Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DTWb-A9yQ_hQKe4U1yGoRdn0zDM.roa
File: DTWb-A9yQ_hQKe4U1yGoRdn0zDM.roa (raw, json)
Hash identifier: vnJIIN6KBXhCdo0nUVAP54WZMFvN/Y1wfNMr71j0GAw=
Subject key identifier: 0D:35:9B:F8:0F:72:43:F8:50:29:EE:14:D7:21:A8:45:D9:F4:CC:33
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019111425297EF405BBA9F1D72A6C58D1F9A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DTWb-A9yQ_hQKe4U1yGoRdn0zDM.roa
Signing time: Fri 02 Aug 2024 04:04:04 +0000
ROA not before: Fri 02 Aug 2024 04:04:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43641
IP address blocks: 45.135.180.0/24 maxlen: 24
89.35.131.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Nov 2024 14:45:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:11:42:52:97:ef:40:5b:ba:9f:1d:72:a6:c5:8d:1f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 2 04:04:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d359bf80f7243f85029ee14d721a845d9f4cc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d6:53:11:1a:01:95:03:23:ef:08:bd:aa:ed:
0b:b8:4a:5a:90:27:40:a5:b1:95:13:50:a8:49:7d:
c4:7d:e7:c0:23:0a:e9:fb:2c:e4:3f:62:91:5a:8b:
db:36:f3:9a:e4:2c:8c:2b:55:62:e0:90:e7:1d:22:
89:8c:8d:df:67:c3:4a:52:e0:f0:31:45:10:d6:ff:
9d:aa:7e:5b:ad:08:77:1b:a4:62:35:83:fb:6b:a3:
9d:d7:8c:12:4d:e6:da:d1:1a:c7:df:60:c2:1d:04:
0f:d3:06:6b:f2:08:43:b6:30:32:b8:02:93:c0:ff:
bc:15:6c:ac:44:12:ca:58:5a:0a:9d:80:4d:54:e0:
ff:46:81:91:31:52:29:93:ba:45:8b:ed:da:8b:63:
a1:9e:1a:37:e5:1c:bb:65:30:12:53:72:ef:23:83:
37:04:76:73:6e:21:9e:37:d7:5e:02:38:a6:18:a9:
12:de:99:cf:ed:f3:59:23:8b:0a:84:90:29:20:73:
ce:64:72:70:8c:e5:dd:1f:07:97:13:21:82:84:de:
03:03:b2:2d:66:10:55:63:0b:2a:27:a3:6b:35:22:
98:09:db:d1:8c:6b:a0:e4:ab:1b:af:19:bf:48:90:
64:84:76:dd:d3:35:5c:de:9a:a9:01:20:b2:37:46:
fe:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:35:9B:F8:0F:72:43:F8:50:29:EE:14:D7:21:A8:45:D9:F4:CC:33
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/DTWb-A9yQ_hQKe4U1yGoRdn0zDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.180.0/24
89.35.131.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:40:eb:19:38:ba:4e:6e:ac:f5:a6:00:a4:1a:e7:20:4f:9a:
a3:20:0f:96:c2:e0:bb:25:06:f0:83:c9:f6:aa:5a:9f:62:fc:
d3:fe:ae:93:56:2a:73:88:73:73:b1:ff:bc:b4:fa:b4:48:67:
c9:ff:24:6d:cd:7b:4e:f9:c6:b8:13:5f:5a:0b:9c:06:01:d7:
d1:4a:e0:68:a1:25:d1:a4:d3:24:7a:a2:69:4f:b1:cf:c3:6b:
9e:5b:81:85:c6:de:8a:0d:f4:07:0d:b3:7b:41:57:9f:09:a0:
a4:f8:a8:04:a7:92:3a:f5:be:6a:73:34:ce:17:4c:05:d0:cd:
cd:06:1d:05:1e:67:00:83:f0:d7:60:91:b9:03:c5:ef:0f:09:
6f:6d:fd:92:db:a1:e8:a6:73:88:43:0c:ee:6e:45:81:b6:00:
25:0a:7c:2a:76:c2:a3:5c:26:20:a7:f0:9b:c4:a9:3e:47:08:
0c:bf:7e:fb:cf:44:eb:c9:5b:34:b8:bd:a1:f0:e3:13:75:dc:
38:40:ef:67:8b:17:47:db:cb:c2:97:61:de:7d:66:dd:a1:a7:
bc:2d:e3:eb:76:bb:8d:bc:bb:05:91:09:bc:1f:46:61:5f:50:
b1:e1:93:a6:cf:51:73:89:bd:b8:f0:4a:bf:87:58:17:b5:8e:
a3:9a:4e:67
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZERQlKX70Bbup8dcqbFjR+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwODAyMDQwNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDM1OWJmODBmNzI0M2Y4NTAyOWVlMTRkNzIxYTg0NWQ5ZjRjYzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NZTERoBlQMj7wi9qu0LuEpakCdA
pbGVE1CoSX3EfefAIwrp+yzkP2KRWovbNvOa5CyMK1Vi4JDnHSKJjI3fZ8NKUuDw
MUUQ1v+dqn5brQh3G6RiNYP7a6Od14wSTeba0RrH32DCHQQP0wZr8ghDtjAyuAKT
wP+8FWysRBLKWFoKnYBNVOD/RoGRMVIpk7pFi+3ai2Ohnho35Ry7ZTASU3LvI4M3
BHZzbiGeN9deAjimGKkS3pnP7fNZI4sKhJApIHPOZHJwjOXdHweXEyGChN4DA7It
ZhBVYwsqJ6NrNSKYCdvRjGug5Ksbrxm/SJBkhHbd0zVc3pqpASCyN0b+JwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA01m/gPckP4UCnuFNchqEXZ9MwzMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvRFRXYi1BOXlRX2hRS2U0VTF5R29SZG4wekRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYe0AwQA
WSODMA0GCSqGSIb3DQEBCwUAA4IBAQAbQOsZOLpObqz1pgCkGucgT5qjIA+WwuC7
JQbwg8n2qlqfYvzT/q6TVipziHNzsf+8tPq0SGfJ/yRtzXtO+ca4E19aC5wGAdfR
SuBooSXRpNMkeqJpT7HPw2ueW4GFxt6KDfQHDbN7QVefCaCk+KgEp5I69b5qczTO
F0wF0M3NBh0FHmcAg/DXYJG5A8XvDwlvbf2S26HopnOIQwzubkWBtgAlCnwqdsKj
XCYgp/CbxKk+RwgMv377z0TryVs0uL2h8OMTddw4QO9nixdH28vCl2HefWbdoae8
LePrdruNvLsFkQm8H0ZhX1Cx4ZOmz1Fzib248Eq/h1gXtY6jmk5n
-----END CERTIFICATE-----
Generated at Tue Nov 19 18:43:34 2024 by rpki-client on console-ams.rpki-client.org