Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/XyelfzPXOfSWjJn1IYMH4Am548k.roa
File: XyelfzPXOfSWjJn1IYMH4Am548k.roa (raw, json)
Hash identifier: OYOcV7H0lY+Y4wWsUTrekvSK0QAn8mOYhKAgdC1izZI=
Subject key identifier: 5F:27:A5:7F:33:D7:39:F4:96:8C:99:F5:21:83:07:E0:09:B9:E3:C9
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01856BC0F05F5F942615D6D6A59FF2F65B16
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/XyelfzPXOfSWjJn1IYMH4Am548k.roa
Signing time: Sun 01 Jan 2023 05:14:44 +0000
ROA not before: Sun 01 Jan 2023 05:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49612
IP address blocks: 45.140.145.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c0:f0:5f:5f:94:26:15:d6:d6:a5:9f:f2:f6:5b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Jan 1 05:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f27a57f33d739f4968c99f5218307e009b9e3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:06:42:7a:2c:8c:cc:3a:91:eb:e9:75:7f:e3:
b2:77:c7:04:d0:25:89:4b:f3:22:72:34:40:8c:f3:
62:04:97:ac:16:8d:cd:b7:c4:46:50:2c:92:04:3b:
ea:24:21:0f:d8:a2:63:78:de:68:7c:3e:1e:ca:29:
9f:b8:cb:42:dd:f7:97:b2:ef:a0:f0:60:63:f7:48:
4d:0f:47:40:46:27:1d:e7:de:ab:64:98:5b:0e:21:
56:06:57:d3:62:1e:d5:e3:e1:f9:bc:0b:2a:90:58:
3c:9d:2d:65:83:b2:72:7d:ab:93:6c:37:a1:5a:6f:
a3:1e:78:b7:3e:cf:8c:a2:61:da:7e:34:48:2f:ba:
2d:74:61:2a:2a:7a:ac:f3:53:37:b5:15:10:2b:86:
2d:f9:e0:c5:6a:b2:91:f2:77:2f:e3:12:a3:86:96:
29:75:95:23:0d:76:94:6e:d3:8d:ca:0a:b8:66:f0:
16:7f:cc:a5:bc:46:58:20:32:6e:d6:75:9e:af:7a:
86:23:5e:99:d4:28:00:b7:b2:4f:49:07:a4:93:72:
9e:77:94:12:98:10:82:de:67:a1:85:57:75:18:61:
59:b0:12:30:63:c2:8b:7a:81:3e:08:24:5f:27:58:
39:5a:96:e9:f4:37:3c:40:bb:68:99:58:20:a2:51:
93:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:27:A5:7F:33:D7:39:F4:96:8C:99:F5:21:83:07:E0:09:B9:E3:C9
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/XyelfzPXOfSWjJn1IYMH4Am548k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.145.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:7b:ee:4a:b1:ff:9f:d3:6b:ce:0f:84:b1:b3:2e:9a:0d:db:
43:55:1c:7c:64:5b:77:bf:46:5f:d6:63:77:bb:4c:62:e8:e5:
34:79:b4:8b:8b:1b:15:d3:24:1c:e0:a1:6b:97:a6:a6:ec:c2:
2e:fa:4c:b6:95:3b:70:53:b2:43:c5:01:3b:5d:ad:23:52:b2:
e7:4b:de:9e:e7:6b:62:93:bf:8f:36:1e:5d:aa:e9:77:66:f1:
c5:c6:c2:8d:7b:b6:ad:65:c3:65:23:76:5d:05:b9:d4:75:20:
9b:19:98:62:72:6e:75:f5:15:1c:72:1b:d6:4c:32:65:b5:cc:
21:a8:7c:53:2d:00:bc:d0:7b:f3:02:de:b1:3e:17:03:f6:43:
33:fa:e8:ec:45:f6:14:c6:29:2e:16:bb:20:6b:68:d6:b9:b4:
3a:ee:61:2d:cf:c3:c1:b6:62:de:05:ae:33:00:b9:0b:6f:af:
2c:6d:8b:06:92:3d:f3:7f:f1:e4:f9:af:27:20:c1:50:bc:79:
02:dd:64:44:f3:66:8e:a3:f5:ad:18:5a:b6:28:dc:c2:e5:87:
83:0b:c8:68:84:2e:72:da:27:22:fe:ae:13:01:1a:03:fd:9b:
68:b8:48:3a:b2:de:75:fc:bf:3f:04:cd:b9:2f:36:bd:9b:fe:
00:0f:41:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVrwPBfX5QmFdbWpZ/y9lsWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjMwMTAxMDUxNDQ0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjI3YTU3ZjMzZDczOWY0OTY4Yzk5ZjUyMTgzMDdlMDA5YjllM2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAZCeiyMzDqR6+l1f+Oyd8cE0CWJ
S/MicjRAjPNiBJesFo3Nt8RGUCySBDvqJCEP2KJjeN5ofD4eyimfuMtC3feXsu+g
8GBj90hND0dARicd596rZJhbDiFWBlfTYh7V4+H5vAsqkFg8nS1lg7JyfauTbDeh
Wm+jHni3Ps+MomHafjRIL7otdGEqKnqs81M3tRUQK4Yt+eDFarKR8ncv4xKjhpYp
dZUjDXaUbtONygq4ZvAWf8ylvEZYIDJu1nWer3qGI16Z1CgAt7JPSQekk3Ked5QS
mBCC3mehhVd1GGFZsBIwY8KLeoE+CCRfJ1g5Wpbp9Dc8QLtomVggolGTLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF8npX8z1zn0loyZ9SGDB+AJuePJMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvWHllbGZ6UFhPZlNXakpuMUlZTUg0QW01NDhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYyRMA0G
CSqGSIb3DQEBCwUAA4IBAQB7e+5Ksf+f02vOD4Sxsy6aDdtDVRx8ZFt3v0Zf1mN3
u0xi6OU0ebSLixsV0yQc4KFrl6am7MIu+ky2lTtwU7JDxQE7Xa0jUrLnS96e52ti
k7+PNh5dqul3ZvHFxsKNe7atZcNlI3ZdBbnUdSCbGZhicm519RUcchvWTDJltcwh
qHxTLQC80HvzAt6xPhcD9kMz+ujsRfYUxikuFrsga2jWubQ67mEtz8PBtmLeBa4z
ALkLb68sbYsGkj3zf/Hk+a8nIMFQvHkC3WRE82aOo/WtGFq2KNzC5YeDC8hohC5y
2ici/q4TARoD/ZtouEg6st51/L8/BM25Lza9m/4AD0GC
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:29 2024 by rpki-client on console-ams.rpki-client.org