Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/l4aLAUqcw2nrmjZC8xgYJ9n34os.roa
File: l4aLAUqcw2nrmjZC8xgYJ9n34os.roa (raw, json)
Hash identifier: DoYdn4TPiC3W/Mavyj5C6mg+X2g4Hg7wCwju6z/0Hzw=
Subject key identifier: 97:86:8B:01:4A:9C:C3:69:EB:9A:36:42:F3:18:18:27:D9:F7:E2:8B
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 0185704BCAEAFD8883FA50BB73089A6BA0D6
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/l4aLAUqcw2nrmjZC8xgYJ9n34os.roa
Signing time: Mon 02 Jan 2023 02:24:53 +0000
ROA not before: Mon 02 Jan 2023 02:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.129.194.0/24 maxlen: 24
45.129.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:4b:ca:ea:fd:88:83:fa:50:bb:73:08:9a:6b:a0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Jan 2 02:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97868b014a9cc369eb9a3642f3181827d9f7e28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:99:cd:0e:a5:c1:6e:aa:4b:47:24:47:ac:
9d:03:dd:2d:71:3f:29:9e:7a:9a:33:ec:5a:e6:9f:
fb:04:1b:aa:98:b3:aa:3b:9b:00:c3:ab:d6:b7:a5:
11:c3:18:c3:d0:3d:22:43:ae:d1:14:ab:fc:f5:1e:
a3:21:83:cd:0e:d7:8a:05:e8:c1:f7:a8:5f:26:64:
04:57:75:6f:65:14:a6:2e:d1:27:52:3d:83:29:ed:
83:0d:fe:df:d8:fe:74:f1:b1:63:d3:b8:6c:6f:1e:
10:a1:d5:2e:eb:2b:35:5d:2a:64:a1:57:6d:73:f7:
4f:0e:44:a2:b7:b6:4a:5d:27:20:43:82:2b:33:0b:
9c:21:d5:b8:83:cc:ca:7a:c3:6c:1e:39:fb:10:cb:
ca:f8:8e:03:9d:cc:e5:81:ae:82:3f:10:e8:b6:f9:
59:b1:8e:03:f0:f6:c2:8c:3f:4d:fe:76:d2:c7:86:
1c:55:b8:2f:85:99:5e:c9:39:e4:21:b1:18:8a:0b:
cd:60:c1:3a:18:e2:33:00:a9:5b:57:a6:02:f2:f8:
92:c1:ed:cc:f4:91:18:17:8a:77:78:85:7b:74:1d:
0d:27:e3:92:03:88:6d:e3:fd:86:17:ad:e8:0f:1d:
30:d4:1a:55:7c:65:c7:82:35:60:76:18:35:88:46:
88:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:86:8B:01:4A:9C:C3:69:EB:9A:36:42:F3:18:18:27:D9:F7:E2:8B
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/l4aLAUqcw2nrmjZC8xgYJ9n34os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.193.0-45.129.194.255
Signature Algorithm: sha256WithRSAEncryption
91:f2:3c:7e:18:a3:45:f7:16:0c:c2:9c:78:ce:dc:9d:98:d1:
8c:e9:2e:75:82:a8:86:7b:64:cc:d2:7d:53:33:df:df:a5:14:
40:c8:72:7e:8a:b2:37:cc:62:cc:68:4c:f9:49:1f:1d:b8:f5:
e9:26:7d:5d:22:5a:0e:04:24:a3:5f:30:96:ec:77:a2:6b:d9:
28:72:2a:5e:3f:ad:ec:77:af:72:32:7c:8f:d6:4b:01:47:db:
d4:43:bf:73:5b:14:fd:d7:50:1c:ec:bc:87:94:1a:ad:b6:c6:
82:81:c0:09:58:9c:1e:dd:5a:d2:96:c8:9e:75:4d:a5:61:b2:
3e:10:f7:66:43:39:54:19:5a:34:85:0b:d6:24:18:8a:bd:56:
ad:be:a6:45:81:2c:8f:0a:46:3d:f4:ee:49:b3:61:38:68:de:
3a:58:e0:d6:48:4d:97:d7:91:67:d6:3d:43:cb:77:b4:0e:ae:
7e:6e:8a:16:d2:fb:5b:ef:61:24:58:f7:c2:ce:1e:67:1e:11:
f0:eb:d9:c3:e3:27:06:93:55:85:d7:6b:cd:12:8a:89:53:2d:
7b:59:c3:a0:b3:c8:07:5c:92:81:8f:f6:8f:d7:d5:83:13:19:
70:bd:ae:1b:8c:ff:6b:21:dd:3b:70:7f:75:59:e4:1d:dc:d9:
00:0d:58:7f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVwS8rq/YiD+lC7cwiaa6DWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwZDU1Yjc4ODM2YTkzZmI2ZjllYzlmYTdhNzllZDliOGJl
YTJiYTEwHhcNMjMwMTAyMDIyNDUzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Nzg2OGIwMTRhOWNjMzY5ZWI5YTM2NDJmMzE4MTgyN2Q5ZjdlMjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6KZzQ6lwW6qS0ckR6ydA90tcT8p
nnqaM+xa5p/7BBuqmLOqO5sAw6vWt6URwxjD0D0iQ67RFKv89R6jIYPNDteKBejB
96hfJmQEV3VvZRSmLtEnUj2DKe2DDf7f2P508bFj07hsbx4QodUu6ys1XSpkoVdt
c/dPDkSit7ZKXScgQ4IrMwucIdW4g8zKesNsHjn7EMvK+I4Dnczlga6CPxDotvlZ
sY4D8PbCjD9N/nbSx4YcVbgvhZleyTnkIbEYigvNYME6GOIzAKlbV6YC8viSwe3M
9JEYF4p3eIV7dB0NJ+OSA4ht4/2GF63oDx0w1BpVfGXHgjVgdhg1iEaICQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFJeGiwFKnMNp65o2QvMYGCfZ9+KLMB8GA1UdIwQY
MBaAFEDVW3iDapP7b57J+np57ZuL6iuhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMt
OTJlOGJlNjI3OWJiLzEvbDRhTEFVcWN3Mm5ybWpaQzh4Z1lKOW4zNG9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jNzZkODUtNjg2NC00YjM3LWJkYjMtOTJlOGJlNjI3OWJi
LzEvUU5WYmVJTnFrX3R2bnNuNmVubnRtNHZxSzZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAtgcED
BAAtgcIwDQYJKoZIhvcNAQELBQADggEBAJHyPH4Yo0X3FgzCnHjO3J2Y0YzpLnWC
qIZ7ZMzSfVMz39+lFEDIcn6KsjfMYsxoTPlJHx249ekmfV0iWg4EJKNfMJbsd6Jr
2ShyKl4/rex3r3IyfI/WSwFH29RDv3NbFP3XUBzsvIeUGq22xoKBwAlYnB7dWtKW
yJ51TaVhsj4Q92ZDOVQZWjSFC9YkGIq9Vq2+pkWBLI8KRj307kmzYTho3jpY4NZI
TZfXkWfWPUPLd7QOrn5uihbS+1vvYSRY98LOHmceEfDr2cPjJwaTVYXXa80SiolT
LXtZw6CzyAdckoGP9o/X1YMTGXC9rhuM/2sh3Ttwf3VZ5B3c2QANWH8=
-----END CERTIFICATE-----
Generated at Tue Nov 21 09:56:11 2023 by rpki-client on console-fra.rpki-client.org