Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/RQrl3WQtKY1KxC9eec32ZcXJJr8.roa
File: RQrl3WQtKY1KxC9eec32ZcXJJr8.roa (raw, json)
Hash identifier: SW1YtRnxrgJHiMqJyBs9DmkAg3fZsfDFW9FgctWzhdc=
Subject key identifier: 45:0A:E5:DD:64:2D:29:8D:4A:C4:2F:5E:79:CD:F6:65:C5:C9:26:BF
Certificate issuer: /CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Certificate serial: 019298F08351D961661B0DFA56CC6A2237F3
Authority key identifier: DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/RQrl3WQtKY1KxC9eec32ZcXJJr8.roa
Signing time: Thu 17 Oct 2024 05:25:52 +0000
ROA not before: Thu 17 Oct 2024 05:25:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214311
IP address blocks: 46.36.200.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 22:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:98:f0:83:51:d9:61:66:1b:0d:fa:56:cc:6a:22:37:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd158a0da03266df144c89a7b6e35a761c4998f7
Validity
Not Before: Oct 17 05:25:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=450ae5dd642d298d4ac42f5e79cdf665c5c926bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:65:08:4b:79:b7:2e:8d:dc:9d:82:29:56:36:
59:dc:66:78:57:94:10:01:ec:81:24:89:15:ab:18:
8f:18:9e:d5:a8:51:d9:2a:d0:a8:0b:73:d1:aa:cf:
70:82:95:a0:5e:62:73:5f:63:a4:18:e8:aa:2c:06:
56:67:90:db:e3:2b:16:28:4c:c0:92:e6:d5:b4:f6:
77:6b:3c:94:c9:d5:84:f5:b1:f4:7e:59:22:fd:4d:
5b:d3:90:5c:18:42:d6:83:1c:8d:5b:ea:5b:1a:ba:
2c:60:00:33:4e:ce:eb:3a:52:5d:26:20:64:09:94:
cb:a1:51:65:e9:16:05:dc:b4:68:a6:27:08:d5:03:
a7:89:51:28:94:af:02:aa:4a:77:03:73:49:00:06:
1a:f6:4d:aa:f8:08:7e:52:33:d0:8d:87:e3:81:a4:
27:44:b2:78:9a:ac:28:bc:0e:27:97:9a:72:e9:3a:
24:86:f2:c8:94:35:e7:1d:56:97:58:09:49:86:30:
18:d6:ad:b3:6f:6d:91:c2:28:e5:42:9a:a4:87:74:
d3:3e:7a:46:5d:75:c0:eb:d1:88:0a:f7:63:96:8a:
e6:6d:22:88:55:e7:5f:f0:6c:1d:c5:2d:16:da:0e:
2d:c7:48:5f:e3:62:c9:b1:f7:43:9b:55:e6:44:75:
cc:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0A:E5:DD:64:2D:29:8D:4A:C4:2F:5E:79:CD:F6:65:C5:C9:26:BF
X509v3 Authority Key Identifier:
keyid:DD:15:8A:0D:A0:32:66:DF:14:4C:89:A7:B6:E3:5A:76:1C:49:98:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3RWKDaAyZt8UTImntuNadhxJmPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/RQrl3WQtKY1KxC9eec32ZcXJJr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/0b55ab-acc8-41da-9c80-e8f20aadde99/1/3RWKDaAyZt8UTImntuNadhxJmPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.36.200.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:92:1a:46:62:47:87:be:50:7f:c2:fa:a5:9c:63:a3:f2:d0:
87:5a:ab:41:08:47:51:e0:77:00:b0:63:f8:ff:d2:b2:ab:b6:
98:7a:e6:57:4c:3c:86:a5:e9:f8:40:09:ce:9a:99:a6:30:67:
eb:0b:1e:1f:29:31:9c:98:2d:27:8a:88:d3:53:97:55:ae:e4:
44:14:03:3d:40:27:8a:0d:53:d4:b6:b5:1d:29:58:0e:ac:66:
e6:52:7f:e5:eb:93:b0:d3:2d:56:b4:f1:33:e9:46:63:b3:2b:
f3:a6:6d:5e:7d:37:37:79:44:18:5f:4e:e2:f0:81:1a:64:61:
d3:c1:90:e4:21:bd:6d:aa:ff:26:a0:bf:70:ca:39:5a:80:24:
91:58:00:cd:36:17:ca:1a:8e:a3:fd:2f:02:4e:14:11:a9:80:
de:39:83:05:81:c8:b2:6d:1c:4b:71:d2:eb:ee:ba:35:cf:fc:
b0:64:63:fb:c5:d4:84:18:c9:a0:4f:d7:3e:92:88:4b:c9:f6:
4b:da:bd:91:54:6e:a3:88:ce:fe:5e:ad:f2:37:ed:ea:e8:18:
f1:a9:c8:84:12:d0:45:d9:bb:be:79:da:16:32:73:e5:58:49:
b3:68:7f:02:11:52:6d:80:93:06:a9:73:cb:3f:02:a0:ce:04:
7f:7a:69:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKY8INR2WFmGw36VsxqIjfzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkMTU4YTBkYTAzMjY2ZGYxNDRjODlhN2I2ZTM1YTc2MWM0
OTk4ZjcwHhcNMjQxMDE3MDUyNTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTBhZTVkZDY0MmQyOThkNGFjNDJmNWU3OWNkZjY2NWM1YzkyNmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGUIS3m3Lo3cnYIpVjZZ3GZ4V5QQ
AeyBJIkVqxiPGJ7VqFHZKtCoC3PRqs9wgpWgXmJzX2OkGOiqLAZWZ5Db4ysWKEzA
kubVtPZ3azyUydWE9bH0flki/U1b05BcGELWgxyNW+pbGrosYAAzTs7rOlJdJiBk
CZTLoVFl6RYF3LRopicI1QOniVEolK8Cqkp3A3NJAAYa9k2q+Ah+UjPQjYfjgaQn
RLJ4mqwovA4nl5py6TokhvLIlDXnHVaXWAlJhjAY1q2zb22RwijlQpqkh3TTPnpG
XXXA69GICvdjlormbSKIVedf8GwdxS0W2g4tx0hf42LJsfdDm1XmRHXMVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEUK5d1kLSmNSsQvXnnN9mXFySa/MB8GA1UdIwQY
MBaAFN0Vig2gMmbfFEyJp7bjWnYcSZj3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAt
ZThmMjBhYWRkZTk5LzEvUlFybDNXUXRLWTFLeEM5ZWVjMzJaY1hKSnI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8wYjU1YWItYWNjOC00MWRhLTljODAtZThmMjBhYWRkZTk5
LzEvM1JXS0RhQXladDhVVEltbnR1TmFkaHhKbVBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiTIMA0G
CSqGSIb3DQEBCwUAA4IBAQB8khpGYkeHvlB/wvqlnGOj8tCHWqtBCEdR4HcAsGP4
/9Kyq7aYeuZXTDyGpen4QAnOmpmmMGfrCx4fKTGcmC0niojTU5dVruREFAM9QCeK
DVPUtrUdKVgOrGbmUn/l65Ow0y1WtPEz6UZjsyvzpm1efTc3eUQYX07i8IEaZGHT
wZDkIb1tqv8moL9wyjlagCSRWADNNhfKGo6j/S8CThQRqYDeOYMFgciybRxLcdLr
7ro1z/ywZGP7xdSEGMmgT9c+kohLyfZL2r2RVG6jiM7+Xq3yN+3q6BjxqciEEtBF
2bu+edoWMnPlWEmzaH8CEVJtgJMGqXPLPwKgzgR/emnY
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:15:30 2024 by rpki-client on console-ams.rpki-client.org