Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/0KQuMiwohnEiNTrfItjCj8KbXQU.roa
File: 0KQuMiwohnEiNTrfItjCj8KbXQU.roa (raw, json)
Hash identifier: iyiPnRLo5zmju5j/V0zIfUwxcAZYIfsZ+fx8lgTP2ME=
Subject key identifier: D0:A4:2E:32:2C:28:86:71:22:35:3A:DF:22:D8:C2:8F:C2:9B:5D:05
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 018570672467959AFD70625DA00E38BF492B
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/0KQuMiwohnEiNTrfItjCj8KbXQU.roa
Signing time: Mon 02 Jan 2023 02:54:45 +0000
ROA not before: Mon 02 Jan 2023 02:54:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 45.151.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:67:24:67:95:9a:fd:70:62:5d:a0:0e:38:bf:49:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 2 02:54:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d0a42e322c28867122353adf22d8c28fc29b5d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c9:54:51:64:ce:7d:78:99:e8:93:db:d8:8d:
f7:00:97:08:01:f3:32:40:c4:16:5b:c0:af:57:70:
ec:f2:0f:db:cc:b8:a8:5e:66:c5:07:37:6e:63:eb:
48:cf:bf:8b:96:47:83:2c:51:f7:89:91:8f:c4:ff:
eb:fa:1c:61:4f:8b:43:4f:38:05:07:05:5e:f8:2d:
bf:98:6e:2d:58:b8:52:a0:67:82:55:12:e4:fe:90:
87:73:88:4a:e8:95:cd:be:3f:f0:30:39:96:4f:5a:
39:16:f5:52:aa:93:10:9e:e7:df:16:fd:ac:68:be:
c3:2f:8a:11:10:09:08:81:c4:e5:d0:05:f9:8a:b7:
2d:cb:04:97:5d:c5:cb:b1:e0:6e:cc:b7:4c:74:63:
7e:21:4b:9e:6c:62:64:3c:0b:d2:f6:15:93:9b:3f:
ef:90:da:60:bb:51:13:38:ee:fe:a5:77:a4:60:13:
fa:e6:41:d5:20:14:16:8b:37:67:08:d8:70:ad:89:
71:47:57:aa:19:45:8f:96:db:c9:02:4f:50:af:fc:
89:a0:44:e8:d6:99:b9:39:e0:e3:6f:0d:3c:1c:07:
14:e0:84:05:e6:76:5d:68:e2:47:6a:d1:24:52:5c:
ba:b9:ae:4d:3f:f7:4e:b7:3f:c5:10:34:e7:7e:f4:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:A4:2E:32:2C:28:86:71:22:35:3A:DF:22:D8:C2:8F:C2:9B:5D:05
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/0KQuMiwohnEiNTrfItjCj8KbXQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.99.0/24
Signature Algorithm: sha256WithRSAEncryption
80:da:da:d8:4b:2a:8a:cb:09:6c:c1:00:4e:d9:7d:09:a2:5c:
fb:36:ab:22:75:bb:86:19:79:cb:f0:2e:0d:69:a6:9b:cb:4b:
8a:0c:c2:25:0e:16:a1:66:6e:80:11:8b:20:1e:c6:62:da:90:
c2:0e:ac:99:53:44:78:db:a1:d6:85:bf:25:86:48:d7:36:e7:
c0:b3:e1:52:25:79:74:86:36:17:3a:a6:15:f4:33:84:fa:38:
94:55:a1:d6:df:d4:5a:67:de:de:70:6e:3c:fd:18:2a:c9:d2:
d8:31:96:ec:05:d4:95:b4:a0:fa:f8:63:50:bb:9b:97:32:6b:
f4:3c:3a:98:3c:ca:fe:71:33:ca:ef:c9:ed:88:63:4b:5f:f2:
d5:08:97:fe:fc:ba:42:a3:ea:ab:e7:bf:7d:c8:b2:61:e3:83:
8f:3b:fa:d3:4b:ec:bf:46:6e:cc:f4:48:8f:5b:14:1f:11:ae:
43:ba:e8:01:ef:65:a8:4f:82:1e:b1:98:42:20:d4:70:d4:0d:
ba:b4:ee:40:c9:05:62:7f:ae:2e:b0:56:8a:35:1d:5c:8e:fe:
c9:ab:b5:3d:0e:4f:63:b4:b0:61:89:f1:9f:5d:e2:a6:25:33:
a2:3c:26:3a:c6:cb:a7:49:a3:fd:fc:7c:e6:30:90:18:6b:91:
7f:73:d8:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwZyRnlZr9cGJdoA44v0krMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0
NzA2OTcwHhcNMjMwMTAyMDI1NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGE0MmUzMjJjMjg4NjcxMjIzNTNhZGYyMmQ4YzI4ZmMyOWI1ZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8lUUWTOfXiZ6JPb2I33AJcIAfMy
QMQWW8CvV3Ds8g/bzLioXmbFBzduY+tIz7+LlkeDLFH3iZGPxP/r+hxhT4tDTzgF
BwVe+C2/mG4tWLhSoGeCVRLk/pCHc4hK6JXNvj/wMDmWT1o5FvVSqpMQnuffFv2s
aL7DL4oREAkIgcTl0AX5irctywSXXcXLseBuzLdMdGN+IUuebGJkPAvS9hWTmz/v
kNpgu1ETOO7+pXekYBP65kHVIBQWizdnCNhwrYlxR1eqGUWPltvJAk9Qr/yJoETo
1pm5OeDjbw08HAcU4IQF5nZdaOJHatEkUly6ua5NP/dOtz/FEDTnfvQivwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNCkLjIsKIZxIjU63yLYwo/Cm10FMB8GA1UdIwQY
MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt
ZDRkYmY3MDY2ZmQzLzEvMEtRdU1pd29obkVpTlRyZkl0akNqOEtiWFFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz
LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZdjMA0G
CSqGSIb3DQEBCwUAA4IBAQCA2trYSyqKywlswQBO2X0Jolz7NqsidbuGGXnL8C4N
aaaby0uKDMIlDhahZm6AEYsgHsZi2pDCDqyZU0R426HWhb8lhkjXNufAs+FSJXl0
hjYXOqYV9DOE+jiUVaHW39RaZ97ecG48/RgqydLYMZbsBdSVtKD6+GNQu5uXMmv0
PDqYPMr+cTPK78ntiGNLX/LVCJf+/LpCo+qr5799yLJh44OPO/rTS+y/Rm7M9EiP
WxQfEa5DuugB72WoT4IesZhCINRw1A26tO5AyQVif64usFaKNR1cjv7Jq7U9Dk9j
tLBhifGfXeKmJTOiPCY6xsunSaP9/HzmMJAYa5F/c9jM
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:29 2024 by rpki-client on console-ams.rpki-client.org