Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/K-8C4xRGQtB9bZ7StplYgpp_bmk.roa
File: K-8C4xRGQtB9bZ7StplYgpp_bmk.roa (raw, json)
Hash identifier: 4abn+V1OlIdL8KjN8qiA4KQKzlFFr0NyDymDvM32a90=
Subject key identifier: 2B:EF:02:E3:14:46:42:D0:7D:6D:9E:D2:B6:99:58:82:9A:7F:6E:69
Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9
Certificate serial: 0192542BCA624E66A47AE5760CDE587C49A2
Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/K-8C4xRGQtB9bZ7StplYgpp_bmk.roa
Signing time: Thu 03 Oct 2024 20:56:48 +0000
ROA not before: Thu 03 Oct 2024 20:56:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3949
IP address blocks: 45.150.32.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 15 Oct 2024 10:56:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:54:2b:ca:62:4e:66:a4:7a:e5:76:0c:de:58:7c:49:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9
Validity
Not Before: Oct 3 20:56:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2bef02e3144642d07d6d9ed2b69958829a7f6e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ff:86:65:ee:b3:9b:84:74:03:b5:01:a4:09:
9a:3e:27:b2:c7:c6:96:60:60:2f:c4:46:88:ee:9b:
f6:19:2b:42:ed:35:0a:a2:1a:6f:6e:ea:c8:6b:40:
ae:fa:c4:4a:9e:ea:6c:40:1a:87:49:ad:a2:94:f1:
c6:84:f5:d5:a2:96:aa:1b:33:62:77:b1:62:67:8a:
83:38:3f:6b:f4:82:80:6b:05:6b:e4:15:ca:08:0c:
4e:72:7c:4f:b1:f3:f9:e7:a6:ca:7f:d3:22:c4:f2:
6a:fc:53:77:1f:61:37:80:0f:64:a5:5f:f7:70:8c:
ed:87:31:c7:55:09:5b:24:e6:95:11:ac:01:5c:c8:
7b:e5:24:2c:d1:5b:da:69:8c:1d:a3:9c:c4:50:8c:
56:b7:26:d9:05:da:e4:69:2b:28:b2:88:65:4a:df:
cd:57:96:7b:c0:0d:9d:6a:39:12:20:1f:f9:c5:5a:
f8:e6:7a:16:73:91:71:3c:e9:05:5e:52:17:03:eb:
d0:55:0d:b1:3c:d7:57:6f:ee:06:1e:72:a4:22:47:
19:ce:07:b0:55:67:ab:f4:ca:2c:ca:bb:63:d8:68:
84:82:8f:e9:08:01:90:1b:bb:8a:5d:a4:c0:81:50:
af:d4:9d:7f:9c:e5:28:7a:0d:2a:9f:ba:44:99:f1:
96:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EF:02:E3:14:46:42:D0:7D:6D:9E:D2:B6:99:58:82:9A:7F:6E:69
X509v3 Authority Key Identifier:
keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/K-8C4xRGQtB9bZ7StplYgpp_bmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.32.0/23
Signature Algorithm: sha256WithRSAEncryption
79:41:96:73:6d:b6:8a:af:52:23:0a:f9:b1:1b:5a:66:e1:71:
ab:1f:33:26:85:11:5f:ff:cc:3e:80:81:39:45:25:de:0d:e5:
0f:ce:f0:7f:02:9a:8a:e7:2d:f8:cf:28:94:db:a4:6e:52:34:
ef:5d:be:6a:4e:af:30:92:1d:01:90:50:ea:fd:e2:d9:7c:ad:
21:24:e2:b1:9f:80:f7:d4:e1:49:f1:a4:6f:5f:9c:e7:96:fe:
f2:49:c1:78:ae:17:0a:00:28:2e:68:8a:ce:3c:2b:5a:cf:df:
6c:ae:f4:1b:53:b6:82:b7:2a:9f:96:9a:2f:ca:b5:aa:8e:e1:
b4:9b:d3:b9:1a:9c:86:9c:ff:0b:bc:f7:f0:d1:d0:29:47:a6:
e5:b9:fd:15:3c:a3:49:84:f5:6f:24:e1:a3:99:10:87:c0:b8:
9f:9a:47:c7:fd:fa:5a:aa:28:20:cd:15:88:d6:f1:39:5b:b2:
cd:6f:7c:8c:12:57:3c:41:57:5f:26:68:d8:30:d7:a4:d3:ea:
5a:cb:8e:e0:12:b3:d7:b2:72:f4:5a:30:73:b6:9c:06:31:e8:
72:59:21:eb:05:d1:b1:9a:99:f0:2b:92:cc:72:9f:7d:af:b2:
9a:02:25:92:09:07:95:e4:fb:a9:d7:79:97:c4:23:7b:b6:26:
96:d8:31:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJUK8piTmakeuV2DN5YfEmiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj
Mzg1ZTkwHhcNMjQxMDAzMjA1NjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmVmMDJlMzE0NDY0MmQwN2Q2ZDllZDJiNjk5NTg4MjlhN2Y2ZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApP+GZe6zm4R0A7UBpAmaPieyx8aW
YGAvxEaI7pv2GStC7TUKohpvburIa0Cu+sRKnupsQBqHSa2ilPHGhPXVopaqGzNi
d7FiZ4qDOD9r9IKAawVr5BXKCAxOcnxPsfP556bKf9MixPJq/FN3H2E3gA9kpV/3
cIzthzHHVQlbJOaVEawBXMh75SQs0VvaaYwdo5zEUIxWtybZBdrkaSsosohlSt/N
V5Z7wA2dajkSIB/5xVr45noWc5FxPOkFXlIXA+vQVQ2xPNdXb+4GHnKkIkcZzgew
VWer9Mosyrtj2GiEgo/pCAGQG7uKXaTAgVCv1J1/nOUoeg0qn7pEmfGWiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCvvAuMURkLQfW2e0raZWIKaf25pMB8GA1UdIwQY
MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt
ZmIwNzk1NWYzYWFhLzEvSy04QzR4UkdRdEI5Ylo3U3RwbFlncHBfYm1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh
LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZYgMA0G
CSqGSIb3DQEBCwUAA4IBAQB5QZZzbbaKr1IjCvmxG1pm4XGrHzMmhRFf/8w+gIE5
RSXeDeUPzvB/ApqK5y34zyiU26RuUjTvXb5qTq8wkh0BkFDq/eLZfK0hJOKxn4D3
1OFJ8aRvX5znlv7yScF4rhcKACguaIrOPCtaz99srvQbU7aCtyqflpovyrWqjuG0
m9O5GpyGnP8LvPfw0dApR6bluf0VPKNJhPVvJOGjmRCHwLifmkfH/fpaqiggzRWI
1vE5W7LNb3yMElc8QVdfJmjYMNek0+pay47gErPXsnL0WjBztpwGMehyWSHrBdGx
mpnwK5LMcp99r7KaAiWSCQeV5Pup13mXxCN7tiaW2DHb
-----END CERTIFICATE-----
Generated at Tue Oct 15 12:42:17 2024 by rpki-client on console-fra.rpki-client.org