Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/Vb56J9PreFvXo2Bpe8eX_wmtJZM.roa
File: Vb56J9PreFvXo2Bpe8eX_wmtJZM.roa (raw, json)
Hash identifier: RrVrtYRFkBToFKZDtEn19eUOdTpKYSBjqIQ0RbYp1RM=
Subject key identifier: 55:BE:7A:27:D3:EB:78:5B:D7:A3:60:69:7B:C7:97:FF:09:AD:25:93
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 01902D34834B9529C454D6F11CC5C8E6B178
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/Vb56J9PreFvXo2Bpe8eX_wmtJZM.roa
Signing time: Tue 18 Jun 2024 21:15:34 +0000
ROA not before: Tue 18 Jun 2024 21:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211733
IP address blocks: 45.129.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Aug 2024 17:50:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2d:34:83:4b:95:29:c4:54:d6:f1:1c:c5:c8:e6:b1:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Jun 18 21:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=55be7a27d3eb785bd7a360697bc797ff09ad2593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8e:c7:a9:73:9a:96:ae:45:5f:30:01:87:b3:
fc:84:3d:e4:f8:ef:88:65:b4:ff:3f:16:a7:39:d1:
e9:db:0c:c6:57:24:70:91:c7:a4:0b:c3:ea:01:da:
e5:e2:d8:a0:bf:c6:d7:d3:c1:e4:a7:dd:38:5c:68:
75:19:f2:e4:f9:30:e0:01:ae:dd:76:e2:a4:ca:2f:
85:19:75:27:ad:7e:e1:e6:d1:f6:55:08:50:9a:5f:
c3:a2:f8:95:e3:92:7a:18:da:8f:db:d6:b9:28:f6:
a4:23:4a:6d:27:91:e0:4e:89:95:ab:83:99:db:cb:
46:ef:46:01:b3:aa:53:7a:2f:74:11:9e:27:b8:92:
b0:9a:bd:4d:cb:90:ce:54:47:4a:66:82:e1:5c:6e:
af:33:10:cd:f1:ab:32:32:84:c4:6c:1b:76:bf:ad:
2b:9c:f1:b7:2f:86:fb:3c:30:53:58:57:cb:2f:d5:
8f:c7:26:45:5d:08:fd:3e:4e:8f:30:8d:f1:8b:66:
9d:74:32:ad:92:b2:70:97:ce:82:2d:c6:90:69:5c:
a0:d9:49:44:76:09:b7:68:96:fc:8c:6f:6f:6e:61:
ba:0f:51:b3:ce:c7:a4:19:94:8e:bc:1d:f5:5d:09:
38:77:e3:0e:c2:67:73:76:40:65:08:bc:a9:9c:4e:
7c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BE:7A:27:D3:EB:78:5B:D7:A3:60:69:7B:C7:97:FF:09:AD:25:93
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/Vb56J9PreFvXo2Bpe8eX_wmtJZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.194.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:c8:ad:26:8b:e7:d7:1a:43:c5:96:a3:82:41:ee:0b:35:9e:
d7:17:15:3f:2e:40:5d:16:19:6d:3d:e4:3b:15:3a:e6:6b:32:
fc:77:20:48:53:db:a3:06:e2:29:c6:d3:e1:53:fa:69:4c:c5:
10:58:b8:f3:6c:3c:ad:ee:e3:fc:db:00:28:09:64:42:a4:e3:
af:88:22:87:72:c9:ff:0d:4e:52:ce:06:cd:28:88:ef:6d:3a:
7b:d6:49:d2:1e:9e:21:f1:4d:07:8a:3b:7f:9e:0b:e8:d8:13:
9b:15:70:77:70:e2:aa:70:0e:3f:b1:0f:e0:a2:e3:fc:98:40:
98:f1:3d:bd:50:da:fb:90:d3:6e:75:e3:ce:98:ce:a7:36:dd:
68:bd:c2:42:89:18:d9:5c:6f:5b:0e:f8:29:cd:4f:4a:0a:5f:
2a:03:62:d4:8b:30:0f:a1:12:13:4b:d7:42:6f:98:45:fc:2f:
ed:67:af:8c:2d:c0:35:86:78:2f:8c:b3:c7:7a:d2:04:fa:79:
77:ee:8b:03:d1:46:ac:c4:7c:dc:b0:92:82:91:87:a9:65:18:
03:42:29:48:bc:86:42:8d:fe:59:f4:d4:fd:7a:d7:9c:98:dd:
73:d9:df:30:f6:31:40:44:4e:67:61:f6:07:16:55:9d:7f:af:
a5:7c:1a:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZAtNINLlSnEVNbxHMXI5rF4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDU1Yjc4ODM2YTkzZmI2ZjllYzlmYTdhNzllZDliOGJl
YTJiYTEwHhcNMjQwNjE4MjExNTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWJlN2EyN2QzZWI3ODViZDdhMzYwNjk3YmM3OTdmZjA5YWQyNTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3I7HqXOalq5FXzABh7P8hD3k+O+I
ZbT/PxanOdHp2wzGVyRwkcekC8PqAdrl4tigv8bX08Hkp904XGh1GfLk+TDgAa7d
duKkyi+FGXUnrX7h5tH2VQhQml/DoviV45J6GNqP29a5KPakI0ptJ5HgTomVq4OZ
28tG70YBs6pTei90EZ4nuJKwmr1Ny5DOVEdKZoLhXG6vMxDN8asyMoTEbBt2v60r
nPG3L4b7PDBTWFfLL9WPxyZFXQj9Pk6PMI3xi2addDKtkrJwl86CLcaQaVyg2UlE
dgm3aJb8jG9vbmG6D1GzzsekGZSOvB31XQk4d+MOwmdzdkBlCLypnE587wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFW+eifT63hb16NgaXvHl/8JrSWTMB8GA1UdIwQY
MBaAFEDVW3iDapP7b57J+np57ZuL6iuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMt
OTJlOGJlNjI3OWJiLzEvVmI1Nko5UHJlRnZYbzJCcGU4ZVhfd210SlpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMtOTJlOGJlNjI3OWJi
LzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYHCMA0G
CSqGSIb3DQEBCwUAA4IBAQCqyK0mi+fXGkPFlqOCQe4LNZ7XFxU/LkBdFhltPeQ7
FTrmazL8dyBIU9ujBuIpxtPhU/ppTMUQWLjzbDyt7uP82wAoCWRCpOOviCKHcsn/
DU5SzgbNKIjvbTp71knSHp4h8U0Hijt/ngvo2BObFXB3cOKqcA4/sQ/gouP8mECY
8T29UNr7kNNudePOmM6nNt1ovcJCiRjZXG9bDvgpzU9KCl8qA2LUizAPoRITS9dC
b5hF/C/tZ6+MLcA1hngvjLPHetIE+nl37osD0UasxHzcsJKCkYepZRgDQilIvIZC
jf5Z9NT9etecmN1z2d8w9jFARE5nYfYHFlWdf6+lfBop
-----END CERTIFICATE-----
Generated at Mon Aug 19 20:43:44 2024 by rpki-client on console-fra.rpki-client.org