Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/uble8wVdQ_X5woUdwcmur-srKSs.roa
File: uble8wVdQ_X5woUdwcmur-srKSs.roa (raw, json)
Hash identifier: Ajxy0FoCjCIc/guzx12bGENKZ00hMz5Xyqcr4Ha8KRE=
Subject key identifier: B9:B9:5E:F3:05:5D:43:F5:F9:C2:85:1D:C1:C9:AE:AF:EB:2B:29:2B
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018C2564F283962C45D0A404A5CEAEF07BD3
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/uble8wVdQ_X5woUdwcmur-srKSs.roa
Signing time: Fri 01 Dec 2023 12:40:21 +0000
ROA not before: Fri 01 Dec 2023 12:40:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39351
IP address blocks: 45.92.231.0/24 maxlen: 24
45.149.104.0/24 maxlen: 24
45.130.118.0/24 maxlen: 24
194.34.172.0/24 maxlen: 24
45.132.193.0/24 maxlen: 24
2a07:e341::/32 maxlen: 32
2a07:e344::/32 maxlen: 48
2a07:e340::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:25:64:f2:83:96:2c:45:d0:a4:04:a5:ce:ae:f0:7b:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Dec 1 12:40:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b9b95ef3055d43f5f9c2851dc1c9aeafeb2b292b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a2:39:f9:44:fe:43:bd:ba:11:2c:e3:e8:02:
a0:26:3d:2f:d8:79:c1:83:f4:15:16:5f:47:14:44:
26:93:e0:40:53:e9:7f:ff:e0:41:e3:c3:c1:ae:8d:
23:bd:0b:05:96:44:40:bb:81:f0:07:77:e1:4e:7e:
9e:4f:5a:ee:c8:94:ae:87:b2:c1:23:e1:91:f5:b1:
1c:e1:59:43:d8:22:94:c1:79:9e:34:57:11:56:65:
71:ee:40:88:f8:21:b9:cf:e8:c3:12:ee:a9:f8:5a:
b8:3e:d3:24:70:0f:22:aa:80:d7:04:70:25:34:d3:
53:4a:d2:d8:19:7a:cf:54:3e:db:24:f6:6b:3e:be:
f2:c7:2b:b4:ec:4c:02:99:4c:3d:6d:de:37:2e:8a:
8e:1e:f6:0b:e2:61:08:d3:f6:14:86:91:cb:14:13:
0c:b4:98:f0:a5:65:4c:70:06:8f:2f:aa:b2:82:a0:
2a:95:d5:92:f2:e7:73:48:19:68:6c:75:5a:81:0b:
6e:49:1b:44:ae:91:5c:d0:4a:45:89:51:42:cf:af:
0b:43:06:77:e6:61:02:20:2e:db:a8:5c:f5:3f:c2:
67:7c:56:ef:b4:17:94:67:29:05:d8:5d:b8:12:00:
34:eb:b1:14:1d:88:08:42:80:10:12:d7:ef:14:fe:
62:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B9:5E:F3:05:5D:43:F5:F9:C2:85:1D:C1:C9:AE:AF:EB:2B:29:2B
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/uble8wVdQ_X5woUdwcmur-srKSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.231.0/24
45.130.118.0/24
45.132.193.0/24
45.149.104.0/24
194.34.172.0/24
IPv6:
2a07:e340::/31
2a07:e344::/32
Signature Algorithm: sha256WithRSAEncryption
54:24:83:27:00:45:f8:6c:bf:04:f2:07:01:4a:d4:4e:e1:ba:
ae:2b:bd:6c:0a:cb:25:5f:43:4d:ce:03:84:41:91:e0:98:e2:
43:bf:dc:1e:43:f7:96:5e:46:63:03:b7:ec:c2:6b:31:68:f7:
0b:2f:70:e4:0d:f1:32:8e:6e:86:ff:79:63:42:ca:47:36:19:
3e:54:14:5c:0c:47:7e:56:6b:6a:8d:b9:06:67:06:28:d6:4f:
3e:2e:c5:28:a0:b9:10:3d:41:c7:b5:12:c0:d3:b7:f1:0e:f9:
6a:8b:3b:1d:76:fc:b8:8a:8c:e4:52:5f:25:bf:77:b1:55:15:
cb:b4:bb:c0:15:fc:5b:ca:03:c5:4c:95:c8:a2:a5:05:5a:07:
16:59:b9:96:04:af:f5:a5:5e:ab:21:87:2e:c5:8f:5a:35:b1:
b4:2f:05:19:7b:9e:4e:9c:94:f6:b4:8c:fb:ce:eb:b4:8c:28:
57:38:32:ab:d8:19:94:10:e3:9c:a2:66:8c:32:72:8e:bd:5b:
bf:45:44:6d:03:0f:ff:fe:fc:22:d0:18:00:5b:36:ce:e1:11:
64:97:70:4c:26:dd:a8:54:3a:32:35:50:88:a3:0d:65:26:3f:
07:ee:62:5f:96:02:9f:ff:20:8f:12:37:3e:ab:72:30:5d:a9:
88:29:6b:be
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAYwlZPKDlixF0KQEpc6u8HvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMxMjAxMTI0MDIxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWI5NWVmMzA1NWQ0M2Y1ZjljMjg1MWRjMWM5YWVhZmViMmIyOTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqI5+UT+Q726ESzj6AKgJj0v2HnB
g/QVFl9HFEQmk+BAU+l//+BB48PBro0jvQsFlkRAu4HwB3fhTn6eT1ruyJSuh7LB
I+GR9bEc4VlD2CKUwXmeNFcRVmVx7kCI+CG5z+jDEu6p+Fq4PtMkcA8iqoDXBHAl
NNNTStLYGXrPVD7bJPZrPr7yxyu07EwCmUw9bd43LoqOHvYL4mEI0/YUhpHLFBMM
tJjwpWVMcAaPL6qygqAqldWS8udzSBlobHVagQtuSRtErpFc0EpFiVFCz68LQwZ3
5mECIC7bqFz1P8JnfFbvtBeUZykF2F24EgA067EUHYgIQoAQEtfvFP5i8QIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFLm5XvMFXUP1+cKFHcHJrq/rKykrMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvdWJsZTh3VmRRX1g1d29VZHdjbXVyLXNyS1NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQALVznAwQA
LYJ2AwQALYTBAwQALZVoAwQAwiKsMBQEAgACMA4DBQEqB+NAAwUAKgfjRDANBgkq
hkiG9w0BAQsFAAOCAQEAVCSDJwBF+Gy/BPIHAUrUTuG6riu9bArLJV9DTc4DhEGR
4JjiQ7/cHkP3ll5GYwO37MJrMWj3Cy9w5A3xMo5uhv95Y0LKRzYZPlQUXAxHflZr
ao25BmcGKNZPPi7FKKC5ED1Bx7USwNO38Q75aos7HXb8uIqM5FJfJb93sVUVy7S7
wBX8W8oDxUyVyKKlBVoHFlm5lgSv9aVeqyGHLsWPWjWxtC8FGXueTpyU9rSM+87r
tIwoVzgyq9gZlBDjnKJmjDJyjr1bv0VEbQMP//78ItAYAFs2zuERZJdwTCbdqFQ6
MjVQiKMNZSY/B+5iX5YCn/8gjxI3PqtyMF2piClrvg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:52 2024 by rpki-client on console-fra.rpki-client.org