Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PoirlQmxDSclgx0VmVPvAxLDMmA.roa
File: PoirlQmxDSclgx0VmVPvAxLDMmA.roa (raw, json)
Hash identifier: ySCbpc8L/PnTnoTkTuLsEz8SQLSm/6uoufDVbqGLVwI=
Subject key identifier: 3E:88:AB:95:09:B1:0D:27:25:83:1D:15:99:53:EF:03:12:C3:32:60
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019253AD7345F9F80CCAFD589D879396898D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PoirlQmxDSclgx0VmVPvAxLDMmA.roa
Signing time: Thu 03 Oct 2024 18:38:49 +0000
ROA not before: Thu 03 Oct 2024 18:38:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
91.132.51.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
94.176.214.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 04 Oct 2024 20:17:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:53:ad:73:45:f9:f8:0c:ca:fd:58:9d:87:93:96:89:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Oct 3 18:38:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3e88ab9509b10d2725831d159953ef0312c33260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:68:8f:c7:67:b3:b7:08:96:8b:1c:46:6e:29:
d8:96:b1:cf:f5:96:7e:d0:19:4d:3b:fa:e3:ef:e4:
fe:12:87:b4:e2:65:27:70:47:3d:05:51:89:ce:b4:
9c:84:7f:6c:97:61:75:2b:92:a5:53:64:05:eb:a4:
b3:0d:ec:37:0c:68:41:00:9e:6d:10:b8:12:2e:3f:
c0:94:7c:d1:b9:a6:64:59:f7:5f:5d:92:23:4f:b9:
55:97:ab:c7:47:b1:de:08:9d:d5:ab:4f:52:c6:c5:
46:b3:c8:cc:e4:f4:a7:e6:c1:72:8d:2a:94:53:75:
2c:40:92:89:51:66:79:b7:02:e8:17:6f:4a:e6:df:
f1:28:91:6b:16:b9:ad:1e:44:a9:84:8b:1a:2c:3a:
ea:59:c4:6a:d8:e4:71:d9:be:66:08:d8:bc:83:03:
34:29:f2:55:69:d4:18:84:e3:55:61:0a:ef:6d:7a:
56:9a:ee:99:8d:ac:e4:27:af:22:35:e0:40:07:56:
c1:3c:b0:80:82:26:26:e0:a2:95:e6:69:f0:5a:d5:
c5:95:9e:66:4b:34:19:0b:0d:77:d6:78:62:c3:ce:
63:32:05:6f:4f:d8:b3:1a:6f:f7:44:70:c4:19:66:
0f:ed:6b:82:b9:01:09:73:80:fc:45:89:29:15:7e:
0f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:88:AB:95:09:B1:0D:27:25:83:1D:15:99:53:EF:03:12:C3:32:60
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/PoirlQmxDSclgx0VmVPvAxLDMmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
91.132.51.0/24
93.114.183.0/24
94.176.214.0/24
188.64.142.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:f6:13:70:d4:c7:c0:8c:d8:b9:9d:c4:a1:ed:47:93:5b:63:
e8:7a:81:01:20:7c:e0:94:a6:ce:5b:4c:55:11:43:46:5d:66:
c2:16:9f:95:01:13:18:2d:42:ae:67:27:37:2a:f7:93:60:31:
78:d0:ed:c2:6e:53:64:fa:47:f9:2c:9a:7b:bd:5e:45:dd:d8:
13:69:9d:38:af:dc:03:c1:84:fb:e7:79:2e:27:7f:ba:e6:24:
c6:39:4b:c1:b8:e9:b9:e6:f2:8e:65:bc:df:0f:d3:de:60:76:
79:8b:05:cf:00:90:57:04:65:23:e6:a8:19:34:05:bc:69:43:
dd:2f:6c:f2:10:b2:bf:07:b8:11:69:a6:d9:ae:00:84:ac:06:
71:09:ea:9c:d6:ff:88:eb:da:da:fa:af:12:6d:50:48:d5:5b:
45:5d:53:65:f8:fa:d5:5e:71:e5:37:ec:aa:d3:dc:57:16:fc:
27:e7:76:d0:f3:80:69:3b:4d:2f:23:63:9b:5d:0b:38:1c:77:
ca:b3:c2:50:98:eb:93:93:04:53:af:a0:ca:f8:db:85:a2:05:
43:08:15:eb:67:5a:43:75:c2:34:af:89:df:d9:52:fc:93:92:
60:be:d6:49:4c:c2:6c:92:25:b3:59:82:9f:3d:6d:a9:62:b3:
59:e3:a8:d5
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZJTrXNF+fgMyv1YnYeTlomNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQxMDAzMTgzODQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZTg4YWI5NTA5YjEwZDI3MjU4MzFkMTU5OTUzZWYwMzEyYzMzMjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWiPx2eztwiWixxGbinYlrHP9ZZ+
0BlNO/rj7+T+Eoe04mUncEc9BVGJzrSchH9sl2F1K5KlU2QF66SzDew3DGhBAJ5t
ELgSLj/AlHzRuaZkWfdfXZIjT7lVl6vHR7HeCJ3Vq09SxsVGs8jM5PSn5sFyjSqU
U3UsQJKJUWZ5twLoF29K5t/xKJFrFrmtHkSphIsaLDrqWcRq2ORx2b5mCNi8gwM0
KfJVadQYhONVYQrvbXpWmu6ZjazkJ68iNeBAB1bBPLCAgiYm4KKV5mnwWtXFlZ5m
SzQZCw131nhiw85jMgVvT9izGm/3RHDEGWYP7WuCuQEJc4D8RYkpFX4PcwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFD6Iq5UJsQ0nJYMdFZlT7wMSwzJgMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvUG9pcmxRbXhEU2NsZ3gwVm1WUHZBeExETW1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQBLYe2AwQA
WSJqAwQAW4QzAwQAXXK3AwQAXrDWAwQAvECOMA0GCSqGSIb3DQEBCwUAA4IBAQA7
9hNw1MfAjNi5ncSh7UeTW2PoeoEBIHzglKbOW0xVEUNGXWbCFp+VARMYLUKuZyc3
KveTYDF40O3CblNk+kf5LJp7vV5F3dgTaZ04r9wDwYT753kuJ3+65iTGOUvBuOm5
5vKOZbzfD9PeYHZ5iwXPAJBXBGUj5qgZNAW8aUPdL2zyELK/B7gRaabZrgCErAZx
Ceqc1v+I69ra+q8SbVBI1VtFXVNl+PrVXnHlN+yq09xXFvwn53bQ84BpO00vI2Ob
XQs4HHfKs8JQmOuTkwRTr6DK+NuFogVDCBXrZ1pDdcI0r4nf2VL8k5JgvtZJTMJs
kiWzWYKfPW2pYrNZ46jV
-----END CERTIFICATE-----
Generated at Fri Oct 4 21:29:31 2024 by rpki-client on console-fra.rpki-client.org