Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wvqs7v-Fxj5GmuuldnARmAsS50U.roa
File: wvqs7v-Fxj5GmuuldnARmAsS50U.roa (raw, json)
Hash identifier: UNJ/M6psFl8UXDxLM5sV/ofg4Npp0AxsEVqh2sNh90k=
Subject key identifier: C2:FA:AC:EE:FF:85:C6:3E:46:9A:EB:A5:76:70:11:98:0B:12:E7:45
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019016FE2EF91A18FFB5299702A2930BC3F4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wvqs7v-Fxj5GmuuldnARmAsS50U.roa
Signing time: Fri 14 Jun 2024 13:44:34 +0000
ROA not before: Fri 14 Jun 2024 13:44:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51765
IP address blocks: 2.57.241.0/24 maxlen: 24
45.135.181.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 10:27:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:16:fe:2e:f9:1a:18:ff:b5:29:97:02:a2:93:0b:c3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 14 13:44:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c2faaceeff85c63e469aeba5767011980b12e745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d1:08:f8:be:d1:a1:89:09:77:cb:ab:2d:8c:
70:8b:b8:03:6a:f6:d2:67:ff:70:17:f4:ba:00:9d:
00:3d:9b:d2:77:21:da:e8:d0:41:80:f1:9e:a5:91:
f4:ef:07:9e:5e:8b:5b:71:59:0d:b2:f5:fa:f6:68:
52:f2:98:43:dc:f4:6a:f1:38:f4:52:2b:43:c7:b0:
a3:f0:34:3d:6a:61:bb:83:cd:55:86:cd:6b:e8:ab:
f0:7f:aa:8c:5f:04:5f:86:13:30:5c:c7:6e:57:cd:
f1:58:b7:18:43:03:26:10:6c:f8:03:56:34:c4:36:
f2:da:8a:64:d2:e8:5b:4b:2d:df:9e:75:5d:d4:74:
02:78:4d:97:1b:f4:fa:09:d5:dd:f4:02:55:af:ea:
91:71:06:7e:b4:a2:8b:a3:11:9d:f0:c5:26:8e:1c:
10:17:66:3d:07:36:a1:61:72:d1:24:82:ff:52:76:
60:72:eb:e4:42:f4:82:bc:32:f1:8c:ff:ac:c2:e7:
b0:2a:fe:d8:07:54:8c:36:a3:67:85:b2:e1:4f:4e:
0d:15:fd:f2:b0:8b:9c:bb:f6:d8:a0:e8:3c:0f:2d:
96:ec:fa:62:b9:8b:38:e7:73:d8:30:d8:ea:0c:21:
8f:3a:bf:a5:25:e1:eb:1e:6f:85:8c:49:36:ee:0a:
4f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:FA:AC:EE:FF:85:C6:3E:46:9A:EB:A5:76:70:11:98:0B:12:E7:45
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/wvqs7v-Fxj5GmuuldnARmAsS50U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.241.0/24
45.135.181.0/24
Signature Algorithm: sha256WithRSAEncryption
18:e1:27:99:1f:c9:c2:e7:fe:21:f6:14:90:48:c7:5d:ee:cb:
dd:32:77:4f:03:84:fa:67:24:0e:b2:76:00:b5:77:15:6e:98:
d1:50:2e:41:b0:5e:0e:70:a4:b7:68:2d:4c:e0:0a:e8:ff:ce:
ef:ef:6e:91:67:bd:46:50:ee:46:98:17:92:06:60:88:ee:71:
be:b1:a7:9f:da:c8:db:7b:51:43:f2:f6:8a:e8:fc:87:2d:ab:
f2:b5:49:03:90:f4:b4:a0:db:aa:9e:6a:b9:ec:aa:06:9a:1f:
a0:5a:79:80:44:a2:85:c4:72:cf:f2:b2:1d:c0:07:d7:2f:8a:
bf:ef:90:c1:7b:3e:99:2a:b4:86:a2:65:b9:64:8c:e2:9c:34:
6e:86:d7:40:17:b6:6a:0a:04:02:68:04:64:e6:fd:1d:d7:d1:
0f:8d:fd:49:a9:d7:50:79:a7:93:2a:72:6e:84:5c:1d:99:87:
99:d4:f4:c4:2e:48:50:2d:5e:7a:69:44:50:23:0e:de:0b:77:
2e:fb:e7:1e:96:b4:c3:ad:5b:b1:38:ef:04:71:d2:71:82:22:
c2:f3:fa:6f:6b:24:4c:ff:08:9e:2c:cf:4c:49:24:10:5d:3f:
f3:51:3f:e7:b4:76:52:0d:bc:b3:09:62:60:85:29:6d:83:a9:
95:a0:4f:9f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZAW/i75Ghj/tSmXAqKTC8P0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwNjE0MTM0NDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmZhYWNlZWZmODVjNjNlNDY5YWViYTU3NjcwMTE5ODBiMTJlNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltEI+L7RoYkJd8urLYxwi7gDavbS
Z/9wF/S6AJ0APZvSdyHa6NBBgPGepZH07weeXotbcVkNsvX69mhS8phD3PRq8Tj0
UitDx7Cj8DQ9amG7g81Vhs1r6Kvwf6qMXwRfhhMwXMduV83xWLcYQwMmEGz4A1Y0
xDby2opk0uhbSy3fnnVd1HQCeE2XG/T6CdXd9AJVr+qRcQZ+tKKLoxGd8MUmjhwQ
F2Y9BzahYXLRJIL/UnZgcuvkQvSCvDLxjP+swuewKv7YB1SMNqNnhbLhT04NFf3y
sIucu/bYoOg8Dy2W7PpiuYs453PYMNjqDCGPOr+lJeHrHm+FjEk27gpPhwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFML6rO7/hcY+RprrpXZwEZgLEudFMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvd3Zxczd2LUZ4ajVHbXV1bGRuQVJtQXNTNTBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjnxAwQA
LYe1MA0GCSqGSIb3DQEBCwUAA4IBAQAY4SeZH8nC5/4h9hSQSMdd7svdMndPA4T6
ZyQOsnYAtXcVbpjRUC5BsF4OcKS3aC1M4Aro/87v726RZ71GUO5GmBeSBmCI7nG+
saef2sjbe1FD8vaK6PyHLavytUkDkPS0oNuqnmq57KoGmh+gWnmARKKFxHLP8rId
wAfXL4q/75DBez6ZKrSGomW5ZIzinDRuhtdAF7ZqCgQCaARk5v0d19EPjf1JqddQ
eaeTKnJuhFwdmYeZ1PTELkhQLV56aURQIw7eC3cu++celrTDrVuxOO8EcdJxgiLC
8/pvayRM/wieLM9MSSQQXT/zUT/ntHZSDbyzCWJghSltg6mVoE+f
-----END CERTIFICATE-----
Generated at Tue Nov 5 15:57:11 2024 by rpki-client on console-ams.rpki-client.org