Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/WnjlOHj6dBeFDIx9CnqS6BQyUAs.roa
File: WnjlOHj6dBeFDIx9CnqS6BQyUAs.roa (raw, json)
Hash identifier: Jtwn1qlR4WrjbChQcS8xHBk8VT826BW33sF45DmUvKQ=
Subject key identifier: 5A:78:E5:38:78:FA:74:17:85:0C:8C:7D:0A:7A:92:E8:14:32:50:0B
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018CC8DFB5C3EEE57CB6330BC3327938423F
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/WnjlOHj6dBeFDIx9CnqS6BQyUAs.roa
Signing time: Tue 02 Jan 2024 06:32:33 +0000
ROA not before: Tue 02 Jan 2024 06:32:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216319
IP address blocks: 45.133.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 Jul 2024 13:26:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:b5:c3:ee:e5:7c:b6:33:0b:c3:32:79:38:42:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 06:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5a78e53878fa7417850c8c7d0a7a92e81432500b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:d5:95:de:4b:2a:3a:51:23:36:b1:8f:f4:
9d:4d:be:e5:93:b0:1e:70:ab:3b:44:9c:8f:2f:4e:
29:79:ea:cc:23:52:9d:ed:2c:19:80:f0:80:24:c5:
2a:c6:02:7d:b4:b0:79:62:25:a3:92:18:68:84:d9:
33:11:95:56:f4:3e:35:73:57:3e:9b:25:a8:9a:fd:
bb:e0:a0:e0:21:c7:74:17:da:30:a7:5d:8f:0f:e5:
40:04:3d:f5:8a:65:f2:7e:1f:82:92:94:dd:55:02:
32:b4:33:7f:7d:96:b1:c4:52:fe:d9:bc:4b:c9:e3:
b7:d7:dc:5e:c4:db:fd:a6:e4:9f:cd:a0:84:b3:29:
e5:f9:f2:fb:23:16:21:63:27:35:8b:6c:04:14:5b:
56:5e:90:64:60:49:26:95:48:c1:9c:e2:5b:41:33:
3b:c0:57:34:47:5c:3c:8e:0d:58:09:a3:8d:27:f9:
47:0c:c6:ce:57:44:99:a9:0d:de:2f:7d:15:6a:e6:
98:3d:c2:e1:77:d4:92:ab:16:49:b7:03:a7:7d:8c:
e0:35:a9:51:d8:e4:be:bb:f9:8e:35:63:e7:64:27:
d9:f4:f1:7e:cc:13:43:0c:98:cf:15:16:78:6b:97:
f5:ba:f0:00:26:b5:ef:b8:02:01:28:ad:11:b9:44:
c5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:78:E5:38:78:FA:74:17:85:0C:8C:7D:0A:7A:92:E8:14:32:50:0B
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/WnjlOHj6dBeFDIx9CnqS6BQyUAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.246.0/24
Signature Algorithm: sha256WithRSAEncryption
83:13:da:36:fc:b5:76:bc:cb:9a:49:08:bf:66:e2:60:3a:5b:
87:04:fe:c7:73:b5:9e:ba:ac:87:61:5f:b2:d7:8e:18:0d:ab:
40:2a:5e:b2:e2:82:9b:86:1f:f5:c1:f7:c3:d3:1e:f6:ad:31:
5d:20:49:6d:17:85:72:af:74:4a:17:f7:47:ff:ad:56:78:b2:
91:f5:b4:f6:e2:47:70:97:2d:41:ce:f6:71:b4:71:3e:90:69:
e0:a1:55:8d:29:e3:8f:4b:0a:f1:68:7d:e8:01:61:53:31:d3:
84:58:70:60:16:5c:44:44:8b:a7:26:24:c6:55:1d:02:c2:d1:
1e:a1:64:7f:4d:5a:eb:dd:28:94:40:9a:5a:fb:1c:1b:7e:11:
f6:ea:6b:54:a3:ac:23:f4:8d:53:dc:78:27:60:e6:bd:be:c6:
2b:15:77:3d:81:9c:0c:b4:b3:62:f4:a3:b4:ed:69:95:f4:cb:
77:ee:f4:38:25:3f:b5:2c:a7:e0:1c:7c:a1:68:f8:cd:71:09:
4e:84:80:fe:53:bb:22:8f:ff:27:84:ef:44:fd:67:37:18:e4:
0a:15:28:ce:b3:36:72:d4:59:e0:24:6c:48:3b:5b:39:ee:de:
86:64:3e:f0:37:91:16:d2:57:6d:e8:87:a1:a6:b6:e5:c7:b9:
11:59:90:47
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI37XD7uV8tjMLwzJ5OEI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjQwMTAyMDYzMjMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTc4ZTUzODc4ZmE3NDE3ODUwYzhjN2QwYTdhOTJlODE0MzI1MDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZTVld5LKjpRIzaxj/SdTb7lk7Ae
cKs7RJyPL04peerMI1Kd7SwZgPCAJMUqxgJ9tLB5YiWjkhhohNkzEZVW9D41c1c+
myWomv274KDgIcd0F9owp12PD+VABD31imXyfh+CkpTdVQIytDN/fZaxxFL+2bxL
yeO319xexNv9puSfzaCEsynl+fL7IxYhYyc1i2wEFFtWXpBkYEkmlUjBnOJbQTM7
wFc0R1w8jg1YCaONJ/lHDMbOV0SZqQ3eL30VauaYPcLhd9SSqxZJtwOnfYzgNalR
2OS+u/mONWPnZCfZ9PF+zBNDDJjPFRZ4a5f1uvAAJrXvuAIBKK0RuUTFWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFp45Th4+nQXhQyMfQp6kugUMlALMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvV25qbE9IajZkQmVGREl4OUNucVM2QlF5VUFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYX2MA0G
CSqGSIb3DQEBCwUAA4IBAQCDE9o2/LV2vMuaSQi/ZuJgOluHBP7Hc7WeuqyHYV+y
144YDatAKl6y4oKbhh/1wffD0x72rTFdIEltF4Vyr3RKF/dH/61WeLKR9bT24kdw
ly1BzvZxtHE+kGngoVWNKeOPSwrxaH3oAWFTMdOEWHBgFlxERIunJiTGVR0CwtEe
oWR/TVrr3SiUQJpa+xwbfhH26mtUo6wj9I1T3HgnYOa9vsYrFXc9gZwMtLNi9KO0
7WmV9Mt37vQ4JT+1LKfgHHyhaPjNcQlOhID+U7sij/8nhO9E/Wc3GOQKFSjOszZy
1FngJGxIO1s57t6GZD7wN5EW0ldt6Iehprblx7kRWZBH
-----END CERTIFICATE-----
Generated at Mon Jul 15 14:57:42 2024 by rpki-client on console-fra.rpki-client.org