Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/oPerKZb851TILZX_yPuI_ziTWlE.roa
File: oPerKZb851TILZX_yPuI_ziTWlE.roa (raw, json)
Hash identifier: Ew4rzxLoU1VCAB1wCUiWl2eHfKowhpkXjFeiTqIsed0=
Subject key identifier: A0:F7:AB:29:96:FC:E7:54:C8:2D:95:FF:C8:FB:88:FF:38:93:5A:51
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 0191B3D0F974DAA2D332258D37E3249464A3
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/oPerKZb851TILZX_yPuI_ziTWlE.roa
Signing time: Mon 02 Sep 2024 17:38:22 +0000
ROA not before: Mon 02 Sep 2024 17:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 45.11.187.0/24 maxlen: 24
2a05:9080:8::/48 maxlen: 48
Validation: Failed, certificate revoked on Thu 26 Sep 2024 15:23:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:d0:f9:74:da:a2:d3:32:25:8d:37:e3:24:94:64:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Sep 2 17:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0f7ab2996fce754c82d95ffc8fb88ff38935a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:85:8c:f5:38:1e:ed:01:e0:8f:38:5f:2f:ca:
6e:d7:fb:59:c0:b4:8f:93:7d:43:07:61:23:03:7d:
63:64:7b:6c:7c:56:0e:61:98:bc:24:89:2b:20:8c:
08:2b:81:31:53:52:71:61:b3:cc:b3:77:a3:05:6b:
73:4c:a1:4c:ce:84:1b:0b:a2:ce:7d:ce:ef:85:1f:
a2:f4:40:08:83:54:dc:73:19:04:a5:e0:84:54:dc:
0a:0b:ff:67:18:8d:b2:76:70:0a:49:2b:e0:64:cc:
6f:9b:4a:82:3c:8d:98:ee:be:cc:60:89:06:63:42:
f0:e7:c1:32:68:28:3b:4a:f8:6b:0a:cf:73:e4:a3:
c1:f1:f6:fa:f3:d3:a6:a3:36:cd:02:01:0a:49:64:
91:9a:07:8a:0c:2c:39:29:fb:1c:b7:c6:fe:6d:c8:
b3:65:c3:e5:f5:5e:1f:be:5b:11:67:84:ca:46:6e:
a5:4a:d9:04:2b:ce:1c:fa:f3:a3:4b:e6:ea:e3:cc:
fc:73:dd:32:72:79:b6:b9:27:14:77:6c:e2:76:12:
31:48:a7:22:1d:84:c5:de:b2:c8:95:a2:70:ba:6a:
f1:f5:3c:d1:6b:c4:11:6e:ac:c9:f8:af:a6:42:fa:
9d:5c:bd:ba:36:70:24:5b:1b:eb:a2:11:26:91:f5:
57:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:F7:AB:29:96:FC:E7:54:C8:2D:95:FF:C8:FB:88:FF:38:93:5A:51
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/oPerKZb851TILZX_yPuI_ziTWlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.187.0/24
IPv6:
2a05:9080:8::/48
Signature Algorithm: sha256WithRSAEncryption
50:42:3e:94:55:cb:a2:40:db:fb:7c:8d:b3:22:cf:f2:3b:c4:
f0:a4:f0:ab:4b:af:af:4f:d9:a9:9a:e3:78:6b:47:39:d8:7c:
18:77:94:d8:f8:d1:51:dc:d8:9d:c3:71:d6:f5:58:1b:27:bf:
66:cb:2c:e8:99:69:76:98:38:a3:50:6a:b3:43:7a:09:b0:c4:
e6:29:ee:dc:57:c7:1d:3f:2a:7d:f9:45:cf:cf:d5:45:f1:51:
bf:51:7c:73:8d:5b:8e:d3:85:e3:4a:ff:d1:ec:9a:7c:b9:ca:
44:77:6e:20:4a:91:23:2e:22:d3:31:11:28:9d:ab:5a:a6:5a:
4d:c5:98:c6:3e:f1:71:3d:cd:37:df:5c:c4:15:cd:d3:64:1d:
26:cd:e8:9a:79:73:97:15:09:a4:9e:6c:c9:f4:e4:54:55:02:
3b:f6:1a:7f:c0:0b:fd:51:da:0c:1c:22:76:c1:64:b9:ed:15:
c0:06:13:1f:38:dc:02:da:e1:21:0c:78:26:0c:b5:82:4d:0f:
23:9a:eb:a1:ef:a3:d8:b5:77:53:f7:f4:70:d8:1a:7b:a2:95:
15:05:21:ae:29:cf:b2:7c:54:78:e2:d9:37:27:68:cc:b9:da:
9d:4a:d3:bd:b1:99:33:80:c9:c6:59:13:56:39:4a:c4:5f:39:
8c:87:2e:33
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZGz0Pl02qLTMiWNN+MklGSjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw
Y2MzNGIwHhcNMjQwOTAyMTczODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGY3YWIyOTk2ZmNlNzU0YzgyZDk1ZmZjOGZiODhmZjM4OTM1YTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIWM9Tge7QHgjzhfL8pu1/tZwLSP
k31DB2EjA31jZHtsfFYOYZi8JIkrIIwIK4ExU1JxYbPMs3ejBWtzTKFMzoQbC6LO
fc7vhR+i9EAIg1TccxkEpeCEVNwKC/9nGI2ydnAKSSvgZMxvm0qCPI2Y7r7MYIkG
Y0Lw58EyaCg7SvhrCs9z5KPB8fb689OmozbNAgEKSWSRmgeKDCw5Kfsct8b+bciz
ZcPl9V4fvlsRZ4TKRm6lStkEK84c+vOjS+bq48z8c90ycnm2uScUd2zidhIxSKci
HYTF3rLIlaJwumrx9TzRa8QRbqzJ+K+mQvqdXL26NnAkWxvrohEmkfVXfQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKD3qymW/OdUyC2V/8j7iP84k1pRMB8GA1UdIwQY
MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt
MDk0ODk4OWU2ZDU1LzEvb1BlcktaYjg1MVRJTFpYX3lQdUlfemlUV2xFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1
LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALQu7MA8E
AgACMAkDBwAqBZCAAAgwDQYJKoZIhvcNAQELBQADggEBAFBCPpRVy6JA2/t8jbMi
z/I7xPCk8KtLr69P2ama43hrRznYfBh3lNj40VHc2J3Dcdb1WBsnv2bLLOiZaXaY
OKNQarNDegmwxOYp7txXxx0/Kn35Rc/P1UXxUb9RfHONW47TheNK/9Hsmny5ykR3
biBKkSMuItMxESidq1qmWk3FmMY+8XE9zTffXMQVzdNkHSbN6Jp5c5cVCaSebMn0
5FRVAjv2Gn/AC/1R2gwcInbBZLntFcAGEx843ALa4SEMeCYMtYJNDyOa66Hvo9i1
d1P39HDYGnuilRUFIa4pz7J8VHji2TcnaMy52p1K072xmTOAycZZE1Y5SsRfOYyH
LjM=
-----END CERTIFICATE-----
Generated at Thu Sep 26 19:18:10 2024 by rpki-client on console-ams.rpki-client.org