Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5ww9DyNA_qv_Mn8sao1bJnMZkK4.roa
File: 5ww9DyNA_qv_Mn8sao1bJnMZkK4.roa (raw, json)
Hash identifier: Xrcf79AdViMVFwAx3MFS1rHdafTMrIljc3/Sd56Hb6k=
Subject key identifier: E7:0C:3D:0F:23:40:FE:AB:FF:32:7F:2C:6A:8D:5B:26:73:19:90:AE
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185C37F053BA81E2C20CEEBA061581B393B
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5ww9DyNA_qv_Mn8sao1bJnMZkK4.roa
Signing time: Wed 18 Jan 2023 06:09:19 +0000
ROA not before: Wed 18 Jan 2023 06:09:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212477
IP address blocks: 45.141.203.0/24 maxlen: 24
45.141.200.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Mar 2023 08:57:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c3:7f:05:3b:a8:1e:2c:20:ce:eb:a0:61:58:1b:39:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 18 06:09:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e70c3d0f2340feabff327f2c6a8d5b26731990ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d6:44:ce:b8:ab:ef:fc:71:ec:38:f9:73:6b:
2c:a0:3e:fe:0c:12:1a:2d:cf:3a:ee:cd:f9:a6:3e:
39:43:5a:50:22:17:9f:83:61:64:5b:1e:9c:97:88:
26:22:2f:7c:d4:e3:a6:1e:d0:c0:e5:64:d5:93:94:
a9:ab:5c:55:71:a3:92:bf:0e:f6:d8:c3:d7:04:d7:
cf:f1:39:5d:5b:ed:58:43:a5:84:30:6d:29:34:8e:
a8:6e:c6:c2:f2:43:6b:6e:ce:6f:10:5d:c0:4e:52:
2b:69:29:81:32:9d:c3:9a:ee:16:63:28:18:d1:35:
51:1f:67:36:31:06:aa:6c:1a:46:ed:cc:50:43:0c:
e4:ad:0d:06:33:1f:d6:11:7e:58:c6:5b:ba:6b:b6:
b2:d3:48:9d:6d:1d:0e:80:89:9c:f3:ad:3c:62:c8:
b0:11:3c:e3:95:27:c1:df:ee:50:bd:77:e7:b7:4c:
38:bb:8f:85:e5:1d:d6:1a:de:27:e4:be:6e:b1:dd:
49:73:7f:2f:df:d4:26:7c:ca:10:b8:01:3d:30:e7:
9d:0b:58:f6:0b:13:6f:bf:77:06:ee:46:19:5b:9a:
f1:af:68:ca:14:e8:2d:8f:58:6e:03:42:2d:99:d9:
71:e4:ca:e7:b9:2e:0f:46:97:d6:30:73:7e:8f:26:
7c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0C:3D:0F:23:40:FE:AB:FF:32:7F:2C:6A:8D:5B:26:73:19:90:AE
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/5ww9DyNA_qv_Mn8sao1bJnMZkK4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.200.0/23
45.141.203.0/24
Signature Algorithm: sha256WithRSAEncryption
19:14:ad:63:1e:78:a4:31:4d:f9:83:60:bf:bf:df:3c:ec:a6:
8e:b9:59:c0:10:69:34:b1:73:a0:86:28:7c:43:d9:fd:22:5d:
3e:4c:59:39:f1:81:1a:8d:19:16:b1:53:d2:6b:0c:7a:1c:14:
d6:1b:62:0a:25:08:59:02:9b:ba:8a:3e:6d:01:22:9b:ec:db:
50:c2:47:05:19:3d:75:56:3e:35:f2:f0:fd:d5:62:d4:27:36:
01:3f:77:ac:dc:0a:5e:19:01:9d:ad:d5:06:f9:8d:3d:eb:eb:
ee:74:1f:3a:06:35:4f:c9:46:a2:22:c0:e5:58:44:14:79:b5:
d0:b3:91:17:bb:de:a6:55:15:3c:a4:52:91:f2:7e:0b:23:39:
6e:5c:1f:14:b9:37:1e:09:77:bf:5f:34:4f:3f:21:e4:56:c3:
e5:e7:62:6c:6c:ea:1a:12:c0:86:16:eb:2c:f4:68:4d:80:22:
96:17:c5:fb:49:ad:ab:87:69:48:e6:37:3d:8d:97:24:9b:28:
79:21:76:bf:f5:dc:88:bb:ff:f4:06:db:d6:1e:ee:ef:cd:8c:
19:49:93:95:69:71:fd:d4:73:62:30:d5:67:80:d0:f2:61:fd:
c1:10:d9:0f:84:02:8e:db:03:6a:45:4e:b1:95:84:5e:7d:f8:
fd:ed:74:aa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYXDfwU7qB4sIM7roGFYGzk7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjMwMTE4MDYwOTE5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzBjM2QwZjIzNDBmZWFiZmYzMjdmMmM2YThkNWIyNjczMTk5MGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNZEzrir7/xx7Dj5c2ssoD7+DBIa
Lc867s35pj45Q1pQIhefg2FkWx6cl4gmIi981OOmHtDA5WTVk5Spq1xVcaOSvw72
2MPXBNfP8TldW+1YQ6WEMG0pNI6obsbC8kNrbs5vEF3ATlIraSmBMp3Dmu4WYygY
0TVRH2c2MQaqbBpG7cxQQwzkrQ0GMx/WEX5Yxlu6a7ay00idbR0OgImc8608Ysiw
ETzjlSfB3+5QvXfnt0w4u4+F5R3WGt4n5L5usd1Jc38v39QmfMoQuAE9MOedC1j2
CxNvv3cG7kYZW5rxr2jKFOgtj1huA0Itmdlx5MrnuS4PRpfWMHN+jyZ8lwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOcMPQ8jQP6r/zJ/LGqNWyZzGZCuMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvNXd3OUR5TkFfcXZfTW44c2FvMWJKbk1aa0s0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLY3IAwQA
LY3LMA0GCSqGSIb3DQEBCwUAA4IBAQAZFK1jHnikMU35g2C/v9887KaOuVnAEGk0
sXOghih8Q9n9Il0+TFk58YEajRkWsVPSawx6HBTWG2IKJQhZApu6ij5tASKb7NtQ
wkcFGT11Vj418vD91WLUJzYBP3es3ApeGQGdrdUG+Y096+vudB86BjVPyUaiIsDl
WEQUebXQs5EXu96mVRU8pFKR8n4LIzluXB8UuTceCXe/XzRPPyHkVsPl52JsbOoa
EsCGFuss9GhNgCKWF8X7Sa2rh2lI5jc9jZckmyh5IXa/9dyIu//0BtvWHu7vzYwZ
SZOVaXH91HNiMNVngNDyYf3BENkPhAKO2wNqRU6xlYReffj97XSq
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:44 2024 by rpki-client on console-fra.rpki-client.org