Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/drOwjdlmObPE2QUfJVasV9-YSE8.roa
File: drOwjdlmObPE2QUfJVasV9-YSE8.roa (raw, json)
Hash identifier: 61mJK9kr4AlRORrp5Q7dhjNhVeX+dXzG/AHUN62ZY+I=
Subject key identifier: 76:B3:B0:8D:D9:66:39:B3:C4:D9:05:1F:25:56:AC:57:DF:98:48:4F
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 0187993CF3D913C9872F94D839405146CBF6
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/drOwjdlmObPE2QUfJVasV9-YSE8.roa
Signing time: Wed 19 Apr 2023 11:18:41 +0000
ROA not before: Wed 19 Apr 2023 11:18:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35251
IP address blocks: 45.138.68.0/24 maxlen: 24
45.138.69.0/24 maxlen: 24
45.138.70.0/24 maxlen: 24
45.138.71.0/24 maxlen: 24
45.158.22.0/24 maxlen: 24
45.158.23.0/24 maxlen: 24
45.158.20.0/24 maxlen: 24
45.158.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:3c:f3:d9:13:c9:87:2f:94:d8:39:40:51:46:cb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Apr 19 11:18:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76b3b08dd96639b3c4d9051f2556ac57df98484f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b6:9b:34:48:65:14:7b:31:91:9f:12:df:98:
f8:c5:19:5a:e9:35:84:07:3e:c7:23:15:a8:c5:a0:
45:74:41:7e:97:a6:b0:81:88:f2:b2:8c:51:c4:06:
80:6b:33:ff:97:32:79:3b:60:7b:06:31:45:29:e3:
eb:e1:d0:b2:a5:ce:84:07:39:87:1d:33:56:d9:68:
c2:90:0f:9e:98:a7:64:e0:03:5e:74:16:f0:c1:79:
13:46:89:2a:8d:7a:e5:0c:7a:c7:6d:76:03:3a:ae:
40:e9:45:ab:a8:96:83:9c:52:7b:f6:65:b1:31:a0:
b6:9c:7f:a7:65:95:93:9b:89:17:33:5b:99:f4:91:
18:14:66:d2:2b:46:fe:51:53:d3:12:fd:d2:c0:fc:
57:b8:9e:f4:4a:de:4a:f6:84:ac:4f:3c:5c:18:c1:
56:76:7f:7e:92:d6:09:34:b5:38:93:5c:98:07:b5:
28:e5:f8:6b:f3:fc:eb:98:d6:55:db:38:ae:1b:88:
f3:a6:1c:18:97:4a:55:44:f5:9b:bf:13:5f:e3:8c:
29:a3:65:29:8f:96:e8:07:22:c6:30:a2:94:f3:3a:
02:95:26:dd:b2:7b:05:49:d7:33:19:68:e6:b5:6c:
b1:55:15:c9:f1:cf:e8:ac:e5:80:12:d5:ac:88:0b:
e5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B3:B0:8D:D9:66:39:B3:C4:D9:05:1F:25:56:AC:57:DF:98:48:4F
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/drOwjdlmObPE2QUfJVasV9-YSE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.68.0/22
45.158.20.0/22
Signature Algorithm: sha256WithRSAEncryption
21:7b:45:37:a9:42:de:94:1b:65:9f:35:ad:08:ba:66:fc:ff:
f0:4d:c5:95:09:b2:2c:1b:0a:6b:3c:3d:bb:85:e9:c2:e7:1f:
2d:e0:d2:ae:80:85:ff:92:0e:38:7c:ab:b5:45:84:ad:1e:8b:
73:44:a3:77:6d:11:27:4a:ac:4a:db:ca:24:ad:60:6c:34:c2:
81:94:26:ef:40:59:3e:b4:e0:77:ab:79:30:d5:66:57:43:40:
32:d0:a4:54:10:f7:79:28:74:3b:6e:c1:28:4d:47:bb:4f:c5:
d9:95:3f:c1:15:ed:35:d5:51:48:75:fd:2f:fe:d5:a0:9e:58:
67:4b:42:15:59:a9:3e:74:12:df:f1:bf:f8:ba:59:ca:a1:a4:
70:34:94:ab:b6:fe:55:26:c5:01:2b:76:8d:3f:9f:06:6a:70:
29:74:6f:db:fe:ce:1a:67:4c:a5:a5:df:1d:2d:ed:39:1c:76:
7c:7c:00:e5:a1:c2:53:68:34:27:32:70:79:43:fe:89:b7:14:
98:7c:cd:45:e1:d5:25:38:1e:60:5e:14:e9:a6:76:28:f1:b1:
74:15:39:e3:ed:e9:5f:d0:85:7f:dc:ee:c4:1a:a7:5c:7e:ca:
1d:01:5c:6b:46:a3:37:80:d6:6b:13:56:85:69:30:a2:5a:7a:
e6:d2:f8:eb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYeZPPPZE8mHL5TYOUBRRsv2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzMzM2MWZiYTg0MDkxNzRmYjNjNDgyYjhjYTI2ZjIzNWVi
ZDIyYzIwHhcNMjMwNDE5MTExODQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NmIzYjA4ZGQ5NjYzOWIzYzRkOTA1MWYyNTU2YWM1N2RmOTg0ODRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57abNEhlFHsxkZ8S35j4xRla6TWE
Bz7HIxWoxaBFdEF+l6awgYjysoxRxAaAazP/lzJ5O2B7BjFFKePr4dCypc6EBzmH
HTNW2WjCkA+emKdk4ANedBbwwXkTRokqjXrlDHrHbXYDOq5A6UWrqJaDnFJ79mWx
MaC2nH+nZZWTm4kXM1uZ9JEYFGbSK0b+UVPTEv3SwPxXuJ70St5K9oSsTzxcGMFW
dn9+ktYJNLU4k1yYB7Uo5fhr8/zrmNZV2ziuG4jzphwYl0pVRPWbvxNf44wpo2Up
j5boByLGMKKU8zoClSbdsnsFSdczGWjmtWyxVRXJ8c/orOWAEtWsiAvlFQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHazsI3ZZjmzxNkFHyVWrFffmEhPMB8GA1UdIwQY
MBaAFDMzYfuoQJF0+zxIK4yibyNevSLCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXpOaC02aEFrWFQ3UEVncmpLSnZJMTY5SXNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xMWUxM2YtNGNlYS00NGFmLTgxZjkt
YjJjY2NmMGVhZGFiLzEvZHJPd2pkbG1PYlBFMlFVZkpWYXNWOS1ZU0U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8xMWUxM2YtNGNlYS00NGFmLTgxZjktYjJjY2NmMGVhZGFi
LzEvTXpOaC02aEFrWFQ3UEVncmpLSnZJMTY5SXNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLYpEAwQC
LZ4UMA0GCSqGSIb3DQEBCwUAA4IBAQAhe0U3qULelBtlnzWtCLpm/P/wTcWVCbIs
GwprPD27henC5x8t4NKugIX/kg44fKu1RYStHotzRKN3bREnSqxK28okrWBsNMKB
lCbvQFk+tOB3q3kw1WZXQ0Ay0KRUEPd5KHQ7bsEoTUe7T8XZlT/BFe011VFIdf0v
/tWgnlhnS0IVWak+dBLf8b/4ulnKoaRwNJSrtv5VJsUBK3aNP58GanApdG/b/s4a
Z0ylpd8dLe05HHZ8fADlocJTaDQnMnB5Q/6JtxSYfM1F4dUlOB5gXhTppnYo8bF0
FTnj7elf0IV/3O7EGqdcfsodAVxrRqM3gNZrE1aFaTCiWnrm0vjr
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:32 2024 by rpki-client on console-ams.rpki-client.org