Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6pl1JePNrkoMTCmn1qkt23yww5w.roa
File: 6pl1JePNrkoMTCmn1qkt23yww5w.roa (raw, json)
Hash identifier: M5hSyqisDezW7jmJP8nYF/lEA74aMJoKegWPI1glPDQ=
Subject key identifier: EA:99:75:25:E3:CD:AE:4A:0C:4C:29:A7:D6:A9:2D:DB:7C:B0:C3:9C
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 018B011B3D16B7338B44C09D5169B829D91E
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6pl1JePNrkoMTCmn1qkt23yww5w.roa
Signing time: Thu 05 Oct 2023 18:30:44 +0000
ROA not before: Thu 05 Oct 2023 18:30:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44477
IP address blocks: 45.155.63.0/24 maxlen: 24
45.155.62.0/24 maxlen: 24
45.133.216.0/24 maxlen: 24
194.156.98.0/24 maxlen: 24
45.145.0.0/24 maxlen: 24
194.156.99.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:01:1b:3d:16:b7:33:8b:44:c0:9d:51:69:b8:29:d9:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Oct 5 18:30:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ea997525e3cdae4a0c4c29a7d6a92ddb7cb0c39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e7:1d:d1:4f:73:29:52:0c:7f:01:91:47:e5:
4f:78:42:b3:28:73:f1:94:1a:88:ba:7d:b1:cd:aa:
f6:b1:06:e6:fa:8e:5f:72:63:89:56:40:17:cd:b9:
f1:50:26:7e:a4:54:df:dc:39:db:2b:ce:cd:6e:87:
6f:c8:06:c4:8d:39:b0:3a:b1:72:dd:53:08:f0:8a:
ca:b7:1a:48:ce:85:22:ce:60:69:79:34:56:95:40:
ef:96:f7:41:6f:9d:ed:ee:65:f4:8b:14:e4:5f:ce:
1a:76:eb:bb:04:e2:a1:ad:47:37:d0:76:49:88:1d:
63:ae:75:d0:69:44:2c:31:40:36:a3:dd:00:0b:82:
af:a4:f0:53:8c:31:f6:43:03:45:d0:c3:cf:56:09:
bf:a9:93:31:fe:83:4c:18:a7:d8:62:44:87:46:d4:
82:22:22:25:ce:58:bb:37:0d:ea:c6:5d:13:d9:0e:
18:b2:d7:f4:3c:a1:7b:64:15:3f:de:39:c8:c7:22:
66:b2:04:88:09:df:d4:5d:ff:66:9f:38:66:37:12:
cf:da:e3:33:72:16:ff:bb:d4:e2:f1:0b:66:3b:4b:
cd:65:9c:46:f3:90:c0:24:db:da:06:97:0c:dc:1f:
e6:1e:59:c8:8a:8a:67:6a:c6:81:c2:f8:2a:ab:61:
15:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:99:75:25:E3:CD:AE:4A:0C:4C:29:A7:D6:A9:2D:DB:7C:B0:C3:9C
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/6pl1JePNrkoMTCmn1qkt23yww5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.216.0/24
45.145.0.0/24
45.155.62.0/23
194.156.98.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:b3:8d:45:66:af:ea:85:37:11:bb:ff:8c:b4:f1:00:9b:d9:
13:0a:b8:33:89:fb:be:78:ab:29:b7:c3:a4:90:ea:f7:cb:61:
8e:e1:9c:c4:d4:83:ae:ad:e5:83:d2:83:8f:af:e8:50:b2:c8:
b1:16:9c:75:95:0c:8a:4c:74:a1:55:d4:58:c5:2f:1f:87:55:
c7:b4:a2:86:b4:09:87:37:b7:2b:e3:57:b6:c5:39:ff:92:38:
96:e0:31:b8:c4:b6:12:91:c3:e6:3f:ad:79:f2:f5:20:72:8d:
2d:6d:c2:52:1c:38:f0:ab:5f:1b:36:69:a5:ae:19:b5:db:78:
6c:e4:64:91:68:b1:3d:2f:50:08:53:2e:f5:89:08:5b:85:d8:
62:80:49:55:22:f2:7f:6f:c2:98:2a:34:d1:43:d3:f4:50:2d:
0d:79:c6:8e:52:73:30:72:29:e6:08:24:43:ab:9e:63:d8:8b:
a4:8a:9d:ad:11:51:c3:88:fd:04:a3:95:46:f9:6e:1e:f4:1d:
84:5b:6c:31:e0:7f:ea:e9:16:b5:84:c7:71:c0:1f:97:3f:69:
f9:c3:68:6a:bd:04:8a:d8:60:e7:47:a9:ca:74:69:5f:82:a9:
f5:bd:ff:29:2e:64:99:5b:67:db:be:31:a3:c1:aa:ec:ad:90:
e7:68:75:d2
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYsBGz0WtzOLRMCdUWm4KdkeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjJlMWMyYTUzMTUzMzRiNjZkODBmNzhkNWI1MGI0MmU0
ODBiOWMwHhcNMjMxMDA1MTgzMDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYTk5NzUyNWUzY2RhZTRhMGM0YzI5YTdkNmE5MmRkYjdjYjBjMzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoucd0U9zKVIMfwGRR+VPeEKzKHPx
lBqIun2xzar2sQbm+o5fcmOJVkAXzbnxUCZ+pFTf3DnbK87NbodvyAbEjTmwOrFy
3VMI8IrKtxpIzoUizmBpeTRWlUDvlvdBb53t7mX0ixTkX84aduu7BOKhrUc30HZJ
iB1jrnXQaUQsMUA2o90AC4KvpPBTjDH2QwNF0MPPVgm/qZMx/oNMGKfYYkSHRtSC
IiIlzli7Nw3qxl0T2Q4Ystf0PKF7ZBU/3jnIxyJmsgSICd/UXf9mnzhmNxLP2uMz
chb/u9Ti8QtmO0vNZZxG85DAJNvaBpcM3B/mHlnIiopnasaBwvgqq2EVDwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOqZdSXjza5KDEwpp9apLdt8sMOcMB8GA1UdIwQY
MBaAFGIi4cKlMVM0tm2A941bULQuSAucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEt
NTczNzAxYzg0ODMzLzEvNnBsMUplUE5ya29NVENtbjFxa3QyM3l3dzV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS85OTliOTctYzczMS00MTkyLTg1ZjEtNTczNzAxYzg0ODMz
LzEvWWlMaHdxVXhVelMyYllEM2pWdFF0QzVJQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALYXYAwQA
LZEAAwQBLZs+AwQBwpxiMA0GCSqGSIb3DQEBCwUAA4IBAQCys41FZq/qhTcRu/+M
tPEAm9kTCrgzifu+eKspt8OkkOr3y2GO4ZzE1IOureWD0oOPr+hQssixFpx1lQyK
THShVdRYxS8fh1XHtKKGtAmHN7cr41e2xTn/kjiW4DG4xLYSkcPmP6158vUgco0t
bcJSHDjwq18bNmmlrhm123hs5GSRaLE9L1AIUy71iQhbhdhigElVIvJ/b8KYKjTR
Q9P0UC0NecaOUnMwcinmCCRDq55j2Iukip2tEVHDiP0Eo5VG+W4e9B2EW2wx4H/q
6Ra1hMdxwB+XP2n5w2hqvQSK2GDnR6nKdGlfgqn1vf8pLmSZW2fbvjGjwarsrZDn
aHXS
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:04 2024 by rpki-client on console-ams.rpki-client.org