Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/9qFamF7y6F3hMD-I6I7qc50eszU.roa
File: 9qFamF7y6F3hMD-I6I7qc50eszU.roa (raw, json)
Hash identifier: xUBQsYLQurtjHt28F16TLVdXkJw1qrh6m9zj3Hxgrmc=
Subject key identifier: F6:A1:5A:98:5E:F2:E8:5D:E1:30:3F:88:E8:8E:EA:73:9D:1E:B3:35
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 018A83DE79FBF1CEAC63CCEC79997EADA3D2
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/9qFamF7y6F3hMD-I6I7qc50eszU.roa
Signing time: Mon 11 Sep 2023 10:51:50 +0000
ROA not before: Mon 11 Sep 2023 10:51:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47585
IP address blocks: 45.151.143.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:83:de:79:fb:f1:ce:ac:63:cc:ec:79:99:7e:ad:a3:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Sep 11 10:51:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6a15a985ef2e85de1303f88e88eea739d1eb335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:07:d7:1e:ab:cc:ba:65:14:90:ec:34:1c:cc:
a2:84:2a:81:52:65:bf:76:21:c9:c1:dd:a4:08:47:
2e:89:58:44:e6:c7:7b:a8:b9:23:f4:50:16:c7:c7:
bd:62:cb:7e:0e:d5:20:fe:9d:5d:bc:6d:97:6a:4b:
19:3f:d9:d8:9e:3b:cd:aa:6f:1e:a5:fa:f1:f3:96:
bd:63:9c:1d:c7:d2:eb:51:79:0d:4a:0e:dc:45:69:
23:4b:f9:8d:90:5d:44:dc:8e:6c:b4:9e:de:34:84:
d7:73:fe:ef:be:0b:78:a8:7b:69:3a:14:8f:ac:77:
ee:28:83:79:03:de:db:8a:ab:66:4f:e1:6f:b2:38:
0d:5f:23:45:f1:ab:de:9b:ad:82:93:ce:a5:67:ae:
e9:9c:df:00:a2:90:a9:7e:85:e0:4c:01:61:6f:66:
fb:4f:8f:6b:b7:64:d2:9a:ca:a4:7b:c9:3d:29:9e:
f8:1a:37:47:0c:ee:88:4d:e2:ca:c3:eb:8e:92:34:
00:a3:2d:27:98:74:ba:8c:55:96:16:f9:42:bf:f9:
ce:e7:1c:60:ed:c7:b9:41:7f:ca:61:63:b1:bc:36:
9f:0a:a2:a9:ba:27:81:ab:f3:aa:24:78:c2:c8:aa:
25:40:44:3f:c1:47:ce:c4:3e:30:e2:5e:92:c6:52:
e4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A1:5A:98:5E:F2:E8:5D:E1:30:3F:88:E8:8E:EA:73:9D:1E:B3:35
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/9qFamF7y6F3hMD-I6I7qc50eszU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.143.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:e8:a6:80:d5:20:64:ac:48:36:bf:b1:85:f0:01:ad:9d:a9:
10:d0:30:6c:ae:b5:4b:19:ea:4b:16:46:78:91:f4:50:cb:dd:
0d:94:f4:a4:a9:4a:21:85:52:f3:1a:64:5a:aa:d0:fb:42:00:
0c:36:07:3a:73:41:75:35:fc:dc:c1:9c:00:81:87:88:7b:74:
fe:f2:b7:c5:0b:6a:ba:01:62:c6:e9:ec:26:02:74:cb:23:a3:
13:92:ac:ff:d7:c8:3e:84:40:03:5e:c7:3d:c8:3d:12:54:f4:
e1:51:37:0f:a9:fe:f9:e9:e9:da:03:b2:15:3b:0d:c0:7d:2a:
87:b3:de:3a:b3:aa:7f:fb:26:05:b6:19:d0:33:73:2d:b0:ca:
70:1f:29:a1:d8:4c:40:6e:10:dd:56:1b:64:49:9b:c8:1e:35:
d8:64:83:5c:55:23:56:7a:6e:0d:91:af:9f:28:f4:93:dd:fb:
02:60:38:77:26:90:8e:70:75:31:f6:36:6c:bd:bf:a8:01:e5:
2b:56:c2:9b:ec:83:bd:58:b2:74:5e:60:85:94:c6:ae:55:23:
0b:de:68:93:55:d3:92:c4:98:63:8f:e3:1e:ef:7c:3d:5c:51:
45:ee:24:e0:42:fb:84:10:b8:00:6d:19:2a:64:d9:63:04:8f:
43:b3:e7:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqD3nn78c6sY8zseZl+raPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmYTNmOTlkYmE5NGEzMDdiNmNkMmUxZDkwZjY3OGRhYzA1
NjgxZjgwHhcNMjMwOTExMTA1MTUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmExNWE5ODVlZjJlODVkZTEzMDNmODhlODhlZWE3MzlkMWViMzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAfXHqvMumUUkOw0HMyihCqBUmW/
diHJwd2kCEcuiVhE5sd7qLkj9FAWx8e9Yst+DtUg/p1dvG2XaksZP9nYnjvNqm8e
pfrx85a9Y5wdx9LrUXkNSg7cRWkjS/mNkF1E3I5stJ7eNITXc/7vvgt4qHtpOhSP
rHfuKIN5A97biqtmT+FvsjgNXyNF8avem62Ck86lZ67pnN8AopCpfoXgTAFhb2b7
T49rt2TSmsqke8k9KZ74GjdHDO6ITeLKw+uOkjQAoy0nmHS6jFWWFvlCv/nO5xxg
7ce5QX/KYWOxvDafCqKpuieBq/OqJHjCyKolQEQ/wUfOxD4w4l6SxlLk7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPahWphe8uhd4TA/iOiO6nOdHrM1MB8GA1UdIwQY
MBaAFH+j+Z26lKMHts0uHZD2eNrAVoH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjZQNW5icVVvd2UyelM0ZGtQWjQyc0JXZ2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81YWUzYzQtNGFhNC00YzYyLThlYjUt
NGVhNDdjY2UwYzYzLzEvOXFGYW1GN3k2RjNoTUQtSTZJN3FjNTBlc3pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS81YWUzYzQtNGFhNC00YzYyLThlYjUtNGVhNDdjY2UwYzYz
LzEvZjZQNW5icVVvd2UyelM0ZGtQWjQyc0JXZ2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZePMA0G
CSqGSIb3DQEBCwUAA4IBAQAd6KaA1SBkrEg2v7GF8AGtnakQ0DBsrrVLGepLFkZ4
kfRQy90NlPSkqUohhVLzGmRaqtD7QgAMNgc6c0F1NfzcwZwAgYeIe3T+8rfFC2q6
AWLG6ewmAnTLI6MTkqz/18g+hEADXsc9yD0SVPThUTcPqf756enaA7IVOw3AfSqH
s946s6p/+yYFthnQM3MtsMpwHymh2ExAbhDdVhtkSZvIHjXYZINcVSNWem4Nka+f
KPST3fsCYDh3JpCOcHUx9jZsvb+oAeUrVsKb7IO9WLJ0XmCFlMauVSML3miTVdOS
xJhjj+Me73w9XFFF7iTgQvuEELgAbRkqZNljBI9Ds+e3
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:03 2024 by rpki-client on console-ams.rpki-client.org