Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/9VH7PSy0RBeILU6ePIFuFy-YV84.roa
File: 9VH7PSy0RBeILU6ePIFuFy-YV84.roa (raw, json)
Hash identifier: 73iFDG7nUUAMEkJo2F/UQMRxCwUJoKgPJDHPQHhbsBs=
Subject key identifier: F5:51:FB:3D:2C:B4:44:17:88:2D:4E:9E:3C:81:6E:17:2F:98:57:CE
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0191760FA76F5F610CB11DA80185DF8D145B
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/9VH7PSy0RBeILU6ePIFuFy-YV84.roa
Signing time: Wed 21 Aug 2024 17:50:22 +0000
ROA not before: Wed 21 Aug 2024 17:50:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55286
IP address blocks: 45.91.23.0/24 maxlen: 24
45.157.99.0/24 maxlen: 24
45.159.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 04 Sep 2024 05:15:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:76:0f:a7:6f:5f:61:0c:b1:1d:a8:01:85:df:8d:14:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Aug 21 17:50:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f551fb3d2cb44417882d4e9e3c816e172f9857ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cc:d3:c9:65:09:88:86:2b:a3:fa:35:11:33:
78:5d:71:e9:48:5b:e9:8d:ed:3b:d6:1e:15:8a:76:
36:f8:57:d9:8c:46:62:5f:89:53:cf:43:74:45:85:
5d:47:0a:01:12:f0:23:50:a0:a5:c4:24:49:55:6d:
c3:f5:c5:a8:39:4d:68:16:e6:04:80:d8:90:eb:2a:
ff:16:fe:65:d7:64:93:4c:53:de:f9:29:24:69:da:
e4:d8:8b:20:74:c9:5a:f2:27:aa:ec:d2:42:b0:dc:
fb:e0:47:ef:c4:33:e9:24:4c:d5:5a:40:97:02:72:
af:fe:36:54:e4:c2:46:28:b2:7c:da:6e:c5:74:ca:
09:ad:e0:a5:41:31:be:28:63:c5:47:9c:29:59:b9:
1a:4b:71:d5:68:ce:10:43:93:c4:98:95:3b:15:6c:
db:53:17:94:e3:fe:7b:4a:39:b8:ec:12:f6:bb:72:
28:64:2b:20:94:34:49:13:61:0b:26:d7:16:15:3c:
fe:e2:09:02:2e:8c:9a:85:5c:15:c6:ca:01:67:cd:
e2:d6:01:f7:39:9a:8d:bb:96:4d:25:c5:e2:b5:5b:
31:9a:a9:47:fe:35:90:07:56:e6:ef:a1:5a:b7:e2:
ba:e7:16:89:47:07:94:0f:b5:b7:48:8a:19:de:ea:
1a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:51:FB:3D:2C:B4:44:17:88:2D:4E:9E:3C:81:6E:17:2F:98:57:CE
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/9VH7PSy0RBeILU6ePIFuFy-YV84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.23.0/24
45.157.99.0/24
45.159.246.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:34:68:fc:d4:81:a7:f4:65:e1:6e:e6:67:ed:e2:34:34:17:
56:b6:45:4f:66:ae:06:b4:03:39:c0:8f:86:a4:86:a8:bb:ba:
c7:83:ce:8a:06:6b:93:ec:c0:3e:e9:c9:d6:67:a4:a1:64:be:
3d:e0:af:cd:e7:22:fc:46:98:24:68:30:a8:0f:ae:82:97:f5:
da:27:a4:37:3d:40:c8:91:27:92:7b:19:e3:cc:14:6f:94:46:
c9:09:2b:49:2e:55:9e:1e:f9:ae:ef:2a:ea:c1:5c:70:6b:67:
1f:94:61:99:e8:ca:3e:93:8f:1c:2f:66:29:d3:c7:24:87:40:
62:32:4d:b9:60:c7:42:01:26:d3:8f:99:e6:34:e6:e7:ab:35:
6e:2a:98:b0:d4:08:19:36:4c:07:06:31:93:2f:93:83:bb:20:
08:7d:04:1b:a9:3c:d3:1a:7a:f7:f7:1f:0b:c8:48:29:57:0e:
5e:4a:3b:1f:d6:d5:e6:cf:00:08:2e:7c:74:da:a8:22:5f:d4:
c7:54:89:aa:26:43:14:57:89:e9:a0:59:3a:bc:d0:79:03:41:
36:48:31:e3:2b:93:41:bc:2a:15:95:4a:e2:b8:b2:19:3a:92:
2d:c0:2d:be:37:1b:40:ed:18:9f:65:7b:83:2a:40:53:3c:71:
0e:57:7f:30
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZF2D6dvX2EMsR2oAYXfjRRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjQwODIxMTc1MDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTUxZmIzZDJjYjQ0NDE3ODgyZDRlOWUzYzgxNmUxNzJmOTg1N2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkszTyWUJiIYro/o1ETN4XXHpSFvp
je071h4VinY2+FfZjEZiX4lTz0N0RYVdRwoBEvAjUKClxCRJVW3D9cWoOU1oFuYE
gNiQ6yr/Fv5l12STTFPe+Skkadrk2IsgdMla8ieq7NJCsNz74EfvxDPpJEzVWkCX
AnKv/jZU5MJGKLJ82m7FdMoJreClQTG+KGPFR5wpWbkaS3HVaM4QQ5PEmJU7FWzb
UxeU4/57Sjm47BL2u3IoZCsglDRJE2ELJtcWFTz+4gkCLoyahVwVxsoBZ83i1gH3
OZqNu5ZNJcXitVsxmqlH/jWQB1bm76Fat+K65xaJRweUD7W3SIoZ3uoaYwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFPVR+z0stEQXiC1OnjyBbhcvmFfOMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvOVZIN1BTeTBSQmVJTFU2ZVBJRnVGeS1ZVjg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVsXAwQA
LZ1jAwQALZ/2MA0GCSqGSIb3DQEBCwUAA4IBAQCoNGj81IGn9GXhbuZn7eI0NBdW
tkVPZq4GtAM5wI+GpIaou7rHg86KBmuT7MA+6cnWZ6ShZL494K/N5yL8RpgkaDCo
D66Cl/XaJ6Q3PUDIkSeSexnjzBRvlEbJCStJLlWeHvmu7yrqwVxwa2cflGGZ6Mo+
k48cL2Yp08ckh0BiMk25YMdCASbTj5nmNObnqzVuKpiw1AgZNkwHBjGTL5ODuyAI
fQQbqTzTGnr39x8LyEgpVw5eSjsf1tXmzwAILnx02qgiX9THVImqJkMUV4npoFk6
vNB5A0E2SDHjK5NBvCoVlUriuLIZOpItwC2+NxtA7RifZXuDKkBTPHEOV38w
-----END CERTIFICATE-----
Generated at Wed Sep 4 07:23:12 2024 by rpki-client on console-ams.rpki-client.org