Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dpu15-iDGlPZ-LBPtJJm4LOJPEk.roa
File: dpu15-iDGlPZ-LBPtJJm4LOJPEk.roa (raw, json)
Hash identifier: HoprBGyNgs+cA9ThS1sIyGJ4tFSP49qSHa/0IclxRfQ=
Subject key identifier: 76:9B:B5:E7:E8:83:1A:53:D9:F8:B0:4F:B4:92:66:E0:B3:89:3C:49
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0190B2457396624BFF2D334871EA17CDF6C6
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dpu15-iDGlPZ-LBPtJJm4LOJPEk.roa
Signing time: Sun 14 Jul 2024 17:23:34 +0000
ROA not before: Sun 14 Jul 2024 17:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
86.107.101.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
93.113.57.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
176.223.66.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jul 2024 04:23:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b2:45:73:96:62:4b:ff:2d:33:48:71:ea:17:cd:f6:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 14 17:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=769bb5e7e8831a53d9f8b04fb49266e0b3893c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:7f:16:0c:97:dc:a2:9e:d5:94:da:21:6b:
42:dc:62:b3:28:30:1c:8a:2c:69:f9:9b:db:c2:4b:
8a:3b:85:cb:2b:dd:7f:65:47:bd:55:83:64:eb:e9:
1e:2f:52:0a:4b:eb:e8:5d:57:02:56:4c:5a:e7:3c:
73:3a:c7:98:ce:c4:8b:ab:89:fa:68:f4:55:8a:26:
a8:4a:b4:3b:e9:a0:8f:40:a2:07:ad:62:3d:87:8a:
f8:ea:5b:4e:40:19:3e:7f:c7:d5:e9:7f:86:1f:35:
df:f2:ab:cd:70:43:15:48:ec:c7:71:d6:83:8c:c4:
72:d9:63:c0:3d:8a:f9:ab:fd:b8:c5:44:9a:2d:42:
87:82:b6:96:8c:90:a1:5c:66:f8:af:94:f0:cf:7f:
79:c4:fa:0e:1c:7c:39:6d:54:2b:bd:67:80:76:83:
e6:17:dd:b5:4e:ec:44:d5:ba:fa:2e:db:b1:d1:aa:
c5:12:1f:21:45:5d:1e:d2:3a:bc:68:e4:3b:fd:64:
d3:6a:08:e6:e3:ef:fe:1c:98:80:da:1d:aa:87:fa:
e9:0a:9f:87:94:b5:31:04:f4:7f:12:4d:d6:4e:d2:
d3:8c:9c:da:9c:d5:86:2e:10:ec:01:78:fc:26:5b:
72:a6:75:e9:9f:dd:35:6e:6d:1c:09:8b:65:11:c1:
e0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9B:B5:E7:E8:83:1A:53:D9:F8:B0:4F:B4:92:66:E0:B3:89:3C:49
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/dpu15-iDGlPZ-LBPtJJm4LOJPEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
86.107.101.0/24
89.34.106.0/24
93.113.57.0/24
93.114.183.0/24
176.223.66.0/24
185.198.235.0/24
188.64.142.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
14:c7:8b:e7:1b:2d:d5:55:f2:1d:e4:7c:c1:7b:ef:3b:53:7f:
8b:56:45:d0:47:0f:18:44:94:9c:77:43:ad:de:46:ec:00:27:
0a:5a:5f:b1:14:58:b5:e6:99:f8:2d:4a:0b:74:c7:7a:b2:5a:
dd:ac:10:e5:0c:7b:78:72:07:d4:30:b4:eb:70:0b:9b:2e:d0:
a8:99:a5:8b:58:87:d7:ab:4f:9b:f4:72:56:05:1f:c1:20:42:
3a:e1:03:b9:a6:b4:a2:98:d5:9f:35:82:d7:31:6a:ad:e2:1e:
fc:1d:38:52:36:ea:8b:10:2d:cb:ce:f7:aa:a6:40:b0:ea:38:
ab:f7:83:99:f0:d5:83:75:68:84:b1:5d:89:34:85:97:1c:f2:
e1:18:1e:b2:b8:3b:2b:50:df:b3:f3:f7:a9:37:a1:b0:b0:c0:
11:89:73:d9:20:b4:02:70:18:22:c7:2c:f1:43:84:1c:b9:dd:
ae:e1:f2:13:9c:de:2e:b9:8b:5b:c0:ed:2e:f0:6c:f3:bf:05:
c2:2f:d9:bf:7a:57:d6:d5:13:cc:d3:b3:8b:bb:a5:83:de:df:
39:43:14:86:d5:84:3d:f4:74:5f:77:d4:bc:84:0a:4c:84:c4:
07:f2:0c:78:02:61:87:f5:08:e8:ac:32:32:c5:26:51:ec:6a:
fe:cf:9b:ac
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZCyRXOWYkv/LTNIceoXzfbGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwNzE0MTcyMzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjliYjVlN2U4ODMxYTUzZDlmOGIwNGZiNDkyNjZlMGIzODkzYzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnR/FgyX3KKe1ZTaIWtC3GKzKDAc
iixp+ZvbwkuKO4XLK91/ZUe9VYNk6+keL1IKS+voXVcCVkxa5zxzOseYzsSLq4n6
aPRViiaoSrQ76aCPQKIHrWI9h4r46ltOQBk+f8fV6X+GHzXf8qvNcEMVSOzHcdaD
jMRy2WPAPYr5q/24xUSaLUKHgraWjJChXGb4r5Twz395xPoOHHw5bVQrvWeAdoPm
F921TuxE1br6Ltux0arFEh8hRV0e0jq8aOQ7/WTTagjm4+/+HJiA2h2qh/rpCp+H
lLUxBPR/Ek3WTtLTjJzanNWGLhDsAXj8JltypnXpn901bm0cCYtlEcHg8QIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFHabtefogxpT2fiwT7SSZuCziTxJMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvZHB1MTUtaURHbFBaLUxCUHRKSm00TE9KUEVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQBLYe2AwQA
VmtlAwQAWSJqAwQAXXE5AwQAXXK3AwQAsN9CAwQAucbrAwQAvECOAwQA2RMEMA0G
CSqGSIb3DQEBCwUAA4IBAQAUx4vnGy3VVfId5HzBe+87U3+LVkXQRw8YRJScd0Ot
3kbsACcKWl+xFFi15pn4LUoLdMd6slrdrBDlDHt4cgfUMLTrcAubLtComaWLWIfX
q0+b9HJWBR/BIEI64QO5prSimNWfNYLXMWqt4h78HThSNuqLEC3LzveqpkCw6jir
94OZ8NWDdWiEsV2JNIWXHPLhGB6yuDsrUN+z8/epN6GwsMARiXPZILQCcBgixyzx
Q4Qcud2u4fITnN4uuYtbwO0u8GzzvwXCL9m/elfW1RPM07OLu6WD3t85QxSG1YQ9
9HRfd9S8hApMhMQH8gx4AmGH9QjorDIyxSZR7Gr+z5us
-----END CERTIFICATE-----
Generated at Tue Jul 16 07:31:35 2024 by rpki-client on console-ams.rpki-client.org