Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7QMmwoXkDK2tQmnMjQ_GAr4ROB0.roa
File: 7QMmwoXkDK2tQmnMjQ_GAr4ROB0.roa (raw, json)
Hash identifier: idURZaMuzSHYD3abtMsTTJBJMFbHvtSB4oBgAN13ls0=
Subject key identifier: ED:03:26:C2:85:E4:0C:AD:AD:42:69:CC:8D:0F:C6:02:BE:11:38:1D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0188C45F68FDEA8FA18F68E9428D216DB78E
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7QMmwoXkDK2tQmnMjQ_GAr4ROB0.roa
Signing time: Fri 16 Jun 2023 13:22:47 +0000
ROA not before: Fri 16 Jun 2023 13:22:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 45.148.116.0/22 maxlen: 24
193.163.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Jun 2023 14:07:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c4:5f:68:fd:ea:8f:a1:8f:68:e9:42:8d:21:6d:b7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 16 13:22:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed0326c285e40cadad4269cc8d0fc602be11381d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a8:0b:8e:50:e9:d3:34:e0:a6:b8:86:4d:4c:
8c:99:d5:d5:44:aa:86:4b:af:1f:76:a9:f6:6a:81:
d2:55:41:4b:72:16:38:cd:b0:79:4e:28:d1:c6:d5:
46:ca:a5:03:80:2e:b8:cf:98:19:01:51:1d:a7:19:
3f:5a:dd:dc:10:cc:8c:0d:c1:82:af:16:94:87:2a:
39:74:83:7c:42:06:51:aa:ab:f7:79:80:05:2c:66:
c0:14:7e:63:1a:1f:78:41:5b:22:3b:d5:7e:ee:75:
ad:59:5f:3b:2c:74:3f:a9:3e:24:95:fe:5e:22:d3:
55:f4:82:3e:1b:01:c3:67:78:43:6c:c3:13:6c:88:
6a:c1:f3:40:97:c4:aa:46:ff:ea:97:cb:d0:54:59:
b6:33:14:ca:2d:70:d1:a4:5d:45:b4:4f:fd:38:17:
a0:e3:61:f8:e3:f9:55:32:2c:be:51:1a:3e:ac:3f:
3a:59:c3:a2:89:a8:cc:34:e1:93:5c:98:85:69:02:
fa:bb:53:68:34:e9:4b:65:1f:2f:25:1e:ba:37:4d:
23:00:7e:61:a5:d2:21:b8:a6:1e:a7:52:9b:bd:25:
75:49:77:b3:93:86:94:56:02:a2:98:ec:d2:26:3c:
29:4c:17:68:01:da:5c:de:ea:49:f3:4b:c6:7e:f1:
ad:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:03:26:C2:85:E4:0C:AD:AD:42:69:CC:8D:0F:C6:02:BE:11:38:1D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7QMmwoXkDK2tQmnMjQ_GAr4ROB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
193.163.85.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e5:8a:bf:1c:1a:9d:9d:5a:62:2c:70:9d:06:25:88:f1:ba:
2b:3b:cc:71:73:8d:3a:4a:d8:3a:03:d5:8e:ab:09:00:6b:c7:
3d:ce:a9:82:41:41:65:69:70:b6:98:a4:9e:e3:9a:ff:31:3a:
4c:f8:b0:3d:63:f2:b7:7c:07:24:9d:f7:f2:c8:5e:12:0d:7a:
27:9f:57:fb:70:db:c0:99:a0:2a:a0:43:4a:cb:b5:78:34:4a:
b8:29:cd:a8:44:f5:9c:bd:ee:c3:f2:de:12:e5:db:a4:a7:b8:
2b:09:28:f1:9d:98:32:8d:59:69:9b:44:a0:4e:02:f9:19:c8:
d3:76:64:d9:f0:62:b5:c7:2a:6d:ab:83:22:a4:df:f5:c4:f2:
76:03:6e:ae:2f:04:08:75:b4:4b:78:79:ae:f5:11:e8:df:30:
0e:b3:a6:9d:c6:91:d9:46:af:e0:13:68:dd:d5:4a:d0:74:e4:
f1:86:a5:59:15:1c:af:4d:28:7c:cd:65:0f:7e:7c:ce:7d:e7:
79:65:61:a5:6d:28:bf:d8:b8:ad:c6:fb:ec:13:0c:4c:44:67:
a2:f7:67:45:18:29:f0:bc:ea:98:ec:d2:1f:fa:1d:07:22:03:
0b:f7:1b:e1:25:99:47:a3:85:31:a9:a3:36:32:e4:d7:30:fc:
87:09:c5:bb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYjEX2j96o+hj2jpQo0hbbeOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNjE2MTMyMjQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDAzMjZjMjg1ZTQwY2FkYWQ0MjY5Y2M4ZDBmYzYwMmJlMTEzODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyagLjlDp0zTgpriGTUyMmdXVRKqG
S68fdqn2aoHSVUFLchY4zbB5TijRxtVGyqUDgC64z5gZAVEdpxk/Wt3cEMyMDcGC
rxaUhyo5dIN8QgZRqqv3eYAFLGbAFH5jGh94QVsiO9V+7nWtWV87LHQ/qT4klf5e
ItNV9II+GwHDZ3hDbMMTbIhqwfNAl8SqRv/ql8vQVFm2MxTKLXDRpF1FtE/9OBeg
42H44/lVMiy+URo+rD86WcOiiajMNOGTXJiFaQL6u1NoNOlLZR8vJR66N00jAH5h
pdIhuKYep1KbvSV1SXezk4aUVgKimOzSJjwpTBdoAdpc3upJ80vGfvGt4wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO0DJsKF5AytrUJpzI0PxgK+ETgdMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvN1FNbXdvWGtESzJ0UW1uTWpRX0dBcjRST0IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLZR0AwQA
waNVMA0GCSqGSIb3DQEBCwUAA4IBAQAR5Yq/HBqdnVpiLHCdBiWI8borO8xxc406
Stg6A9WOqwkAa8c9zqmCQUFlaXC2mKSe45r/MTpM+LA9Y/K3fAcknffyyF4SDXon
n1f7cNvAmaAqoENKy7V4NEq4Kc2oRPWcve7D8t4S5dukp7grCSjxnZgyjVlpm0Sg
TgL5GcjTdmTZ8GK1xyptq4MipN/1xPJ2A26uLwQIdbRLeHmu9RHo3zAOs6adxpHZ
Rq/gE2jd1UrQdOTxhqVZFRyvTSh8zWUPfnzOfed5ZWGlbSi/2LitxvvsEwxMRGei
92dFGCnwvOqY7NIf+h0HIgML9xvhJZlHo4UxqaM2MuTXMPyHCcW7
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:55 2024 by rpki-client on console-ams.rpki-client.org