Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vNfpvcfN46uPjJWJahP23Bvtnw4.roa
File: vNfpvcfN46uPjJWJahP23Bvtnw4.roa (raw, json)
Hash identifier: RpqsWT/dUbbfWCCV0PYIjF3/wis0dD4aUW6Wjy2Shy4=
Subject key identifier: BC:D7:E9:BD:C7:CD:E3:AB:8F:8C:95:89:6A:13:F6:DC:1B:ED:9F:0E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019305C6E92D9FD9D546D0DA1DE882F89AD3
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vNfpvcfN46uPjJWJahP23Bvtnw4.roa
Signing time: Thu 07 Nov 2024 08:39:01 +0000
ROA not before: Thu 07 Nov 2024 08:39:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44948
IP address blocks: 45.131.184.0/22 maxlen: 24
185.238.188.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Nov 2024 14:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:c6:e9:2d:9f:d9:d5:46:d0:da:1d:e8:82:f8:9a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Nov 7 08:39:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcd7e9bdc7cde3ab8f8c95896a13f6dc1bed9f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:32:27:89:93:15:b7:6c:33:59:3b:23:28:
ee:b3:f0:e7:2b:ea:86:33:e6:26:c4:5c:5a:65:d4:
d7:48:60:10:1b:70:e0:a8:60:b5:d9:78:3d:e3:0f:
32:af:ae:b9:2b:d2:e2:a1:73:55:83:95:a1:24:c8:
d5:4a:9c:94:d0:43:ae:fb:6a:98:f5:67:4b:eb:f8:
bd:46:15:82:a5:e7:83:39:e6:1c:c6:14:35:2a:e5:
d0:17:b4:43:72:37:24:91:a9:73:f2:13:94:01:5b:
b2:bb:d5:ad:79:77:3d:f5:f1:aa:46:7f:c1:a3:e5:
4d:7a:47:e0:70:64:c3:10:81:c4:07:64:8d:02:d0:
c8:ab:0a:52:e5:90:33:2f:e2:f2:5b:81:74:99:cb:
d7:f3:be:45:ce:6e:cf:a6:ef:f7:3b:f7:19:21:2e:
d1:d3:ff:a9:89:09:83:93:34:b3:3d:e1:06:c0:04:
2c:76:29:2e:ed:21:c6:bd:c9:f5:53:e3:5f:f0:1d:
fb:95:06:34:14:cc:de:58:85:aa:46:88:56:f9:41:
49:77:f1:81:fb:d1:88:74:3d:33:57:64:17:ca:b1:
2d:7d:ce:05:8f:c4:e1:8f:14:db:dd:5f:9e:8a:23:
4f:3e:14:36:03:1d:e7:a3:f1:32:1b:e4:3f:df:15:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D7:E9:BD:C7:CD:E3:AB:8F:8C:95:89:6A:13:F6:DC:1B:ED:9F:0E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vNfpvcfN46uPjJWJahP23Bvtnw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.184.0/22
185.238.188.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:e6:26:4a:fe:15:0a:f9:f1:8e:ce:ab:72:ac:66:87:6a:ee:
7c:d8:30:86:9e:3d:4a:eb:7d:6f:11:08:b9:a7:e1:20:c2:81:
74:89:4d:ce:a6:82:8e:e8:e2:65:94:95:ea:b1:8e:13:ba:b1:
2b:51:a8:82:aa:05:32:d8:5b:a0:b4:1e:01:89:df:6a:79:55:
29:09:3b:ed:60:3b:5e:91:90:4e:fd:21:8a:00:04:66:57:e7:
61:33:3b:39:e9:4b:2e:8f:96:d9:96:d8:07:70:a3:92:4d:a0:
5f:82:2f:cd:c5:6e:95:0c:64:12:3f:97:fa:92:21:b9:04:8b:
19:cc:fd:8b:26:0a:22:49:cc:78:04:b9:77:41:1f:91:e6:5d:
e6:97:cc:2a:be:7f:64:a3:1b:66:e2:7d:fd:0f:66:4d:a7:71:
c2:4a:7c:d3:37:48:c6:b6:38:79:0d:5d:80:db:b4:a8:85:90:
15:92:5f:be:3e:37:d1:87:f4:b7:a0:80:35:c9:8b:d0:93:18:
11:0e:9e:ce:fe:b3:b4:d9:73:7f:d4:e3:17:62:53:48:c7:2c:
c1:69:ac:c0:67:56:35:8f:c9:02:0c:1e:07:1b:1b:ce:ef:b3:
f8:bd:08:2f:17:e0:25:93:05:09:b6:0a:f5:5e:b8:6d:fe:b0:
75:38:72:69
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZMFxuktn9nVRtDaHeiC+JrTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQxMTA3MDgzOTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2Q3ZTliZGM3Y2RlM2FiOGY4Yzk1ODk2YTEzZjZkYzFiZWQ5ZjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr70yJ4mTFbdsM1k7Iyjus/DnK+qG
M+YmxFxaZdTXSGAQG3DgqGC12Xg94w8yr665K9LioXNVg5WhJMjVSpyU0EOu+2qY
9WdL6/i9RhWCpeeDOeYcxhQ1KuXQF7RDcjckkalz8hOUAVuyu9WteXc99fGqRn/B
o+VNekfgcGTDEIHEB2SNAtDIqwpS5ZAzL+LyW4F0mcvX875Fzm7Ppu/3O/cZIS7R
0/+piQmDkzSzPeEGwAQsdiku7SHGvcn1U+Nf8B37lQY0FMzeWIWqRohW+UFJd/GB
+9GIdD0zV2QXyrEtfc4Fj8ThjxTb3V+eiiNPPhQ2Ax3no/EyG+Q/3xVUmQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLzX6b3HzeOrj4yViWoT9twb7Z8OMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvdk5mcHZjZk40NnVQakpXSmFoUDIzQnZ0bnc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYO4AwQC
ue68MA0GCSqGSIb3DQEBCwUAA4IBAQA/5iZK/hUK+fGOzqtyrGaHau582DCGnj1K
631vEQi5p+EgwoF0iU3OpoKO6OJllJXqsY4TurErUaiCqgUy2FugtB4Bid9qeVUp
CTvtYDtekZBO/SGKAARmV+dhMzs56Usuj5bZltgHcKOSTaBfgi/NxW6VDGQSP5f6
kiG5BIsZzP2LJgoiScx4BLl3QR+R5l3ml8wqvn9koxtm4n39D2ZNp3HCSnzTN0jG
tjh5DV2A27SohZAVkl++PjfRh/S3oIA1yYvQkxgRDp7O/rO02XN/1OMXYlNIxyzB
aazAZ1Y1j8kCDB4HGxvO77P4vQgvF+AlkwUJtgr1Xrht/rB1OHJp
-----END CERTIFICATE-----
Generated at Wed Nov 13 16:39:58 2024 by rpki-client on console-ams.rpki-client.org