Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/OoXhS4qhznyXteVoGAOTFfFp3K0.roa
File: OoXhS4qhznyXteVoGAOTFfFp3K0.roa (raw, json)
Hash identifier: w7kZhG0O4vmZNDrte2gZqwB4FxLD/lJhN+6mJYttcdA=
Subject key identifier: 3A:85:E1:4B:8A:A1:CE:7C:97:B5:E5:68:18:03:93:15:F1:69:DC:AD
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 018E4751775E29D1B66803FD9A5C1FD477E9
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/OoXhS4qhznyXteVoGAOTFfFp3K0.roa
Signing time: Sat 16 Mar 2024 12:51:45 +0000
ROA not before: Sat 16 Mar 2024 12:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49127
IP address blocks: 45.113.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 11:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:47:51:77:5e:29:d1:b6:68:03:fd:9a:5c:1f:d4:77:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Mar 16 12:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3a85e14b8aa1ce7c97b5e56818039315f169dcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:e9:76:0e:8b:48:d0:11:b2:21:5d:9a:e5:
c9:eb:79:ee:3a:c9:ba:a1:45:9f:50:b7:46:4c:e3:
5b:8b:b8:64:56:38:7a:cc:94:36:5b:cc:31:12:3c:
b0:41:94:1a:0f:d0:95:d0:48:f6:df:c7:56:f5:b3:
79:07:3c:4f:84:d3:53:ab:36:0c:ce:9b:a9:3e:3e:
36:b5:ea:21:f0:62:35:19:93:6d:3d:84:e4:27:74:
91:78:33:9b:3f:04:ce:14:1e:0f:d5:b4:a4:c4:f4:
44:04:f3:7f:30:a6:ba:58:fc:fe:75:bf:66:b8:f1:
27:3a:a3:9f:e6:0f:4c:35:6f:8e:ca:24:bc:0e:60:
04:06:81:af:21:24:77:d1:df:36:e0:64:97:e3:63:
10:e5:c5:28:95:ae:af:10:09:d6:3d:c8:29:68:bd:
b9:3e:27:b5:b5:cf:a5:5d:44:aa:88:53:0c:51:83:
ee:f3:1a:34:18:ef:ee:2a:ca:df:63:02:57:36:2f:
22:e8:0a:eb:91:ff:44:cc:49:14:86:67:96:4c:48:
9f:49:56:94:86:24:86:aa:b2:0a:95:21:05:f6:66:
20:89:ce:d2:8d:82:fe:75:5c:8b:14:5f:39:05:f4:
a5:7f:43:c7:b8:51:40:d9:d2:66:69:97:07:2f:4f:
73:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:85:E1:4B:8A:A1:CE:7C:97:B5:E5:68:18:03:93:15:F1:69:DC:AD
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/OoXhS4qhznyXteVoGAOTFfFp3K0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.113.236.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:18:ca:7f:72:b5:27:63:cd:97:f1:47:b4:1d:d9:ff:cf:18:
1b:a4:b5:d7:f4:15:20:cf:bb:ad:ce:5b:1c:87:3b:27:48:f0:
1b:58:1a:80:f6:ab:37:10:19:9a:28:a6:bb:f6:df:0a:c1:b2:
a7:65:1a:ee:73:ec:d6:fe:ba:6f:3e:2c:e7:ac:f8:de:45:61:
b0:78:8b:51:ec:ba:93:05:7b:d1:50:76:7b:0e:9a:24:5e:63:
47:bf:2b:c0:73:0c:e7:0b:cf:a1:ff:d5:c6:8e:f9:4f:12:da:
c0:1d:2e:eb:d8:74:01:a9:47:7a:49:a5:ec:38:6c:aa:4d:b4:
e4:d9:fd:fc:2f:cd:7c:dc:49:b1:88:28:eb:ad:f1:87:6d:28:
c6:2e:d4:c5:09:5d:c3:ca:ad:17:12:72:5c:19:02:a3:a4:9d:
7f:b0:03:28:9d:b9:db:e9:13:3f:49:d6:b0:9d:7c:52:17:ed:
29:0d:c0:82:62:6f:f1:5f:b2:5d:8d:9a:08:27:36:d1:43:e6:
93:d0:d4:f2:27:a4:19:5e:63:0c:5c:bb:e6:57:4c:7c:9f:33:
3e:e4:58:f5:34:12:85:64:44:27:fd:1c:96:db:19:7a:b2:96:
e2:de:8c:06:bc:20:ac:9e:85:53:6e:3c:f9:ae:b0:4a:57:86:
ed:82:2c:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5HUXdeKdG2aAP9mlwf1HfpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTJiNWRhNGI0ZmZlYWY3MjA2NDk1MThmYmFhYTEwYzVj
YjI4MTEwHhcNMjQwMzE2MTI1MTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTg1ZTE0YjhhYTFjZTdjOTdiNWU1NjgxODAzOTMxNWYxNjlkY2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKXpdg6LSNARsiFdmuXJ63nuOsm6
oUWfULdGTONbi7hkVjh6zJQ2W8wxEjywQZQaD9CV0Ej238dW9bN5BzxPhNNTqzYM
zpupPj42teoh8GI1GZNtPYTkJ3SReDObPwTOFB4P1bSkxPREBPN/MKa6WPz+db9m
uPEnOqOf5g9MNW+OyiS8DmAEBoGvISR30d824GSX42MQ5cUola6vEAnWPcgpaL25
Pie1tc+lXUSqiFMMUYPu8xo0GO/uKsrfYwJXNi8i6Arrkf9EzEkUhmeWTEifSVaU
hiSGqrIKlSEF9mYgic7SjYL+dVyLFF85BfSlf0PHuFFA2dJmaZcHL09zKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDqF4UuKoc58l7XlaBgDkxXxadytMB8GA1UdIwQY
MBaAFEKStdpLT/6vcgZJUY+6qhDFyygRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3Yzct
YTA0M2UxYjY3Yjk0LzEvT29YaFM0cWh6bnlYdGVWb0dBT1RGZkZwM0swLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NTIyZmItYzFkYS00Y2NjLWE3YzctYTA0M2UxYjY3Yjk0
LzEvUXBLMTJrdFBfcTl5QmtsUmo3cXFFTVhMS0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXHsMA0G
CSqGSIb3DQEBCwUAA4IBAQAeGMp/crUnY82X8Ue0Hdn/zxgbpLXX9BUgz7utzlsc
hzsnSPAbWBqA9qs3EBmaKKa79t8KwbKnZRruc+zW/rpvPiznrPjeRWGweItR7LqT
BXvRUHZ7DpokXmNHvyvAcwznC8+h/9XGjvlPEtrAHS7r2HQBqUd6SaXsOGyqTbTk
2f38L8183EmxiCjrrfGHbSjGLtTFCV3Dyq0XEnJcGQKjpJ1/sAMonbnb6RM/Sdaw
nXxSF+0pDcCCYm/xX7JdjZoIJzbRQ+aT0NTyJ6QZXmMMXLvmV0x8nzM+5Fj1NBKF
ZEQn/RyW2xl6spbi3owGvCCsnoVTbjz5rrBKV4btgiwq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:09 2024 by rpki-client on console-fra.rpki-client.org