Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/5hk86fyIugm1Xqinrpp6YY-UWMo.roa
File: 5hk86fyIugm1Xqinrpp6YY-UWMo.roa (raw, json)
Hash identifier: 2ms2n9Uop55kf6V2dQg0lxAh84xMYPUv8+fmsQK0Bms=
Subject key identifier: E6:19:3C:E9:FC:88:BA:09:B5:5E:A8:A7:AE:9A:7A:61:8F:94:58:CA
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018A6FD96B35292A90117082183D98A0818E
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/5hk86fyIugm1Xqinrpp6YY-UWMo.roa
Signing time: Thu 07 Sep 2023 13:33:54 +0000
ROA not before: Thu 07 Sep 2023 13:33:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41745
IP address blocks: 45.144.232.0/24 maxlen: 32
45.144.233.0/24 maxlen: 32
45.144.234.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:d9:6b:35:29:2a:90:11:70:82:18:3d:98:a0:81:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Sep 7 13:33:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6193ce9fc88ba09b55ea8a7ae9a7a618f9458ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:98:e3:c4:c5:3f:74:2d:12:27:bf:b5:54:d4:
10:86:42:51:03:3b:08:17:57:c4:19:b2:98:42:06:
e5:06:c9:a5:f3:14:4c:63:ca:5f:40:eb:ae:b6:5f:
8d:c6:3a:f1:50:03:e6:f9:77:33:a5:45:31:65:90:
31:8f:4a:65:3c:57:b0:7c:2b:e5:4d:09:d7:e8:2d:
07:df:db:68:c3:b9:a0:b1:39:3e:bc:fc:19:33:13:
ed:4f:33:16:58:b1:bc:1b:e6:cb:26:b8:6e:dc:79:
36:51:61:8c:52:83:94:5b:c8:e6:41:3e:3f:ca:89:
10:6c:1b:95:9c:2f:f2:08:22:42:47:ed:c1:99:85:
21:9e:e4:62:0a:f2:21:70:23:49:13:a4:e6:46:ef:
65:9f:b0:e0:53:b2:11:c4:ca:33:9d:0f:c9:4f:1b:
92:65:ef:db:16:1c:e8:3d:9c:e5:dc:4c:05:a9:ad:
a4:a0:2b:5f:09:e8:27:73:34:aa:70:0e:79:91:1e:
82:d7:ca:9b:61:cb:25:b1:83:52:19:ab:e2:56:f6:
04:8d:90:80:d9:54:e4:ef:01:ce:b7:f3:cf:41:0e:
58:a2:20:af:f8:24:42:a9:45:06:94:42:6c:bd:bd:
3b:67:ac:5d:2c:e8:54:91:25:69:cb:b5:de:0d:44:
9c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:19:3C:E9:FC:88:BA:09:B5:5E:A8:A7:AE:9A:7A:61:8F:94:58:CA
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/5hk86fyIugm1Xqinrpp6YY-UWMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.232.0-45.144.234.255
Signature Algorithm: sha256WithRSAEncryption
1f:a6:d4:ea:a5:60:6e:93:c8:86:23:be:76:63:cd:e7:1e:c5:
9d:c2:ac:b4:1a:d8:a5:09:35:f1:d9:8a:b3:b4:9d:7f:49:ef:
71:89:51:c3:8c:38:3b:b0:30:a5:17:1e:36:c1:20:ba:9d:c0:
c9:77:0d:e1:a9:8e:7a:55:f3:c0:f1:b3:b7:50:98:24:f7:04:
03:4f:4b:0a:e9:b9:91:b5:9e:8b:18:c0:55:64:5d:64:f3:5e:
3b:57:81:cc:19:bf:f4:7d:99:ac:d1:e3:0b:9e:8f:07:0d:ac:
34:9e:75:42:72:c1:ae:71:ba:5d:1c:6f:91:ff:1d:c7:80:71:
13:01:ab:a6:ed:35:44:0b:a9:7c:c9:4b:c8:87:4d:a0:e3:65:
ee:c8:ea:d1:56:15:0f:84:c4:03:f8:c5:ce:69:25:18:ab:ef:
33:ca:72:fb:27:1b:98:ff:6f:32:30:38:b3:a2:24:7f:09:9e:
71:70:30:66:9d:d0:a7:8e:95:29:74:2e:db:54:5e:93:1b:9b:
80:58:7a:a6:ae:4c:1c:01:f6:08:b7:f0:36:b7:e2:a7:7a:13:
79:8e:f8:69:09:2f:9e:36:19:39:de:15:28:b8:86:41:cf:f4:
d0:4c:9b:30:a8:5b:9b:1b:cb:d5:fa:26:60:3f:84:af:72:72:
e8:54:18:3e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYpv2Ws1KSqQEXCCGD2YoIGOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjMwOTA3MTMzMzU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjE5M2NlOWZjODhiYTA5YjU1ZWE4YTdhZTlhN2E2MThmOTQ1OGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZjjxMU/dC0SJ7+1VNQQhkJRAzsI
F1fEGbKYQgblBsml8xRMY8pfQOuutl+NxjrxUAPm+XczpUUxZZAxj0plPFewfCvl
TQnX6C0H39tow7mgsTk+vPwZMxPtTzMWWLG8G+bLJrhu3Hk2UWGMUoOUW8jmQT4/
yokQbBuVnC/yCCJCR+3BmYUhnuRiCvIhcCNJE6TmRu9ln7DgU7IRxMoznQ/JTxuS
Ze/bFhzoPZzl3EwFqa2koCtfCegnczSqcA55kR6C18qbYcslsYNSGaviVvYEjZCA
2VTk7wHOt/PPQQ5YoiCv+CRCqUUGlEJsvb07Z6xdLOhUkSVpy7XeDUSc/QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFOYZPOn8iLoJtV6op66aemGPlFjKMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvNWhrODZmeUl1Z20xWHFpbnJwcDZZWS1VV01vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAMtkOgD
BAAtkOowDQYJKoZIhvcNAQELBQADggEBAB+m1OqlYG6TyIYjvnZjzecexZ3CrLQa
2KUJNfHZirO0nX9J73GJUcOMODuwMKUXHjbBILqdwMl3DeGpjnpV88Dxs7dQmCT3
BANPSwrpuZG1nosYwFVkXWTzXjtXgcwZv/R9mazR4wuejwcNrDSedUJywa5xul0c
b5H/HceAcRMBq6btNUQLqXzJS8iHTaDjZe7I6tFWFQ+ExAP4xc5pJRir7zPKcvsn
G5j/bzIwOLOiJH8JnnFwMGad0KeOlSl0LttUXpMbm4BYeqauTBwB9gi38Da34qd6
E3mO+GkJL542GTneFSi4hkHP9NBMmzCoW5sby9X6JmA/hK9ycuhUGD4=
-----END CERTIFICATE-----
Generated at Tue Oct 24 12:42:42 2023 by rpki-client on console-fra.rpki-client.org