Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/xWuQiRF7rFba0BL_xAVYE7MLsyo.roa
File: xWuQiRF7rFba0BL_xAVYE7MLsyo.roa (raw, json)
Hash identifier: g0jSa/ztISgsKe3g01z9qRUHn2/yqVerI2fELl0JYXw=
Subject key identifier: C5:6B:90:89:11:7B:AC:56:DA:D0:12:FF:C4:05:58:13:B3:0B:B3:2A
Certificate issuer: /CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Certificate serial: 018CFE0DB773851DA2DD62403E50CDF855F8
Authority key identifier: F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/xWuQiRF7rFba0BL_xAVYE7MLsyo.roa
Signing time: Fri 12 Jan 2024 14:22:40 +0000
ROA not before: Fri 12 Jan 2024 14:22:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210963
IP address blocks: 45.148.212.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jan 2024 09:36:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fe:0d:b7:73:85:1d:a2:dd:62:40:3e:50:cd:f8:55:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ef5dba100a92b2444f3e512d01a592c01951c2
Validity
Not Before: Jan 12 14:22:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c56b9089117bac56dad012ffc4055813b30bb32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:25:b8:b5:3b:57:0d:f7:9a:b9:4b:02:c2:f7:
d6:73:2d:ba:aa:a1:8d:cc:25:12:e4:0a:0b:ba:f0:
d1:07:84:78:59:7e:2d:b6:10:b8:53:a7:38:75:91:
39:28:99:15:3f:e4:6f:d4:70:22:b7:b2:9f:19:28:
0d:98:70:a5:fd:08:ad:6c:13:93:35:a2:1b:d9:ab:
8b:29:9d:04:20:05:18:c2:fe:a3:b4:4e:28:27:8f:
d9:c7:4b:0a:26:89:29:26:e7:f2:3d:fd:71:0d:bf:
8d:71:81:6c:f9:30:74:63:b2:ce:2a:cc:9c:bc:de:
97:f3:5c:b4:e0:e2:95:36:a6:5e:72:bb:22:c0:70:
b9:89:85:52:fc:d2:2c:bb:da:21:b2:e7:7a:39:c8:
4f:4d:4d:42:b2:85:41:af:f1:2a:13:e3:a0:d1:5e:
e4:35:f8:ba:dc:68:b1:7d:a3:05:2c:f5:6e:d6:aa:
b5:17:c7:3b:47:bf:2d:ba:fb:51:b9:45:cb:b2:ee:
f3:bd:b4:78:33:84:87:e8:75:9b:89:d2:67:6e:11:
99:34:fb:38:27:46:0b:7f:ba:d6:a7:09:97:06:10:
94:a2:e5:0b:58:d0:9b:e5:26:3d:5c:54:ed:54:bd:
fc:a6:4d:a3:d8:f6:da:7f:74:8b:5b:55:15:f5:5e:
aa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6B:90:89:11:7B:AC:56:DA:D0:12:FF:C4:05:58:13:B3:0B:B3:2A
X509v3 Authority Key Identifier:
keyid:F4:EF:5D:BA:10:0A:92:B2:44:4F:3E:51:2D:01:A5:92:C0:19:51:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9O9duhAKkrJETz5RLQGlksAZUcI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/xWuQiRF7rFba0BL_xAVYE7MLsyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/b35be1-6673-4811-a707-ad027e95c5c7/1/9O9duhAKkrJETz5RLQGlksAZUcI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.212.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:0f:40:8d:c9:7d:c9:eb:c4:b8:72:35:8d:15:4e:6e:61:a9:
8d:2b:20:6d:8c:5d:3f:11:d3:30:57:b3:7e:98:7b:b0:03:e1:
9c:a3:3a:14:06:cf:75:bb:ca:72:bd:04:24:8b:16:b9:60:c8:
2a:fc:50:af:fc:f6:0e:f0:c4:64:5d:22:05:32:91:fe:39:be:
45:a3:05:4b:0b:94:f4:7e:97:ee:79:f2:49:09:bc:53:f8:99:
fa:bf:96:49:58:c8:1d:da:c3:68:5e:39:c7:d5:f2:7a:e3:d9:
e2:de:5b:c2:79:9e:13:73:b3:b5:c1:ab:83:74:31:d7:b9:00:
43:78:da:a6:c3:f4:01:2f:dd:ea:e0:fd:79:17:c7:25:44:73:
bc:61:f4:32:27:5c:15:93:e4:14:05:dd:95:2d:96:78:07:32:
e2:a2:bf:62:6e:85:06:9f:a7:1a:41:a9:33:06:c0:ea:ac:72:
5b:45:d2:9a:05:63:00:6c:9b:ba:45:39:c5:ab:c7:97:0c:73:
af:b8:1f:7d:33:f8:94:7b:4a:4a:19:e6:92:2f:34:d4:38:0f:
6f:ca:3d:ba:a6:43:9b:c4:5d:51:ce:0a:f3:e2:86:27:fa:3a:
b9:8a:9c:e3:7d:34:04:7a:11:5f:4d:de:4b:0e:d7:ed:a9:d2:
b4:f2:47:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYz+DbdzhR2i3WJAPlDN+FX4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZWY1ZGJhMTAwYTkyYjI0NDRmM2U1MTJkMDFhNTkyYzAx
OTUxYzIwHhcNMjQwMTEyMTQyMjQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTZiOTA4OTExN2JhYzU2ZGFkMDEyZmZjNDA1NTgxM2IzMGJiMzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSW4tTtXDfeauUsCwvfWcy26qqGN
zCUS5AoLuvDRB4R4WX4tthC4U6c4dZE5KJkVP+Rv1HAit7KfGSgNmHCl/QitbBOT
NaIb2auLKZ0EIAUYwv6jtE4oJ4/Zx0sKJokpJufyPf1xDb+NcYFs+TB0Y7LOKsyc
vN6X81y04OKVNqZecrsiwHC5iYVS/NIsu9ohsud6OchPTU1CsoVBr/EqE+Og0V7k
Nfi63GixfaMFLPVu1qq1F8c7R78tuvtRuUXLsu7zvbR4M4SH6HWbidJnbhGZNPs4
J0YLf7rWpwmXBhCUouULWNCb5SY9XFTtVL38pk2j2Pbaf3SLW1UV9V6q7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMVrkIkRe6xW2tAS/8QFWBOzC7MqMB8GA1UdIwQY
MBaAFPTvXboQCpKyRE8+US0BpZLAGVHCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDct
YWQwMjdlOTVjNWM3LzEveFd1UWlSRjdyRmJhMEJMX3hBVllFN01Mc3lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9iMzViZTEtNjY3My00ODExLWE3MDctYWQwMjdlOTVjNWM3
LzEvOU85ZHVoQUtrckpFVHo1UkxRR2xrc0FaVWNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZTUMA0G
CSqGSIb3DQEBCwUAA4IBAQDBD0CNyX3J68S4cjWNFU5uYamNKyBtjF0/EdMwV7N+
mHuwA+GcozoUBs91u8pyvQQkixa5YMgq/FCv/PYO8MRkXSIFMpH+Ob5FowVLC5T0
fpfuefJJCbxT+Jn6v5ZJWMgd2sNoXjnH1fJ649ni3lvCeZ4Tc7O1wauDdDHXuQBD
eNqmw/QBL93q4P15F8clRHO8YfQyJ1wVk+QUBd2VLZZ4BzLior9iboUGn6caQakz
BsDqrHJbRdKaBWMAbJu6RTnFq8eXDHOvuB99M/iUe0pKGeaSLzTUOA9vyj26pkOb
xF1Rzgrz4oYn+jq5ipzjfTQEehFfTd5LDtftqdK08kf5
-----END CERTIFICATE-----
Generated at Thu Jan 18 12:37:41 2024 by rpki-client on console-ams.rpki-client.org