Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/dHbN5HL4-3CpHPe7Fgi9ro6p1cM.roa
File: dHbN5HL4-3CpHPe7Fgi9ro6p1cM.roa (raw, json)
Hash identifier: jYCnkQpXYKRb229F7O66xgsvtWIneCnTy9RExMZU1Gs=
Subject key identifier: 74:76:CD:E4:72:F8:FB:70:A9:1C:F7:BB:16:08:BD:AE:8E:A9:D5:C3
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 018596C5BBBEA64A5265D9515E79922A9BC1
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/dHbN5HL4-3CpHPe7Fgi9ro6p1cM.roa
Signing time: Mon 09 Jan 2023 13:43:39 +0000
ROA not before: Mon 09 Jan 2023 13:43:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 45.151.70.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:96:c5:bb:be:a6:4a:52:65:d9:51:5e:79:92:2a:9b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Jan 9 13:43:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7476cde472f8fb70a91cf7bb1608bdae8ea9d5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:94:d8:8f:c2:1e:da:ab:9f:4b:4b:e6:89:a3:
56:89:25:9a:5d:99:5f:b2:b0:ec:dc:4a:0a:10:74:
c7:3b:6b:6d:3c:99:b5:9b:9f:82:5b:42:f9:5a:08:
89:77:31:2f:60:56:51:56:8d:07:63:66:95:2d:e6:
bc:c3:c2:da:d7:38:06:37:48:31:6a:c2:0a:ad:d9:
6e:e3:1b:a5:80:f6:9a:25:10:63:1c:40:67:c7:88:
5e:db:d9:f4:75:0c:b0:e0:9e:bb:73:29:52:e6:b0:
79:fd:d9:60:39:6b:4b:6f:b8:9e:30:b0:da:69:ab:
2b:4d:9e:4a:53:0a:b3:f8:7d:8f:25:75:4d:f7:5e:
1a:e9:89:0f:1d:b7:04:32:44:46:d3:be:c8:e5:b4:
8f:24:0b:71:1b:2c:61:da:2b:79:a3:b6:53:c5:34:
66:86:1c:4a:41:7e:26:fb:33:95:e3:20:86:45:b4:
d0:c5:b1:20:a7:82:09:65:2b:f2:bb:d2:af:29:5f:
96:70:c0:5a:a5:6e:ef:a8:7c:a7:4d:63:ed:c1:76:
b2:84:52:e4:87:ac:58:10:23:fd:64:b2:bd:cb:a4:
6b:21:a8:a6:41:df:be:61:a6:26:e4:66:33:b9:9f:
89:f0:61:62:a7:20:12:15:bc:aa:55:63:f4:83:6d:
2a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:76:CD:E4:72:F8:FB:70:A9:1C:F7:BB:16:08:BD:AE:8E:A9:D5:C3
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/dHbN5HL4-3CpHPe7Fgi9ro6p1cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.70.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:1d:99:ea:dc:ca:31:6f:d3:5a:0f:fe:a8:86:27:4b:7b:8b:
be:92:55:e6:29:e7:26:5a:07:4e:68:66:cd:bc:9d:24:30:d6:
38:a0:5e:f2:c3:1e:90:a6:21:86:5a:f0:d4:89:5c:88:a1:e7:
b4:63:62:2d:1f:e2:0b:58:c0:13:49:c0:7a:4f:89:0f:83:e4:
15:58:16:2a:e1:fc:b6:3b:69:8b:48:ae:af:7f:15:24:f6:ad:
3a:e3:2b:ea:62:dd:35:4f:67:c9:57:be:80:e2:14:95:8b:20:
4b:1a:9b:60:56:a6:7d:44:01:78:e0:75:61:e1:ab:d5:ca:ae:
01:d2:54:f6:ad:14:4b:a0:33:48:9c:7b:45:75:b8:b4:88:a6:
17:df:e1:68:57:85:9e:2e:bd:c6:0f:54:4f:e9:4e:e2:5c:75:
0a:9e:e3:6a:be:06:46:63:93:54:16:9f:da:ca:5b:f5:8e:4b:
8e:a3:cb:83:be:3a:39:70:76:be:3f:78:9f:36:13:17:f7:80:
8a:c3:94:7b:84:5b:41:e6:84:dd:f2:77:f8:83:3d:82:3a:50:
6a:03:2e:a8:e7:12:c1:21:d8:e8:ee:35:3b:c2:c0:a9:ad:6b:
9f:65:84:d4:48:b7:99:55:99:98:60:35:8b:59:33:98:f2:02:
63:9a:c5:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYWWxbu+pkpSZdlRXnmSKpvBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODkyYWVkMzgzM2U2MTAwZjVlMGNmMTIyNzFmZDgwYjc1
NWMzNjEwHhcNMjMwMTA5MTM0MzM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NDc2Y2RlNDcyZjhmYjcwYTkxY2Y3YmIxNjA4YmRhZThlYTlkNWMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZTYj8Ie2qufS0vmiaNWiSWaXZlf
srDs3EoKEHTHO2ttPJm1m5+CW0L5WgiJdzEvYFZRVo0HY2aVLea8w8La1zgGN0gx
asIKrdlu4xulgPaaJRBjHEBnx4he29n0dQyw4J67cylS5rB5/dlgOWtLb7ieMLDa
aasrTZ5KUwqz+H2PJXVN914a6YkPHbcEMkRG077I5bSPJAtxGyxh2it5o7ZTxTRm
hhxKQX4m+zOV4yCGRbTQxbEgp4IJZSvyu9KvKV+WcMBapW7vqHynTWPtwXayhFLk
h6xYECP9ZLK9y6RrIaimQd++YaYm5GYzuZ+J8GFipyASFbyqVWP0g20qqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHR2zeRy+PtwqRz3uxYIva6OqdXDMB8GA1UdIwQY
MBaAFFyJKu04M+YQD14M8SJx/YC3VcNhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2Ut
M2FhN2RhYTlkM2VjLzEvZEhiTjVITDQtM0NwSFBlN0ZnaTlybzZwMWNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84NmZiNDYtZDcxMi00NjAyLTljY2UtM2FhN2RhYTlkM2Vj
LzEvWElrcTdUZ3o1aEFQWGd6eEluSDlnTGRWdzJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZdGMA0G
CSqGSIb3DQEBCwUAA4IBAQCOHZnq3Moxb9NaD/6ohidLe4u+klXmKecmWgdOaGbN
vJ0kMNY4oF7ywx6QpiGGWvDUiVyIoee0Y2ItH+ILWMATScB6T4kPg+QVWBYq4fy2
O2mLSK6vfxUk9q064yvqYt01T2fJV76A4hSViyBLGptgVqZ9RAF44HVh4avVyq4B
0lT2rRRLoDNInHtFdbi0iKYX3+FoV4WeLr3GD1RP6U7iXHUKnuNqvgZGY5NUFp/a
ylv1jkuOo8uDvjo5cHa+P3ifNhMX94CKw5R7hFtB5oTd8nf4gz2COlBqAy6o5xLB
Idjo7jU7wsCprWufZYTUSLeZVZmYYDWLWTOY8gJjmsW7
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:34 2023 by rpki-client on console-ams.rpki-client.org