Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/aQqA2BbRz6eabrqsxyNNmXs4OjA.roa
File: aQqA2BbRz6eabrqsxyNNmXs4OjA.roa (raw, json)
Hash identifier: tei3wHy8pvBy/IAdz+LPSLq46HbSxa4wuEVoa8XWaJE=
Subject key identifier: 69:0A:80:D8:16:D1:CF:A7:9A:6E:BA:AC:C7:23:4D:99:7B:38:3A:30
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0191BB90EC4B2F2981B936A99322C9E3FD64
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/aQqA2BbRz6eabrqsxyNNmXs4OjA.roa
Signing time: Wed 04 Sep 2024 05:45:22 +0000
ROA not before: Wed 04 Sep 2024 05:45:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 5.181.200.0/24 maxlen: 24
45.158.83.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 06 Sep 2024 07:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:bb:90:ec:4b:2f:29:81:b9:36:a9:93:22:c9:e3:fd:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Sep 4 05:45:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=690a80d816d1cfa79a6ebaacc7234d997b383a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3f:3a:9a:8e:6e:07:e3:d9:29:7e:e7:01:91:
b5:dd:2b:30:49:88:f6:b9:ee:17:94:da:32:3f:73:
82:02:a1:c2:82:fc:52:d3:b2:53:ae:8b:3a:bf:c8:
62:dc:29:f1:06:07:eb:ff:6d:5c:54:6f:26:12:13:
e0:e1:48:6c:83:0f:4a:cb:f9:24:39:e6:c1:13:54:
4e:57:af:04:fd:b7:4b:70:3f:6d:8f:fb:4c:25:75:
05:72:ea:d2:3a:f1:86:e2:20:c1:96:3d:8a:de:71:
71:81:a2:81:a8:da:dd:a3:da:1c:b1:5d:f9:83:f0:
35:a0:f9:a1:9b:5f:40:3b:85:60:d0:a2:d5:56:8e:
e7:1a:52:4b:9d:cc:7d:90:0f:1f:44:20:51:0f:87:
c6:16:d0:b9:52:91:7c:df:cf:cb:87:3c:f0:3c:99:
f7:09:4e:28:69:ef:1c:26:b0:78:69:62:65:ba:ba:
74:a2:b4:6e:03:b3:de:f4:22:e3:3c:aa:9c:db:7c:
04:4f:32:55:79:62:47:59:fd:a8:05:6c:0e:8e:d1:
10:5e:68:40:56:d8:8a:cd:f0:0b:38:4b:95:84:bf:
10:d4:db:f1:bc:54:03:12:2f:49:9f:2f:ee:a5:4c:
99:c4:69:32:71:1e:10:1e:02:c8:d4:e2:33:13:b4:
22:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0A:80:D8:16:D1:CF:A7:9A:6E:BA:AC:C7:23:4D:99:7B:38:3A:30
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/aQqA2BbRz6eabrqsxyNNmXs4OjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.200.0/24
45.158.83.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:13:8a:cb:f8:e2:9f:bb:d2:ef:f2:2f:61:3b:26:6b:a5:48:
ce:df:44:da:60:e6:5c:fd:39:02:8e:96:58:9c:37:99:7d:33:
ed:db:34:6c:11:41:1f:4b:b9:9f:05:18:9c:23:19:05:dc:a3:
06:55:e1:32:61:bf:aa:dd:bc:4b:9b:69:d4:8b:41:79:eb:9a:
ef:df:fd:82:08:0f:ee:fc:f6:7b:9b:36:94:d1:e5:77:61:31:
62:59:8a:96:7e:90:e0:7b:63:fb:f2:6b:d3:31:b5:44:1a:44:
62:3a:01:62:b8:12:4a:93:b1:a9:0e:d3:06:18:e4:89:f5:36:
e6:39:4f:15:15:6e:01:d0:c4:a7:d9:4a:df:1e:4b:14:e0:2c:
3f:af:e8:d1:b6:51:2e:fe:46:f9:10:3c:df:c0:d0:4b:28:92:
b2:e8:5e:00:f2:55:bb:bb:81:f2:a9:88:7c:26:78:0f:d5:1d:
ce:2b:a0:57:a5:fa:94:00:22:13:90:48:a8:42:c4:88:86:5a:
fb:62:07:e9:69:14:bb:a5:48:b8:82:f2:f7:75:d3:ad:20:44:
be:2b:03:64:bf:57:c1:80:d3:01:82:4b:67:47:88:78:34:47:
2a:e8:bd:78:3a:12:99:de:1d:6f:0d:67:4e:21:21:5f:93:ea:
9c:01:29:ce
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZG7kOxLLymBuTapkyLJ4/1kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy
NTFkYWQwHhcNMjQwOTA0MDU0NTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OTBhODBkODE2ZDFjZmE3OWE2ZWJhYWNjNzIzNGQ5OTdiMzgzYTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD86mo5uB+PZKX7nAZG13SswSYj2
ue4XlNoyP3OCAqHCgvxS07JTros6v8hi3CnxBgfr/21cVG8mEhPg4Uhsgw9Ky/kk
OebBE1ROV68E/bdLcD9tj/tMJXUFcurSOvGG4iDBlj2K3nFxgaKBqNrdo9ocsV35
g/A1oPmhm19AO4Vg0KLVVo7nGlJLncx9kA8fRCBRD4fGFtC5UpF838/LhzzwPJn3
CU4oae8cJrB4aWJlurp0orRuA7Pe9CLjPKqc23wETzJVeWJHWf2oBWwOjtEQXmhA
VtiKzfALOEuVhL8Q1NvxvFQDEi9Jny/upUyZxGkycR4QHgLI1OIzE7QiHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGkKgNgW0c+nmm66rMcjTZl7ODowMB8GA1UdIwQY
MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt
YjdjNTc4Yjc0ZTM1LzEvYVFxQTJCYlJ6NmVhYnJxc3h5Tk5tWHM0T2pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1
LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbXIAwQA
LZ5TMA0GCSqGSIb3DQEBCwUAA4IBAQAtE4rL+OKfu9Lv8i9hOyZrpUjO30TaYOZc
/TkCjpZYnDeZfTPt2zRsEUEfS7mfBRicIxkF3KMGVeEyYb+q3bxLm2nUi0F565rv
3/2CCA/u/PZ7mzaU0eV3YTFiWYqWfpDge2P78mvTMbVEGkRiOgFiuBJKk7GpDtMG
GOSJ9TbmOU8VFW4B0MSn2UrfHksU4Cw/r+jRtlEu/kb5EDzfwNBLKJKy6F4A8lW7
u4HyqYh8JngP1R3OK6BXpfqUACITkEioQsSIhlr7YgfpaRS7pUi4gvL3ddOtIES+
KwNkv1fBgNMBgktnR4h4NEcq6L14OhKZ3h1vDWdOISFfk+qcASnO
-----END CERTIFICATE-----
Generated at Fri Sep 6 10:24:33 2024 by rpki-client on console-ams.rpki-client.org