Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/n0M7OgksaC8wX54bzHthCO7ZQU4.roa
File: n0M7OgksaC8wX54bzHthCO7ZQU4.roa (raw, json)
Hash identifier: imLoc1ATSiRVHs/mtoP9poFMkau86XrCQAOccJeBzls=
Subject key identifier: 9F:43:3B:3A:09:2C:68:2F:30:5F:9E:1B:CC:7B:61:08:EE:D9:41:4E
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0185715E57ECA1F6DA317ED545496CE01136
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/n0M7OgksaC8wX54bzHthCO7ZQU4.roa
Signing time: Mon 02 Jan 2023 07:24:46 +0000
ROA not before: Mon 02 Jan 2023 07:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211373
IP address blocks: 45.140.244.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:57:ec:a1:f6:da:31:7e:d5:45:49:6c:e0:11:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Jan 2 07:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f433b3a092c682f305f9e1bcc7b6108eed9414e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ae:36:4c:18:df:10:27:23:af:4a:c9:93:54:
80:56:07:27:69:c3:e7:5b:d8:3e:b7:96:39:38:33:
91:6b:ac:3d:c1:ea:0e:6e:6c:4e:34:76:85:c9:ac:
9c:63:f4:24:d5:f5:f5:b7:b3:5c:8d:e6:16:02:4f:
83:79:da:8b:78:1b:23:8a:3e:91:bf:9f:f2:04:50:
ae:29:1a:62:c9:0c:22:de:bc:b2:69:dc:fd:c9:cf:
01:ca:5c:69:c5:6a:0c:8a:f8:8e:f1:dd:24:df:b9:
6d:5c:a2:60:79:3e:65:a5:07:be:2e:5f:3b:eb:d2:
79:48:a0:4b:28:1f:61:e5:2e:73:7f:7a:52:fc:32:
ad:e1:e4:37:ff:45:a5:2f:31:7d:e6:72:be:ea:9f:
33:3a:02:d3:41:a3:54:b8:fd:74:74:49:a1:26:26:
e0:d7:ea:b7:f8:b9:3a:b4:a8:05:88:ba:dd:c5:ea:
a5:78:d7:8f:e7:34:04:44:4e:37:50:d0:a6:05:94:
49:39:f2:16:27:fb:e2:bd:e0:ae:b5:2f:5e:8f:64:
e5:33:e9:ec:32:b2:04:d3:e4:f2:56:75:70:2b:c2:
30:11:a9:33:e4:bf:2c:80:77:af:82:ba:02:41:9f:
ff:09:4a:33:1b:32:a6:52:55:55:b7:09:ee:53:7c:
4d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:43:3B:3A:09:2C:68:2F:30:5F:9E:1B:CC:7B:61:08:EE:D9:41:4E
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/n0M7OgksaC8wX54bzHthCO7ZQU4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.244.0/24
Signature Algorithm: sha256WithRSAEncryption
13:4b:5b:3d:6e:0c:1b:14:09:79:78:56:5e:5b:60:2a:04:36:
27:5f:d4:71:e8:28:f3:0f:a4:98:5b:07:19:e4:bc:a0:0c:b9:
9a:0d:ae:3d:3f:d2:bd:7e:f4:14:b0:7d:ef:78:96:33:e1:a2:
c3:76:f6:a3:fb:12:dc:0b:00:b7:7c:f8:09:44:ce:19:89:2b:
f5:76:d2:54:9b:ba:7a:4b:ab:a8:ef:26:8a:41:73:c4:f8:11:
c4:4c:4e:72:e7:ed:28:3f:69:6a:8c:17:22:aa:9b:26:f3:7f:
75:fc:f9:3f:af:f1:39:52:9b:7b:a4:cd:20:71:6e:88:bf:91:
3c:ff:47:6d:dd:cf:f3:76:26:91:1f:7a:b5:0c:89:ba:18:c0:
04:1d:d3:c9:7b:1e:0f:4c:ad:c1:4e:8b:d3:eb:ed:cd:f6:a6:
31:13:c4:03:73:02:24:91:ae:b3:3f:99:db:c8:e6:fd:a3:5a:
91:9f:5d:45:e0:9c:a2:e1:61:36:67:93:cd:33:33:a7:02:a2:
d4:36:df:68:4f:ea:a6:c7:8b:88:57:ca:01:d1:dd:58:d2:aa:
c0:4d:55:f9:db:a2:a5:10:83:4b:79:4c:da:56:e4:ba:61:c6:
6a:83:f2:52:9c:9b:53:86:61:95:64:47:5b:8a:1e:e1:d9:03:
b9:ac:53:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxXlfsofbaMX7VRUls4BE2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk
MjI0YjEwHhcNMjMwMTAyMDcyNDQ2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjQzM2IzYTA5MmM2ODJmMzA1ZjllMWJjYzdiNjEwOGVlZDk0MTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy642TBjfECcjr0rJk1SAVgcnacPn
W9g+t5Y5ODORa6w9weoObmxONHaFyaycY/Qk1fX1t7NcjeYWAk+DedqLeBsjij6R
v5/yBFCuKRpiyQwi3ryyadz9yc8BylxpxWoMiviO8d0k37ltXKJgeT5lpQe+Ll87
69J5SKBLKB9h5S5zf3pS/DKt4eQ3/0WlLzF95nK+6p8zOgLTQaNUuP10dEmhJibg
1+q3+Lk6tKgFiLrdxeqleNeP5zQERE43UNCmBZRJOfIWJ/viveCutS9ej2TlM+ns
MrIE0+TyVnVwK8IwEakz5L8sgHevgroCQZ//CUozGzKmUlVVtwnuU3xNXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ9DOzoJLGgvMF+eG8x7YQju2UFOMB8GA1UdIwQY
MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct
NGY0YzliMzQzZTkwLzEvbjBNN09na3NhQzh3WDU0YnpIdGhDTzdaUVU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw
LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYz0MA0G
CSqGSIb3DQEBCwUAA4IBAQATS1s9bgwbFAl5eFZeW2AqBDYnX9Rx6CjzD6SYWwcZ
5LygDLmaDa49P9K9fvQUsH3veJYz4aLDdvaj+xLcCwC3fPgJRM4ZiSv1dtJUm7p6
S6uo7yaKQXPE+BHETE5y5+0oP2lqjBciqpsm8391/Pk/r/E5Upt7pM0gcW6Iv5E8
/0dt3c/zdiaRH3q1DIm6GMAEHdPJex4PTK3BTovT6+3N9qYxE8QDcwIkka6zP5nb
yOb9o1qRn11F4Jyi4WE2Z5PNMzOnAqLUNt9oT+qmx4uIV8oB0d1Y0qrATVX526Kl
EINLeUzaVuS6YcZqg/JSnJtThmGVZEdbih7h2QO5rFNh
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:03 2024 by rpki-client on console-fra.rpki-client.org