Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9PTHJ9dyD8i_Ioo2E7uAJd86A6Y.roa
File: 9PTHJ9dyD8i_Ioo2E7uAJd86A6Y.roa (raw, json)
Hash identifier: uOUDfwdkKn2gU9ocMd9KG8tXQ47IynyhdPizwCq6lHA=
Subject key identifier: F4:F4:C7:27:D7:72:0F:C8:BF:22:8A:36:13:BB:80:25:DF:3A:03:A6
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018C24492136C350F71FAB48EDA442523370
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9PTHJ9dyD8i_Ioo2E7uAJd86A6Y.roa
Signing time: Fri 01 Dec 2023 07:30:21 +0000
ROA not before: Fri 01 Dec 2023 07:30:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400536
IP address blocks: 45.88.12.0/24 maxlen: 24
45.88.14.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 05 Dec 2023 03:52:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:24:49:21:36:c3:50:f7:1f:ab:48:ed:a4:42:52:33:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 1 07:30:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f4f4c727d7720fc8bf228a3613bb8025df3a03a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b6:08:16:fc:76:64:32:0a:3b:f6:99:ba:b5:
a3:36:85:88:ae:32:ff:4a:bc:6b:31:a7:b8:d8:37:
7b:04:fe:be:60:f5:36:82:4a:09:ac:06:4e:52:2a:
20:36:a5:fd:cf:f8:a3:ab:9b:1e:18:06:62:3f:93:
19:99:43:92:3d:54:9f:44:77:eb:60:75:3f:b7:86:
aa:79:9e:a5:66:9c:b1:27:cd:3a:bf:30:dc:2a:db:
fb:12:b0:da:63:65:45:d1:5d:e9:4e:93:35:ed:fc:
d5:e5:1c:e4:2e:8e:2f:74:bd:03:9a:2a:a3:9c:27:
af:f6:f0:f5:9a:bc:16:c7:44:fe:13:3a:89:fd:ce:
37:9c:c6:6c:68:1a:ad:ef:05:0e:25:49:26:c7:b6:
93:87:03:43:be:22:6f:4b:f4:dd:96:31:b9:8f:77:
f1:a4:0a:e0:06:2f:f4:d5:9d:77:21:a2:ca:b7:00:
98:d4:4a:2c:24:cc:2a:e3:c1:91:36:72:41:d6:0a:
ea:3e:a7:0a:a1:c0:db:6b:47:52:1d:af:50:62:c1:
45:2d:45:f2:ee:96:4f:db:c4:5c:23:75:da:6e:18:
e6:75:5a:c8:b2:93:ec:c8:e0:69:f2:e7:67:ca:76:
1a:b8:d5:68:8c:ef:f7:70:4a:df:72:fc:50:66:9c:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:F4:C7:27:D7:72:0F:C8:BF:22:8A:36:13:BB:80:25:DF:3A:03:A6
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/9PTHJ9dyD8i_Ioo2E7uAJd86A6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.12.0/24
45.88.14.0/23
Signature Algorithm: sha256WithRSAEncryption
35:45:be:4e:41:29:82:fb:79:d2:da:7d:54:d6:e9:74:70:a0:
45:f5:93:e9:c8:86:49:00:94:86:3b:58:b1:17:db:d4:8f:91:
93:bc:5c:43:e3:62:94:59:f0:a6:91:38:92:89:35:2e:68:f4:
f2:51:6b:28:37:6f:3a:f7:58:97:ca:51:48:8e:62:0b:80:26:
24:8a:7d:9e:c9:c4:24:df:d8:14:98:8b:48:ad:76:19:de:97:
bf:60:7b:c1:54:d7:d4:b0:3e:86:25:43:3e:5d:46:cb:cf:7a:
b5:43:9c:ea:95:67:a1:0e:20:da:15:67:64:24:9d:88:cb:98:
52:c5:80:f7:1d:53:9e:60:9d:b0:ac:37:9b:f3:a0:15:6c:c9:
ac:3b:cb:38:04:45:3a:b0:08:95:a2:79:af:e9:32:8a:d5:83:
32:49:5d:88:3d:6b:99:bf:bd:83:3b:ae:ca:1d:00:eb:9e:ba:
de:5c:45:7b:7a:f5:86:1f:bf:d0:94:8b:a0:84:97:07:8e:a2:
1f:3d:f1:a4:2a:27:5c:a4:0a:ee:3e:30:ab:af:61:ab:d0:6b:
3b:c6:4b:ed:a3:d8:2d:9a:bf:8d:17:be:bb:62:13:b6:cb:2c:
35:ad:65:0b:d0:49:9d:80:1f:85:c8:8d:b1:65:a7:6a:16:a5:
92:d0:a1:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYwkSSE2w1D3H6tI7aRCUjNwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjMxMjAxMDczMDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGY0YzcyN2Q3NzIwZmM4YmYyMjhhMzYxM2JiODAyNWRmM2EwM2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLYIFvx2ZDIKO/aZurWjNoWIrjL/
SrxrMae42Dd7BP6+YPU2gkoJrAZOUiogNqX9z/ijq5seGAZiP5MZmUOSPVSfRHfr
YHU/t4aqeZ6lZpyxJ806vzDcKtv7ErDaY2VF0V3pTpM17fzV5RzkLo4vdL0Dmiqj
nCev9vD1mrwWx0T+EzqJ/c43nMZsaBqt7wUOJUkmx7aThwNDviJvS/TdljG5j3fx
pArgBi/01Z13IaLKtwCY1EosJMwq48GRNnJB1grqPqcKocDba0dSHa9QYsFFLUXy
7pZP28RcI3XabhjmdVrIspPsyOBp8udnynYauNVojO/3cErfcvxQZpwn1QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPT0xyfXcg/IvyKKNhO7gCXfOgOmMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvOVBUSEo5ZHlEOGlfSW9vMkU3dUFKZDg2QTZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVgMAwQB
LVgOMA0GCSqGSIb3DQEBCwUAA4IBAQA1Rb5OQSmC+3nS2n1U1ul0cKBF9ZPpyIZJ
AJSGO1ixF9vUj5GTvFxD42KUWfCmkTiSiTUuaPTyUWsoN28691iXylFIjmILgCYk
in2eycQk39gUmItIrXYZ3pe/YHvBVNfUsD6GJUM+XUbLz3q1Q5zqlWehDiDaFWdk
JJ2Iy5hSxYD3HVOeYJ2wrDeb86AVbMmsO8s4BEU6sAiVonmv6TKK1YMySV2IPWuZ
v72DO67KHQDrnrreXEV7evWGH7/QlIughJcHjqIfPfGkKidcpAruPjCrr2Gr0Gs7
xkvto9gtmr+NF767YhO2yyw1rWUL0EmdgB+FyI2xZadqFqWS0KGd
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org