Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/3qYIR0ti4zOyq1wgbYCXQFfoACM.roa
File: 3qYIR0ti4zOyq1wgbYCXQFfoACM.roa (raw, json)
Hash identifier: 6VwWIebmt/6nOyq6mWhTWVFFAxCDklcljpgavxThesM=
Subject key identifier: DE:A6:08:47:4B:62:E3:33:B2:AB:5C:20:6D:80:97:40:57:E8:00:23
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019087AD47D7BF79E68A0ED87BFB3D2F9BF7
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/3qYIR0ti4zOyq1wgbYCXQFfoACM.roa
Signing time: Sat 06 Jul 2024 10:53:18 +0000
ROA not before: Sat 06 Jul 2024 10:53:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.8.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 01 Sep 2024 21:22:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:87:ad:47:d7:bf:79:e6:8a:0e:d8:7b:fb:3d:2f:9b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 6 10:53:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dea608474b62e333b2ab5c206d80974057e80023
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:57:c8:03:6d:b9:89:e5:17:11:51:16:4f:cc:
0f:08:4d:2f:f4:c9:3b:72:a8:1e:bd:1a:5d:57:74:
5f:3c:22:04:7c:bb:b1:57:7a:b1:f4:3c:04:32:31:
ba:5f:ae:d3:4c:bc:4a:74:a0:b3:c5:e9:c6:4b:ba:
d2:95:2e:ba:54:d6:fa:2d:98:22:a7:62:d3:75:10:
e7:86:28:8d:42:d2:cc:44:a8:a2:2c:e1:ba:51:7d:
5f:c0:b1:98:53:15:3c:aa:3b:f7:e5:2b:74:06:9d:
15:4f:5e:6f:0e:11:c4:82:f9:0f:79:71:f7:21:7f:
eb:20:a6:0a:75:46:28:15:3a:ba:2e:9b:c8:85:b8:
de:6b:7d:e0:14:76:64:cf:5f:f5:8a:42:c3:e7:cc:
79:bd:44:ef:60:70:06:ed:2c:ca:ac:94:25:1c:4f:
96:c2:82:da:08:49:a3:4a:f2:93:c3:52:99:0e:f7:
0d:82:5d:c4:fe:a0:4c:ea:db:5d:a5:74:6b:2b:84:
b9:db:fe:d3:b1:06:2f:8c:5f:62:37:c9:36:d6:fc:
7a:e2:b5:18:ce:7b:55:08:7b:0a:00:ba:f6:ca:24:
31:0e:85:11:0b:dc:35:b1:d9:66:74:bb:ff:5f:7d:
ad:39:e5:3e:51:d2:9a:27:5d:3f:4b:b6:90:f6:fe:
3f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A6:08:47:4B:62:E3:33:B2:AB:5C:20:6D:80:97:40:57:E8:00:23
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/3qYIR0ti4zOyq1wgbYCXQFfoACM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.205.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ad:fc:9e:50:af:c1:9c:4d:7d:d5:a9:b7:d0:01:3d:c1:20:
c6:19:19:b1:0f:87:94:f5:71:28:55:22:3f:31:f4:3d:a3:ae:
da:f0:46:94:d8:1f:5a:6a:e8:4e:b2:4b:80:be:ba:f0:dd:a2:
94:24:bc:b9:38:bd:f4:7a:71:4a:b5:95:f1:c4:ee:64:d6:ca:
91:d8:0d:19:5a:cc:4f:c2:8c:d1:f9:47:a5:a8:32:83:6e:6c:
1a:fd:7a:1a:39:a6:51:82:ee:bd:dd:33:83:24:55:3d:19:e1:
7e:cc:9d:04:f4:4b:9f:05:c4:01:2f:76:10:b5:28:f0:11:22:
bb:b7:e7:ba:88:d0:2b:27:95:e3:e3:90:fb:58:20:b9:3d:91:
16:2e:21:5e:db:7d:b1:8a:7b:89:1b:dd:ca:71:0f:98:0d:20:
83:5e:71:69:4c:5e:94:f5:7d:37:eb:f5:f0:c8:b9:15:e8:28:
56:54:f1:f6:cc:3e:11:14:35:57:aa:be:27:2b:de:80:d0:19:
7c:bb:e8:6b:cd:40:7a:4a:f2:0a:d4:94:24:9b:9f:82:eb:1b:
85:d3:0a:41:24:b0:ff:6c:98:18:5b:0e:e2:9d:cc:f8:f0:cd:
e7:4a:ba:2a:7e:8a:70:a8:d0:b6:27:7b:f7:2a:76:cd:27:9d:
e3:18:e4:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZCHrUfXv3nmig7Ye/s9L5v3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjQwNzA2MTA1MzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWE2MDg0NzRiNjJlMzMzYjJhYjVjMjA2ZDgwOTc0MDU3ZTgwMDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51fIA225ieUXEVEWT8wPCE0v9Mk7
cqgevRpdV3RfPCIEfLuxV3qx9DwEMjG6X67TTLxKdKCzxenGS7rSlS66VNb6LZgi
p2LTdRDnhiiNQtLMRKiiLOG6UX1fwLGYUxU8qjv35St0Bp0VT15vDhHEgvkPeXH3
IX/rIKYKdUYoFTq6LpvIhbjea33gFHZkz1/1ikLD58x5vUTvYHAG7SzKrJQlHE+W
woLaCEmjSvKTw1KZDvcNgl3E/qBM6ttdpXRrK4S52/7TsQYvjF9iN8k21vx64rUY
zntVCHsKALr2yiQxDoURC9w1sdlmdLv/X32tOeU+UdKaJ10/S7aQ9v4/OwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN6mCEdLYuMzsqtcIG2Al0BX6AAjMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvM3FZSVIwdGk0ek95cTF3Z2JZQ1hRRmZvQUNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQjNMA0G
CSqGSIb3DQEBCwUAA4IBAQATrfyeUK/BnE191am30AE9wSDGGRmxD4eU9XEoVSI/
MfQ9o67a8EaU2B9aauhOskuAvrrw3aKUJLy5OL30enFKtZXxxO5k1sqR2A0ZWsxP
wozR+UelqDKDbmwa/XoaOaZRgu693TODJFU9GeF+zJ0E9EufBcQBL3YQtSjwESK7
t+e6iNArJ5Xj45D7WCC5PZEWLiFe232xinuJG93KcQ+YDSCDXnFpTF6U9X036/Xw
yLkV6ChWVPH2zD4RFDVXqr4nK96A0Bl8u+hrzUB6SvIK1JQkm5+C6xuF0wpBJLD/
bJgYWw7incz48M3nSroqfopwqNC2J3v3KnbNJ53jGORT
-----END CERTIFICATE-----
Generated at Sun Sep 1 23:18:58 2024 by rpki-client on console-ams.rpki-client.org