Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/cS4KGuXg1InewfnS4dyfVuA54Pk.roa
File: cS4KGuXg1InewfnS4dyfVuA54Pk.roa (raw, json)
Hash identifier: XFSj6SZi1af2Ht06C9PclFtz9LSVagedkhsPI9kfrDQ=
Subject key identifier: 71:2E:0A:1A:E5:E0:D4:89:DE:C1:F9:D2:E1:DC:9F:56:E0:39:E0:F9
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 0185706751AEE17B7097C280BB2E0E10AB90
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/cS4KGuXg1InewfnS4dyfVuA54Pk.roa
Signing time: Mon 02 Jan 2023 02:54:57 +0000
ROA not before: Mon 02 Jan 2023 02:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46261
IP address blocks: 45.135.136.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:51:ae:e1:7b:70:97:c2:80:bb:2e:0e:10:ab:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jan 2 02:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=712e0a1ae5e0d489dec1f9d2e1dc9f56e039e0f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:0b:75:7b:1b:0d:19:4f:1e:4c:51:81:ac:
00:60:79:3c:30:11:97:7e:61:94:14:87:92:92:1b:
2f:b6:d0:14:db:ea:91:e2:5f:81:46:a8:f8:89:9e:
37:6f:9a:57:6f:d3:e9:f6:11:68:2c:cd:2a:20:58:
4a:8c:2a:32:fb:02:4d:2f:c5:d6:28:0d:31:68:5e:
a7:50:19:06:38:5b:1d:2f:bb:20:89:ed:40:e0:27:
ec:4a:41:9f:09:70:50:ec:2c:e8:f8:06:d1:e1:57:
0f:67:0f:7e:1c:30:7a:df:ca:46:f5:b5:ff:c0:5f:
39:70:17:40:9e:1a:a7:f0:cf:13:75:2c:64:29:a0:
cd:ad:0e:2d:7f:06:b7:f4:fd:55:cf:a9:6a:d3:9a:
da:7c:9a:f0:c5:df:43:40:af:a2:e0:8e:03:12:cd:
81:0f:0a:13:52:7c:74:dc:bf:99:aa:a5:38:00:df:
6b:48:d3:a5:7e:29:ff:f4:42:8a:73:06:ac:7d:e1:
f0:ee:57:49:f0:ad:91:00:c7:a6:b7:27:9e:4e:70:
7f:5e:9d:42:a0:9d:fc:9a:54:23:9f:eb:9a:24:e3:
01:33:45:ec:7d:bb:c6:a5:f4:be:50:b5:6c:67:02:
58:f2:f8:45:19:15:23:7a:b1:69:e0:07:dc:69:e5:
6b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:2E:0A:1A:E5:E0:D4:89:DE:C1:F9:D2:E1:DC:9F:56:E0:39:E0:F9
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/cS4KGuXg1InewfnS4dyfVuA54Pk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.136.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c5:41:13:8d:83:10:03:a7:24:fe:12:f0:49:f1:6d:7a:57:
1e:55:82:ee:9b:ed:96:76:29:ef:ea:7c:61:b2:b6:bc:88:5a:
2d:19:57:eb:5c:ff:2e:4f:35:5f:65:61:a6:ee:2e:51:a7:c6:
a1:e6:ec:5d:b2:5a:ed:af:cb:a7:7d:f9:8e:8f:e6:4b:69:b1:
fa:69:cb:ce:ca:f3:e0:a4:61:dc:8d:64:b8:76:9b:5f:0c:5c:
c4:45:6e:fe:80:00:5a:7d:9f:4b:af:bc:4a:fa:fb:f9:78:a0:
b3:79:30:80:e0:42:b4:79:29:d9:9b:5c:3a:9d:64:ae:b8:d6:
ae:3c:c6:21:a9:b9:bc:65:58:a1:60:e5:70:ec:5b:35:d6:0b:
fa:2d:50:38:42:58:31:3b:ca:37:d5:fe:8b:83:c5:68:d2:39:
d4:de:2b:e4:33:94:ae:57:4b:c5:4d:db:2a:e7:83:ba:4c:14:
5d:ad:78:96:6e:6e:35:18:c6:7d:c4:f6:e1:88:67:db:c3:c1:
62:00:fe:6d:e3:b7:e3:2f:11:e9:7a:e1:27:59:8a:53:91:29:
29:1d:2c:37:d5:5b:8c:92:05:df:94:73:3f:5a:57:65:02:3b:
34:16:a6:7e:53:ca:cb:b2:9d:18:78:1a:82:bc:7d:ae:1e:43:
f5:6a:ae:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZ1Gu4Xtwl8KAuy4OEKuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx
OGM5YmMwHhcNMjMwMTAyMDI1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTJlMGExYWU1ZTBkNDg5ZGVjMWY5ZDJlMWRjOWY1NmUwMzllMGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf4LdXsbDRlPHkxRgawAYHk8MBGX
fmGUFIeSkhsvttAU2+qR4l+BRqj4iZ43b5pXb9Pp9hFoLM0qIFhKjCoy+wJNL8XW
KA0xaF6nUBkGOFsdL7sgie1A4CfsSkGfCXBQ7Czo+AbR4VcPZw9+HDB638pG9bX/
wF85cBdAnhqn8M8TdSxkKaDNrQ4tfwa39P1Vz6lq05rafJrwxd9DQK+i4I4DEs2B
DwoTUnx03L+ZqqU4AN9rSNOlfin/9EKKcwasfeHw7ldJ8K2RAMemtyeeTnB/Xp1C
oJ38mlQjn+uaJOMBM0XsfbvGpfS+ULVsZwJY8vhFGRUjerFp4AfcaeVr7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHEuChrl4NSJ3sH50uHcn1bgOeD5MB8GA1UdIwQY
MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt
YmQzYmZjOTliZGE5LzEvY1M0S0d1WGcxSW5ld2ZuUzRkeWZWdUE1NFBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5
LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYeIMA0G
CSqGSIb3DQEBCwUAA4IBAQApxUETjYMQA6ck/hLwSfFtelceVYLum+2Wdinv6nxh
sra8iFotGVfrXP8uTzVfZWGm7i5Rp8ah5uxdslrtr8unffmOj+ZLabH6acvOyvPg
pGHcjWS4dptfDFzERW7+gABafZ9Lr7xK+vv5eKCzeTCA4EK0eSnZm1w6nWSuuNau
PMYhqbm8ZVihYOVw7Fs11gv6LVA4QlgxO8o31f6Lg8Vo0jnU3ivkM5SuV0vFTdsq
54O6TBRdrXiWbm41GMZ9xPbhiGfbw8FiAP5t47fjLxHpeuEnWYpTkSkpHSw31VuM
kgXflHM/WldlAjs0FqZ+U8rLsp0YeBqCvH2uHkP1aq5+
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:52 2023 by rpki-client on console-fra.rpki-client.org