Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/UVoxlkQIjIcpZMV-btFh6IfiX5M.roa
File: UVoxlkQIjIcpZMV-btFh6IfiX5M.roa (raw, json)
Hash identifier: 9dRTO5f4oDH81rvl1bniXYignbPLxvkn5u4wSkUeCF8=
Subject key identifier: 51:5A:31:96:44:08:8C:87:29:64:C5:7E:6E:D1:61:E8:87:E2:5F:93
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 0188D2ACDBC47FCD79B3C4791FA74046FDF9
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/UVoxlkQIjIcpZMV-btFh6IfiX5M.roa
Signing time: Mon 19 Jun 2023 08:02:03 +0000
ROA not before: Mon 19 Jun 2023 08:02:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.209.228.0/24 maxlen: 24
45.151.142.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 11:25:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d2:ac:db:c4:7f:cd:79:b3:c4:79:1f:a7:40:46:fd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: Jun 19 08:02:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=515a319644088c872964c57e6ed161e887e25f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9d:b9:aa:b1:67:85:22:fd:1b:48:69:52:9e:
0c:5f:cd:7c:41:fd:35:bd:38:31:c9:14:05:43:0a:
f6:fc:ef:0c:32:e9:81:f7:38:ed:ce:8d:30:0d:d2:
28:33:e5:6a:0c:93:fd:0e:a3:26:a1:e7:7b:92:b7:
24:1d:91:b9:4d:57:f1:15:20:5e:75:e1:3f:bd:13:
7a:4c:f6:83:98:8e:46:09:64:f1:0b:10:6d:84:5e:
ec:b2:21:b9:43:cc:6a:a5:89:47:c6:c9:b5:76:ab:
10:de:23:b1:e8:93:f5:7c:13:ad:9e:cd:47:0b:03:
ae:f7:bc:f1:a9:1e:97:a9:13:5e:d4:ab:e6:cc:dc:
0f:db:86:76:1d:a6:a5:43:b6:ae:90:d1:98:42:32:
59:1e:ee:38:6f:a8:0d:b2:8c:61:91:62:25:28:eb:
4b:93:e0:b2:2f:19:1d:86:47:c0:2c:4c:e1:74:aa:
b6:9e:77:c1:e1:8a:3c:bd:c0:d5:9e:49:7d:e0:7f:
73:ee:9d:d6:44:ee:73:b5:51:c3:5b:08:c4:98:c7:
1a:5d:8a:f7:7f:b2:09:03:ed:40:e7:db:15:23:c2:
30:25:02:00:8b:91:93:e8:23:57:bb:8f:3a:30:c1:
df:a5:de:0b:b1:99:15:4b:4d:90:54:0b:c9:57:85:
d4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:5A:31:96:44:08:8C:87:29:64:C5:7E:6E:D1:61:E8:87:E2:5F:93
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/UVoxlkQIjIcpZMV-btFh6IfiX5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.142.0/24
91.209.228.0/24
Signature Algorithm: sha256WithRSAEncryption
98:15:6c:0e:e9:2c:8f:32:19:63:27:c7:4d:e6:b2:53:af:40:
e6:e3:19:28:0b:aa:c3:03:94:54:be:2c:1f:5b:da:f1:c7:8a:
43:20:77:56:a9:73:90:80:e6:84:f7:6b:50:22:5e:41:6c:c6:
2c:a6:9b:03:49:46:65:f5:b4:c4:d3:01:85:7f:2d:98:b4:ca:
42:5b:83:48:94:00:4a:4d:a0:6f:73:79:f7:d8:2a:6c:52:f7:
65:a8:ff:69:3c:79:87:1e:b1:13:f3:3a:de:c9:e7:4a:11:c8:
e7:15:e7:ef:da:fc:42:2a:6b:7c:c4:30:9b:03:50:8d:2c:7b:
ca:be:d8:28:9a:3c:1f:47:27:f4:a6:c9:af:36:af:23:be:44:
9a:9e:15:4b:39:08:7e:f7:04:6a:19:60:5d:c3:d1:8d:5d:46:
fd:6a:0d:ad:9a:61:73:6f:c8:f2:82:3c:69:99:96:ba:d6:37:
78:2c:7e:30:8b:ed:46:ba:f3:8c:24:14:33:90:f1:4e:20:eb:
28:5e:1a:b8:01:f4:16:3d:ac:79:fd:c7:87:6c:2a:e0:3c:b7:
bf:73:e2:4d:ee:9b:57:a5:e8:e5:77:2e:11:54:af:c4:67:61:
2b:45:89:14:13:ee:bc:82:94:45:ef:3e:db:4d:fb:6f:3a:27:
51:c4:cb:74
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYjSrNvEf815s8R5H6dARv35MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmYTNmOTlkYmE5NGEzMDdiNmNkMmUxZDkwZjY3OGRhYzA1
NjgxZjgwHhcNMjMwNjE5MDgwMjAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTVhMzE5NjQ0MDg4Yzg3Mjk2NGM1N2U2ZWQxNjFlODg3ZTI1ZjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm525qrFnhSL9G0hpUp4MX818Qf01
vTgxyRQFQwr2/O8MMumB9zjtzo0wDdIoM+VqDJP9DqMmoed7krckHZG5TVfxFSBe
deE/vRN6TPaDmI5GCWTxCxBthF7ssiG5Q8xqpYlHxsm1dqsQ3iOx6JP1fBOtns1H
CwOu97zxqR6XqRNe1KvmzNwP24Z2HaalQ7aukNGYQjJZHu44b6gNsoxhkWIlKOtL
k+CyLxkdhkfALEzhdKq2nnfB4Yo8vcDVnkl94H9z7p3WRO5ztVHDWwjEmMcaXYr3
f7IJA+1A59sVI8IwJQIAi5GT6CNXu486MMHfpd4LsZkVS02QVAvJV4XUGQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFFaMZZECIyHKWTFfm7RYeiH4l+TMB8GA1UdIwQY
MBaAFH+j+Z26lKMHts0uHZD2eNrAVoH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjZQNW5icVVvd2UyelM0ZGtQWjQyc0JXZ2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81YWUzYzQtNGFhNC00YzYyLThlYjUt
NGVhNDdjY2UwYzYzLzEvVVZveGxrUUlqSWNwWk1WLWJ0Rmg2SWZpWDVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS81YWUzYzQtNGFhNC00YzYyLThlYjUtNGVhNDdjY2UwYzYz
LzEvZjZQNW5icVVvd2UyelM0ZGtQWjQyc0JXZ2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALZeOAwQA
W9HkMA0GCSqGSIb3DQEBCwUAA4IBAQCYFWwO6SyPMhljJ8dN5rJTr0Dm4xkoC6rD
A5RUviwfW9rxx4pDIHdWqXOQgOaE92tQIl5BbMYsppsDSUZl9bTE0wGFfy2YtMpC
W4NIlABKTaBvc3n32CpsUvdlqP9pPHmHHrET8zreyedKEcjnFefv2vxCKmt8xDCb
A1CNLHvKvtgomjwfRyf0psmvNq8jvkSanhVLOQh+9wRqGWBdw9GNXUb9ag2tmmFz
b8jygjxpmZa61jd4LH4wi+1GuvOMJBQzkPFOIOsoXhq4AfQWPax5/ceHbCrgPLe/
c+JN7ptXpejldy4RVK/EZ2ErRYkUE+68gpRF7z7bTftvOidRxMt0
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:21 2024 by rpki-client on console-fra.rpki-client.org