Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/k5EyYeekcxQGA0KgVI8tLGYVQ8w.roa
File: k5EyYeekcxQGA0KgVI8tLGYVQ8w.roa (raw, json)
Hash identifier: +8UcnA/72ljDFH9rJ7X6wrBCW8LJkT0Rs/+XRw6jnuQ=
Subject key identifier: 93:91:32:61:E7:A4:73:14:06:03:42:A0:54:8F:2D:2C:66:15:43:CC
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0190DE75C71D1E9F0F3D48A13671D5C255AA
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/k5EyYeekcxQGA0KgVI8tLGYVQ8w.roa
Signing time: Tue 23 Jul 2024 07:19:39 +0000
ROA not before: Tue 23 Jul 2024 07:19:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204650
IP address blocks: 45.11.184.0/22 maxlen: 22
185.82.136.0/22 maxlen: 22
185.201.48.0/24 maxlen: 24
185.201.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jul 2024 16:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:de:75:c7:1d:1e:9f:0f:3d:48:a1:36:71:d5:c2:55:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Jul 23 07:19:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=93913261e7a47314060342a0548f2d2c661543cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b3:5c:1a:3b:e0:5d:b0:2e:5d:3b:fc:3a:b5:
64:e4:40:83:56:f3:dc:10:62:93:53:b7:e6:42:8d:
2f:73:b8:ee:8c:5c:cd:e4:d8:c3:3b:06:9c:05:a7:
82:64:bb:63:72:9b:50:9b:13:8c:de:c8:b8:db:47:
e6:b4:91:c8:38:06:ca:08:b6:e4:26:f0:2a:9d:12:
53:5f:19:d1:00:20:de:33:66:a0:4c:e9:6e:af:ff:
ba:b7:f5:66:94:15:f6:85:4f:0b:1f:b6:59:6b:bb:
e3:d8:5b:9b:6b:a8:9e:b8:37:bf:7b:ad:3d:71:93:
18:2d:f3:26:68:4c:76:2a:3c:d1:ac:0e:ee:aa:40:
cf:78:f7:46:df:e3:c6:d8:b1:70:db:82:82:a5:33:
ab:02:9f:ce:1d:bc:29:c1:a3:aa:73:0c:7d:ef:6f:
4d:ad:f4:64:9c:b6:c7:82:db:5d:40:3c:52:0c:15:
fb:df:19:d9:71:af:ba:2a:e4:bf:ca:50:21:89:57:
54:34:bb:8b:fe:dc:5f:64:9c:46:96:ab:1d:63:e5:
ba:4a:7c:c9:ed:d5:2c:3e:0a:8d:7c:3e:45:a3:56:
7a:ee:f1:6a:97:75:ac:2b:cd:32:81:f9:ec:76:b6:
63:df:4e:08:3b:15:e0:63:44:a3:c8:5c:46:63:29:
af:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:91:32:61:E7:A4:73:14:06:03:42:A0:54:8F:2D:2C:66:15:43:CC
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/k5EyYeekcxQGA0KgVI8tLGYVQ8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.184.0/22
185.82.136.0/22
185.201.48.0/24
185.201.51.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:aa:e8:3c:58:06:86:18:e8:7d:f3:82:a6:fb:3e:c4:fd:30:
4a:a9:88:b8:3a:32:7e:59:b2:90:4c:30:dd:9e:82:9c:35:ac:
a5:89:07:0c:a2:53:3e:c5:1b:f0:94:ae:bd:66:a7:a2:88:3a:
73:f8:a3:f7:f5:6d:84:29:fa:2b:18:b6:fc:c7:59:cc:f4:8e:
a1:b9:40:77:da:21:94:c8:78:2e:47:39:53:2b:63:49:1a:88:
ae:f2:c6:7b:8e:b4:b1:75:7b:6b:6c:eb:3d:5c:c7:49:e8:5b:
af:25:87:59:ce:90:2d:a5:0f:ea:52:09:e5:e3:0f:06:43:d0:
05:04:37:b4:27:a4:94:d4:ce:3b:5e:5b:2f:74:d3:8d:58:8d:
8a:02:da:ab:62:31:27:01:63:c3:84:06:a7:9d:49:ba:1f:4a:
08:55:da:f7:5b:86:fc:1c:03:4a:fb:5d:91:cd:cc:9f:83:30:
ca:ed:7b:04:e7:2c:23:69:0f:76:23:1e:38:f5:f6:42:c0:1a:
5e:3c:d1:58:ea:15:2b:37:29:6e:af:8d:7c:be:43:02:45:e4:
d3:c8:19:34:9e:b3:1c:2b:37:58:e8:74:dd:00:11:cb:c7:57:
9c:fa:f7:4c:8b:37:9b:47:e6:4c:75:e1:09:05:cc:7c:cf:fd:
43:ea:67:48
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZDedccdHp8PPUihNnHVwlWqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjQwNzIzMDcxOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzkxMzI2MWU3YTQ3MzE0MDYwMzQyYTA1NDhmMmQyYzY2MTU0M2NjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LNcGjvgXbAuXTv8OrVk5ECDVvPc
EGKTU7fmQo0vc7jujFzN5NjDOwacBaeCZLtjcptQmxOM3si420fmtJHIOAbKCLbk
JvAqnRJTXxnRACDeM2agTOlur/+6t/VmlBX2hU8LH7ZZa7vj2Fuba6ieuDe/e609
cZMYLfMmaEx2KjzRrA7uqkDPePdG3+PG2LFw24KCpTOrAp/OHbwpwaOqcwx9729N
rfRknLbHgttdQDxSDBX73xnZca+6KuS/ylAhiVdUNLuL/txfZJxGlqsdY+W6SnzJ
7dUsPgqNfD5Fo1Z67vFql3WsK80ygfnsdrZj304IOxXgY0SjyFxGYymvzwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFJORMmHnpHMUBgNCoFSPLSxmFUPMMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvazVFeVllZWtjeFFHQTBLZ1ZJOHRMR1lWUTh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLQu4AwQC
uVKIAwQAuckwAwQAuckzMA0GCSqGSIb3DQEBCwUAA4IBAQCzqug8WAaGGOh984Km
+z7E/TBKqYi4OjJ+WbKQTDDdnoKcNayliQcMolM+xRvwlK69ZqeiiDpz+KP39W2E
KforGLb8x1nM9I6huUB32iGUyHguRzlTK2NJGoiu8sZ7jrSxdXtrbOs9XMdJ6Fuv
JYdZzpAtpQ/qUgnl4w8GQ9AFBDe0J6SU1M47XlsvdNONWI2KAtqrYjEnAWPDhAan
nUm6H0oIVdr3W4b8HANK+12RzcyfgzDK7XsE5ywjaQ92Ix449fZCwBpePNFY6hUr
Nylur418vkMCReTTyBk0nrMcKzdY6HTdABHLx1ec+vdMizebR+ZMdeEJBcx8z/1D
6mdI
-----END CERTIFICATE-----
Generated at Tue Jul 23 20:54:15 2024 by rpki-client on console-ams.rpki-client.org