Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/Hs5-JCqKkvViwTX5HGX0epijA_s.roa
File: Hs5-JCqKkvViwTX5HGX0epijA_s.roa (raw, json)
Hash identifier: //yWGmWcNBcq24KE4R/S+VGD/qeNY4db3L9SspTzMMw=
Subject key identifier: 1E:CE:7E:24:2A:8A:92:F5:62:C1:35:F9:1C:65:F4:7A:98:A3:03:FB
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 01916CCE43CA6173D0C4A30981C98690BC7D
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/Hs5-JCqKkvViwTX5HGX0epijA_s.roa
Signing time: Mon 19 Aug 2024 22:42:22 +0000
ROA not before: Mon 19 Aug 2024 22:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64286
IP address blocks: 45.84.102.0/24 maxlen: 24
2a10:3b00::/32 maxlen: 32
2a10:3b04::/32 maxlen: 32
2a10:3b05::/32 maxlen: 32
2a10:3b06::/32 maxlen: 32
2a10:3b07::/32 maxlen: 32
Validation: Failed, certificate revoked on Sat 31 Aug 2024 18:14:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6c:ce:43:ca:61:73:d0:c4:a3:09:81:c9:86:90:bc:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Aug 19 22:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ece7e242a8a92f562c135f91c65f47a98a303fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:51:bf:ff:7e:ef:09:46:1a:45:e6:c2:58:
fe:32:d7:44:a9:f3:92:c5:8f:bb:24:ee:4b:5e:db:
51:9f:df:3b:11:f5:b0:2c:7c:2b:7a:49:b5:70:6d:
ac:a1:c3:31:e8:cb:6f:3d:09:1f:41:74:5f:1a:74:
be:1c:d6:d6:bb:1e:12:fe:d5:e2:2d:7c:91:19:96:
38:25:92:9e:ec:8d:4d:23:25:20:11:4a:6c:b8:ba:
d5:44:64:c0:b6:13:ca:db:9b:cd:dd:ce:61:e8:7a:
4f:18:80:74:ae:06:f6:95:cf:36:3e:c7:8c:c4:94:
05:e4:08:e3:eb:a2:74:15:c7:15:09:38:d5:60:44:
68:e0:77:6d:6e:5c:40:1b:8e:f9:e6:fc:8c:4a:c9:
7b:e8:97:f6:b1:4e:6d:7b:b4:2a:c3:13:7d:9c:fa:
b8:45:8b:a6:98:e3:7e:76:e2:84:c0:b3:a5:78:3e:
65:6e:57:52:b9:28:25:b5:a8:2a:db:aa:2c:aa:33:
a9:ff:58:9b:19:91:ec:09:8f:f4:e5:b9:77:75:55:
3c:f0:04:ad:3d:64:ff:68:0d:a2:e8:d4:b1:6d:ed:
de:3b:6f:4c:c3:83:20:2a:b4:a3:f6:15:1f:e4:ee:
fa:7b:77:54:c8:ac:9b:ce:82:24:e8:4a:7b:92:a7:
01:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CE:7E:24:2A:8A:92:F5:62:C1:35:F9:1C:65:F4:7A:98:A3:03:FB
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/Hs5-JCqKkvViwTX5HGX0epijA_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.102.0/24
IPv6:
2a10:3b00::/32
2a10:3b04::/30
Signature Algorithm: sha256WithRSAEncryption
8e:b5:5f:4e:ed:27:13:59:38:69:b3:72:6a:9c:6c:5f:c4:ab:
f5:77:8d:fc:15:78:19:a0:6a:7d:cb:20:53:33:6b:c0:66:be:
14:77:ff:ae:2f:af:7d:14:ae:fe:6e:d2:8b:57:eb:71:e1:85:
c0:75:ac:15:cf:5f:f8:62:6e:96:8c:8f:d8:16:cb:fe:49:c1:
a2:98:dd:55:89:b2:c6:ec:8a:d0:7a:a3:73:f0:c1:bd:62:2a:
be:9c:e9:c0:42:e1:9e:9e:8d:76:d3:73:98:a5:78:0f:2f:29:
f2:b6:0c:51:72:67:23:00:7a:a6:9d:af:e2:96:c6:33:31:3b:
24:fb:01:ca:71:89:e1:d2:e3:da:73:28:11:11:94:b9:e1:b8:
58:92:5f:bf:18:98:3b:70:76:b2:fb:34:68:8b:0c:fb:9d:de:
1b:f9:c8:f0:bd:2a:b0:4f:ff:f1:16:98:15:69:8e:22:41:0b:
0a:9a:76:85:15:1c:07:83:ff:7d:9c:3a:29:3a:3c:64:6b:5a:
ef:e6:ea:58:2a:07:82:da:65:79:db:d4:c3:9d:ea:20:1c:f4:
f8:02:6d:21:fd:4d:1f:2f:a5:fa:89:f9:18:98:f4:21:e8:cc:
d5:66:bb:43:6a:fc:43:23:8f:46:06:2e:db:93:7e:3d:1e:25:
dd:bd:a1:b5
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZFszkPKYXPQxKMJgcmGkLx9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3NDg0OTU2NzM2NTQ5ZWFiM2IwNmUyM2FhYjg5Y2E1OTkz
YTgwNzYwHhcNMjQwODE5MjI0MjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWNlN2UyNDJhOGE5MmY1NjJjMTM1ZjkxYzY1ZjQ3YTk4YTMwM2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomtRv/9+7wlGGkXmwlj+MtdEqfOS
xY+7JO5LXttRn987EfWwLHwrekm1cG2socMx6MtvPQkfQXRfGnS+HNbWux4S/tXi
LXyRGZY4JZKe7I1NIyUgEUpsuLrVRGTAthPK25vN3c5h6HpPGIB0rgb2lc82PseM
xJQF5Ajj66J0FccVCTjVYERo4HdtblxAG4755vyMSsl76Jf2sU5te7QqwxN9nPq4
RYummON+duKEwLOleD5lbldSuSgltagq26osqjOp/1ibGZHsCY/05bl3dVU88ASt
PWT/aA2i6NSxbe3eO29Mw4MgKrSj9hUf5O76e3dUyKybzoIk6Ep7kqcBywIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFB7OfiQqipL1YsE1+Rxl9HqYowP7MB8GA1UdIwQY
MBaAFCdISVZzZUnqs7BuI6q4nKWZOoB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3Mjgt
YWQxNjNhYjM1NGM4LzEvSHM1LUpDcUtrdlZpd1RYNUhHWDBlcGlqQV9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9kZWU1NzgtZjJjNi00MWMwLWI3MjgtYWQxNjNhYjM1NGM4
LzEvSjBoSlZuTmxTZXF6c0c0anFyaWNwWms2Z0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAMBAIAATAGAwQALVRmMBQE
AgACMA4DBQAqEDsAAwUCKhA7BDANBgkqhkiG9w0BAQsFAAOCAQEAjrVfTu0nE1k4
abNyapxsX8Sr9XeN/BV4GaBqfcsgUzNrwGa+FHf/ri+vfRSu/m7Si1frceGFwHWs
Fc9f+GJuloyP2BbL/knBopjdVYmyxuyK0Hqjc/DBvWIqvpzpwELhnp6NdtNzmKV4
Dy8p8rYMUXJnIwB6pp2v4pbGMzE7JPsBynGJ4dLj2nMoERGUueG4WJJfvxiYO3B2
svs0aIsM+53eG/nI8L0qsE//8RaYFWmOIkELCpp2hRUcB4P/fZw6KTo8ZGta7+bq
WCoHgtpledvUw53qIBz0+AJtIf1NHy+l+on5GJj0IejM1Wa7Q2r8QyOPRgYu25N+
PR4l3b2htQ==
-----END CERTIFICATE-----
Generated at Sat Aug 31 18:52:39 2024 by rpki-client on console-fra.rpki-client.org