Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/Xt-QNZa4zRRBIai8Z1dCtp6qJlc.roa
File: Xt-QNZa4zRRBIai8Z1dCtp6qJlc.roa (raw, json)
Hash identifier: nvMp9w6NIN31sYCmDq2iONBTZdaPuCwjYXgJWNh0HDQ=
Subject key identifier: 5E:DF:90:35:96:B8:CD:14:41:21:A8:BC:67:57:42:B6:9E:AA:26:57
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 018D0DE58027F542D391C5946A4D09564A2A
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/Xt-QNZa4zRRBIai8Z1dCtp6qJlc.roa
Signing time: Mon 15 Jan 2024 16:12:40 +0000
ROA not before: Mon 15 Jan 2024 16:12:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59651
IP address blocks: 45.143.4.0/24 maxlen: 24
45.143.5.0/24 maxlen: 24
45.143.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Jan 2024 18:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0d:e5:80:27:f5:42:d3:91:c5:94:6a:4d:09:56:4a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Jan 15 16:12:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5edf903596b8cd144121a8bc675742b69eaa2657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d1:25:27:5c:b6:91:03:f6:56:fd:76:b3:5a:
7c:18:4f:a2:01:80:d5:9a:c1:0b:bc:7b:36:99:b0:
11:c3:7d:25:8b:53:2f:0a:9c:da:27:e5:19:83:c4:
e6:d8:f8:b9:af:17:3c:ca:06:2b:9c:4e:36:c2:86:
9d:6a:67:d3:60:58:1e:3e:7e:22:dc:51:1a:0f:80:
b1:ab:c4:17:c2:b5:91:8c:19:6c:25:c5:71:1c:58:
37:45:e0:da:a6:37:de:80:90:2b:62:a9:85:af:a1:
79:d0:77:a1:ac:50:9f:44:6c:ab:b9:ff:d8:40:57:
ef:0c:26:61:63:60:ab:f4:c2:8f:18:3c:46:33:7b:
9d:63:80:ce:8a:98:4d:09:74:ce:6a:95:b5:d5:c2:
9e:72:df:3b:74:3d:07:fc:63:af:e9:1e:b7:db:25:
c6:d3:ae:b2:22:af:6d:aa:4c:bc:60:9f:9f:77:15:
91:13:f8:86:74:33:91:e1:a5:b3:a2:e8:1c:26:54:
86:32:5f:62:e2:fc:28:21:1f:fb:66:d4:13:2e:24:
52:c2:01:8b:e5:f2:57:d9:ea:77:ad:40:1c:2f:60:
f3:93:1c:e8:43:e3:91:70:1a:9d:42:87:a6:3f:9d:
2d:50:b9:60:a4:f3:42:b7:15:60:f6:fb:4b:85:14:
54:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:DF:90:35:96:B8:CD:14:41:21:A8:BC:67:57:42:B6:9E:AA:26:57
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/Xt-QNZa4zRRBIai8Z1dCtp6qJlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.4.0-45.143.6.255
Signature Algorithm: sha256WithRSAEncryption
62:a9:5e:3c:1e:3f:1d:88:da:d5:3f:26:7b:ae:1e:04:db:96:
e9:56:d2:5a:ac:1d:60:cf:a8:d2:60:54:14:cc:8c:e8:ba:63:
01:cd:a8:47:d4:d0:49:cb:d1:00:d1:2b:c4:68:02:da:5e:0c:
44:df:ab:12:82:18:89:89:fb:2b:2f:83:29:16:dc:c5:92:98:
0e:52:9c:69:8c:06:f1:18:8a:35:df:4f:66:88:14:ca:c6:c7:
55:72:b3:2e:1e:57:2e:47:51:af:d8:8b:af:9a:28:3a:a1:d8:
4d:96:61:d6:d5:34:6d:53:91:d0:62:46:6a:fd:05:c5:0a:16:
4f:89:22:0a:6a:cb:6d:d1:05:b0:c3:25:6e:e8:68:b3:9b:12:
80:c9:9b:51:ed:d8:59:88:fc:c1:49:af:dd:45:3e:79:01:ba:
2e:55:b3:e0:18:06:c7:b2:28:fe:e4:2f:13:7e:37:34:6c:45:
8e:1b:18:51:da:bf:1c:48:dd:3d:5c:ec:e7:e8:e4:af:a2:ea:
fd:6b:4a:d2:b5:08:03:0a:95:57:92:9f:8d:79:01:d9:81:53:
9d:93:3d:85:b5:42:15:c7:20:dc:e7:2a:19:84:2f:85:b0:88:
0c:14:c8:b3:2a:7f:7a:fa:70:ff:89:b8:93:6c:6d:55:b9:ab:
4b:0e:5b:33
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAY0N5YAn9ULTkcWUak0JVkoqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3
Y2Q0MjMwHhcNMjQwMTE1MTYxMjQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZWRmOTAzNTk2YjhjZDE0NDEyMWE4YmM2NzU3NDJiNjllYWEyNjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdElJ1y2kQP2Vv12s1p8GE+iAYDV
msELvHs2mbARw30li1MvCpzaJ+UZg8Tm2Pi5rxc8ygYrnE42woadamfTYFgePn4i
3FEaD4Cxq8QXwrWRjBlsJcVxHFg3ReDapjfegJArYqmFr6F50HehrFCfRGyruf/Y
QFfvDCZhY2Cr9MKPGDxGM3udY4DOiphNCXTOapW11cKect87dD0H/GOv6R632yXG
066yIq9tqky8YJ+fdxWRE/iGdDOR4aWzougcJlSGMl9i4vwoIR/7ZtQTLiRSwgGL
5fJX2ep3rUAcL2DzkxzoQ+ORcBqdQoemP50tULlgpPNCtxVg9vtLhRRUjwIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFF7fkDWWuM0UQSGovGdXQraeqiZXMB8GA1UdIwQY
MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli
LWExYjdjZWVmYTE2Yy8xL1h0LVFOWmE0elJSQklhaThaMWRDdHA2cUpsYy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjliLWExYjdjZWVmYTE2
Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwJwYIKwYBBQUHAQcBAf8EGDAWMBQEAgABMA4wDAMEAi2P
BAMEAC2PBjANBgkqhkiG9w0BAQsFAAOCAQEAYqlePB4/HYja1T8me64eBNuW6VbS
WqwdYM+o0mBUFMyM6LpjAc2oR9TQScvRANErxGgC2l4MRN+rEoIYiYn7Ky+DKRbc
xZKYDlKcaYwG8RiKNd9PZogUysbHVXKzLh5XLkdRr9iLr5ooOqHYTZZh1tU0bVOR
0GJGav0FxQoWT4kiCmrLbdEFsMMlbuhos5sSgMmbUe3YWYj8wUmv3UU+eQG6LlWz
4BgGx7Io/uQvE343NGxFjhsYUdq/HEjdPVzs5+jkr6Lq/WtK0rUIAwqVV5KfjXkB
2YFTnZM9hbVCFccg3OcqGYQvhbCIDBTIsyp/evpw/4m4k2xtVbmrSw5bMw==
-----END CERTIFICATE-----
Generated at Tue Jan 16 21:18:26 2024 by rpki-client on console-ams.rpki-client.org