Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/KR5inm8D6UO2YzIQL_iGxdyLqe4.roa
File: KR5inm8D6UO2YzIQL_iGxdyLqe4.roa (raw, json)
Hash identifier: psFOC6yEK4B9c7LcFN3gNKfZZI5w49J2BToS/w4jIvU=
Subject key identifier: 29:1E:62:9E:6F:03:E9:43:B6:63:32:10:2F:F8:86:C5:DC:8B:A9:EE
Certificate issuer: /CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4
Certificate serial: 01856E38A2529FF8EA371A120D35769AC31D
Authority key identifier: BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/KR5inm8D6UO2YzIQL_iGxdyLqe4.roa
Signing time: Sun 01 Jan 2023 16:44:43 +0000
ROA not before: Sun 01 Jan 2023 16:44:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44377
IP address blocks: 45.143.216.0/22 maxlen: 24
45.137.248.0/22 maxlen: 24
92.242.224.0/19 maxlen: 24
193.19.220.0/22 maxlen: 24
185.121.200.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 May 2023 08:36:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:a2:52:9f:f8:ea:37:1a:12:0d:35:76:9a:c3:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4
Validity
Not Before: Jan 1 16:44:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=291e629e6f03e943b66332102ff886c5dc8ba9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a0:86:d0:9f:11:94:41:24:b0:7e:10:1b:53:
42:4c:cc:a8:f7:a4:32:bd:2d:2d:4c:fb:48:99:19:
80:a9:98:01:1f:48:85:52:14:d1:be:b8:6e:64:fa:
a2:a6:ec:19:90:2d:4c:34:ee:2c:04:64:4f:cd:68:
88:a7:cb:cb:67:50:76:53:93:27:36:ec:31:53:f8:
c9:9e:d5:b6:3f:66:0b:8d:1d:65:bb:2b:16:c1:91:
f3:b9:bf:5b:65:f7:83:a9:00:2d:e5:de:29:44:54:
3c:15:33:a7:3b:9e:e7:5b:ee:2a:fe:e9:e3:de:5f:
b7:61:6f:43:10:ed:32:20:a0:21:63:43:9d:03:e8:
c4:c1:74:0a:5d:c1:20:7e:59:c0:61:ef:08:9f:e5:
80:de:c2:06:46:61:ed:84:6d:87:ae:66:39:d3:8a:
e4:19:c1:38:cc:a0:14:19:a3:a4:9d:bd:75:3b:af:
f4:a5:4c:64:00:f9:b0:d4:70:09:fc:a1:12:62:24:
0f:c3:c4:6d:12:36:ed:1d:07:03:72:90:d1:a5:b6:
eb:f7:34:40:3a:b2:a0:db:a3:e9:75:1e:44:71:32:
96:83:d8:2a:a7:51:fb:2b:5b:52:6f:5a:df:71:22:
ef:05:10:bb:8d:2f:69:00:92:46:d1:0a:b7:32:fb:
37:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1E:62:9E:6F:03:E9:43:B6:63:32:10:2F:F8:86:C5:DC:8B:A9:EE
X509v3 Authority Key Identifier:
keyid:BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/KR5inm8D6UO2YzIQL_iGxdyLqe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.248.0/22
45.143.216.0/22
92.242.224.0/19
185.121.200.0/22
193.19.220.0/22
Signature Algorithm: sha256WithRSAEncryption
56:5b:07:b2:ad:49:d7:8c:89:2c:43:96:57:7f:60:7c:c3:84:
c1:9e:fe:10:3d:5c:c1:e1:60:61:22:b6:4a:98:95:46:cd:73:
94:57:a8:5f:18:d5:dc:51:c6:6c:d8:37:e5:ec:cc:3c:58:71:
fe:9b:4f:36:c1:8f:6d:a6:d3:18:3a:1e:0e:49:31:8f:df:cb:
19:2e:76:46:05:46:dd:dd:96:52:4a:dc:13:85:43:11:55:6d:
7d:7d:27:ac:da:3f:74:ad:bb:db:a0:0e:6f:1e:a0:dd:93:73:
92:6e:2a:83:b9:2b:0d:2c:8a:68:84:8a:5b:ea:8f:2a:39:92:
9d:84:25:a9:99:96:6b:3d:9b:b0:92:f7:4b:5f:45:af:30:3c:
0b:2d:80:00:69:19:be:41:b2:16:cd:e1:0f:79:fb:94:c9:e3:
f7:61:56:f8:73:e9:1d:cb:1c:c9:2c:af:31:79:cb:95:3d:77:
be:f0:41:96:b0:dd:1e:9a:6a:18:96:3d:9e:39:5d:a1:b4:99:
85:08:98:57:7f:52:dd:37:38:c0:95:ff:11:7e:59:b8:5c:01:
3f:92:df:9f:d7:5c:ea:03:58:47:36:61:4b:12:59:f4:17:10:
4d:e6:06:6d:15:6e:4f:e8:2e:6d:92:0e:a8:24:69:55:71:df:
c4:8d:d4:5c
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYVuOKJSn/jqNxoSDTV2msMdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYTFlNTVmNzQ0ZTE0MTJiZDc1M2ZkMjc3Yjc3NDA4ZGNk
ZjhjYjQwHhcNMjMwMTAxMTY0NDQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTFlNjI5ZTZmMDNlOTQzYjY2MzMyMTAyZmY4ODZjNWRjOGJhOWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KCG0J8RlEEksH4QG1NCTMyo96Qy
vS0tTPtImRmAqZgBH0iFUhTRvrhuZPqipuwZkC1MNO4sBGRPzWiIp8vLZ1B2U5Mn
NuwxU/jJntW2P2YLjR1luysWwZHzub9bZfeDqQAt5d4pRFQ8FTOnO57nW+4q/unj
3l+3YW9DEO0yIKAhY0OdA+jEwXQKXcEgflnAYe8In+WA3sIGRmHthG2HrmY504rk
GcE4zKAUGaOknb11O6/0pUxkAPmw1HAJ/KESYiQPw8RtEjbtHQcDcpDRpbbr9zRA
OrKg26PpdR5EcTKWg9gqp1H7K1tSb1rfcSLvBRC7jS9pAJJG0Qq3Mvs3PwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFCkeYp5vA+lDtmMyEC/4hsXci6nuMB8GA1UdIwQY
MBaAFL2h5V90ThQSvXU/0ne3dAjc34y0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmFIbFgzUk9GQks5ZFRfU2Q3ZDBDTnpmakxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zY2Q0NWYtMGI3OS00M2I3LWE5ZTYt
YzBiY2VkYjM0Mjc0LzEvS1I1aW5tOEQ2VU8yWXpJUUxfaUd4ZHlMcWU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zY2Q0NWYtMGI3OS00M2I3LWE5ZTYtYzBiY2VkYjM0Mjc0
LzEvdmFIbFgzUk9GQks5ZFRfU2Q3ZDBDTnpmakxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCLYn4AwQC
LY/YAwQFXPLgAwQCuXnIAwQCwRPcMA0GCSqGSIb3DQEBCwUAA4IBAQBWWweyrUnX
jIksQ5ZXf2B8w4TBnv4QPVzB4WBhIrZKmJVGzXOUV6hfGNXcUcZs2Dfl7Mw8WHH+
m082wY9tptMYOh4OSTGP38sZLnZGBUbd3ZZSStwThUMRVW19fSes2j90rbvboA5v
HqDdk3OSbiqDuSsNLIpohIpb6o8qOZKdhCWpmZZrPZuwkvdLX0WvMDwLLYAAaRm+
QbIWzeEPefuUyeP3YVb4c+kdyxzJLK8xecuVPXe+8EGWsN0emmoYlj2eOV2htJmF
CJhXf1LdNzjAlf8Rflm4XAE/kt+f11zqA1hHNmFLEln0FxBN5gZtFW5P6C5tkg6o
JGlVcd/EjdRc
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:58 2024 by rpki-client on console-ams.rpki-client.org