Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SA_EsTHJGMYyAX1MkpXhgVNqILA.roa
File: SA_EsTHJGMYyAX1MkpXhgVNqILA.roa (raw, json)
Hash identifier: 388teqyU5k0Vn6GdLLNg2zC9W+2SOrM3VjdiNyDVAtc=
Subject key identifier: 48:0F:C4:B1:31:C9:18:C6:32:01:7D:4C:92:95:E1:81:53:6A:20:B0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019082FA4806544F04B71210DC7CA73C4647
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SA_EsTHJGMYyAX1MkpXhgVNqILA.roa
Signing time: Fri 05 Jul 2024 12:59:18 +0000
ROA not before: Fri 05 Jul 2024 12:59:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 45.151.90.0/24 maxlen: 24
45.151.91.0/24 maxlen: 24
87.120.166.0/24 maxlen: 24
185.246.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Jul 2024 14:12:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:82:fa:48:06:54:4f:04:b7:12:10:dc:7c:a7:3c:46:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 5 12:59:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=480fc4b131c918c632017d4c9295e181536a20b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:57:80:82:cf:68:47:7f:ea:c1:ee:55:76:
2c:1a:29:ed:75:dc:f5:58:e6:08:82:cd:16:e1:77:
37:7b:13:e0:25:55:ac:69:12:ae:dd:f2:8a:7a:1b:
52:16:6b:14:5b:19:da:43:44:9f:fb:8f:d5:0d:54:
5d:73:42:7e:dc:85:bd:4b:af:3b:f3:19:ce:89:16:
cc:e3:89:62:6a:91:24:3a:5a:59:e3:71:3b:46:77:
b8:b8:62:4d:8c:1d:ae:59:65:4a:87:f5:34:1f:d6:
83:64:45:80:78:68:52:61:77:53:65:ca:f6:18:64:
50:e0:9d:00:f6:c7:19:4a:94:31:7a:77:4f:2c:7d:
cc:4d:de:a6:b9:04:47:ec:5a:30:0c:35:51:03:df:
17:f1:78:97:c3:8f:3b:cf:b3:d1:79:6c:c5:4e:31:
0e:ce:29:03:78:fd:d7:04:11:d7:a8:06:da:13:71:
b9:32:19:63:43:97:10:03:5f:88:13:42:0c:95:de:
82:62:45:07:28:4c:55:10:8f:8f:35:96:94:be:f8:
01:d0:94:76:be:68:02:42:e7:55:22:d6:52:d3:42:
30:6d:9c:d9:96:b0:63:4f:36:dd:e4:d6:a9:b3:c1:
3b:24:dc:37:d8:2f:95:f4:71:bd:f3:56:8a:1a:c2:
c4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0F:C4:B1:31:C9:18:C6:32:01:7D:4C:92:95:E1:81:53:6A:20:B0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SA_EsTHJGMYyAX1MkpXhgVNqILA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.90.0/23
87.120.166.0/24
185.246.223.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:78:7f:db:b8:bb:c4:76:03:42:e8:a2:40:ed:48:01:91:2a:
83:be:9d:15:0d:06:d2:ac:a5:c2:60:fc:a7:dc:de:9d:97:ff:
ec:c4:4c:b8:df:6e:92:5a:c8:18:18:60:1e:c0:24:ff:b3:6f:
10:e3:e6:28:35:63:32:05:c8:2b:1f:a0:94:ee:6d:10:e6:c6:
9d:2a:e9:cc:92:e9:af:fb:a3:73:df:4b:45:8c:41:5c:cf:ae:
9d:95:66:c8:17:aa:9a:a8:e9:e6:01:64:bf:5c:25:da:d7:b6:
97:ee:27:d0:18:cc:a6:9a:65:8e:20:b9:72:f6:b0:aa:47:9e:
89:b5:02:93:00:85:af:3b:94:61:91:1a:a9:d5:6a:d1:b8:c9:
2a:95:a4:77:6f:a2:34:12:a4:35:f7:82:9c:e9:7d:5e:08:5a:
c5:e4:5d:5b:15:1b:7d:2d:45:20:06:b8:71:84:e1:b1:4e:a2:
51:23:03:0e:d9:22:d4:36:49:a6:45:f3:c0:8b:2d:d5:22:da:
b5:8c:60:30:8b:4c:da:ba:a0:3f:41:b0:1d:23:56:e2:d0:58:
82:57:3d:61:0a:a9:37:71:5f:04:83:d6:39:a8:00:1f:c6:2a:
27:2f:7b:f6:4d:bd:4e:d1:ba:86:b1:49:4e:57:4e:f7:1c:23:
30:94:52:a8
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZCC+kgGVE8EtxIQ3HynPEZHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNzA1MTI1OTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODBmYzRiMTMxYzkxOGM2MzIwMTdkNGM5Mjk1ZTE4MTUzNmEyMGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjY1XgILPaEd/6sHuVXYsGintddz1
WOYIgs0W4Xc3exPgJVWsaRKu3fKKehtSFmsUWxnaQ0Sf+4/VDVRdc0J+3IW9S687
8xnOiRbM44liapEkOlpZ43E7Rne4uGJNjB2uWWVKh/U0H9aDZEWAeGhSYXdTZcr2
GGRQ4J0A9scZSpQxendPLH3MTd6muQRH7FowDDVRA98X8XiXw487z7PReWzFTjEO
zikDeP3XBBHXqAbaE3G5MhljQ5cQA1+IE0IMld6CYkUHKExVEI+PNZaUvvgB0JR2
vmgCQudVItZS00IwbZzZlrBjTzbd5Naps8E7JNw32C+V9HG981aKGsLETwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEgPxLExyRjGMgF9TJKV4YFTaiCwMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvU0FfRXNUSEpHTVl5QVgxTWtwWGhnVk5xSUxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLZdaAwQA
V3imAwQAufbfMA0GCSqGSIb3DQEBCwUAA4IBAQA8eH/buLvEdgNC6KJA7UgBkSqD
vp0VDQbSrKXCYPyn3N6dl//sxEy4326SWsgYGGAewCT/s28Q4+YoNWMyBcgrH6CU
7m0Q5sadKunMkumv+6Nz30tFjEFcz66dlWbIF6qaqOnmAWS/XCXa17aX7ifQGMym
mmWOILly9rCqR56JtQKTAIWvO5RhkRqp1WrRuMkqlaR3b6I0EqQ194Kc6X1eCFrF
5F1bFRt9LUUgBrhxhOGxTqJRIwMO2SLUNkmmRfPAiy3VItq1jGAwi0zauqA/QbAd
I1bi0FiCVz1hCqk3cV8Eg9Y5qAAfxionL3v2Tb1O0bqGsUlOV073HCMwlFKo
-----END CERTIFICATE-----
Generated at Mon Apr 28 02:02:10 2025 by rpki-client