Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/0BvidSypj2wioG_bodPhauqW4Kg.roa
File: 0BvidSypj2wioG_bodPhauqW4Kg.roa (raw, json)
Hash identifier: 0oL3MJyGSSIPtsbZwYeKaS3gPrAQeLh4FMvB6+QrqVk=
Subject key identifier: D0:1B:E2:75:2C:A9:8F:6C:22:A0:6F:DB:A1:D3:E1:6A:EA:96:E0:A8
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 01879518C5924C8EA6BD020CF296DA341F37
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/0BvidSypj2wioG_bodPhauqW4Kg.roa
Signing time: Tue 18 Apr 2023 16:00:41 +0000
ROA not before: Tue 18 Apr 2023 16:00:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16262
IP address blocks: 45.10.174.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:95:18:c5:92:4c:8e:a6:bd:02:0c:f2:96:da:34:1f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Apr 18 16:00:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d01be2752ca98f6c22a06fdba1d3e16aea96e0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0e:a2:ac:01:ba:f3:7a:a3:dc:f4:2d:61:70:
fc:81:d6:38:96:22:71:76:10:46:26:24:3c:87:5c:
79:5f:12:59:b6:2d:3a:77:e0:6a:74:ec:e4:0c:0e:
96:e1:0b:6b:33:f7:16:65:48:8c:51:17:48:c2:e5:
74:97:f8:d6:01:53:81:1d:01:20:42:3c:e2:db:d3:
b4:25:b8:c0:d1:c6:f2:e5:c9:72:6f:57:e1:14:85:
27:99:c1:81:f6:e8:11:a5:92:3f:4a:0e:21:55:a9:
86:7d:b2:05:1d:00:03:f1:63:d0:40:ee:0a:3c:19:
08:17:25:3e:0d:56:1d:cf:27:8e:6d:22:02:87:2f:
0e:cd:c5:70:ad:85:30:eb:6a:ca:22:08:27:38:7f:
b6:30:02:f7:be:94:6c:06:36:28:4e:01:d9:1d:9e:
f2:b2:b2:26:40:58:75:87:15:80:fc:f1:35:a0:f9:
a6:c4:64:03:1a:77:24:2e:4b:ba:75:c6:a9:4d:63:
94:1c:25:c6:db:98:f2:6d:f6:f1:1b:c1:85:e3:60:
5d:69:e7:09:0d:08:ee:57:81:0c:fa:05:20:ea:17:
61:d2:03:4e:8c:82:af:c2:75:d2:16:af:e9:ef:29:
13:6b:1b:5d:f5:19:0e:41:72:da:11:ae:72:ea:89:
c6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1B:E2:75:2C:A9:8F:6C:22:A0:6F:DB:A1:D3:E1:6A:EA:96:E0:A8
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/0BvidSypj2wioG_bodPhauqW4Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.174.0/24
Signature Algorithm: sha256WithRSAEncryption
01:87:2b:33:bd:de:96:b7:8c:40:81:df:ed:ae:6e:16:f6:17:
b3:7a:b9:3f:46:93:13:ac:6f:14:c3:2c:1c:23:b7:ba:fb:60:
fd:99:91:7b:0d:c0:f3:a7:79:29:6f:d0:6e:eb:df:d4:98:50:
f6:83:d7:b4:1a:c3:80:80:a7:20:31:28:04:ea:b3:a6:36:4a:
cb:2f:f9:3a:77:7f:89:e7:f2:81:02:3b:5f:47:97:23:2d:ee:
76:f5:88:3a:e7:d4:f6:f8:d6:d9:7c:27:07:e4:d8:cb:01:7e:
11:8a:a1:59:33:11:c4:ab:2d:c8:f5:57:f4:d1:c4:03:6f:a1:
e3:4f:d8:77:72:5d:b7:63:20:6c:b6:63:18:f4:65:04:cb:b1:
74:23:36:c3:7e:5c:b7:63:e0:cf:43:c6:fa:cd:4a:45:c8:65:
ff:ed:87:7a:b8:c8:15:43:c9:00:63:e5:c2:c9:28:38:87:61:
04:da:fb:1c:7d:df:25:8d:5d:49:dc:ba:53:e1:93:b9:8c:dd:
86:c5:bd:8e:90:b6:5d:32:cc:9d:80:51:4a:4f:3e:73:d9:6f:
65:8b:20:e4:61:4f:7d:ed:84:3b:53:4b:ee:61:a2:3e:fe:00:
e5:7a:d2:68:16:44:82:88:95:dd:29:3e:7e:cd:55:02:e1:1a:
d7:62:a4:5a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYeVGMWSTI6mvQIM8pbaNB83MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMDA4MDc2OThmMGIwOTdkNjlhYjM5MjY5MTdkMWRjYzgz
OGE2MjQwHhcNMjMwNDE4MTYwMDQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDFiZTI3NTJjYTk4ZjZjMjJhMDZmZGJhMWQzZTE2YWVhOTZlMGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA6irAG683qj3PQtYXD8gdY4liJx
dhBGJiQ8h1x5XxJZti06d+BqdOzkDA6W4QtrM/cWZUiMURdIwuV0l/jWAVOBHQEg
Qjzi29O0JbjA0cby5clyb1fhFIUnmcGB9ugRpZI/Sg4hVamGfbIFHQAD8WPQQO4K
PBkIFyU+DVYdzyeObSIChy8OzcVwrYUw62rKIggnOH+2MAL3vpRsBjYoTgHZHZ7y
srImQFh1hxWA/PE1oPmmxGQDGnckLku6dcapTWOUHCXG25jybfbxG8GF42BdaecJ
DQjuV4EM+gUg6hdh0gNOjIKvwnXSFq/p7ykTaxtd9RkOQXLaEa5y6onGxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNAb4nUsqY9sIqBv26HT4WrqluCoMB8GA1UdIwQY
MBaAFDoAgHaY8LCX1pqzkmkX0dzIOKYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMt
MTZhZmM0ZGZmZGQ0LzEvMEJ2aWRTeXBqMndpb0dfYm9kUGhhdXFXNEtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNDNkMjktY2Y3Mi00ZDAxLTkxOGMtMTZhZmM0ZGZmZGQ0
LzEvT2dDQWRwandzSmZXbXJPU2FSZlIzTWc0cGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQquMA0G
CSqGSIb3DQEBCwUAA4IBAQABhyszvd6Wt4xAgd/trm4W9hezerk/RpMTrG8Uwywc
I7e6+2D9mZF7DcDzp3kpb9Bu69/UmFD2g9e0GsOAgKcgMSgE6rOmNkrLL/k6d3+J
5/KBAjtfR5cjLe529Yg659T2+NbZfCcH5NjLAX4RiqFZMxHEqy3I9Vf00cQDb6Hj
T9h3cl23YyBstmMY9GUEy7F0IzbDfly3Y+DPQ8b6zUpFyGX/7Yd6uMgVQ8kAY+XC
ySg4h2EE2vscfd8ljV1J3LpT4ZO5jN2Gxb2OkLZdMsydgFFKTz5z2W9liyDkYU99
7YQ7U0vuYaI+/gDletJoFkSCiJXdKT5+zVUC4RrXYqRa
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:43 2024 by rpki-client on console-ams.rpki-client.org