Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/Q5sB-qo4wKNT7ymP_KhKMPe3iSI.roa
File: Q5sB-qo4wKNT7ymP_KhKMPe3iSI.roa (raw, json)
Hash identifier: NU8vkpJsUg22tIQ1sHEpssyAY8zVaFFy2aKmnFqBAxg=
Subject key identifier: 43:9B:01:FA:AA:38:C0:A3:53:EF:29:8F:FC:A8:4A:30:F7:B7:89:22
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01925CA3C15570B80AF2DAB682C1CA14250E
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/Q5sB-qo4wKNT7ymP_KhKMPe3iSI.roa
Signing time: Sat 05 Oct 2024 12:24:48 +0000
ROA not before: Sat 05 Oct 2024 12:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.95.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 12:24:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:5c:a3:c1:55:70:b8:0a:f2:da:b6:82:c1:ca:14:25:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Oct 5 12:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=439b01faaa38c0a353ef298ffca84a30f7b78922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:97:af:05:23:65:6c:8e:3d:7c:7a:c5:7c:3f:
80:84:0a:67:93:29:78:02:b4:5f:9f:30:5b:df:7a:
71:fd:8c:59:0e:47:d1:e5:c7:af:b3:23:6a:db:eb:
1f:6e:dc:22:d6:9d:a3:e8:32:e2:df:32:aa:21:4a:
d3:e3:de:45:fb:73:f3:7f:8c:9e:81:78:a7:cd:4d:
54:2b:62:da:17:7e:24:f6:0f:95:f8:81:2a:a7:ad:
cc:81:dc:33:fe:9e:27:98:c4:02:28:64:e5:70:9f:
3a:1c:d5:d5:8f:6f:70:17:70:d8:25:e1:a0:a2:9f:
6d:de:5d:20:c1:85:b5:4c:b5:e8:08:83:54:fe:0b:
f8:8d:b8:d4:93:db:1a:fa:2e:15:7e:94:0e:95:53:
9b:aa:b5:60:98:e8:91:f1:e7:8b:8f:78:3b:ec:e6:
8d:d1:7e:9b:84:74:b4:44:62:20:f1:a7:79:2b:09:
e1:78:b4:5a:5b:56:45:e7:45:6e:ab:4f:2a:94:54:
d5:11:5e:18:c2:92:f2:fd:6f:8d:d8:15:cc:20:3c:
95:1c:c4:9a:c1:c8:9a:5e:90:d3:f7:5d:b2:89:61:
fb:46:1e:23:a1:37:37:2a:cb:6a:b6:a9:cf:e8:dc:
00:f7:25:27:7d:2e:22:41:24:e3:db:43:c7:21:6f:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9B:01:FA:AA:38:C0:A3:53:EF:29:8F:FC:A8:4A:30:F7:B7:89:22
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/Q5sB-qo4wKNT7ymP_KhKMPe3iSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.226.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:d3:61:f7:03:fb:6e:b6:b3:6c:71:77:ac:70:a3:47:5f:ed:
4f:91:b8:c2:ff:a5:21:f2:89:a0:b6:91:20:e7:c2:b2:cb:1e:
cc:12:a2:fd:84:48:2b:33:12:48:8a:9f:5d:aa:f8:35:22:79:
89:f5:25:59:b3:ce:5b:76:54:91:2b:e9:1e:6d:10:c1:5d:b3:
00:15:64:86:f9:4b:ad:d1:f4:1b:04:93:a1:b5:ba:12:fc:2f:
58:33:95:aa:9f:6d:56:98:f6:de:4c:a7:4d:cb:fb:5d:2e:51:
80:50:42:fc:00:f7:27:c7:b8:39:ff:51:e0:19:ae:dd:c3:c5:
43:0c:a2:4b:ce:ee:2c:4d:2c:0f:eb:bf:eb:1f:c4:8a:27:8b:
a4:7b:36:ed:bf:ef:84:52:ef:fa:6f:ac:89:cb:0a:5d:78:3a:
32:a5:54:7b:83:1d:eb:4a:be:02:31:ac:4d:b4:dd:e0:1d:4e:
d0:78:fe:15:eb:ee:d6:2a:18:3c:b3:6e:d8:c1:3a:ec:f9:df:
3e:71:92:f9:29:42:0d:cf:a6:a8:9c:e6:56:87:54:ea:9f:82:
a2:b2:6e:f7:96:32:f3:1e:40:2b:f6:69:b4:69:54:38:90:5f:
07:e4:a8:40:d8:39:ce:1e:94:3f:62:69:af:4f:cd:07:04:61:
44:b5:ea:86
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJco8FVcLgK8tq2gsHKFCUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5
M2UzMDkwHhcNMjQxMDA1MTIyNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzliMDFmYWFhMzhjMGEzNTNlZjI5OGZmY2E4NGEzMGY3Yjc4OTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5evBSNlbI49fHrFfD+AhApnkyl4
ArRfnzBb33px/YxZDkfR5cevsyNq2+sfbtwi1p2j6DLi3zKqIUrT495F+3Pzf4ye
gXinzU1UK2LaF34k9g+V+IEqp63Mgdwz/p4nmMQCKGTlcJ86HNXVj29wF3DYJeGg
op9t3l0gwYW1TLXoCINU/gv4jbjUk9sa+i4VfpQOlVObqrVgmOiR8eeLj3g77OaN
0X6bhHS0RGIg8ad5KwnheLRaW1ZF50Vuq08qlFTVEV4YwpLy/W+N2BXMIDyVHMSa
wciaXpDT912yiWH7Rh4joTc3KstqtqnP6NwA9yUnfS4iQSTj20PHIW8GcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEObAfqqOMCjU+8pj/yoSjD3t4kiMB8GA1UdIwQY
MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt
ZTZiZjMxNmM5NGExLzEvUTVzQi1xbzR3S05UN3ltUF9LaEtNUGUzaVNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx
LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV/iMA0G
CSqGSIb3DQEBCwUAA4IBAQCo02H3A/tutrNscXescKNHX+1PkbjC/6Uh8omgtpEg
58Kyyx7MEqL9hEgrMxJIip9dqvg1InmJ9SVZs85bdlSRK+kebRDBXbMAFWSG+Uut
0fQbBJOhtboS/C9YM5Wqn21WmPbeTKdNy/tdLlGAUEL8APcnx7g5/1HgGa7dw8VD
DKJLzu4sTSwP67/rH8SKJ4ukezbtv++EUu/6b6yJywpdeDoypVR7gx3rSr4CMaxN
tN3gHU7QeP4V6+7WKhg8s27YwTrs+d8+cZL5KUINz6aonOZWh1Tqn4Kism73ljLz
HkAr9mm0aVQ4kF8H5KhA2DnOHpQ/YmmvT80HBGFEteqG
-----END CERTIFICATE-----
Generated at Mon Oct 14 15:20:32 2024 by rpki-client on console-fra.rpki-client.org