b:40:df:29:e8:
fc:ab:a5:51:57:1d:8e:30:4d:73:32:b6:88:01:e3:
9e:6a:8f:26:17:58:31:92:ce:84:e3:84:7d:d6:fb:
74:05:92:72:c7:c2:0a:d2:75:9c:8e:61:46:d2:ac:
62:2e:00:f5:10:de:a4:3a:97:b1:c4:4b:51:e1:46:
55:4c:cf:d1:e4:e7:6f:41:a1:21:be:4c:5c:a0:92:
58:6c:44:fc:04:eb:70:58:e4:0b:d5:81:31:45:f1:
bb:20:eb:2a:2a:15:71:98:33:23:9e:78:be:ed:01:
e9:76:d7:60:ae:88:4d:2c:d0:69:03:e9:53:f8:44:
d0:e9:ff:1c:11:eb:47:64:e8:c7:8c:69:8c:3b:71:
74:a0:d7:cb:79:48:58:9e:91:0b:68:bd:59:7f:dc:
48:62:5c:66:16:68:89:2c:ec:8a:ae:67:28:da:26:
e1:c0:b0:1d:43:e1:a1:1e:0d:78:45:9f:c2:0e:d9:
1c:27:4b:e9:ee:5b:b2:ab:07:cb:f4:4b:73:b1:1a:
3f:9d:57:8a:ba:34:9a:29:be:27:c4:50:f5:1f:2a:
6a:66:ea:89:42:2f:75:83:c3:19:7e:7b:4d:2c:c6:
4e:34:9c:84:56:7a:58:80:ca:ba:f2:a0:8e:e8:d8:
66:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EB:55:74:F7:4B:4A:2A:AB:E5:1A:07:59:DF:5C:76:90:C1:8E:93
X509v3 Authority Key Identifier:
keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/M-tVdPdLSiqr5RoHWd9cdpDBjpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.208.0/22
45.150.8.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:82:f4:d1:83:a5:e5:9f:07:6e:b3:d6:15:eb:fc:22:a0:d6:
03:a9:87:df:e5:7f:98:c2:32:a2:ab:b9:2e:59:f9:33:f3:9a:
a9:cb:a2:e8:24:10:eb:20:3d:78:b3:db:36:5d:c5:47:78:5e:
7d:14:a3:ee:2a:ec:7b:8e:99:e6:bb:31:d0:78:aa:8c:06:10:
bf:84:4d:13:e4:09:ca:90:c6:07:39:48:c8:2a:e5:fb:8f:74:
b0:23:6d:6b:9c:b9:39:50:2e:d4:3b:94:3e:b2:4c:25:21:1c:
40:dc:f2:e8:dd:83:f7:b1:9b:a9:77:8f:10:92:67:e8:d5:cb:
6a:b8:7a:04:96:dc:1c:dd:a5:75:44:3f:35:f8:7a:fc:ad:8e:
3a:76:fc:31:05:70:5e:dc:11:4f:43:79:95:72:11:1d:24:ad:
c0:72:28:f1:61:a2:6a:af:76:91:32:83:93:d9:2e:b6:99:9c:
b4:89:e0:41:cf:34:ab:66:c0:f9:fb:5f:69:2a:d3:c2:36:e1:
f0:35:06:3f:b2:6c:0d:d7:9a:83:19:98:91:b2:73:dd:f9:2c:
5c:0d:18:77:90:02:27:fe:5c:00:a1:b9:12:31:93:d9:01:c4:
47:10:6e:9c:b1:76:63:d4:67:6c:a6:06:bc:1b:0e:aa:b0:37:
9a:44:4e:db
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY6+9j2NUiPysxm7nDOg3a3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm
MWM3ZTgwHhcNMjQwNDA4MTgyNjMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2ViNTU3NGY3NGI0YTJhYWJlNTFhMDc1OWRmNWM3NjkwYzE4ZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+eNAFU1FQHri0DfKej8q6VRVx2O
ME1zMraIAeOeao8mF1gxks6E44R91vt0BZJyx8IK0nWcjmFG0qxiLgD1EN6kOpex
xEtR4UZVTM/R5OdvQaEhvkxcoJJYbET8BOtwWOQL1YExRfG7IOsqKhVxmDMjnni+
7QHpdtdgrohNLNBpA+lT+ETQ6f8cEetHZOjHjGmMO3F0oNfLeUhYnpELaL1Zf9xI
YlxmFmiJLOyKrmco2ibhwLAdQ+GhHg14RZ/CDtkcJ0vp7luyqwfL9EtzsRo/nVeK
ujSaKb4nxFD1HypqZuqJQi91g8MZfntNLMZONJyEVnpYgMq68qCO6NhmqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDPrVXT3S0oqq+UaB1nfXHaQwY6TMB8GA1UdIwQY
MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt
ZWU3NDY1NzU0ZmY2LzEvTS10VmRQZExTaXFyNVJvSFdkOWNkcERCanBNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2
LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLY3QAwQC
LZYIMA0GCSqGSIb3DQEBCwUAA4IBAQCmgvTRg6Xlnwdus9YV6/wioNYDqYff5X+Y
wjKiq7kuWfkz85qpy6LoJBDrID14s9s2XcVHeF59FKPuKux7jpnmuzHQeKqMBhC/
hE0T5AnKkMYHOUjIKuX7j3SwI21rnLk5UC7UO5Q+skwlIRxA3PLo3YP3sZupd48Q
kmfo1ctquHoEltwc3aV1RD81+Hr8rY46dvwxBXBe3BFPQ3mVchEdJK3AcijxYaJq
r3aRMoOT2S62mZy0ieBBzzSrZsD5+19pKtPCNuHwNQY/smwN15qDGZiRsnPd+Sxc
DRh3kAIn/lwAobkSMZPZAcRHEG6csXZj1Gdspga8Gw6qsDeaRE7b
-----END CERTIFICATE-----
Generated at Tue Apr 9 03:58:32 2024 by rpki-client on console-fra.rpki-client.org