Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/KvuRnIOJf2c_1iNYgwpu_uP_FO0.roa
File: KvuRnIOJf2c_1iNYgwpu_uP_FO0.roa (raw, json)
Hash identifier: YYvRYp34yIxFprKUV9a/aFds16YxFFnIos+a6lmpSg8=
Subject key identifier: 2A:FB:91:9C:83:89:7F:67:3F:D6:23:58:83:0A:6E:FE:E3:FF:14:ED
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0190DE80C46CAE7C4940E0BE1636F5D737B8
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/KvuRnIOJf2c_1iNYgwpu_uP_FO0.roa
Signing time: Tue 23 Jul 2024 07:31:39 +0000
ROA not before: Tue 23 Jul 2024 07:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211056
IP address blocks: 45.81.16.0/24 maxlen: 24
45.81.17.0/24 maxlen: 24
45.81.18.0/24 maxlen: 24
45.81.19.0/24 maxlen: 24
185.201.49.0/24 maxlen: 24
2a05:9080:3::/48 maxlen: 48
2a05:9080:5::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 06 Aug 2024 13:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:de:80:c4:6c:ae:7c:49:40:e0:be:16:36:f5:d7:37:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jul 23 07:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2afb919c83897f673fd62358830a6efee3ff14ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:00:e3:7b:25:3c:46:74:90:5f:eb:bd:aa:0d:
fc:63:cd:9f:e8:ed:7a:20:72:48:a4:00:15:f2:45:
70:db:ca:d2:82:b1:c2:db:7b:d8:be:f5:91:03:04:
3e:8d:71:17:7c:9a:56:32:5f:f6:5f:5b:5f:b8:3f:
1a:70:90:f1:99:40:50:93:9f:67:10:79:4d:ba:82:
21:37:cf:86:86:fa:a4:b9:4c:49:a8:55:e0:1d:3f:
ac:b5:ef:84:8c:93:ae:93:51:12:e4:a1:4f:56:80:
b8:b5:88:50:7b:c5:31:58:9f:74:69:9e:f9:65:0b:
6c:e8:94:02:1f:d1:05:6e:4f:55:53:7c:82:94:d2:
01:a1:77:9e:ef:39:40:79:20:d9:06:c2:b4:07:32:
af:02:14:33:75:72:ea:7f:c2:d3:80:57:a6:73:17:
c6:27:0b:0e:d6:fa:10:66:ac:93:13:c3:bb:3f:37:
19:d7:5e:ec:73:84:c1:c1:42:40:49:6d:d6:5b:97:
c9:8b:ac:ae:56:7e:df:e7:90:99:ae:61:76:50:f5:
40:aa:20:c7:3c:0c:f8:08:f3:f6:b5:97:3b:8c:f8:
ff:85:53:73:1b:bc:d6:db:9f:63:c2:c8:15:88:75:
bd:2b:1d:37:8b:c8:00:7a:1a:78:1d:d3:0a:5c:1f:
47:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:FB:91:9C:83:89:7F:67:3F:D6:23:58:83:0A:6E:FE:E3:FF:14:ED
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/KvuRnIOJf2c_1iNYgwpu_uP_FO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.16.0/22
185.201.49.0/24
IPv6:
2a05:9080:3::/48
2a05:9080:5::/48
Signature Algorithm: sha256WithRSAEncryption
50:20:cb:99:69:3e:20:14:96:16:f3:4c:53:78:9e:fa:aa:3d:
fc:05:9c:17:fe:a3:c7:f6:7f:35:1b:39:47:03:a1:90:8f:4d:
7d:5a:f7:07:c6:06:6b:ea:2a:28:d4:b7:4f:49:89:b8:73:a5:
d7:ae:09:f7:64:19:0b:a8:9a:d8:42:65:5d:23:e8:11:68:be:
85:26:38:a6:62:14:26:0f:94:b0:1b:2f:8b:29:35:69:55:70:
a9:41:81:ec:8a:ed:b0:9b:47:bf:7e:7d:01:52:43:9e:69:4b:
48:a2:10:7c:3f:81:14:73:5d:98:30:f7:d6:0b:19:bc:e6:62:
4b:19:f1:f9:cd:2d:8b:9b:f8:30:3e:bf:7f:7b:04:93:e9:2e:
e1:6c:c4:4e:f0:46:3e:1d:21:56:fb:98:89:91:99:7b:73:cf:
00:d8:5d:ea:2b:ff:04:2c:72:0c:45:22:96:7f:e3:75:a3:95:
78:cd:d4:10:8d:58:fc:9d:42:45:9e:26:4f:b1:d7:24:9c:9e:
77:13:88:f1:e1:00:0f:da:a9:c3:84:f3:e1:63:ae:e1:bf:97:
69:fd:b2:f3:bc:3f:13:51:66:aa:89:9a:46:fd:aa:39:f5:34:
a3:03:f2:f5:a3:c2:d1:c6:3e:05:bd:bf:f8:3c:33:13:c4:25:
eb:e3:8e:94
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZDegMRsrnxJQOC+Fjb11ze4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjQwNzIzMDczMTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWZiOTE5YzgzODk3ZjY3M2ZkNjIzNTg4MzBhNmVmZWUzZmYxNGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgDjeyU8RnSQX+u9qg38Y82f6O16
IHJIpAAV8kVw28rSgrHC23vYvvWRAwQ+jXEXfJpWMl/2X1tfuD8acJDxmUBQk59n
EHlNuoIhN8+GhvqkuUxJqFXgHT+ste+EjJOuk1ES5KFPVoC4tYhQe8UxWJ90aZ75
ZQts6JQCH9EFbk9VU3yClNIBoXee7zlAeSDZBsK0BzKvAhQzdXLqf8LTgFemcxfG
JwsO1voQZqyTE8O7PzcZ117sc4TBwUJASW3WW5fJi6yuVn7f55CZrmF2UPVAqiDH
PAz4CPP2tZc7jPj/hVNzG7zW259jwsgViHW9Kx03i8gAehp4HdMKXB9H6QIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFCr7kZyDiX9nP9YjWIMKbv7j/xTtMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvS3Z1Um5JT0pmMmNfMWlOWWd3cHVfdVBfRk8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQCLVEQAwQA
uckxMBgEAgACMBIDBwAqBZCAAAMDBwAqBZCAAAUwDQYJKoZIhvcNAQELBQADggEB
AFAgy5lpPiAUlhbzTFN4nvqqPfwFnBf+o8f2fzUbOUcDoZCPTX1a9wfGBmvqKijU
t09JibhzpdeuCfdkGQuomthCZV0j6BFovoUmOKZiFCYPlLAbL4spNWlVcKlBgeyK
7bCbR79+fQFSQ55pS0iiEHw/gRRzXZgw99YLGbzmYksZ8fnNLYub+DA+v397BJPp
LuFsxE7wRj4dIVb7mImRmXtzzwDYXeor/wQscgxFIpZ/43WjlXjN1BCNWPydQkWe
Jk+x1yScnncTiPHhAA/aqcOE8+FjruG/l2n9svO8PxNRZqqJmkb9qjn1NKMD8vWj
wtHGPgW9v/g8MxPEJevjjpQ=
-----END CERTIFICATE-----
Generated at Tue Aug 6 16:28:42 2024 by rpki-client on console-fra.rpki-client.org