Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/KIuvb4COChiPZaFDbjjhjGtH6CU.roa
File: KIuvb4COChiPZaFDbjjhjGtH6CU.roa (raw, json)
Hash identifier: /55lQQeDVT5DLKk124HvXZvOx7HXl4uDI+v3jf9A0Dw=
Subject key identifier: 28:8B:AF:6F:80:8E:0A:18:8F:65:A1:43:6E:38:E1:8C:6B:47:E8:25
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 019121BD144F8587694840111D9C4A877FFF
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/KIuvb4COChiPZaFDbjjhjGtH6CU.roa
Signing time: Mon 05 Aug 2024 08:52:05 +0000
ROA not before: Mon 05 Aug 2024 08:52:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 45.132.27.0/24 maxlen: 24
185.155.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 20:39:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:21:bd:14:4f:85:87:69:48:40:11:1d:9c:4a:87:7f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Aug 5 08:52:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=288baf6f808e0a188f65a1436e38e18c6b47e825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c2:ab:0a:8f:e1:8a:bb:9f:9e:f0:f2:ce:9a:
a7:47:39:19:e8:b8:cf:46:cf:d8:4b:5e:b1:26:d7:
e0:b1:7c:5f:b1:09:0b:01:66:dc:78:a3:6b:e4:eb:
c1:2e:4f:6a:ad:df:6e:96:49:2d:c9:75:fb:58:65:
40:fa:60:d5:5b:ff:eb:a9:30:dd:72:66:fa:91:38:
6d:0b:95:07:7d:a3:2b:b8:59:4b:bb:38:b8:78:d7:
61:05:8f:9a:1b:19:b2:b9:6f:0d:04:87:a1:c5:4a:
c2:8b:18:84:7c:9f:0d:11:7e:17:5a:c9:ee:3c:ed:
16:d6:aa:e0:bc:e1:cc:b4:9b:6e:cb:7b:2b:14:ec:
56:f9:3a:29:07:cc:07:b5:89:be:f9:de:e2:d1:c6:
15:3d:9f:e6:5a:00:a2:47:a9:fd:0c:33:11:2d:76:
0c:50:d5:e7:11:16:cb:60:d9:ef:6b:83:ca:8f:ae:
25:99:8e:48:28:04:84:37:d8:b7:5b:8e:7f:e3:87:
83:60:98:ce:10:93:50:67:0f:57:1d:06:ba:22:c5:
5f:19:1e:3a:1e:8e:45:3e:a9:9a:01:c7:7d:a7:04:
30:21:d8:67:d8:a5:3d:08:9f:00:5c:6f:e6:a5:2f:
51:cc:d0:a2:0d:ab:f2:ee:b0:d7:02:d6:dd:c7:a6:
b3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:8B:AF:6F:80:8E:0A:18:8F:65:A1:43:6E:38:E1:8C:6B:47:E8:25
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/KIuvb4COChiPZaFDbjjhjGtH6CU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.27.0/24
185.155.54.0/24
Signature Algorithm: sha256WithRSAEncryption
07:bc:1f:8a:51:a6:3c:3d:bc:36:e7:27:e2:9c:29:dd:f0:9f:
bd:5f:3a:bf:ce:61:87:a4:8e:c9:13:ce:24:1c:b1:22:3c:e5:
b2:29:a2:44:53:f9:a7:9a:d7:c4:ac:b8:eb:73:1d:2f:65:b9:
0c:9f:1c:7e:c7:cd:d3:2f:11:62:0d:59:8e:c6:9f:89:80:d2:
15:cd:db:9f:c6:0a:c6:aa:06:42:59:79:6d:49:d9:18:85:c3:
8f:ae:e9:a0:aa:a5:fb:eb:a4:49:48:9a:76:d1:b5:21:b5:1f:
c0:8e:c0:e2:06:ad:cf:03:22:a8:7e:fc:2f:d5:15:86:71:1b:
ed:c0:ea:23:06:20:60:91:17:aa:20:7b:c2:f2:b1:fd:f5:8a:
25:df:3f:92:b5:71:9e:0d:50:4c:e3:d1:b6:83:25:36:fc:be:
07:c6:0d:70:03:2e:3c:fe:9d:1d:ab:40:09:d0:a8:a8:fb:b4:
b5:d5:3b:72:b8:b5:04:e9:9d:0d:d4:d9:4c:d4:b5:13:01:ac:
7e:e1:ed:67:4f:07:44:bd:0f:62:9b:10:24:2e:c7:59:14:0b:
9a:8d:6c:2a:29:a8:ad:49:70:ab:5b:b9:cb:46:36:c1:5a:80:
ce:14:d6:19:81:64:76:68:ac:27:8f:b1:40:3a:c3:c5:5a:a3:
9a:2d:f2:84
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZEhvRRPhYdpSEARHZxKh3//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl
NTUxNDIwHhcNMjQwODA1MDg1MjA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyODhiYWY2ZjgwOGUwYTE4OGY2NWExNDM2ZTM4ZTE4YzZiNDdlODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcKrCo/hirufnvDyzpqnRzkZ6LjP
Rs/YS16xJtfgsXxfsQkLAWbceKNr5OvBLk9qrd9ulkktyXX7WGVA+mDVW//rqTDd
cmb6kThtC5UHfaMruFlLuzi4eNdhBY+aGxmyuW8NBIehxUrCixiEfJ8NEX4XWsnu
PO0W1qrgvOHMtJtuy3srFOxW+TopB8wHtYm++d7i0cYVPZ/mWgCiR6n9DDMRLXYM
UNXnERbLYNnva4PKj64lmY5IKASEN9i3W45/44eDYJjOEJNQZw9XHQa6IsVfGR46
Ho5FPqmaAcd9pwQwIdhn2KU9CJ8AXG/mpS9RzNCiDavy7rDXAtbdx6azmwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCiLr2+AjgoYj2WhQ2444YxrR+glMB8GA1UdIwQY
MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct
YzgyM2NjOGYzODM3LzEvS0l1dmI0Q09DaGlQWmFGRGJqamhqR3RINkNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3
LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYQbAwQA
uZs2MA0GCSqGSIb3DQEBCwUAA4IBAQAHvB+KUaY8Pbw25yfinCnd8J+9Xzq/zmGH
pI7JE84kHLEiPOWyKaJEU/mnmtfErLjrcx0vZbkMnxx+x83TLxFiDVmOxp+JgNIV
zdufxgrGqgZCWXltSdkYhcOPrumgqqX766RJSJp20bUhtR/AjsDiBq3PAyKofvwv
1RWGcRvtwOojBiBgkReqIHvC8rH99Yol3z+StXGeDVBM49G2gyU2/L4Hxg1wAy48
/p0dq0AJ0Kio+7S11TtyuLUE6Z0N1NlM1LUTAax+4e1nTwdEvQ9imxAkLsdZFAua
jWwqKaitSXCrW7nLRjbBWoDOFNYZgWR2aKwnj7FAOsPFWqOaLfKE
-----END CERTIFICATE-----
Generated at Tue Sep 3 23:40:54 2024 by rpki-client on console-ams.rpki-client.org