Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jOYDp_Xqwz6KP0qIxyKdQA0GyHQ.roa
File: jOYDp_Xqwz6KP0qIxyKdQA0GyHQ.roa (raw, json)
Hash identifier: Bbih1DusX9N4G7QarX6pKB3PqiWrDf/hTxcUiz1ez44=
Subject key identifier: 8C:E6:03:A7:F5:EA:C3:3E:8A:3F:4A:88:C7:22:9D:40:0D:06:C8:74
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01915682852E4B2711D548920832743D9320
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jOYDp_Xqwz6KP0qIxyKdQA0GyHQ.roa
Signing time: Thu 15 Aug 2024 14:47:59 +0000
ROA not before: Thu 15 Aug 2024 14:47:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 45.135.182.0/24 maxlen: 24
45.135.183.0/24 maxlen: 24
89.34.106.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
89.46.42.0/24 maxlen: 24
93.114.183.0/24 maxlen: 24
188.241.136.0/24 maxlen: 24
217.19.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Aug 2024 22:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:56:82:85:2e:4b:27:11:d5:48:92:08:32:74:3d:93:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 15 14:47:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ce603a7f5eac33e8a3f4a88c7229d400d06c874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:18:e4:0a:24:1c:a0:60:d2:6f:1e:7f:6e:fd:
0a:e9:6b:f6:4c:60:24:dd:33:27:b3:b0:eb:83:31:
85:b6:0e:1f:3d:94:fa:f0:16:7d:75:9e:e7:07:8f:
c0:04:ae:7e:3c:41:c4:ea:39:82:7b:40:4c:ff:9c:
14:c2:14:b3:c5:b5:11:37:15:a8:b1:20:d1:89:8c:
35:74:a8:7e:49:f0:60:c5:c9:d0:cf:c0:94:87:9f:
fe:0b:d0:13:9a:ae:25:5d:45:12:26:7c:53:e9:27:
e5:6f:46:6b:84:73:83:cb:07:70:bf:86:94:7f:f3:
c0:7a:36:4c:40:fc:15:2d:a3:12:80:8e:1e:4c:c4:
29:31:a3:8a:0b:a3:39:d3:2a:14:d7:1f:53:e6:b4:
14:d4:06:9c:18:75:ac:bc:9d:25:2e:28:0d:cc:0e:
d0:ce:71:2a:10:a7:29:b0:31:5e:0c:b7:c5:3a:fe:
fe:cf:f4:6b:97:43:ac:f4:bd:52:ee:fe:00:18:79:
4d:1e:3a:96:69:89:49:f3:a7:87:78:16:83:8d:8b:
af:da:26:f8:0a:7b:92:99:e8:93:c5:83:d8:57:f2:
2c:9d:91:06:aa:c3:f4:94:5c:88:49:4d:74:66:14:
87:b1:12:26:cb:0c:00:5f:fa:40:32:1e:32:01:b7:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:E6:03:A7:F5:EA:C3:3E:8A:3F:4A:88:C7:22:9D:40:0D:06:C8:74
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jOYDp_Xqwz6KP0qIxyKdQA0GyHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.182.0/23
89.34.106.0/24
89.40.70.0/24
89.46.42.0/24
93.114.183.0/24
188.241.136.0/24
217.19.4.0/24
Signature Algorithm: sha256WithRSAEncryption
61:95:49:b5:29:04:6a:64:37:2f:ef:7a:ba:bb:b3:64:27:24:
4d:1f:0f:5e:db:c5:78:6c:53:dd:c0:00:6b:77:d6:de:94:a6:
dd:20:73:d4:6f:1d:a7:9f:0a:05:03:5f:4c:ef:5f:80:46:69:
ec:a2:24:97:ba:ca:ca:52:50:f2:63:98:d6:f2:d1:d3:e0:ea:
b0:a5:59:c6:fd:5a:51:0d:80:97:5b:6a:e3:2b:94:95:3a:36:
7c:5b:f3:41:f8:cd:25:bc:2a:8f:8c:8a:0f:e7:ea:ca:dc:5f:
3f:30:9b:bb:67:b1:9c:e3:b1:28:20:33:0f:5f:9e:85:57:8a:
af:5c:53:67:1e:f4:9e:64:2b:52:d2:9a:30:e3:cf:e5:8d:c0:
f8:0e:ff:12:07:d5:b7:05:72:58:0a:e5:0c:4a:bf:c7:d8:07:
40:48:ba:4f:77:32:e4:77:bc:48:b2:bd:91:4f:dd:34:ee:7f:
f8:c0:2d:66:cc:48:0e:a3:69:96:1f:3f:63:75:9f:cc:7d:a4:
1b:fd:26:3e:48:19:f7:6a:49:40:76:df:6d:fa:7e:51:31:05:
a7:05:f6:60:1e:9f:59:bb:a0:73:3d:ab:f8:56:46:d0:65:c3:
2d:81:1b:b8:9d:6d:a8:c6:e0:4f:64:14:38:2b:2b:d0:a4:61:
df:be:28:9e
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZFWgoUuSycR1UiSCDJ0PZMgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwODE1MTQ0NzU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2U2MDNhN2Y1ZWFjMzNlOGEzZjRhODhjNzIyOWQ0MDBkMDZjODc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBjkCiQcoGDSbx5/bv0K6Wv2TGAk
3TMns7DrgzGFtg4fPZT68BZ9dZ7nB4/ABK5+PEHE6jmCe0BM/5wUwhSzxbURNxWo
sSDRiYw1dKh+SfBgxcnQz8CUh5/+C9ATmq4lXUUSJnxT6Sflb0ZrhHODywdwv4aU
f/PAejZMQPwVLaMSgI4eTMQpMaOKC6M50yoU1x9T5rQU1AacGHWsvJ0lLigNzA7Q
znEqEKcpsDFeDLfFOv7+z/Rrl0Os9L1S7v4AGHlNHjqWaYlJ86eHeBaDjYuv2ib4
CnuSmeiTxYPYV/IsnZEGqsP0lFyISU10ZhSHsRImywwAX/pAMh4yAbeGgQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFIzmA6f16sM+ij9KiMcinUANBsh0MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvak9ZRHBfWHF3ejZLUDBxSXh5S2RRQTBHeUhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBLYe2AwQA
WSJqAwQAWShGAwQAWS4qAwQAXXK3AwQAvPGIAwQA2RMEMA0GCSqGSIb3DQEBCwUA
A4IBAQBhlUm1KQRqZDcv73q6u7NkJyRNHw9e28V4bFPdwABrd9belKbdIHPUbx2n
nwoFA19M71+ARmnsoiSXusrKUlDyY5jW8tHT4OqwpVnG/VpRDYCXW2rjK5SVOjZ8
W/NB+M0lvCqPjIoP5+rK3F8/MJu7Z7Gc47EoIDMPX56FV4qvXFNnHvSeZCtS0pow
48/ljcD4Dv8SB9W3BXJYCuUMSr/H2AdASLpPdzLkd7xIsr2RT9007n/4wC1mzEgO
o2mWHz9jdZ/MfaQb/SY+SBn3aklAdt9t+n5RMQWnBfZgHp9Zu6BzPav4VkbQZcMt
gRu4nW2oxuBPZBQ4KyvQpGHfviie
-----END CERTIFICATE-----
Generated at Fri Aug 16 00:39:39 2024 by rpki-client on console-ams.rpki-client.org