Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/bK2z7dokUDWCNYcPSjjKHPT7mJY.roa
File: bK2z7dokUDWCNYcPSjjKHPT7mJY.roa (raw, json)
Hash identifier: XojBd5772F1htdWGeXQKqW4E8+raD8fA+yo4l0ZlwCY=
Subject key identifier: 6C:AD:B3:ED:DA:24:50:35:82:35:87:0F:4A:38:CA:1C:F4:FB:98:96
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0188DD84A0C52B7068DCB944BD2CFDD889D5
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/bK2z7dokUDWCNYcPSjjKHPT7mJY.roa
Signing time: Wed 21 Jun 2023 10:33:56 +0000
ROA not before: Wed 21 Jun 2023 10:33:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48891
IP address blocks: 185.105.119.0/24 maxlen: 24
45.133.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:84:a0:c5:2b:70:68:dc:b9:44:bd:2c:fd:d8:89:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jun 21 10:33:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6cadb3edda2450358235870f4a38ca1cf4fb9896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:48:86:28:1e:bc:6f:d3:f7:51:7d:3d:c6:94:
4c:4b:c8:bc:ab:d6:a8:6b:2a:82:fc:2b:84:5d:c1:
49:b4:24:ae:25:29:18:8b:53:0d:f1:eb:38:6f:23:
5c:a3:f9:74:96:1c:8d:b7:aa:9d:00:49:e9:a8:6c:
30:c2:ef:e1:63:96:2e:16:f9:89:2e:68:3e:cc:6f:
f5:38:76:1c:02:84:fd:d8:5a:c8:b1:f2:38:d1:72:
78:ff:59:c0:50:3d:22:ac:30:b8:89:e8:a5:6f:d0:
9e:43:64:34:75:10:26:56:22:7c:3e:de:49:26:8e:
c7:07:81:8d:02:f7:72:d0:e4:42:cd:99:94:ff:4f:
f6:d5:a6:4b:ee:f2:6e:d4:a4:38:33:14:d0:e3:05:
52:96:4c:a6:02:13:b1:2c:aa:6c:ef:94:d0:fb:02:
79:4d:90:b4:18:41:30:46:e5:3f:51:56:00:81:87:
bb:26:8b:62:63:5c:8e:ed:82:b5:c6:3e:ef:c9:d2:
8c:3c:06:e4:e3:1c:ff:55:fe:fb:84:73:de:47:38:
56:39:a6:4e:12:af:d4:4d:94:1d:1f:11:15:92:ca:
a7:17:fa:cc:f5:97:d4:af:a8:5e:01:53:7b:3f:03:
df:d9:29:3e:71:6c:74:b6:de:6f:e4:d9:55:2e:f4:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AD:B3:ED:DA:24:50:35:82:35:87:0F:4A:38:CA:1C:F4:FB:98:96
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/bK2z7dokUDWCNYcPSjjKHPT7mJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.244.0/24
185.105.119.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:ff:f7:90:4a:66:14:31:12:a7:3b:e4:e6:11:ff:90:06:31:
11:a4:52:f7:7a:67:16:6f:00:81:49:f8:52:b6:87:3b:e4:43:
bc:b0:92:ef:be:83:e2:79:0f:0f:e2:fb:eb:a8:9c:07:c4:e4:
cf:86:19:83:65:90:45:db:85:5f:11:bb:4e:ed:6d:c1:08:f5:
e7:f3:db:03:23:df:1c:e6:93:2e:7d:ec:22:54:2d:03:97:84:
33:aa:b4:33:5a:d5:8c:eb:e2:4c:ea:b4:7c:28:df:f0:d6:da:
55:dd:f4:f5:36:e1:a4:39:c9:79:54:68:d3:5d:d8:8f:0e:93:
ac:fc:d1:f9:5f:21:76:e6:1c:23:5a:16:0c:ae:22:72:bd:85:
e1:29:d9:22:45:01:8b:a4:73:4b:e7:c5:c5:69:ac:5e:19:27:
86:4f:60:ad:6f:38:58:81:49:42:57:58:f2:b3:e8:5d:c2:bb:
b3:b8:d6:1c:53:4f:11:e2:e2:41:e0:a6:bb:1a:42:8a:d9:89:
b7:72:38:ea:0c:99:2b:39:42:6b:0c:7b:fd:58:47:d1:9a:d7:
8d:35:a1:fd:aa:53:08:8e:d7:ab:a2:b0:02:a7:3a:2c:7c:78:
9f:db:81:fe:d3:1f:86:ac:00:5d:d7:36:0d:2c:4a:e3:a4:a9:
09:3c:95:a4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYjdhKDFK3Bo3LlEvSz92InVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjMwNjIxMTAzMzU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Y2FkYjNlZGRhMjQ1MDM1ODIzNTg3MGY0YTM4Y2ExY2Y0ZmI5ODk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEiGKB68b9P3UX09xpRMS8i8q9ao
ayqC/CuEXcFJtCSuJSkYi1MN8es4byNco/l0lhyNt6qdAEnpqGwwwu/hY5YuFvmJ
Lmg+zG/1OHYcAoT92FrIsfI40XJ4/1nAUD0irDC4ieilb9CeQ2Q0dRAmViJ8Pt5J
Jo7HB4GNAvdy0ORCzZmU/0/21aZL7vJu1KQ4MxTQ4wVSlkymAhOxLKps75TQ+wJ5
TZC0GEEwRuU/UVYAgYe7JotiY1yO7YK1xj7vydKMPAbk4xz/Vf77hHPeRzhWOaZO
Eq/UTZQdHxEVksqnF/rM9ZfUr6heAVN7PwPf2Sk+cWx0tt5v5NlVLvRYyQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGyts+3aJFA1gjWHD0o4yhz0+5iWMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvYksyejdkb2tVRFdDTlljUFNqaktIUFQ3bUpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYX0AwQA
uWl3MA0GCSqGSIb3DQEBCwUAA4IBAQC3//eQSmYUMRKnO+TmEf+QBjERpFL3emcW
bwCBSfhStoc75EO8sJLvvoPieQ8P4vvrqJwHxOTPhhmDZZBF24VfEbtO7W3BCPXn
89sDI98c5pMufewiVC0Dl4QzqrQzWtWM6+JM6rR8KN/w1tpV3fT1NuGkOcl5VGjT
XdiPDpOs/NH5XyF25hwjWhYMriJyvYXhKdkiRQGLpHNL58XFaaxeGSeGT2CtbzhY
gUlCV1jys+hdwruzuNYcU08R4uJB4Ka7GkKK2Ym3cjjqDJkrOUJrDHv9WEfRmteN
NaH9qlMIjterorACpzosfHif24H+0x+GrABd1zYNLErjpKkJPJWk
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org