Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/2S4zDVnc10n2kjsDQEf4eepfJO8.roa
File: 2S4zDVnc10n2kjsDQEf4eepfJO8.roa (raw, json)
Hash identifier: 3Kqfbjn0LHH6s3j2XXYE0WdJcNSPA7jFkGX4RZdAfy0=
Subject key identifier: D9:2E:33:0D:59:DC:D7:49:F6:92:3B:03:40:47:F8:79:EA:5F:24:EF
Certificate issuer: /CN=3a0429b5aecac8364544bf623f94f163afdce561
Certificate serial: 018DD4B109A13F2BAA77D76C9D868460B1F3
Authority key identifier: 3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/2S4zDVnc10n2kjsDQEf4eepfJO8.roa
Signing time: Fri 23 Feb 2024 06:39:48 +0000
ROA not before: Fri 23 Feb 2024 06:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 146.0.0.0/24 maxlen: 24
146.0.1.0/24 maxlen: 24
146.0.2.0/24 maxlen: 24
146.0.5.0/24 maxlen: 24
146.0.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Mar 2024 08:55:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d4:b1:09:a1:3f:2b:aa:77:d7:6c:9d:86:84:60:b1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0429b5aecac8364544bf623f94f163afdce561
Validity
Not Before: Feb 23 06:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d92e330d59dcd749f6923b034047f879ea5f24ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3d:8d:1e:ce:24:8c:5c:53:6e:74:c5:18:e7:
f2:f5:76:b0:5c:f8:12:b4:4b:3c:4d:8b:6b:0c:5e:
29:17:38:79:04:65:48:68:9c:1a:8f:5c:7a:1d:43:
37:21:ef:fd:2a:50:82:16:fb:bb:65:00:4c:ca:b4:
6b:ca:a3:fc:1b:87:5c:1e:d7:c0:da:e5:32:43:a5:
99:e3:00:fb:8a:4c:ca:c6:81:02:31:97:4c:73:5e:
25:37:70:1c:6f:da:e0:11:65:84:8b:ef:ab:43:ff:
e7:69:2b:8a:07:65:2a:2e:6e:bd:5e:3e:e6:a7:22:
cf:91:c9:89:a9:d4:32:51:15:70:61:9f:19:d7:1f:
5d:16:7f:f4:ac:0d:10:66:e9:d6:f9:40:e0:ea:63:
6b:80:7d:85:46:a0:2e:9e:26:f8:86:dd:19:54:f2:
4d:d3:a0:3f:b0:74:99:38:e1:58:00:72:a9:c1:39:
5d:7b:c7:72:92:99:ad:3b:3c:5f:2c:1d:15:89:07:
01:c8:b0:c3:1d:42:c4:9f:5f:65:60:f2:40:9b:e5:
27:4d:3e:6a:9d:af:9c:d7:f7:28:1b:cc:32:71:81:
d7:24:0f:eb:be:18:94:e8:b7:5d:67:f6:a8:10:a3:
8b:cb:89:7c:e1:3e:63:b7:d6:d0:36:c8:99:81:78:
8f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2E:33:0D:59:DC:D7:49:F6:92:3B:03:40:47:F8:79:EA:5F:24:EF
X509v3 Authority Key Identifier:
keyid:3A:04:29:B5:AE:CA:C8:36:45:44:BF:62:3F:94:F1:63:AF:DC:E5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgQpta7KyDZFRL9iP5TxY6_c5WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/2S4zDVnc10n2kjsDQEf4eepfJO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/fb9215-d1d1-47c2-ac81-84712c9f3464/1/OgQpta7KyDZFRL9iP5TxY6_c5WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.0.0.0-146.0.2.255
146.0.5.0/24
146.0.15.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b0:fc:d5:7b:81:35:66:e6:1a:8e:8f:ed:b9:cf:96:c8:87:
8c:cf:8f:ea:a6:97:80:3d:1f:ad:67:49:d0:95:2e:d9:fc:1f:
2e:ad:ee:fd:58:82:90:e4:ff:d5:3c:4d:33:66:02:0a:27:50:
1c:fe:90:d0:db:3d:47:ef:19:2d:6d:58:17:55:be:28:34:3d:
dd:67:a0:73:ea:73:6d:11:61:f2:38:e7:4a:fa:f7:ee:4e:25:
b3:dd:c0:99:4f:9a:95:51:a8:15:c5:22:7c:a8:37:7c:ec:25:
b3:59:e6:56:b9:71:55:8c:89:2f:7a:15:5b:53:24:cb:9d:73:
ad:03:f1:88:75:63:2b:c4:4a:4a:e0:67:5d:16:63:76:25:b6:
ba:3f:c4:00:c6:03:15:fa:67:3f:3c:bc:bb:34:7f:2d:dc:38:
8d:15:3c:fb:fb:fe:1a:fd:cc:d7:53:cb:80:95:7a:e1:ae:c9:
e8:46:2e:ac:d8:8f:a3:0f:a9:4a:54:e6:2b:ce:f3:ae:c1:a1:
49:9a:60:ec:e0:e9:d0:a3:0a:75:4f:02:41:b3:66:1d:0d:45:
c6:44:72:13:37:25:79:e4:37:3e:4f:ab:c0:42:0c:05:64:87:
6e:a0:ff:85:4a:4b:30:a4:cb:1c:1d:d3:3a:ef:ba:5e:ea:a4:
c3:7f:4e:be
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAY3UsQmhPyuqd9dsnYaEYLHzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMDQyOWI1YWVjYWM4MzY0NTQ0YmY2MjNmOTRmMTYzYWZk
Y2U1NjEwHhcNMjQwMjIzMDYzOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTJlMzMwZDU5ZGNkNzQ5ZjY5MjNiMDM0MDQ3Zjg3OWVhNWYyNGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhj2NHs4kjFxTbnTFGOfy9XawXPgS
tEs8TYtrDF4pFzh5BGVIaJwaj1x6HUM3Ie/9KlCCFvu7ZQBMyrRryqP8G4dcHtfA
2uUyQ6WZ4wD7ikzKxoECMZdMc14lN3Acb9rgEWWEi++rQ//naSuKB2UqLm69Xj7m
pyLPkcmJqdQyURVwYZ8Z1x9dFn/0rA0QZunW+UDg6mNrgH2FRqAunib4ht0ZVPJN
06A/sHSZOOFYAHKpwTlde8dykpmtOzxfLB0ViQcByLDDHULEn19lYPJAm+UnTT5q
na+c1/coG8wycYHXJA/rvhiU6LddZ/aoEKOLy4l84T5jt9bQNsiZgXiPLwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFNkuMw1Z3NdJ9pI7A0BH+HnqXyTvMB8GA1UdIwQY
MBaAFDoEKbWuysg2RUS/Yj+U8WOv3OVhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEt
ODQ3MTJjOWYzNDY0LzEvMlM0ekRWbmMxMG4ya2pzRFFFZjRlZXBmSk84LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9mYjkyMTUtZDFkMS00N2MyLWFjODEtODQ3MTJjOWYzNDY0
LzEvT2dRcHRhN0t5RFpGUkw5aVA1VHhZNl9jNVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYMAoDAgGSAwQA
kgACAwQAkgAFAwQAkgAPMA0GCSqGSIb3DQEBCwUAA4IBAQCGsPzVe4E1ZuYajo/t
uc+WyIeMz4/qppeAPR+tZ0nQlS7Z/B8ure79WIKQ5P/VPE0zZgIKJ1Ac/pDQ2z1H
7xktbVgXVb4oND3dZ6Bz6nNtEWHyOOdK+vfuTiWz3cCZT5qVUagVxSJ8qDd87CWz
WeZWuXFVjIkvehVbUyTLnXOtA/GIdWMrxEpK4GddFmN2Jba6P8QAxgMV+mc/PLy7
NH8t3DiNFTz7+/4a/czXU8uAlXrhrsnoRi6s2I+jD6lKVOYrzvOuwaFJmmDs4OnQ
owp1TwJBs2YdDUXGRHITNyV55Dc+T6vAQgwFZIduoP+FSkswpMscHdM677pe6qTD
f06+
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:08 2025 by rpki-client