Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/0MI0crg9MakrrE7IJ3o6M6mujy4.roa
File: 0MI0crg9MakrrE7IJ3o6M6mujy4.roa (raw, json)
Hash identifier: 51PVN2DTLZ0UW4srf8jnvV1HSOqkbv0MHP5mAzP1x7A=
Subject key identifier: D0:C2:34:72:B8:3D:31:A9:2B:AC:4E:C8:27:7A:3A:33:A9:AE:8F:2E
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 01911C8ACEF42FF620F6D5D0844684B9E552
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/0MI0crg9MakrrE7IJ3o6M6mujy4.roa
Signing time: Sun 04 Aug 2024 08:39:04 +0000
ROA not before: Sun 04 Aug 2024 08:39:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204650
IP address blocks: 45.144.18.0/24 maxlen: 24
91.228.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 22 Sep 2024 07:28:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:1c:8a:ce:f4:2f:f6:20:f6:d5:d0:84:46:84:b9:e5:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Aug 4 08:39:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0c23472b83d31a92bac4ec8277a3a33a9ae8f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:e3:37:d2:63:69:08:83:57:46:57:dd:c3:
7d:b8:c1:9e:4b:1a:92:f1:be:61:1f:33:3c:80:cb:
f5:48:ec:45:bb:41:3d:20:d9:53:e4:64:d3:29:b9:
b6:e5:48:1f:ff:88:0c:0b:36:2a:d1:f9:88:19:cf:
2d:b4:95:cc:42:9b:af:69:85:ff:eb:63:4f:e5:2f:
da:ff:cc:17:28:3f:22:72:ad:58:fc:3a:c0:b1:ca:
cc:3e:99:47:b6:55:66:1f:f0:8b:b8:84:b8:d2:82:
7c:94:22:de:d6:b2:5b:ed:23:e6:5a:cd:64:41:45:
b1:0f:56:83:41:03:31:0b:33:88:65:f6:f1:a9:15:
61:e6:8c:45:b2:21:41:73:b4:a3:26:6b:8c:e4:a7:
b0:9d:28:81:e2:bd:35:ca:bc:be:81:fd:99:ec:9f:
20:53:2c:25:e7:fe:63:22:d7:ce:1c:f4:ac:26:27:
d4:7f:eb:83:fc:3f:1b:04:b1:13:c6:44:7c:b3:26:
35:01:cf:15:81:df:82:99:f0:f9:1e:8d:f8:ac:f8:
6b:6b:9f:8c:7d:6f:2e:f1:24:94:5d:02:e3:1a:9a:
86:47:d3:6a:d6:d2:06:01:42:37:f0:0f:a1:4e:d1:
c7:de:fe:b3:e6:e3:b2:79:cf:a1:32:b1:2e:43:b1:
f3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C2:34:72:B8:3D:31:A9:2B:AC:4E:C8:27:7A:3A:33:A9:AE:8F:2E
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/0MI0crg9MakrrE7IJ3o6M6mujy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.18.0/24
91.228.22.0/24
Signature Algorithm: sha256WithRSAEncryption
29:86:f6:52:f7:7e:04:7e:84:81:1a:01:e4:45:9d:f3:bd:6c:
e5:cf:e1:67:49:5c:23:c1:3e:53:e0:0e:f7:4e:02:16:ff:f9:
a6:d6:25:ba:02:67:fc:3a:10:92:c7:33:1a:ab:86:d8:03:d5:
34:47:d7:b6:03:85:e0:88:70:07:91:ed:79:9c:4c:4b:7f:58:
94:c8:0c:b8:6c:b5:13:82:4e:bb:8f:41:19:56:74:f7:d5:11:
d6:10:55:3b:ab:54:2f:4b:6a:91:e6:25:0b:80:6f:6e:6b:88:
8f:ab:71:02:e8:55:83:99:61:51:fd:34:37:c3:4b:0b:79:41:
36:7b:cb:e5:40:44:85:21:33:bb:41:b4:0d:c6:3f:40:77:0f:
3f:f5:80:0b:95:24:0d:60:3b:b0:5d:49:d5:15:2c:a9:ff:ea:
1b:f8:2e:9b:9f:af:aa:05:8f:fd:ff:4d:68:9a:01:79:3e:54:
76:10:29:10:05:45:56:54:7a:7c:05:fe:09:93:73:c3:4f:34:
cc:7f:08:f5:ee:36:3c:a9:f9:6d:71:e5:23:27:9a:b6:1a:c0:
38:54:5e:15:14:e9:80:42:50:8f:ce:cb:7b:12:72:7e:9a:49:
2c:73:ba:eb:8d:f5:35:cf:c1:56:fc:62:8d:9d:cf:c3:8c:a0:
6b:9f:8f:35
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZEcis70L/Yg9tXQhEaEueVSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjRjZDNlZGY1MjFkZjhlYzBhMTUxMTExMjcyZDNmYjkx
Yjk5YzMwHhcNMjQwODA0MDgzOTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGMyMzQ3MmI4M2QzMWE5MmJhYzRlYzgyNzdhM2EzM2E5YWU4ZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokPjN9JjaQiDV0ZX3cN9uMGeSxqS
8b5hHzM8gMv1SOxFu0E9INlT5GTTKbm25Ugf/4gMCzYq0fmIGc8ttJXMQpuvaYX/
62NP5S/a/8wXKD8icq1Y/DrAscrMPplHtlVmH/CLuIS40oJ8lCLe1rJb7SPmWs1k
QUWxD1aDQQMxCzOIZfbxqRVh5oxFsiFBc7SjJmuM5KewnSiB4r01yry+gf2Z7J8g
Uywl5/5jItfOHPSsJifUf+uD/D8bBLETxkR8syY1Ac8Vgd+CmfD5Ho34rPhra5+M
fW8u8SSUXQLjGpqGR9Nq1tIGAUI38A+hTtHH3v6z5uOyec+hMrEuQ7HzRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNDCNHK4PTGpK6xOyCd6OjOpro8uMB8GA1UdIwQY
MBaAFHS0zT7fUh347AoVEREnLT+5G5nDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMt
ZTJhN2ZiODQ4MzE4LzEvME1JMGNyZzlNYWtyckU3SUozbzZNNm11ank0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMtZTJhN2ZiODQ4MzE4
LzEvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZASAwQA
W+QWMA0GCSqGSIb3DQEBCwUAA4IBAQAphvZS934EfoSBGgHkRZ3zvWzlz+FnSVwj
wT5T4A73TgIW//mm1iW6Amf8OhCSxzMaq4bYA9U0R9e2A4XgiHAHke15nExLf1iU
yAy4bLUTgk67j0EZVnT31RHWEFU7q1QvS2qR5iULgG9ua4iPq3EC6FWDmWFR/TQ3
w0sLeUE2e8vlQESFITO7QbQNxj9Adw8/9YALlSQNYDuwXUnVFSyp/+ob+C6bn6+q
BY/9/01omgF5PlR2ECkQBUVWVHp8Bf4Jk3PDTzTMfwj17jY8qfltceUjJ5q2GsA4
VF4VFOmAQlCPzst7EnJ+mkksc7rrjfU1z8FW/GKNnc/DjKBrn481
-----END CERTIFICATE-----
Generated at Sun Sep 22 08:27:36 2024 by rpki-client on console-fra.rpki-client.org