Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Vh5Uoke6-4iQT89_Mir46TvCxEI.roa
File: Vh5Uoke6-4iQT89_Mir46TvCxEI.roa (raw, json)
Hash identifier: NackWAXM0RGNSvzob3gWsVQbEP8tqjuLgYIVkaZo2yY=
Subject key identifier: 56:1E:54:A2:47:BA:FB:88:90:4F:CF:7F:32:2A:F8:E9:3B:C2:C4:42
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 018D36A57E56438C07E28B9DE25A8097EC67
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Vh5Uoke6-4iQT89_Mir46TvCxEI.roa
Signing time: Tue 23 Jan 2024 14:07:11 +0000
ROA not before: Tue 23 Jan 2024 14:07:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211440
IP address blocks: 45.87.44.0/22 maxlen: 24
91.234.192.0/24 maxlen: 24
178.239.28.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 16 Oct 2024 09:26:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:36:a5:7e:56:43:8c:07:e2:8b:9d:e2:5a:80:97:ec:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 23 14:07:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=561e54a247bafb88904fcf7f322af8e93bc2c442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:90:ac:cb:2f:be:e4:c7:62:f2:d4:df:32:
26:ae:7e:7d:2d:d8:d1:71:c5:1d:a9:cb:64:82:82:
33:11:0f:37:a8:d1:08:34:f6:48:fc:cb:b6:ce:e6:
a5:2c:a3:81:9e:5c:af:7b:a4:10:ef:13:0c:87:fb:
ae:e7:30:00:8e:f2:74:ad:eb:24:d5:8c:dd:7b:ea:
b7:9b:c3:03:eb:4f:89:24:69:32:a4:cd:60:cc:1a:
d6:b9:45:77:0a:96:c4:8b:8d:d5:73:23:52:36:25:
30:9c:22:36:d3:f5:62:33:91:04:49:4c:e6:ff:f3:
0f:65:8b:27:d9:b9:fc:32:1a:29:f9:a5:1b:81:00:
de:66:de:bf:fa:e5:fe:4d:2e:f8:cd:14:e4:84:30:
2b:1b:6e:0e:6a:f0:66:55:97:54:41:5b:2c:1f:f7:
6f:a1:a6:39:65:5e:8e:0b:87:c0:a8:0a:51:18:03:
35:06:3c:d4:90:9e:b9:6a:c5:1a:28:9c:5c:9e:da:
d2:65:b6:21:7d:2f:db:65:b2:4f:33:f5:6f:69:fa:
6d:f1:7f:14:c5:01:d5:d7:2e:77:8d:1f:d5:59:99:
05:8d:68:8d:77:77:6a:e0:95:fe:12:c4:99:a8:cc:
e4:1b:aa:39:44:d0:16:02:4c:24:c9:7c:93:11:1f:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:1E:54:A2:47:BA:FB:88:90:4F:CF:7F:32:2A:F8:E9:3B:C2:C4:42
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/Vh5Uoke6-4iQT89_Mir46TvCxEI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.44.0/22
91.234.192.0/24
178.239.28.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:26:da:56:df:eb:06:d1:81:dd:7e:2c:ae:5a:f3:95:f3:70:
78:6c:32:b7:16:02:43:79:c8:3f:fb:c0:8d:16:2b:9c:75:05:
ef:d3:6d:34:5a:ad:96:2d:28:ac:8a:ff:cc:32:2b:3a:fb:f6:
36:7a:9d:db:a8:2a:c3:3d:8c:a9:30:30:c0:f1:ca:8a:a6:a6:
46:25:ba:87:4c:c0:70:b2:ed:be:ad:5a:a2:1d:23:9a:a5:8a:
ed:74:a0:7c:f0:87:6a:f7:c8:c4:ab:03:c2:17:e5:cd:09:e8:
a4:1b:d7:64:5a:03:58:11:90:c4:9c:4f:8c:52:0f:d2:cc:fc:
56:ea:9b:1c:75:db:ef:52:c9:2b:50:c8:5f:4e:e5:da:33:a8:
72:a1:31:81:96:b9:c3:da:30:22:13:33:e6:3c:5e:7f:54:2d:
33:d6:9a:87:bf:0d:c8:5d:a7:58:46:76:b9:6b:ec:5d:6d:38:
77:42:54:2c:83:5e:48:6d:3c:d8:bd:2f:1b:97:06:35:f3:3b:
0a:85:e0:15:91:8f:08:08:8e:3a:d4:58:d4:e4:cc:83:0f:46:
9e:6a:1c:46:64:c3:ad:5a:dc:b2:7e:bd:c1:aa:cd:89:6f:33:
16:ec:7d:7b:b3:11:05:0d:95:de:ed:5e:2a:3e:f3:0f:69:b2:
06:5d:e6:13
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY02pX5WQ4wH4oud4lqAl+xnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjc3ZDdjYjkyNzFjZTM2MTI1NmU5ODMzY2M3YjE0ZmQw
MjNlYmUwHhcNMjQwMTIzMTQwNzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjFlNTRhMjQ3YmFmYjg4OTA0ZmNmN2YzMjJhZjhlOTNiYzJjNDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1qQrMsvvuTHYvLU3zImrn59LdjR
ccUdqctkgoIzEQ83qNEINPZI/Mu2zualLKOBnlyve6QQ7xMMh/uu5zAAjvJ0resk
1Yzde+q3m8MD60+JJGkypM1gzBrWuUV3CpbEi43VcyNSNiUwnCI20/ViM5EESUzm
//MPZYsn2bn8Mhop+aUbgQDeZt6/+uX+TS74zRTkhDArG24OavBmVZdUQVssH/dv
oaY5ZV6OC4fAqApRGAM1BjzUkJ65asUaKJxcntrSZbYhfS/bZbJPM/Vvafpt8X8U
xQHV1y53jR/VWZkFjWiNd3dq4JX+EsSZqMzkG6o5RNAWAkwkyXyTER+uxQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFYeVKJHuvuIkE/PfzIq+Ok7wsRCMB8GA1UdIwQY
MBaAFJNnfXy5JxzjYSVumDPMexT9Aj6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYt
OTlhY2I5OWNlNzU0LzEvVmg1VW9rZTYtNGlRVDg5X01pcjQ2VHZDeEVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hOWM2ZGEtOGVhMC00NmI3LWExYTYtOTlhY2I5OWNlNzU0
LzEvazJkOWZMa25IT05oSlc2WU04eDdGUDBDUHI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLVcsAwQA
W+rAAwQBsu8cMA0GCSqGSIb3DQEBCwUAA4IBAQA6JtpW3+sG0YHdfiyuWvOV83B4
bDK3FgJDecg/+8CNFiucdQXv0200Wq2WLSisiv/MMis6+/Y2ep3bqCrDPYypMDDA
8cqKpqZGJbqHTMBwsu2+rVqiHSOapYrtdKB88Idq98jEqwPCF+XNCeikG9dkWgNY
EZDEnE+MUg/SzPxW6pscddvvUskrUMhfTuXaM6hyoTGBlrnD2jAiEzPmPF5/VC0z
1pqHvw3IXadYRna5a+xdbTh3QlQsg15IbTzYvS8blwY18zsKheAVkY8ICI461FjU
5MyDD0aeahxGZMOtWtyyfr3Bqs2JbzMW7H17sxEFDZXe7V4qPvMPabIGXeYT
-----END CERTIFICATE-----
Generated at Wed Oct 16 13:21:10 2024 by rpki-client on console-ams.rpki-client.org