Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/foDXuEl9PKvzEbfFhVxfHHMqOOI.roa
File: foDXuEl9PKvzEbfFhVxfHHMqOOI.roa (raw, json)
Hash identifier: 6H0i32HHR0ba9eBtEtxOt0YtHH1gA3qcWW0JBXR/PK4=
Subject key identifier: 7E:80:D7:B8:49:7D:3C:AB:F3:11:B7:C5:85:5C:5F:1C:73:2A:38:E2
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 018D7A931AC81B5E47CD5275D7378DAF5EC8
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/foDXuEl9PKvzEbfFhVxfHHMqOOI.roa
Signing time: Mon 05 Feb 2024 18:41:17 +0000
ROA not before: Mon 05 Feb 2024 18:41:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209984
IP address blocks: 45.132.48.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 14 Feb 2024 12:33:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:7a:93:1a:c8:1b:5e:47:cd:52:75:d7:37:8d:af:5e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 5 18:41:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e80d7b8497d3cabf311b7c5855c5f1c732a38e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:6c:44:36:4f:ad:db:2e:bc:48:50:24:c1:60:
13:7c:f9:4e:59:18:67:e1:80:2f:2c:af:eb:78:ba:
c0:b4:d7:71:d4:c4:ac:21:47:44:81:a0:49:d4:22:
58:46:9a:7f:ff:d6:8f:b8:84:91:a9:28:86:0a:13:
46:fa:8e:03:19:07:84:ec:75:6b:5a:5a:8d:be:7f:
91:03:67:e8:65:a2:8c:ce:0a:ef:db:8c:b0:21:59:
a6:71:e5:73:c3:5c:36:f2:03:f9:0d:79:aa:ad:f4:
09:09:a4:e1:f8:64:f1:40:45:05:3a:ae:57:23:77:
d7:92:b6:a1:1b:78:df:d1:ce:25:a5:cf:ce:9b:39:
d8:1c:ec:24:a7:4f:21:67:77:fa:e0:f3:66:04:a5:
83:9a:b2:6a:ed:61:a0:d8:ab:f7:71:2d:29:4f:16:
a2:70:4f:00:c3:d2:99:5e:a2:4c:72:82:5f:ee:6c:
66:85:d0:20:d6:fb:bd:0d:cc:4b:3c:14:1f:2c:17:
78:9f:df:32:19:1f:ea:b0:35:78:d1:a5:b3:9b:55:
2a:e6:c6:da:d3:4a:4f:6f:e3:e9:20:eb:32:aa:98:
6e:12:b6:f9:af:9c:ff:54:36:b9:90:b2:08:74:04:
c2:3d:f1:6e:23:a5:e8:41:3c:59:a2:fb:08:d0:c4:
32:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:80:D7:B8:49:7D:3C:AB:F3:11:B7:C5:85:5C:5F:1C:73:2A:38:E2
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/foDXuEl9PKvzEbfFhVxfHHMqOOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.48.0/23
Signature Algorithm: sha256WithRSAEncryption
50:11:7c:69:01:79:3c:4e:15:f9:72:e5:e4:8e:f6:56:fe:bd:
32:fc:b9:5c:55:54:c3:16:37:64:7b:bc:00:cb:b2:51:2d:69:
61:fe:97:44:18:59:8a:51:1f:12:20:fd:e2:70:f3:af:33:b6:
ee:ee:ec:78:23:ae:28:37:45:b6:0f:11:8d:74:ec:a7:06:cc:
38:8b:dd:b5:b5:63:45:e0:88:04:20:ab:59:37:ff:73:ac:62:
a4:c5:5e:cb:ef:36:07:df:70:27:1d:a4:be:8f:19:d7:c0:40:
90:59:80:68:8b:01:57:e2:a8:81:f0:70:9b:e3:7c:33:23:d7:
7f:c0:62:57:a7:6b:12:4c:24:a3:d8:6a:35:b1:99:cf:a8:54:
14:d8:ce:76:b6:7d:38:28:f4:60:9d:03:3a:6d:0b:23:18:00:
19:3b:d3:ba:7f:a1:2c:d7:50:c2:19:7c:a1:e1:d7:b9:0d:73:
cd:fa:f0:70:4c:32:07:fd:00:06:d8:6f:1a:34:4a:d9:26:1d:
7a:5c:08:f5:4b:4c:65:cb:4a:cd:9a:2e:fa:24:f4:b1:77:71:
fa:fa:38:47:8d:49:1b:93:1d:47:cd:86:93:7e:83:84:de:37:
05:49:96:cd:41:02:26:10:6e:af:e0:e3:b6:53:00:c9:40:52:
87:a6:67:32
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY16kxrIG15HzVJ11zeNr17IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NmJiNDhlOTNlOGEwMDU4YzVjNzJhODFhODc5OTQ1NTMw
N2VlNTYwHhcNMjQwMjA1MTg0MTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTgwZDdiODQ5N2QzY2FiZjMxMWI3YzU4NTVjNWYxYzczMmEzOGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGxENk+t2y68SFAkwWATfPlOWRhn
4YAvLK/reLrAtNdx1MSsIUdEgaBJ1CJYRpp//9aPuISRqSiGChNG+o4DGQeE7HVr
WlqNvn+RA2foZaKMzgrv24ywIVmmceVzw1w28gP5DXmqrfQJCaTh+GTxQEUFOq5X
I3fXkrahG3jf0c4lpc/OmznYHOwkp08hZ3f64PNmBKWDmrJq7WGg2Kv3cS0pTxai
cE8Aw9KZXqJMcoJf7mxmhdAg1vu9DcxLPBQfLBd4n98yGR/qsDV40aWzm1Uq5sba
00pPb+PpIOsyqphuErb5r5z/VDa5kLIIdATCPfFuI6XoQTxZovsI0MQyFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH6A17hJfTyr8xG3xYVcXxxzKjjiMB8GA1UdIwQY
MBaAFNdrtI6T6KAFjFxyqBqHmUVTB+5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgt
OGJmYmRkNDVjYjYyLzEvZm9EWHVFbDlQS3Z6RWJmRmhWeGZISE1xT09JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9hNWJmYjYtNmExMC00ZmJjLWFmNDgtOGJmYmRkNDVjYjYy
LzEvMTJ1MGpwUG9vQVdNWEhLb0dvZVpSVk1IN2xZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYQwMA0G
CSqGSIb3DQEBCwUAA4IBAQBQEXxpAXk8ThX5cuXkjvZW/r0y/LlcVVTDFjdke7wA
y7JRLWlh/pdEGFmKUR8SIP3icPOvM7bu7ux4I64oN0W2DxGNdOynBsw4i921tWNF
4IgEIKtZN/9zrGKkxV7L7zYH33AnHaS+jxnXwECQWYBoiwFX4qiB8HCb43wzI9d/
wGJXp2sSTCSj2Go1sZnPqFQU2M52tn04KPRgnQM6bQsjGAAZO9O6f6Es11DCGXyh
4de5DXPN+vBwTDIH/QAG2G8aNErZJh16XAj1S0xly0rNmi76JPSxd3H6+jhHjUkb
kx1HzYaTfoOE3jcFSZbNQQImEG6v4OO2UwDJQFKHpmcy
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:49 2024 by rpki-client on console-ams.rpki-client.org