Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XpkVzkc_S6Ct-Ur4UP-Qa2CigXc.roa
File: XpkVzkc_S6Ct-Ur4UP-Qa2CigXc.roa (raw, json)
Hash identifier: 8npddxYaC6FNXOaDc54GDGmh//0cqb8fQRY2hamZrXw=
Subject key identifier: 5E:99:15:CE:47:3F:4B:A0:AD:F9:4A:F8:50:FF:90:6B:60:A2:81:77
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FF19FF38CFC0B7C388DFE4B629AA65024
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XpkVzkc_S6Ct-Ur4UP-Qa2CigXc.roa
Signing time: Fri 07 Jun 2024 07:35:42 +0000
ROA not before: Fri 07 Jun 2024 07:35:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61135
IP address blocks: 45.151.91.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 07 Jun 2024 09:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f1:9f:f3:8c:fc:0b:7c:38:8d:fe:4b:62:9a:a6:50:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 7 07:35:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e9915ce473f4ba0adf94af850ff906b60a28177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:59:f6:be:f7:93:d0:a9:ad:7f:17:c0:c4:
31:a3:e1:a7:ea:75:4d:62:36:79:bb:3c:d5:36:0b:
ad:5a:60:3f:09:00:4d:43:db:32:0f:4c:c7:61:0b:
d9:6d:2e:cb:44:df:e2:d7:cc:db:fa:ea:bb:39:b7:
b3:e1:ac:25:74:14:60:bd:fd:da:ee:87:9b:ff:a7:
7f:87:e5:ea:db:52:b3:a5:16:87:5a:e1:36:36:d4:
54:d4:7e:b8:10:22:bd:90:bd:ae:e5:fd:40:62:a2:
11:f0:3d:26:4a:d1:2f:b1:d9:b7:ed:8f:77:97:01:
79:48:25:76:4b:4e:3f:56:42:fb:f7:9c:c5:4e:c9:
97:c7:d6:9c:3f:11:b7:01:a2:53:61:b0:1c:5a:53:
20:45:6f:d1:5e:8e:82:75:55:90:c5:b6:a2:c0:9c:
20:f2:e5:8b:c4:be:46:28:53:64:b3:a0:b5:0c:0b:
79:94:eb:59:b4:ee:57:90:02:ee:02:09:37:22:c7:
1e:38:b1:c0:0c:75:3f:ea:7a:ad:48:96:f3:6b:d5:
78:d3:21:05:e8:44:1d:15:3b:fa:31:f0:c0:c1:45:
36:50:b0:9f:c2:d6:23:aa:54:bf:29:4a:35:a3:52:
df:57:f7:73:9a:36:28:84:f2:b3:b5:01:1e:df:96:
01:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:99:15:CE:47:3F:4B:A0:AD:F9:4A:F8:50:FF:90:6B:60:A2:81:77
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XpkVzkc_S6Ct-Ur4UP-Qa2CigXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.91.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:2d:57:10:3b:d2:c8:ac:4d:d0:08:57:74:2b:de:e8:f3:64:
73:62:51:81:84:e4:40:1b:b4:dd:62:a0:1a:c3:50:73:7c:a5:
4b:61:4c:69:5e:0c:97:ae:6f:e0:77:8c:2c:90:1c:97:34:2e:
ab:20:d1:c3:b9:33:fd:0c:d5:3c:ef:00:fb:6b:34:db:29:0c:
f8:fd:ae:c7:46:83:7f:07:3d:b5:c3:7b:b3:8b:3f:ae:52:5e:
61:d6:51:65:46:93:dd:cf:13:3b:8e:26:27:28:63:02:ba:e8:
f2:19:b3:81:1f:3e:3e:64:bd:1f:ff:d0:31:78:88:e8:a2:b3:
db:6f:a0:6e:2a:e5:f3:3c:59:b0:d2:4a:bc:51:e3:13:e1:a0:
ad:75:97:8a:be:39:30:11:98:4e:36:4b:2e:d2:ce:7a:17:bf:
15:b1:ef:aa:b0:e2:6d:45:1e:02:23:a1:f1:31:4c:51:2c:d0:
29:56:6c:d2:9c:0f:2f:41:89:17:02:84:1b:27:fb:d1:fb:1a:
b3:9a:68:66:a1:ba:5a:41:17:f7:de:6f:60:f1:df:91:3a:fa:
28:41:7d:03:4f:d5:0e:f6:07:e2:04:e7:03:b2:52:98:f8:0c:
ef:21:73:c8:72:81:0a:44:4b:82:ef:ea:4e:b0:1a:ca:d8:40:
25:d6:af:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/xn/OM/At8OI3+S2KaplAkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNjA3MDczNTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTk5MTVjZTQ3M2Y0YmEwYWRmOTRhZjg1MGZmOTA2YjYwYTI4MTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+JZ9r73k9CprX8XwMQxo+Gn6nVN
YjZ5uzzVNgutWmA/CQBNQ9syD0zHYQvZbS7LRN/i18zb+uq7Obez4awldBRgvf3a
7oeb/6d/h+Xq21KzpRaHWuE2NtRU1H64ECK9kL2u5f1AYqIR8D0mStEvsdm37Y93
lwF5SCV2S04/VkL795zFTsmXx9acPxG3AaJTYbAcWlMgRW/RXo6CdVWQxbaiwJwg
8uWLxL5GKFNks6C1DAt5lOtZtO5XkALuAgk3IsceOLHADHU/6nqtSJbza9V40yEF
6EQdFTv6MfDAwUU2ULCfwtYjqlS/KUo1o1LfV/dzmjYohPKztQEe35YBDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF6ZFc5HP0ugrflK+FD/kGtgooF3MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvWHBrVnprY19TNkN0LVVyNFVQLVFhMkNpZ1hjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZdbMA0G
CSqGSIb3DQEBCwUAA4IBAQCPLVcQO9LIrE3QCFd0K97o82RzYlGBhORAG7TdYqAa
w1BzfKVLYUxpXgyXrm/gd4wskByXNC6rINHDuTP9DNU87wD7azTbKQz4/a7HRoN/
Bz21w3uziz+uUl5h1lFlRpPdzxM7jiYnKGMCuujyGbOBHz4+ZL0f/9AxeIjoorPb
b6BuKuXzPFmw0kq8UeMT4aCtdZeKvjkwEZhONksu0s56F78Vse+qsOJtRR4CI6Hx
MUxRLNApVmzSnA8vQYkXAoQbJ/vR+xqzmmhmobpaQRf33m9g8d+ROvooQX0DT9UO
9gfiBOcDslKY+AzvIXPIcoEKREuC7+pOsBrK2EAl1q9b
-----END CERTIFICATE-----
Generated at Fri Jun 7 14:48:47 2024 by rpki-client on console-ams.rpki-client.org