Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/Tie0k1zYG1QE5cmWMPquFpNY1bI.roa
File: Tie0k1zYG1QE5cmWMPquFpNY1bI.roa (raw, json)
Hash identifier: HipincgD+zgS5C6Q+ZMfu3nAuurl/OPCQfoHus1XaXo=
Subject key identifier: 4E:27:B4:93:5C:D8:1B:54:04:E5:C9:96:30:FA:AE:16:93:58:D5:B2
Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Certificate serial: 0191672B643EDF05762EC3F0B489997C71C2
Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/Tie0k1zYG1QE5cmWMPquFpNY1bI.roa
Signing time: Sun 18 Aug 2024 20:26:22 +0000
ROA not before: Sun 18 Aug 2024 20:26:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 37.143.4.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Aug 2024 15:43:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:67:2b:64:3e:df:05:76:2e:c3:f0:b4:89:99:7c:71:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5
Validity
Not Before: Aug 18 20:26:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e27b4935cd81b5404e5c99630faae169358d5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:57:5f:02:69:80:f0:d9:8c:48:fa:d5:9a:aa:
c9:eb:02:40:29:e1:9e:9a:fd:ea:6b:3f:2d:f1:d2:
bc:03:bd:e8:73:ef:da:97:fe:fb:d0:a5:93:90:e4:
56:e6:31:9a:a0:fe:b8:ce:d6:99:ce:f1:33:b5:27:
52:39:99:e5:bb:fb:8c:9f:3a:6e:b7:e9:08:3c:a6:
eb:6d:63:59:a8:2b:98:9d:4e:11:ed:c7:88:af:e1:
d9:d0:b5:eb:b7:d1:ee:5e:94:9e:66:0e:96:6e:4d:
33:99:68:91:48:ca:8a:67:df:d5:4e:d5:9c:8e:72:
b2:e7:c5:25:2d:b6:54:b7:8c:8f:9b:6c:8d:ab:63:
f5:45:ca:04:df:9a:e6:ed:e0:c0:ac:b0:42:ba:90:
67:64:6e:7d:52:43:6c:6b:06:ce:d5:32:6d:3d:95:
93:93:65:67:9f:ea:40:36:1b:e2:04:d6:b5:2a:58:
95:2f:2b:b0:1e:70:df:3d:85:2a:3e:9c:77:e5:b8:
0d:ee:55:2e:22:a4:7e:f4:cb:ff:d0:f6:49:8a:26:
d6:d9:83:46:39:d7:f0:1e:65:66:77:40:0c:f1:c2:
c5:03:47:c4:87:96:43:68:c1:6c:11:89:c5:51:10:
66:b2:d0:e0:02:8b:07:21:5e:a6:3b:55:4d:af:38:
df:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:27:B4:93:5C:D8:1B:54:04:E5:C9:96:30:FA:AE:16:93:58:D5:B2
X509v3 Authority Key Identifier:
keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/Tie0k1zYG1QE5cmWMPquFpNY1bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:14:55:9e:59:00:b5:c8:fa:2e:a2:b6:57:1f:4a:40:01:2a:
26:11:53:ca:80:d1:b2:0f:62:83:13:97:66:80:c0:70:10:1f:
2f:ba:7d:98:9a:b1:4e:8e:34:f2:42:cb:05:49:41:eb:08:26:
ac:cc:32:29:2b:d6:f8:b9:21:aa:89:2e:ad:df:c7:0e:bf:5b:
da:bf:98:70:46:36:29:3c:20:51:3b:a9:0d:30:ad:42:57:0a:
1e:60:35:50:bc:51:75:3f:1d:64:1b:b8:b8:96:e1:03:e8:03:
46:ec:a3:77:5a:ea:c7:ad:3f:0e:89:4b:5f:fe:48:0c:9f:59:
27:38:36:59:92:b0:de:6d:e3:6c:d6:8c:cb:56:6d:aa:93:72:
76:37:5d:12:47:fc:a8:19:96:3c:bf:90:38:bf:1c:78:b1:af:
7e:32:2f:a0:07:cb:fc:18:07:1d:b0:c8:00:63:5f:b3:10:78:
ec:36:b5:26:49:85:ae:ea:b9:f8:37:e8:8e:82:07:1e:c3:5a:
66:dd:18:c8:69:95:ee:f4:50:32:41:66:57:76:ea:08:59:36:
cb:14:26:d9:fa:af:7e:7e:55:55:36:b7:8b:59:dc:19:77:2d:
df:21:e2:2a:51:26:41:c2:8d:77:7f:d3:e0:6a:bf:f3:7b:00:
d9:32:1c:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFnK2Q+3wV2LsPwtImZfHHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh
M2Q0YjUwHhcNMjQwODE4MjAyNjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTI3YjQ5MzVjZDgxYjU0MDRlNWM5OTYzMGZhYWUxNjkzNThkNWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6FdfAmmA8NmMSPrVmqrJ6wJAKeGe
mv3qaz8t8dK8A73oc+/al/770KWTkORW5jGaoP64ztaZzvEztSdSOZnlu/uMnzpu
t+kIPKbrbWNZqCuYnU4R7ceIr+HZ0LXrt9HuXpSeZg6Wbk0zmWiRSMqKZ9/VTtWc
jnKy58UlLbZUt4yPm2yNq2P1RcoE35rm7eDArLBCupBnZG59UkNsawbO1TJtPZWT
k2Vnn+pANhviBNa1KliVLyuwHnDfPYUqPpx35bgN7lUuIqR+9Mv/0PZJiibW2YNG
OdfwHmVmd0AM8cLFA0fEh5ZDaMFsEYnFURBmstDgAosHIV6mO1VNrzjftQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE4ntJNc2BtUBOXJljD6rhaTWNWyMB8GA1UdIwQY
MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt
MmUxYzBhZjRmYWE0LzEvVGllMGsxellHMVFFNWNtV01QcXVGcE5ZMWJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0
LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCJY8EMA0G
CSqGSIb3DQEBCwUAA4IBAQAuFFWeWQC1yPouorZXH0pAASomEVPKgNGyD2KDE5dm
gMBwEB8vun2YmrFOjjTyQssFSUHrCCaszDIpK9b4uSGqiS6t38cOv1vav5hwRjYp
PCBRO6kNMK1CVwoeYDVQvFF1Px1kG7i4luED6ANG7KN3WurHrT8OiUtf/kgMn1kn
ODZZkrDebeNs1ozLVm2qk3J2N10SR/yoGZY8v5A4vxx4sa9+Mi+gB8v8GAcdsMgA
Y1+zEHjsNrUmSYWu6rn4N+iOggcew1pm3RjIaZXu9FAyQWZXduoIWTbLFCbZ+q9+
flVVNreLWdwZdy3fIeIqUSZBwo13f9Pgar/zewDZMhxM
-----END CERTIFICATE-----
Generated at Tue Aug 20 19:03:39 2024 by rpki-client on console-ams.rpki-client.org