Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/rZaQRzvtQJjRJ_BRmetQYkwNPNE.roa
File: rZaQRzvtQJjRJ_BRmetQYkwNPNE.roa (raw, json)
Hash identifier: v+46C7Y4g42yATottxfVV4qOmE1kmbkbV76nJYHesnQ=
Subject key identifier: AD:96:90:47:3B:ED:40:98:D1:27:F0:51:99:EB:50:62:4C:0D:3C:D1
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 018AB30F94178A4E158406CF074C641173E5
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/rZaQRzvtQJjRJ_BRmetQYkwNPNE.roa
Signing time: Wed 20 Sep 2023 14:47:37 +0000
ROA not before: Wed 20 Sep 2023 14:47:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.95.224.0/24 maxlen: 24
45.95.225.0/24 maxlen: 24
45.95.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Oct 2023 15:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b3:0f:94:17:8a:4e:15:84:06:cf:07:4c:64:11:73:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Sep 20 14:47:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad9690473bed4098d127f05199eb50624c0d3cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:4e:63:ee:51:43:12:37:14:af:4a:06:68:
48:36:ed:5f:32:f7:f9:db:28:89:80:a1:b0:5f:81:
fc:cf:2a:b7:62:4c:34:68:b0:30:9f:79:27:58:59:
d7:3f:37:0c:fd:75:d9:0d:7c:8a:70:f7:b1:63:04:
d0:d8:20:93:00:78:31:15:06:29:3b:e7:b2:9c:88:
4b:e0:cb:e5:bb:bf:4e:60:54:08:d6:b0:00:7e:0c:
18:60:b6:ff:3d:0e:44:66:77:ec:f4:88:03:9e:0d:
e8:6b:12:f8:19:f2:ed:69:37:57:d1:a1:48:fe:87:
3f:16:cf:3c:06:0f:67:17:c9:88:5a:00:8a:05:ae:
b7:06:c6:9f:77:63:91:4c:62:1f:ec:d6:aa:74:e8:
e0:7b:6e:4b:bb:7f:4e:99:62:90:aa:d6:4e:de:76:
df:f6:5c:31:72:f4:2b:54:1a:22:ee:a3:a5:99:22:
bf:c4:b2:f0:ce:1d:f1:7d:1f:2d:2e:f7:c6:4f:4b:
a1:e6:22:07:d0:48:26:cb:32:1c:10:08:17:aa:92:
d7:0e:68:78:91:ff:cf:19:9e:a6:76:ad:2c:04:60:
f3:14:b5:be:9b:cb:61:26:0e:d8:51:a2:c8:0e:0b:
64:15:6e:d4:17:53:a6:15:d5:69:6a:43:06:52:4c:
f0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:96:90:47:3B:ED:40:98:D1:27:F0:51:99:EB:50:62:4C:0D:3C:D1
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/rZaQRzvtQJjRJ_BRmetQYkwNPNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.224.0-45.95.226.255
Signature Algorithm: sha256WithRSAEncryption
2f:f9:85:fc:96:56:6f:70:be:ef:cd:4c:cb:76:44:3d:c2:11:
3e:49:28:55:bf:45:ed:35:10:3a:b4:14:eb:a5:a8:c1:5d:9b:
f5:65:93:e1:6b:f6:e6:1e:1e:a4:dc:02:5c:97:d6:fe:b3:66:
5c:f3:79:10:be:bc:f1:de:96:db:33:db:ad:d4:a8:dd:28:c3:
f2:0f:5d:74:92:b9:c9:12:91:3f:34:13:94:09:88:98:4c:58:
1e:e5:c9:e4:3e:f3:44:5c:07:36:0b:99:60:6e:6b:7a:ab:ba:
ec:d6:63:a9:46:21:73:ad:8f:cc:76:6b:57:1f:2f:60:42:15:
16:df:06:1b:93:4d:dc:05:03:3b:f3:d9:5a:57:fc:d5:83:00:
76:ec:55:26:ae:24:b9:f7:b8:6a:10:15:20:8f:d6:ed:d5:23:
38:b6:fc:af:e7:b8:58:4d:83:01:97:86:5e:35:17:8b:a9:23:
d0:0d:c5:d3:64:c5:f6:99:c1:96:c8:88:41:fa:13:1f:f7:96:
19:fc:d5:87:17:56:85:06:1b:b5:d0:4a:b5:22:e9:f3:c9:e7:
b7:3c:58:6e:b6:f4:e2:a3:68:e6:b5:29:3e:68:53:8a:0a:3b:
02:98:bb:c0:7d:84:6b:8c:cb:d6:9c:e0:06:b2:12:55:de:39:
73:87:4f:33
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYqzD5QXik4VhAbPB0xkEXPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMzY2ODYyOGYwZGY3OWQwNDdlY2EwZDlhZGNmYzBiNjY5
M2UzMDkwHhcNMjMwOTIwMTQ0NzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDk2OTA0NzNiZWQ0MDk4ZDEyN2YwNTE5OWViNTA2MjRjMGQzY2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XNOY+5RQxI3FK9KBmhINu1fMvf5
2yiJgKGwX4H8zyq3Ykw0aLAwn3knWFnXPzcM/XXZDXyKcPexYwTQ2CCTAHgxFQYp
O+eynIhL4Mvlu79OYFQI1rAAfgwYYLb/PQ5EZnfs9IgDng3oaxL4GfLtaTdX0aFI
/oc/Fs88Bg9nF8mIWgCKBa63Bsafd2ORTGIf7NaqdOjge25Lu39OmWKQqtZO3nbf
9lwxcvQrVBoi7qOlmSK/xLLwzh3xfR8tLvfGT0uh5iIH0EgmyzIcEAgXqpLXDmh4
kf/PGZ6mdq0sBGDzFLW+m8thJg7YUaLIDgtkFW7UF1OmFdVpakMGUkzw+QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFK2WkEc77UCY0SfwUZnrUGJMDTzRMB8GA1UdIwQY
MBaAFL02aGKPDfedBH7KDZrc/Atmk+MJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMt
ZTZiZjMxNmM5NGExLzEvclphUVJ6dnRRSmpSSl9CUm1ldFFZa3dOUE5FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xYjU3MjItMWRkYS00ZGYzLWE0NWMtZTZiZjMxNmM5NGEx
LzEvdlRab1lvOE45NTBFZnNvTm10ejhDMmFUNHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAUtX+AD
BAAtX+IwDQYJKoZIhvcNAQELBQADggEBAC/5hfyWVm9wvu/NTMt2RD3CET5JKFW/
Re01EDq0FOulqMFdm/Vlk+Fr9uYeHqTcAlyX1v6zZlzzeRC+vPHeltsz263UqN0o
w/IPXXSSuckSkT80E5QJiJhMWB7lyeQ+80RcBzYLmWBua3qruuzWY6lGIXOtj8x2
a1cfL2BCFRbfBhuTTdwFAzvz2VpX/NWDAHbsVSauJLn3uGoQFSCP1u3VIzi2/K/n
uFhNgwGXhl41F4upI9ANxdNkxfaZwZbIiEH6Ex/3lhn81YcXVoUGG7XQSrUi6fPJ
57c8WG629OKjaOa1KT5oU4oKOwKYu8B9hGuMy9ac4AayElXeOXOHTzM=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:04 2024 by rpki-client on console-fra.rpki-client.org