Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/Soi3Oi-A6rjb0DonYaf82tunA10.roa
File: Soi3Oi-A6rjb0DonYaf82tunA10.roa (raw, json)
Hash identifier: 3CqdW8vk5SiJDkCQL6alMjAkWWvVYlqTP5dGpK1dyho=
Subject key identifier: 4A:88:B7:3A:2F:80:EA:B8:DB:D0:3A:27:61:A7:FC:DA:DB:A7:03:5D
Certificate issuer: /CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Certificate serial: 019270CB1B8481494C61E0C5AE347080B05E
Authority key identifier: 74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/Soi3Oi-A6rjb0DonYaf82tunA10.roa
Signing time: Wed 09 Oct 2024 10:20:11 +0000
ROA not before: Wed 09 Oct 2024 10:20:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58224
IP address blocks: 45.144.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 23 Oct 2024 06:51:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:cb:1b:84:81:49:4c:61:e0:c5:ae:34:70:80:b0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b4cd3edf521df8ec0a151111272d3fb91b99c3
Validity
Not Before: Oct 9 10:20:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a88b73a2f80eab8dbd03a2761a7fcdadba7035d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8f:3a:7a:aa:c3:2b:04:84:8a:b3:a6:74:92:
77:94:8f:57:cd:e1:9f:d4:db:df:ed:00:10:29:20:
79:6f:53:b1:8b:3b:31:0e:aa:8e:62:49:87:d0:b4:
b4:a0:9e:02:11:ed:9f:3d:8d:96:0e:7c:43:92:9a:
68:cf:b8:a7:d4:14:f6:0c:eb:be:2f:71:46:63:79:
05:dd:97:92:94:5a:85:85:a0:dd:67:7c:7d:a4:76:
7b:0c:c6:4a:8f:9e:ff:98:79:b8:d8:5e:68:64:b6:
8a:8b:4c:3e:d5:80:9d:d9:b5:27:1e:7e:5d:28:db:
5d:ff:70:4b:ef:1a:cf:21:3c:3d:7d:db:98:17:8c:
26:15:f1:74:ed:d2:78:b8:34:53:6c:e8:52:29:72:
08:7e:f9:0c:cf:92:3a:80:a9:ee:b8:c4:19:07:bb:
05:0f:11:4f:80:ec:9a:05:69:53:4e:88:7d:35:c6:
23:c6:41:29:c6:cd:13:47:24:0e:e5:02:b8:5d:79:
54:79:5d:6c:5f:7c:35:55:f1:15:f8:5d:43:26:69:
ff:77:9a:8f:6a:5a:59:1e:7b:a9:fc:a8:0c:ea:75:
9f:6b:fa:97:11:22:68:8d:b4:a0:e4:e4:b0:09:7b:
de:1f:39:81:54:61:60:9d:16:45:35:24:b8:04:87:
e2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:88:B7:3A:2F:80:EA:B8:DB:D0:3A:27:61:A7:FC:DA:DB:A7:03:5D
X509v3 Authority Key Identifier:
keyid:74:B4:CD:3E:DF:52:1D:F8:EC:0A:15:11:11:27:2D:3F:B9:1B:99:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLTNPt9SHfjsChURESctP7kbmcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/Soi3Oi-A6rjb0DonYaf82tunA10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9e47e9-3281-4d17-a6bc-e2a7fb848318/1/dLTNPt9SHfjsChURESctP7kbmcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.18.0/24
Signature Algorithm: sha256WithRSAEncryption
15:5d:58:96:2b:ec:2d:1a:a7:e8:2c:f6:3f:73:99:30:0a:c5:
7a:b9:37:ed:19:7f:5f:f6:32:06:12:33:9f:6a:ac:b8:fc:43:
cd:10:28:53:ca:52:6a:70:3a:9d:cf:e0:da:d5:78:b3:5a:b5:
a0:9f:ad:27:7a:f4:8b:3b:08:c4:2b:24:f1:d4:1b:78:aa:49:
71:39:36:c5:a7:c3:26:c1:42:61:dd:97:42:92:c0:19:fc:08:
d4:a7:81:18:8d:2f:00:e7:83:64:b6:fc:ca:0c:dd:4e:11:18:
c2:53:f2:df:61:d1:f8:9a:78:d6:9d:06:2a:a4:78:c1:e8:8e:
d0:09:5c:65:4f:26:b1:a8:42:98:bb:a8:a3:22:7f:35:1b:9b:
91:a2:48:62:57:2a:09:0f:e7:7d:a3:7d:31:93:9c:7f:ec:f5:
8c:4e:7b:da:fd:d0:51:77:e8:2f:cc:2c:2e:37:c3:97:d0:47:
79:df:a5:74:8f:87:80:f7:0c:20:3a:61:2a:ca:0d:0e:d4:b2:
d2:73:08:02:cb:ed:cc:9b:4f:3d:43:43:81:05:e2:17:a1:29:
93:f3:ee:51:cc:9e:9c:f6:7c:55:a7:fd:41:25:c8:54:2d:8a:
1d:d7:50:00:53:8a:5d:ff:50:b2:18:37:f3:42:5f:a8:fa:21:
f2:88:73:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJwyxuEgUlMYeDFrjRwgLBeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YjRjZDNlZGY1MjFkZjhlYzBhMTUxMTExMjcyZDNmYjkx
Yjk5YzMwHhcNMjQxMDA5MTAyMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTg4YjczYTJmODBlYWI4ZGJkMDNhMjc2MWE3ZmNkYWRiYTcwMzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI86eqrDKwSEirOmdJJ3lI9XzeGf
1Nvf7QAQKSB5b1OxizsxDqqOYkmH0LS0oJ4CEe2fPY2WDnxDkppoz7in1BT2DOu+
L3FGY3kF3ZeSlFqFhaDdZ3x9pHZ7DMZKj57/mHm42F5oZLaKi0w+1YCd2bUnHn5d
KNtd/3BL7xrPITw9fduYF4wmFfF07dJ4uDRTbOhSKXIIfvkMz5I6gKnuuMQZB7sF
DxFPgOyaBWlTToh9NcYjxkEpxs0TRyQO5QK4XXlUeV1sX3w1VfEV+F1DJmn/d5qP
alpZHnup/KgM6nWfa/qXESJojbSg5OSwCXveHzmBVGFgnRZFNSS4BIfiBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEqItzovgOq429A6J2Gn/NrbpwNdMB8GA1UdIwQY
MBaAFHS0zT7fUh347AoVEREnLT+5G5nDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMt
ZTJhN2ZiODQ4MzE4LzEvU29pM09pLUE2cmpiMERvbllhZjgydHVuQTEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS85ZTQ3ZTktMzI4MS00ZDE3LWE2YmMtZTJhN2ZiODQ4MzE4
LzEvZExUTlB0OVNIZmpzQ2hVUkVTY3RQN2tibWNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZASMA0G
CSqGSIb3DQEBCwUAA4IBAQAVXViWK+wtGqfoLPY/c5kwCsV6uTftGX9f9jIGEjOf
aqy4/EPNEChTylJqcDqdz+Da1XizWrWgn60nevSLOwjEKyTx1Bt4qklxOTbFp8Mm
wUJh3ZdCksAZ/AjUp4EYjS8A54NktvzKDN1OERjCU/LfYdH4mnjWnQYqpHjB6I7Q
CVxlTyaxqEKYu6ijIn81G5uRokhiVyoJD+d9o30xk5x/7PWMTnva/dBRd+gvzCwu
N8OX0Ed536V0j4eA9wwgOmEqyg0O1LLScwgCy+3Mm089Q0OBBeIXoSmT8+5RzJ6c
9nxVp/1BJchULYod11AAU4pd/1CyGDfzQl+o+iHyiHP8
-----END CERTIFICATE-----
Generated at Mon Apr 21 20:08:03 2025 by rpki-client