Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/rpBu8fQFrk382SzcJRNmcs_Lg8k.roa
File: rpBu8fQFrk382SzcJRNmcs_Lg8k.roa (raw, json)
Hash identifier: l2lod+GIzcdgqM6JRgliaVKrm2GMB74YNPuVQdrVSu4=
Subject key identifier: AE:90:6E:F1:F4:05:AE:4D:FC:D9:2C:DC:25:13:66:72:CF:CB:83:C9
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 01856D4ABEB7F0F00F463C69C1D195689A25
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/rpBu8fQFrk382SzcJRNmcs_Lg8k.roa
Signing time: Sun 01 Jan 2023 12:24:53 +0000
ROA not before: Sun 01 Jan 2023 12:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60406
IP address blocks: 5.45.189.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:be:b7:f0:f0:0f:46:3c:69:c1:d1:95:68:9a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Jan 1 12:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ae906ef1f405ae4dfcd92cdc25136672cfcb83c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:68:86:71:6d:84:f8:07:8c:cb:f6:03:be:57:
8c:b4:c3:fa:12:e7:f9:63:6d:cc:fd:7b:a2:2e:e3:
8a:57:9f:84:31:59:36:81:fc:ec:4d:88:d9:be:94:
76:be:8b:f6:c6:05:55:66:67:1d:83:8c:76:0c:8b:
8c:0d:41:11:ec:f5:9d:d4:46:00:37:c3:fd:6f:2b:
20:bc:3b:4d:47:a1:9e:e1:4a:59:8f:59:7e:1c:10:
aa:5c:37:ed:ce:83:80:50:79:ad:f5:c4:f0:1d:8b:
93:20:7e:e2:c4:22:ad:78:b1:35:02:6c:6a:33:91:
d4:f1:3b:32:3d:cc:b5:6a:fb:16:c9:e2:a2:fd:de:
d4:11:bd:b0:ca:6d:ea:c0:38:52:b3:46:36:ec:f9:
63:fe:ee:33:aa:13:50:2d:dc:79:c3:bb:94:5c:be:
89:ca:0f:69:b3:15:01:9b:59:b5:36:bd:d3:30:49:
6d:af:cc:6f:49:28:1f:ff:13:58:56:05:b5:01:bb:
28:7e:c2:c3:88:d0:bb:ce:b6:1f:df:2d:1c:18:57:
24:57:cd:8e:25:59:7a:b8:53:31:43:8f:64:a4:27:
de:34:0d:38:0a:ac:b3:e4:87:e0:fb:89:2b:9b:15:
03:aa:b5:34:9c:4a:ed:b3:f3:af:0f:82:c1:f3:ef:
f4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:90:6E:F1:F4:05:AE:4D:FC:D9:2C:DC:25:13:66:72:CF:CB:83:C9
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/rpBu8fQFrk382SzcJRNmcs_Lg8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.189.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:62:a3:e7:e2:f5:0d:ab:cc:79:47:96:8a:89:df:75:f1:28:
e6:5d:5c:4c:ec:79:96:02:d5:8f:78:8c:47:fd:46:33:ba:d2:
b7:1c:d9:8c:f6:73:19:ca:5d:0d:87:b6:a8:2f:99:04:40:e3:
23:02:41:a6:be:1e:7d:90:2c:a6:ef:e0:67:e8:1a:29:01:38:
f2:86:54:6f:31:63:65:63:50:6e:bd:de:71:9d:f2:50:23:a0:
66:a9:a9:8d:4a:4c:4d:60:e3:34:40:30:53:97:e2:c7:25:32:
09:9f:14:e8:2c:4b:4c:01:8d:81:48:6c:af:00:75:b5:03:68:
7d:66:47:09:31:c3:27:75:d7:f8:48:22:46:b0:87:ec:5f:fb:
44:f5:df:d8:ae:47:47:b5:16:a0:ed:ae:ff:bc:91:02:35:a4:
18:81:4d:46:3d:19:d2:82:e0:5e:77:6f:4a:51:5c:d8:9a:df:
68:99:d1:20:72:69:7e:32:b3:b6:75:d7:ff:7f:e1:7c:cb:b0:
bf:3a:3b:47:18:a2:6a:98:38:86:66:b6:46:e4:15:52:d8:f8:
21:90:f1:12:3f:77:ca:db:11:e7:56:d7:e4:a9:d8:77:fe:5b:
31:0f:8c:ca:fe:45:df:fe:77:c3:d7:fc:7a:2d:88:fd:16:d5:
ae:8e:a6:fc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtSr638PAPRjxpwdGVaJolMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTExNzc5Yzc2N2QyMzY0ZTg2ZjRlMjdlZjhjNWZlOWJi
MDEwOTAwHhcNMjMwMTAxMTIyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTkwNmVmMWY0MDVhZTRkZmNkOTJjZGMyNTEzNjY3MmNmY2I4M2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2iGcW2E+AeMy/YDvleMtMP6Euf5
Y23M/XuiLuOKV5+EMVk2gfzsTYjZvpR2vov2xgVVZmcdg4x2DIuMDUER7PWd1EYA
N8P9bysgvDtNR6Ge4UpZj1l+HBCqXDftzoOAUHmt9cTwHYuTIH7ixCKteLE1Amxq
M5HU8TsyPcy1avsWyeKi/d7UEb2wym3qwDhSs0Y27Plj/u4zqhNQLdx5w7uUXL6J
yg9psxUBm1m1Nr3TMEltr8xvSSgf/xNYVgW1AbsofsLDiNC7zrYf3y0cGFckV82O
JVl6uFMxQ49kpCfeNA04Cqyz5Ifg+4krmxUDqrU0nErts/OvD4LB8+/0OwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK6QbvH0Ba5N/Nks3CUTZnLPy4PJMB8GA1UdIwQY
MBaAFACRF3nHZ9I2Tob04n74xf6bsBCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYt
NjJjMWIxZmYzYTI2LzEvcnBCdThmUUZyazM4MlN6Y0pSTm1jc19MZzhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYtNjJjMWIxZmYzYTI2
LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABS29MA0G
CSqGSIb3DQEBCwUAA4IBAQAcYqPn4vUNq8x5R5aKid918SjmXVxM7HmWAtWPeIxH
/UYzutK3HNmM9nMZyl0Nh7aoL5kEQOMjAkGmvh59kCym7+Bn6BopATjyhlRvMWNl
Y1Buvd5xnfJQI6BmqamNSkxNYOM0QDBTl+LHJTIJnxToLEtMAY2BSGyvAHW1A2h9
ZkcJMcMnddf4SCJGsIfsX/tE9d/YrkdHtRag7a7/vJECNaQYgU1GPRnSguBed29K
UVzYmt9omdEgcml+MrO2ddf/f+F8y7C/OjtHGKJqmDiGZrZG5BVS2PghkPESP3fK
2xHnVtfkqdh3/lsxD4zK/kXf/nfD1/x6LYj9FtWujqb8
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:11 2024 by rpki-client on console-ams.rpki-client.org