Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/WmhL18MyAlg2roSvMiBbTWrC658.roa
File: WmhL18MyAlg2roSvMiBbTWrC658.roa (raw, json)
Hash identifier: rnPVClpbJF0CxkTHCYV9aNbkx9n/nk+bM0j1Dk3tKaw=
Subject key identifier: 5A:68:4B:D7:C3:32:02:58:36:AE:84:AF:32:20:5B:4D:6A:C2:EB:9F
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 0185726B747CE39C388261CAC8BA566EEBA3
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/WmhL18MyAlg2roSvMiBbTWrC658.roa
Signing time: Mon 02 Jan 2023 12:18:42 +0000
ROA not before: Mon 02 Jan 2023 12:18:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207717
IP address blocks: 45.132.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:6b:74:7c:e3:9c:38:82:61:ca:c8:ba:56:6e:eb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jan 2 12:18:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a684bd7c332025836ae84af32205b4d6ac2eb9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:ae:6a:85:95:a0:52:6a:d3:8e:09:b9:58:
13:44:00:e9:10:8a:9a:a9:3e:a9:f9:c2:14:31:3e:
b8:87:e2:4e:50:8b:d6:51:ac:03:91:a0:d7:7e:bf:
5b:e8:18:53:fe:fc:85:5d:19:44:cb:6a:38:4e:a2:
7f:0e:96:47:59:f6:26:6d:f6:5a:81:76:6c:ae:9d:
0e:a1:04:b2:79:a7:e5:b0:53:a3:d9:cb:0a:5a:a4:
1e:b4:b6:58:f5:bb:e4:90:d8:e6:0e:43:27:a0:22:
29:1e:59:b2:9a:15:a7:d9:c3:cc:bd:76:c5:58:ea:
72:eb:2d:7e:94:3f:0f:55:53:be:52:e3:88:53:ca:
d0:9d:7a:b1:cc:fe:b1:94:6a:47:7b:92:c0:ba:63:
6d:cc:a1:d2:d8:1c:2f:6e:b6:36:02:01:42:7f:e6:
b0:48:9a:83:f6:3c:48:cc:08:de:33:b4:b4:ee:84:
70:51:36:08:04:4b:2b:a3:93:78:f1:02:86:c7:07:
cf:cf:63:4a:df:b0:fe:97:d5:3f:5c:e4:ed:99:8a:
82:ac:f6:0c:13:22:e3:25:fc:f7:7c:89:8f:9d:77:
41:3b:2a:04:43:26:8a:1c:e3:4e:61:3a:f9:86:be:
59:45:52:33:64:c5:9e:36:c2:58:5c:a5:fa:a4:03:
8b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:68:4B:D7:C3:32:02:58:36:AE:84:AF:32:20:5B:4D:6A:C2:EB:9F
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/WmhL18MyAlg2roSvMiBbTWrC658.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.150.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e3:82:82:c6:74:75:89:cc:7b:11:e4:c3:5a:7d:42:f0:a2:
87:34:33:53:00:0c:f5:93:76:8f:48:85:34:e7:80:39:cf:30:
06:21:1e:52:82:bd:b9:a1:fb:9c:d2:7c:1c:cd:5e:94:29:29:
c5:8e:81:68:0f:1b:28:47:60:83:e4:a4:d2:5d:e7:56:43:62:
cf:00:11:05:35:66:62:0c:0a:fd:7d:92:46:1c:b6:b1:b1:6d:
02:57:fd:4c:07:99:f0:c3:7d:fa:13:88:e6:59:9d:4e:e7:59:
c7:0b:4d:60:aa:e7:62:83:bd:84:18:78:69:c1:0a:bb:a2:5a:
78:58:be:32:27:aa:ae:63:55:90:35:1d:52:90:d5:7b:5c:24:
54:7f:44:aa:41:0d:63:1a:25:1e:b4:2b:50:aa:b7:26:a9:bd:
0a:fd:db:c6:ad:b7:ff:5b:71:85:a9:8e:45:8d:ff:ae:c5:e4:
cd:09:bb:45:9b:b6:d3:37:33:41:a2:96:b7:49:23:95:49:c1:
05:88:0d:e7:74:e1:d6:3c:d3:53:f7:50:52:f3:42:04:de:7c:
28:10:3e:5e:ea:71:e3:59:ed:85:50:f5:98:79:70:8d:de:63:
dc:40:ec:7f:d4:1f:8b:e1:92:03:51:5d:5b:62:ab:3e:09:6a:
f3:48:d7:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVya3R845w4gmHKyLpWbuujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm
ZmExOWUwHhcNMjMwMTAyMTIxODQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YTY4NGJkN2MzMzIwMjU4MzZhZTg0YWYzMjIwNWI0ZDZhYzJlYjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15auaoWVoFJq044JuVgTRADpEIqa
qT6p+cIUMT64h+JOUIvWUawDkaDXfr9b6BhT/vyFXRlEy2o4TqJ/DpZHWfYmbfZa
gXZsrp0OoQSyeaflsFOj2csKWqQetLZY9bvkkNjmDkMnoCIpHlmymhWn2cPMvXbF
WOpy6y1+lD8PVVO+UuOIU8rQnXqxzP6xlGpHe5LAumNtzKHS2BwvbrY2AgFCf+aw
SJqD9jxIzAjeM7S07oRwUTYIBEsro5N48QKGxwfPz2NK37D+l9U/XOTtmYqCrPYM
EyLjJfz3fImPnXdBOyoEQyaKHONOYTr5hr5ZRVIzZMWeNsJYXKX6pAOLbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFpoS9fDMgJYNq6ErzIgW01qwuufMB8GA1UdIwQY
MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt
YTM1ZmM0MzhkNGNhLzEvV21oTDE4TXlBbGcycm9Tdk1pQmJUV3JDNjU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh
LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYSWMA0G
CSqGSIb3DQEBCwUAA4IBAQBB44KCxnR1icx7EeTDWn1C8KKHNDNTAAz1k3aPSIU0
54A5zzAGIR5Sgr25ofuc0nwczV6UKSnFjoFoDxsoR2CD5KTSXedWQ2LPABEFNWZi
DAr9fZJGHLaxsW0CV/1MB5nww336E4jmWZ1O51nHC01gqudig72EGHhpwQq7olp4
WL4yJ6quY1WQNR1SkNV7XCRUf0SqQQ1jGiUetCtQqrcmqb0K/dvGrbf/W3GFqY5F
jf+uxeTNCbtFm7bTNzNBopa3SSOVScEFiA3ndOHWPNNT91BS80IE3nwoED5e6nHj
We2FUPWYeXCN3mPcQOx/1B+L4ZIDUV1bYqs+CWrzSNf/
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:18 2024 by rpki-client on console-ams.rpki-client.org