Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vMoXCZawa0gcLvhezgbMlJJsAkI.roa
File: vMoXCZawa0gcLvhezgbMlJJsAkI.roa (raw, json)
Hash identifier: zG4MjV1cDlkZNZeoF1DonsDWa+UlAm7gBvouAwn7VsA=
Subject key identifier: BC:CA:17:09:96:B0:6B:48:1C:2E:F8:5E:CE:06:CC:94:92:6C:02:42
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018B001CB714F2E757813310E27C31BD63DD
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vMoXCZawa0gcLvhezgbMlJJsAkI.roa
Signing time: Thu 05 Oct 2023 13:52:43 +0000
ROA not before: Thu 05 Oct 2023 13:52:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47757
IP address blocks: 45.81.114.0/24 maxlen: 24
45.138.180.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:00:1c:b7:14:f2:e7:57:81:33:10:e2:7c:31:bd:63:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 5 13:52:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bcca170996b06b481c2ef85ece06cc94926c0242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:2f:1d:18:25:91:04:f5:41:48:01:ea:82:7b:
c6:78:2f:7b:5e:a5:47:51:bf:30:aa:39:61:1d:ec:
8b:f6:26:f8:bf:ad:91:e9:c5:af:22:17:2e:3e:58:
73:c1:bf:53:36:7b:d9:b0:b8:1f:31:36:63:fa:15:
99:ca:a0:d4:07:02:44:f2:f6:42:02:3e:af:d2:63:
cd:51:a2:a7:ed:9b:4f:e4:1c:d5:15:0a:9d:f6:92:
47:39:bf:72:de:53:c6:85:cd:10:0c:16:ea:04:fe:
1b:e8:69:f1:60:2c:25:04:0e:11:b2:61:a2:0c:20:
9e:8f:65:ac:0d:87:8c:10:73:60:aa:5d:83:4d:6f:
94:83:16:7d:8a:a1:58:dd:30:0c:db:37:5e:66:7d:
2b:e7:ec:9f:58:50:6b:b2:b8:8f:cf:1b:19:8e:8a:
30:d3:0b:ef:70:60:94:fc:84:b3:82:c7:03:87:53:
d6:93:fc:57:91:ef:34:3f:b0:56:3b:12:2f:af:b9:
e5:36:58:a1:dc:1d:33:a5:d7:2c:c6:54:99:6e:19:
8d:86:a0:a7:c4:62:d0:91:44:0c:0e:b5:ef:e3:2a:
71:21:5e:45:f8:d5:1c:41:5d:75:ef:9c:5b:20:87:
90:39:6a:96:4e:27:a0:ee:c1:fa:32:b3:73:62:67:
02:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:CA:17:09:96:B0:6B:48:1C:2E:F8:5E:CE:06:CC:94:92:6C:02:42
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vMoXCZawa0gcLvhezgbMlJJsAkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.114.0/24
45.138.180.0/24
Signature Algorithm: sha256WithRSAEncryption
75:8c:28:42:bd:98:22:d8:1c:00:82:0b:11:4e:2f:17:fa:b9:
ee:da:40:b6:7f:2e:a5:2f:f2:82:23:0b:57:4b:f4:06:e2:7b:
30:5a:43:a1:ed:87:65:2a:68:55:71:19:e9:c8:1d:3a:26:73:
c3:c1:05:39:0f:52:f1:7c:37:a7:57:a5:30:71:8c:ed:9b:ea:
81:8c:07:54:95:4f:60:13:8b:ed:60:67:8d:57:2b:6b:8f:71:
89:50:a0:1c:68:53:d4:ea:1a:f5:fa:ae:f6:11:00:d6:eb:6a:
d6:09:0f:ad:84:42:14:9e:fc:01:eb:d9:42:bf:ab:b0:b9:a1:
98:9f:bb:9a:2f:8c:d4:ff:33:da:4f:75:25:37:8d:74:d4:68:
ba:63:b6:df:20:c1:5b:0d:0c:fd:a8:c7:bd:11:8c:c8:1c:ed:
a9:fa:01:9a:45:80:35:11:b8:60:f3:ef:58:a4:5f:75:02:4e:
6a:26:f9:e2:d7:e3:30:a5:cb:fb:41:1f:02:77:6f:8b:3a:56:
61:78:a6:88:6b:37:f7:06:72:b1:9e:1d:0c:cc:5c:41:4a:d4:
b2:2c:1c:d3:e6:6f:11:a6:1c:9f:fc:e6:f3:e3:d4:c1:d6:95:
0c:d7:a7:ba:68:c6:b7:5f:b5:7d:dc:84:27:23:77:59:a5:5b:
3b:35:2f:c0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYsAHLcU8udXgTMQ4nwxvWPdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjMxMDA1MTM1MjQzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiY2NhMTcwOTk2YjA2YjQ4MWMyZWY4NWVjZTA2Y2M5NDkyNmMwMjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7S8dGCWRBPVBSAHqgnvGeC97XqVH
Ub8wqjlhHeyL9ib4v62R6cWvIhcuPlhzwb9TNnvZsLgfMTZj+hWZyqDUBwJE8vZC
Aj6v0mPNUaKn7ZtP5BzVFQqd9pJHOb9y3lPGhc0QDBbqBP4b6GnxYCwlBA4RsmGi
DCCej2WsDYeMEHNgql2DTW+UgxZ9iqFY3TAM2zdeZn0r5+yfWFBrsriPzxsZjoow
0wvvcGCU/ISzgscDh1PWk/xXke80P7BWOxIvr7nlNlih3B0zpdcsxlSZbhmNhqCn
xGLQkUQMDrXv4ypxIV5F+NUcQV1175xbIIeQOWqWTieg7sH6MrNzYmcCEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLzKFwmWsGtIHC74Xs4GzJSSbAJCMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvdk1vWENaYXdhMGdjTHZoZXpnYk1sSkpzQWtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVFyAwQA
LYq0MA0GCSqGSIb3DQEBCwUAA4IBAQB1jChCvZgi2BwAggsRTi8X+rnu2kC2fy6l
L/KCIwtXS/QG4nswWkOh7YdlKmhVcRnpyB06JnPDwQU5D1LxfDenV6UwcYztm+qB
jAdUlU9gE4vtYGeNVytrj3GJUKAcaFPU6hr1+q72EQDW62rWCQ+thEIUnvwB69lC
v6uwuaGYn7uaL4zU/zPaT3UlN4101Gi6Y7bfIMFbDQz9qMe9EYzIHO2p+gGaRYA1
Ebhg8+9YpF91Ak5qJvni1+Mwpcv7QR8Cd2+LOlZheKaIazf3BnKxnh0MzFxBStSy
LBzT5m8Rphyf/Obz49TB1pUM16e6aMa3X7V93IQnI3dZpVs7NS/A
-----END CERTIFICATE-----
Generated at Mon Oct 9 11:17:32 2023 by rpki-client on console-ams.rpki-client.org