Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/7VT8c0Rcqln5inrBcVEfZndQfOo.roa
File: 7VT8c0Rcqln5inrBcVEfZndQfOo.roa (raw, json)
Hash identifier: +suvjHj5STmeMmEIIxpOJFLYXhYQzneMa2PYJQ45zsw=
Subject key identifier: ED:54:FC:73:44:5C:AA:59:F9:8A:7A:C1:71:51:1F:66:77:50:7C:EA
Certificate issuer: /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial: 018A7ABC416DB6CAB010E69071EEFD75DC75
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/7VT8c0Rcqln5inrBcVEfZndQfOo.roa
Signing time: Sat 09 Sep 2023 16:17:52 +0000
ROA not before: Sat 09 Sep 2023 16:17:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206494
IP address blocks: 45.159.187.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:7a:bc:41:6d:b6:ca:b0:10:e6:90:71:ee:fd:75:dc:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Validity
Not Before: Sep 9 16:17:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed54fc73445caa59f98a7ac171511f6677507cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a1:e8:ed:d2:c5:ee:af:88:35:e9:49:b1:53:
fe:09:b8:5b:9c:8b:ce:4c:86:53:8c:ac:af:4e:64:
ae:f7:18:c5:66:c9:03:0f:52:70:4d:69:4e:7f:47:
81:17:f1:f8:aa:d5:8a:fe:5f:96:2f:4d:44:e4:00:
52:12:88:66:ec:03:10:86:d7:72:aa:59:c2:14:b7:
71:46:93:38:ea:ea:f2:d3:18:3b:c5:3f:36:d7:86:
d2:be:3f:3b:62:83:ab:c5:3e:b9:77:78:f4:1f:03:
39:b9:41:d5:31:20:4d:3b:ed:a1:cf:94:42:ca:90:
d8:44:0e:7a:d6:0f:a1:7f:d6:5c:e2:ee:be:ce:c7:
de:a9:90:39:6a:b4:74:d4:7f:87:b1:68:37:8e:25:
81:87:d2:5e:dc:0b:b6:cc:22:8b:9e:66:2f:d8:d8:
83:34:9d:46:b6:eb:db:9d:37:a4:54:f7:b0:d6:98:
f4:a8:ec:ff:0a:84:43:b0:24:7b:d3:04:30:77:a8:
f9:c6:8e:39:a1:13:27:37:a8:40:26:1f:dc:c9:87:
e8:27:fa:37:08:31:35:e5:a6:dd:46:6d:cd:55:f8:
db:9f:e3:f0:3d:f4:25:85:09:e6:a8:35:05:5e:a9:
d8:57:af:ee:14:24:b7:fc:57:80:92:0d:0f:e3:71:
7f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:54:FC:73:44:5C:AA:59:F9:8A:7A:C1:71:51:1F:66:77:50:7C:EA
X509v3 Authority Key Identifier:
keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/7VT8c0Rcqln5inrBcVEfZndQfOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.187.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:e8:68:1f:7e:b4:c9:32:af:31:bc:9d:fd:db:5e:70:70:ed:
dc:1b:eb:49:c2:26:b0:1c:22:55:68:22:23:61:a8:60:97:93:
92:4f:e5:43:aa:e8:ae:dc:70:c4:33:56:10:c1:c1:23:c5:eb:
ce:df:c1:d9:0f:9c:82:15:b9:ca:15:c0:67:24:37:23:85:cd:
d1:99:0f:59:8c:ed:f6:46:0c:5f:ac:8a:e6:dc:fe:49:66:c3:
a0:2d:6d:54:44:52:aa:f1:7c:b6:fb:fc:04:3e:d4:82:e9:bb:
99:20:bd:d7:6e:c8:23:22:89:f2:e2:7a:24:31:de:32:1c:49:
f7:26:9b:98:e1:07:04:fd:82:85:75:aa:57:8f:71:91:9e:59:
a5:a8:b9:51:b2:43:8d:98:57:69:d8:4e:bc:d4:31:4d:31:f6:
b5:06:5a:fc:ad:ea:1d:86:e4:b9:9d:fa:e4:d7:54:21:73:76:
e1:64:aa:7c:b4:b8:14:f9:7f:ea:3f:c9:af:1f:53:d7:04:8e:
ad:65:5f:cc:04:10:90:52:aa:19:9b:b2:85:f2:09:45:6a:91:
8a:30:5f:87:8a:15:ca:d9:1f:8d:30:24:66:aa:9b:25:26:94:
c2:80:ae:1e:1b:83:56:6a:63:ba:6e:e1:70:47:8e:1e:04:46:
dc:aa:ca:4c
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYp6vEFttsqwEOaQce79ddx1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NTU1YTc4ODNmOTJiOWY5YmE0MjJhOTZiNGUzOTdiZjVm
YjhmYzcwHhcNMjMwOTA5MTYxNzUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDU0ZmM3MzQ0NWNhYTU5Zjk4YTdhYzE3MTUxMWY2Njc3NTA3Y2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaHo7dLF7q+INelJsVP+CbhbnIvO
TIZTjKyvTmSu9xjFZskDD1JwTWlOf0eBF/H4qtWK/l+WL01E5ABSEohm7AMQhtdy
qlnCFLdxRpM46ury0xg7xT8214bSvj87YoOrxT65d3j0HwM5uUHVMSBNO+2hz5RC
ypDYRA561g+hf9Zc4u6+zsfeqZA5arR01H+HsWg3jiWBh9Je3Au2zCKLnmYv2NiD
NJ1GtuvbnTekVPew1pj0qOz/CoRDsCR70wQwd6j5xo45oRMnN6hAJh/cyYfoJ/o3
CDE15abdRm3NVfjbn+PwPfQlhQnmqDUFXqnYV6/uFCS3/FeAkg0P43F/WQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFO1U/HNEXKpZ+Yp6wXFRH2Z3UHzqMB8GA1UdIwQY
MBaAFPhVWniD+Sufm6QiqWtOOXv1+4/HMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1GVmFlSVA1SzUtYnBDS3BhMDQ1ZV9YN2o4Yy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2IvODI0NDVmLWQxZDctNDZiMC1hZjRm
LTc2NmMwNmU1ZjA3NS8xLzdWVDhjMFJjcWxuNWluckJjVkVmWm5kUWZPby5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvM2IvODI0NDVmLWQxZDctNDZiMC1hZjRmLTc2NmMwNmU1ZjA3
NS8xLzEtRlZhZUlQNUs1LWJwQ0twYTA0NWVfWDdqOGMuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtn7sw
DQYJKoZIhvcNAQELBQADggEBACvoaB9+tMkyrzG8nf3bXnBw7dwb60nCJrAcIlVo
IiNhqGCXk5JP5UOq6K7ccMQzVhDBwSPF687fwdkPnIIVucoVwGckNyOFzdGZD1mM
7fZGDF+siubc/klmw6AtbVREUqrxfLb7/AQ+1ILpu5kgvdduyCMiifLieiQx3jIc
Sfcmm5jhBwT9goV1qlePcZGeWaWouVGyQ42YV2nYTrzUMU0x9rUGWvyt6h2G5Lmd
+uTXVCFzduFkqny0uBT5f+o/ya8fU9cEjq1lX8wEEJBSqhmbsoXyCUVqkYowX4eK
FcrZH40wJGaqmyUmlMKArh4bg1ZqY7pu4XBHjh4ERtyqykw=
-----END CERTIFICATE-----
Generated at Mon Jan 1 15:14:44 2024 by rpki-client on console-fra.rpki-client.org