Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ctQ6yGhJdHLtwC-CVizXz5f1VBU.roa
File: ctQ6yGhJdHLtwC-CVizXz5f1VBU.roa (raw, json)
Hash identifier: 6lrj4b7Cwct9LVmv5S5iOleHW8z0yRNy/JqBtWSul+4=
Subject key identifier: 72:D4:3A:C8:68:49:74:72:ED:C0:2F:82:56:2C:D7:CF:97:F5:54:15
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018FBAF61D8C42798C9420FA5EA5EBF25F45
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ctQ6yGhJdHLtwC-CVizXz5f1VBU.roa
Signing time: Mon 27 May 2024 16:50:42 +0000
ROA not before: Mon 27 May 2024 16:50:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 142561
IP address blocks: 45.144.174.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 09 Jun 2024 14:40:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ba:f6:1d:8c:42:79:8c:94:20:fa:5e:a5:eb:f2:5f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 27 16:50:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72d43ac868497472edc02f82562cd7cf97f55415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:78:c2:bd:48:fc:7a:97:ce:5f:b6:31:4a:f4:
6b:fa:61:2e:8d:96:98:9f:49:29:7a:4e:e3:e0:0a:
cd:05:2e:82:08:50:7f:83:9b:ce:3b:fc:40:f8:ad:
19:0e:28:db:85:36:77:2e:08:a1:2f:7f:3b:1d:32:
98:90:85:f0:b2:e2:4e:4c:53:96:d5:7b:c8:18:92:
60:e5:fc:9c:9c:c4:64:84:58:d4:5c:4c:27:cf:eb:
f9:9d:4a:72:ec:12:cc:fd:e1:28:71:9d:2f:57:ad:
42:36:23:51:1a:8a:cf:c9:49:2e:97:ab:38:38:ab:
de:68:77:77:5f:38:2b:1a:5c:f9:d9:47:20:04:ab:
fc:59:d8:ee:22:52:66:90:24:81:9f:00:1a:2e:1e:
3e:18:45:42:b2:6a:50:ab:9d:d4:34:e8:f8:ba:10:
23:13:58:93:57:ce:e6:14:6a:66:60:4f:8d:b4:f1:
52:4d:14:ab:de:ea:26:8f:9d:95:1b:df:a5:1f:2e:
be:6d:01:16:61:fa:10:64:d4:a5:72:05:27:24:65:
4a:20:bf:95:af:21:9a:82:58:b1:6f:9f:75:bd:ec:
b1:54:78:ef:ca:b6:21:0a:ef:a1:ac:be:39:be:9f:
95:e2:c7:95:a0:fc:0a:59:6f:87:f4:8d:45:f2:aa:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D4:3A:C8:68:49:74:72:ED:C0:2F:82:56:2C:D7:CF:97:F5:54:15
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/ctQ6yGhJdHLtwC-CVizXz5f1VBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.174.0/23
Signature Algorithm: sha256WithRSAEncryption
37:ef:73:7b:a1:34:68:a2:cb:e2:e7:96:18:22:c7:0d:ce:dd:
38:01:e1:3e:fd:13:6a:b7:79:25:e0:10:b6:02:cc:0e:b6:69:
13:40:f8:80:21:9e:1d:b3:ed:45:5c:a7:0f:b8:f2:32:2b:2f:
eb:65:49:90:85:10:97:1f:3f:bf:40:df:d3:34:6b:5c:05:5c:
b3:b2:70:44:12:a5:53:33:7e:fd:89:f9:f4:4e:7e:16:d6:ff:
b2:b0:89:d3:a1:93:cd:69:3b:ae:c7:66:bd:47:fa:37:db:2b:
93:0d:22:55:9d:17:11:70:f8:6c:00:a4:1c:24:68:26:7e:29:
21:e1:72:7d:88:51:84:b7:4f:cc:3f:c7:21:c1:f2:9e:f1:7c:
aa:7a:5c:23:94:65:10:15:7b:9c:f3:14:33:f8:0c:94:7e:46:
6d:13:3f:62:1d:82:79:ac:b2:a6:0c:91:8b:1d:ab:40:60:68:
71:40:f8:fc:de:01:6d:69:b6:5d:eb:d2:2d:17:08:e2:75:03:
fe:06:b4:d2:79:c0:61:a0:6b:e2:b8:b0:24:5c:cf:73:93:fe:
79:44:07:5e:6a:93:ab:db:33:3a:88:ba:c3:30:3e:bb:f1:2e:
83:ae:84:b1:8b:f7:ad:45:1a:10:27:de:c0:6b:99:df:c8:65:
0d:c8:9a:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+69h2MQnmMlCD6XqXr8l9FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwNTI3MTY1MDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmQ0M2FjODY4NDk3NDcyZWRjMDJmODI1NjJjZDdjZjk3ZjU1NDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HjCvUj8epfOX7YxSvRr+mEujZaY
n0kpek7j4ArNBS6CCFB/g5vOO/xA+K0ZDijbhTZ3LgihL387HTKYkIXwsuJOTFOW
1XvIGJJg5fycnMRkhFjUXEwnz+v5nUpy7BLM/eEocZ0vV61CNiNRGorPyUkul6s4
OKveaHd3XzgrGlz52UcgBKv8WdjuIlJmkCSBnwAaLh4+GEVCsmpQq53UNOj4uhAj
E1iTV87mFGpmYE+NtPFSTRSr3uomj52VG9+lHy6+bQEWYfoQZNSlcgUnJGVKIL+V
ryGaglixb591veyxVHjvyrYhCu+hrL45vp+V4seVoPwKWW+H9I1F8qqSpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHLUOshoSXRy7cAvglYs18+X9VQVMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvY3RRNnlHaEpkSEx0d0MtQ1Zpelh6NWYxVkJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZCuMA0G
CSqGSIb3DQEBCwUAA4IBAQA373N7oTRoosvi55YYIscNzt04AeE+/RNqt3kl4BC2
AswOtmkTQPiAIZ4ds+1FXKcPuPIyKy/rZUmQhRCXHz+/QN/TNGtcBVyzsnBEEqVT
M379ifn0Tn4W1v+ysInToZPNaTuux2a9R/o32yuTDSJVnRcRcPhsAKQcJGgmfikh
4XJ9iFGEt0/MP8chwfKe8XyqelwjlGUQFXuc8xQz+AyUfkZtEz9iHYJ5rLKmDJGL
HatAYGhxQPj83gFtabZd69ItFwjidQP+BrTSecBhoGviuLAkXM9zk/55RAdeapOr
2zM6iLrDMD678S6DroSxi/etRRoQJ97Aa5nfyGUNyJqv
-----END CERTIFICATE-----
Generated at Sun Jun 9 16:18:50 2024 by rpki-client on console-fra.rpki-client.org