Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/ZjY8aQVxTgpzwaTkHxbvv16f7RQ.roa
File: ZjY8aQVxTgpzwaTkHxbvv16f7RQ.roa (raw, json)
Hash identifier: uLLETHrC87RnN4uOvo1u6mqAQCkCbHkrBAgbSloid14=
Subject key identifier: 66:36:3C:69:05:71:4E:0A:73:C1:A4:E4:1F:16:EF:BF:5E:9F:ED:14
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 01912433DDEF3E16A061C7EDAB248971E3F9
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/ZjY8aQVxTgpzwaTkHxbvv16f7RQ.roa
Signing time: Mon 05 Aug 2024 20:21:04 +0000
ROA not before: Mon 05 Aug 2024 20:21:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 45.11.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Aug 2024 13:45:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:24:33:dd:ef:3e:16:a0:61:c7:ed:ab:24:89:71:e3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Aug 5 20:21:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=66363c6905714e0a73c1a4e41f16efbf5e9fed14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:47:82:3e:6b:b3:4e:cd:dd:e8:8d:46:1b:88:
66:b3:0a:d0:67:ea:dd:64:ae:e0:d2:84:85:64:03:
40:f4:5a:4f:c6:59:c1:7d:0e:0e:ff:40:01:18:99:
1e:04:47:83:dd:e6:d7:6c:60:51:14:1b:75:13:5f:
3b:d4:f3:4e:7c:b8:4d:5b:88:67:56:94:7f:40:d5:
63:dd:39:ee:c1:bc:c1:e3:a8:b9:76:a2:03:ea:ab:
5e:68:07:e0:e3:46:d8:7f:44:52:f0:34:1b:46:2d:
98:74:24:d9:83:ac:71:9e:e4:8d:60:0e:65:0b:8c:
29:da:e6:bf:39:75:66:42:11:4e:9e:54:fa:f3:15:
0a:78:5b:96:3c:24:26:91:27:c3:2e:60:31:3d:96:
1b:25:55:19:32:34:cc:f3:ac:82:8e:3e:34:bd:09:
e1:c7:96:2e:be:6f:5d:dd:7f:22:77:d1:09:d8:e7:
d6:7a:92:fa:bf:cc:e1:12:fa:b5:72:c3:f6:07:6d:
e8:a5:20:da:ce:7a:ac:6b:6d:99:eb:3f:97:be:e6:
a2:00:86:8f:ca:13:6c:cd:13:ad:fd:59:e6:ea:ac:
0f:7f:74:1b:a9:6c:7c:00:02:9b:0e:9b:12:f7:74:
95:b1:1f:50:5f:b5:34:8a:fc:1b:31:5a:ee:44:0f:
b3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:36:3C:69:05:71:4E:0A:73:C1:A4:E4:1F:16:EF:BF:5E:9F:ED:14
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/ZjY8aQVxTgpzwaTkHxbvv16f7RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.184.0/24
Signature Algorithm: sha256WithRSAEncryption
59:01:1c:34:cf:86:22:cc:51:7b:d0:24:8a:db:79:20:f9:1c:
1c:1b:df:b6:ba:04:d3:77:f8:49:ac:a3:98:f1:11:a7:d5:b8:
57:b2:0b:a6:ad:89:1b:7f:3a:a9:62:c2:5b:bc:ab:88:7c:53:
34:e8:44:21:71:ac:55:32:8e:98:69:c1:10:48:15:aa:ff:1b:
c3:38:df:f5:c0:e3:05:e2:45:55:f5:33:5b:3e:dc:a4:89:92:
99:bf:f4:11:3d:db:a8:7e:37:a8:d8:0d:17:3e:8c:81:3b:9b:
4b:2b:61:69:e2:b1:51:10:9d:0f:73:ce:f0:4e:0d:93:94:23:
d2:36:a4:78:c5:b6:9c:18:70:5b:78:31:8e:c2:7d:1c:bf:28:
8e:86:63:f5:a2:78:30:7c:f3:f8:58:b9:6a:76:92:63:83:83:
9e:f7:f1:ad:bc:c0:d3:0b:68:ff:b5:50:50:bd:3e:49:28:ae:
bd:4f:2d:1b:8b:de:cb:97:ff:60:f1:72:72:1d:96:60:ff:4b:
80:4c:1b:45:4a:a0:75:4d:b5:6e:de:2d:86:7d:bb:41:e2:10:
57:ae:b9:a9:a6:4b:df:42:28:93:cb:a1:0c:eb:7d:ee:79:dc:
c3:e4:13:b6:96:0e:df:92:1c:e5:0f:15:b2:eb:48:cf:d9:21:
20:97:cf:71
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZEkM93vPhagYcftqySJceP5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjQwODA1MjAyMTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjM2M2M2OTA1NzE0ZTBhNzNjMWE0ZTQxZjE2ZWZiZjVlOWZlZDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0eCPmuzTs3d6I1GG4hmswrQZ+rd
ZK7g0oSFZANA9FpPxlnBfQ4O/0ABGJkeBEeD3ebXbGBRFBt1E1871PNOfLhNW4hn
VpR/QNVj3TnuwbzB46i5dqID6qteaAfg40bYf0RS8DQbRi2YdCTZg6xxnuSNYA5l
C4wp2ua/OXVmQhFOnlT68xUKeFuWPCQmkSfDLmAxPZYbJVUZMjTM86yCjj40vQnh
x5Yuvm9d3X8id9EJ2OfWepL6v8zhEvq1csP2B23opSDaznqsa22Z6z+XvuaiAIaP
yhNszROt/Vnm6qwPf3QbqWx8AAKbDpsS93SVsR9QX7U0ivwbMVruRA+zmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGY2PGkFcU4Kc8Gk5B8W779en+0UMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvWmpZOGFRVnhUZ3B6d2FUa0h4YnZ2MTZmN1JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQu4MA0G
CSqGSIb3DQEBCwUAA4IBAQBZARw0z4YizFF70CSK23kg+RwcG9+2ugTTd/hJrKOY
8RGn1bhXsgumrYkbfzqpYsJbvKuIfFM06EQhcaxVMo6YacEQSBWq/xvDON/1wOMF
4kVV9TNbPtykiZKZv/QRPduofjeo2A0XPoyBO5tLK2Fp4rFREJ0Pc87wTg2TlCPS
NqR4xbacGHBbeDGOwn0cvyiOhmP1ongwfPP4WLlqdpJjg4Oe9/GtvMDTC2j/tVBQ
vT5JKK69Ty0bi97Ll/9g8XJyHZZg/0uATBtFSqB1TbVu3i2GfbtB4hBXrrmppkvf
QiiTy6EM633uedzD5BO2lg7fkhzlDxWy60jP2SEgl89x
-----END CERTIFICATE-----
Generated at Tue Aug 6 16:28:42 2024 by rpki-client on console-fra.rpki-client.org