Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/C0xMvsk1Php8QRd10BA1X9ehWY0.roa
File: C0xMvsk1Php8QRd10BA1X9ehWY0.roa (raw, json)
Hash identifier: VawwjCSsxpI2ZHZcriWhXhMTxVtzSE6RZBR7uoUjjSc=
Subject key identifier: 0B:4C:4C:BE:C9:35:3E:1A:7C:41:17:75:D0:10:35:5F:D7:A1:59:8D
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC801253B4A9599AD45CBCACC6745D2D1
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/C0xMvsk1Php8QRd10BA1X9ehWY0.roa
Signing time: Tue 02 Jan 2024 02:29:27 +0000
ROA not before: Tue 02 Jan 2024 02:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21700
IP address blocks: 159.148.114.0/24 maxlen: 24
159.148.125.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 08:40:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:25:3b:4a:95:99:ad:45:cb:ca:cc:67:45:d2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b4c4cbec9353e1a7c411775d010355fd7a1598d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:85:ae:c3:52:3a:90:58:e8:f0:f1:c6:57:55:
cc:3f:7c:4d:25:bb:cd:78:d3:f8:8c:3d:6d:f8:22:
85:df:24:61:9e:4a:24:e4:01:0e:91:d8:bd:d2:10:
2a:b1:ca:e4:33:6c:57:3a:5a:51:a8:43:80:9d:84:
68:79:eb:be:ad:aa:33:c7:a0:6e:4f:11:0e:9c:36:
77:8b:5d:b1:9e:bf:1c:05:85:5e:f6:b4:45:e4:df:
34:c4:0a:cb:32:f9:61:4e:89:1e:07:d3:3a:f9:5b:
9a:9d:7b:39:89:1e:d0:af:65:e4:5a:7c:78:ee:2c:
81:b7:c9:a4:e6:9c:dd:d6:24:0a:f1:ca:d3:4a:67:
39:61:33:61:6e:87:a2:0d:59:79:99:63:a2:a0:46:
42:ba:6f:95:13:e9:b4:33:0d:e2:94:76:3e:f7:5a:
0b:8a:7d:e5:89:11:bf:5e:07:31:bd:86:83:ba:2d:
de:b7:40:81:4f:bb:8d:b7:b5:2a:ed:48:31:a9:c4:
9a:9e:4b:4e:6e:3d:39:2d:9a:58:19:ea:2a:db:6a:
26:d3:24:62:45:62:b5:54:cf:b4:d2:fa:15:3b:1d:
52:29:01:1e:ac:3d:1f:de:bd:d1:6d:67:c8:57:52:
b2:74:57:32:d3:2e:7c:3e:37:25:e2:c0:42:18:ef:
0a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4C:4C:BE:C9:35:3E:1A:7C:41:17:75:D0:10:35:5F:D7:A1:59:8D
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/C0xMvsk1Php8QRd10BA1X9ehWY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.114.0/24
159.148.125.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:ba:19:5e:f1:d2:38:26:6e:f2:54:7a:24:9e:6d:54:59:8d:
d4:36:89:fe:71:85:32:a5:ca:d2:e0:00:95:44:50:16:d1:85:
da:67:22:97:36:5d:06:27:6e:1d:78:38:3c:a0:2e:de:db:b0:
8e:89:59:90:08:c6:ed:27:0f:6f:ab:00:b2:00:eb:bc:0f:f8:
46:c7:59:af:e1:0a:f0:ea:ef:fc:d3:cf:a2:a4:f2:4b:8a:4c:
56:70:5d:3d:a0:e1:b6:c5:3f:37:15:52:48:22:9b:fe:dc:b3:
11:09:fc:90:02:a8:1a:7d:3e:58:8f:59:a3:cf:6e:4b:4a:00:
d0:cb:5e:e0:cc:f6:86:8f:5c:dd:00:5e:7c:80:e2:5c:38:a7:
12:cb:68:70:07:d6:84:79:f6:67:79:d2:60:86:85:12:53:e7:
eb:a0:b1:aa:88:1c:5b:88:45:86:22:13:d4:15:8f:10:b7:56:
b5:1b:1c:57:58:0f:4b:31:1b:7c:83:25:b2:ee:80:e2:3f:38:
23:73:f5:9e:0f:c0:82:65:41:ca:ca:f3:4b:92:31:69:7f:a3:
34:a3:09:2c:88:fa:5d:04:e5:a1:83:1b:de:90:8f:86:95:3a:
57:85:08:01:72:0d:d1:82:88:82:d3:c0:8e:7d:fe:e7:77:ca:
1d:1c:a8:28
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzIASU7SpWZrUXLysxnRdLRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjQwMTAyMDIyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjRjNGNiZWM5MzUzZTFhN2M0MTE3NzVkMDEwMzU1ZmQ3YTE1OThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYWuw1I6kFjo8PHGV1XMP3xNJbvN
eNP4jD1t+CKF3yRhnkok5AEOkdi90hAqscrkM2xXOlpRqEOAnYRoeeu+raozx6Bu
TxEOnDZ3i12xnr8cBYVe9rRF5N80xArLMvlhTokeB9M6+VuanXs5iR7Qr2XkWnx4
7iyBt8mk5pzd1iQK8crTSmc5YTNhboeiDVl5mWOioEZCum+VE+m0Mw3ilHY+91oL
in3liRG/XgcxvYaDui3et0CBT7uNt7Uq7UgxqcSanktObj05LZpYGeoq22om0yRi
RWK1VM+00voVOx1SKQEerD0f3r3RbWfIV1KydFcy0y58Pjcl4sBCGO8KpQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAtMTL7JNT4afEEXddAQNV/XoVmNMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvQzB4TXZzazFQaHA4UVJkMTBCQTFYOWVoV1kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAn5RyAwQA
n5R9MA0GCSqGSIb3DQEBCwUAA4IBAQA8uhle8dI4Jm7yVHoknm1UWY3UNon+cYUy
pcrS4ACVRFAW0YXaZyKXNl0GJ24deDg8oC7e27COiVmQCMbtJw9vqwCyAOu8D/hG
x1mv4Qrw6u/808+ipPJLikxWcF09oOG2xT83FVJIIpv+3LMRCfyQAqgafT5Yj1mj
z25LSgDQy17gzPaGj1zdAF58gOJcOKcSy2hwB9aEefZnedJghoUSU+froLGqiBxb
iEWGIhPUFY8Qt1a1GxxXWA9LMRt8gyWy7oDiPzgjc/WeD8CCZUHKyvNLkjFpf6M0
owksiPpdBOWhgxvekI+GlTpXhQgBcg3RgoiC08COff7nd8odHKgo
-----END CERTIFICATE-----
Generated at Wed Jan 24 11:03:54 2024 by rpki-client on console-ams.rpki-client.org