Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/wFJ03mgOds8mnzxcM3q7v2W1NO0.roa
File: wFJ03mgOds8mnzxcM3q7v2W1NO0.roa (raw, json)
Hash identifier: MHa4+rmZfWvEZ9olvIN6EECuv8qNH95nfbCBknXiY+E=
Subject key identifier: C0:52:74:DE:68:0E:76:CF:26:9F:3C:5C:33:7A:BB:BF:65:B5:34:ED
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 018AB77ED51879503469F223C0E327D8B3A8
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/wFJ03mgOds8mnzxcM3q7v2W1NO0.roa
Signing time: Thu 21 Sep 2023 11:27:37 +0000
ROA not before: Thu 21 Sep 2023 11:27:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400536
IP address blocks: 45.143.6.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b7:7e:d5:18:79:50:34:69:f2:23:c0:e3:27:d8:b3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Sep 21 11:27:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c05274de680e76cf269f3c5c337abbbf65b534ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6e:00:58:9e:a3:08:3a:96:3a:44:a3:50:54:
c1:b6:f5:68:70:60:d8:cd:ea:97:90:3e:c0:29:4c:
42:10:68:e4:ba:a4:63:89:0f:5b:e4:b6:f7:d3:f5:
df:7b:e6:e4:4e:74:4a:24:32:ed:b2:e7:b5:42:2d:
b2:27:2e:38:62:4f:c5:8e:93:aa:b2:39:73:2f:ef:
ee:2e:20:e3:a2:c5:42:9c:22:50:2e:b2:f6:ed:de:
42:e8:fd:76:02:ff:6c:48:e0:d7:a6:d6:70:98:a3:
ad:9b:2d:17:d2:7f:85:ca:bb:5f:1b:c6:58:fd:28:
d9:ec:d5:88:ff:cd:2a:7f:f3:53:79:74:2e:67:2a:
e2:81:44:ee:95:f2:02:f8:0d:1f:da:a1:30:19:e5:
72:65:1c:f0:b3:49:9f:fa:2c:d0:22:6c:d5:0e:c0:
e6:9a:b0:7b:06:3b:65:f1:6a:57:c5:65:5a:c3:31:
93:2a:f5:14:5d:bd:9e:93:86:bb:1b:51:c2:67:79:
5c:17:8b:91:5b:11:94:3b:b8:dd:3d:a7:0f:73:09:
eb:72:59:d4:e8:4e:58:f3:b5:34:e1:fc:87:35:8c:
df:93:9a:99:b7:65:44:01:cc:0e:5d:78:0c:da:b2:
16:c7:a7:c7:76:3a:c7:86:8a:9b:7b:26:f4:e1:a4:
cb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:52:74:DE:68:0E:76:CF:26:9F:3C:5C:33:7A:BB:BF:65:B5:34:ED
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/wFJ03mgOds8mnzxcM3q7v2W1NO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.6.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:00:9a:b3:0f:de:84:c3:8e:97:39:6a:a4:53:24:4c:ae:b1:
16:4b:ec:e7:5a:a4:47:61:14:be:20:d0:d6:57:6b:05:05:b9:
78:f2:e9:27:03:6f:db:c0:90:eb:e6:3d:8f:65:19:41:20:ee:
da:ee:ca:a9:4c:9d:2c:99:09:eb:07:92:1b:63:c2:c3:19:a2:
14:61:1c:20:67:74:58:7c:88:8f:52:9b:09:56:b3:40:d2:78:
2e:d8:dc:9e:47:94:02:35:f6:48:bc:6f:a9:eb:c7:f0:67:29:
ab:d5:0c:04:1a:5a:65:c9:c3:77:56:7e:9e:49:3a:3f:0f:a3:
3f:f6:48:fa:d8:59:07:11:82:1d:f3:5c:3a:a6:49:d8:75:9e:
ac:bd:8c:e8:91:4d:5e:1d:ad:3b:e8:9b:53:c1:07:1d:9c:35:
f7:f2:6d:57:48:eb:ec:11:ba:a4:b1:0c:4d:57:c8:35:11:95:
ae:7b:d7:bb:42:52:c6:5b:13:5a:dc:eb:6d:87:5f:e3:3a:43:
2a:4e:55:ad:f5:3f:e1:81:b0:b4:0e:ed:77:11:6a:95:1a:18:
4a:2f:2c:5a:88:03:e7:73:52:66:e3:d9:3c:d7:3d:51:9f:d0:
a6:74:b2:21:bb:0b:b4:15:f3:e2:b9:20:49:01:f8:52:8d:dd:
fe:f9:3c:93
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYq3ftUYeVA0afIjwOMn2LOoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4NjUxYjExOTRmMTJlOThlNzBkM2RhNzhlZmU0ZGQyNDY3
Y2Q0MjMwHhcNMjMwOTIxMTEyNzM3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMDUyNzRkZTY4MGU3NmNmMjY5ZjNjNWMzMzdhYmJiZjY1YjUzNGVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm4AWJ6jCDqWOkSjUFTBtvVocGDY
zeqXkD7AKUxCEGjkuqRjiQ9b5Lb30/Xfe+bkTnRKJDLtsue1Qi2yJy44Yk/FjpOq
sjlzL+/uLiDjosVCnCJQLrL27d5C6P12Av9sSODXptZwmKOtmy0X0n+FyrtfG8ZY
/SjZ7NWI/80qf/NTeXQuZyrigUTulfIC+A0f2qEwGeVyZRzws0mf+izQImzVDsDm
mrB7Bjtl8WpXxWVawzGTKvUUXb2ek4a7G1HCZ3lcF4uRWxGUO7jdPacPcwnrclnU
6E5Y87U04fyHNYzfk5qZt2VEAcwOXXgM2rIWx6fHdjrHhoqbeyb04aTLewIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMBSdN5oDnbPJp88XDN6u79ltTTtMB8GA1UdIwQY
MBaAFPhlGxGU8S6Y5w09p47+TdJGfNQjMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1HVWJFWlR4THBqbkRUMm5qdjVOMGtaODFDTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjli
LWExYjdjZWVmYTE2Yy8xL3dGSjAzbWdPZHM4bW56eGNNM3E3djJXMU5PMC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNGUvODIyNDAwLTMyNDgtNDcwMi1iMjliLWExYjdjZWVmYTE2
Yy8xLzEtR1ViRVpUeExwam5EVDJuanY1TjBrWjgxQ00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtjwYw
DQYJKoZIhvcNAQELBQADggEBAB8AmrMP3oTDjpc5aqRTJEyusRZL7OdapEdhFL4g
0NZXawUFuXjy6ScDb9vAkOvmPY9lGUEg7truyqlMnSyZCesHkhtjwsMZohRhHCBn
dFh8iI9SmwlWs0DSeC7Y3J5HlAI19ki8b6nrx/BnKavVDAQaWmXJw3dWfp5JOj8P
oz/2SPrYWQcRgh3zXDqmSdh1nqy9jOiRTV4drTvom1PBBx2cNffybVdI6+wRuqSx
DE1XyDURla5717tCUsZbE1rc622HX+M6QypOVa31P+GBsLQO7XcRapUaGEovLFqI
A+dzUmbj2TzXPVGf0KZ0siG7C7QV8+K5IEkB+FKN3f75PJM=
-----END CERTIFICATE-----
Generated at Sat Dec 23 08:35:58 2023 by rpki-client on console-ams.rpki-client.org