Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XlFBy9oYxOQaimUUnf2r1TgGGCY.roa
File: XlFBy9oYxOQaimUUnf2r1TgGGCY.roa (raw, json)
Hash identifier: cUcCnuDmeWskyHmU9MKM7lPmn39wUGfH9HtQLm+PPhk=
Subject key identifier: 5E:51:41:CB:DA:18:C4:E4:1A:8A:65:14:9D:FD:AB:D5:38:06:18:26
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018FB969B198B898156D82BDFA843A3D2BFF
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XlFBy9oYxOQaimUUnf2r1TgGGCY.roa
Signing time: Mon 27 May 2024 09:37:42 +0000
ROA not before: Mon 27 May 2024 09:37:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198510
IP address blocks: 45.144.174.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 27 May 2024 16:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:69:b1:98:b8:98:15:6d:82:bd:fa:84:3a:3d:2b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 27 09:37:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e5141cbda18c4e41a8a65149dfdabd538061826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:9f:68:ca:37:d2:f5:ad:35:b7:29:f1:38:
fd:f5:c4:60:d1:34:7b:7c:f6:2f:b3:4a:a3:fc:04:
0d:41:cf:2f:0b:7a:47:48:95:d8:48:ad:5e:69:3c:
4e:78:74:c9:ac:11:ab:f4:68:b5:64:f1:6a:f4:af:
c5:2b:90:32:52:48:10:53:8c:2c:4a:84:33:f4:88:
af:97:08:cb:97:f3:82:ab:fa:ae:2c:13:8f:22:22:
05:39:5b:00:c9:d4:0a:4b:13:b3:75:ce:98:fb:83:
55:b7:c4:ce:3a:32:6d:ab:eb:6c:d8:7c:b6:96:54:
64:38:31:62:02:ad:45:b3:d3:ab:df:5b:3d:d5:63:
13:e1:31:c6:2e:dd:38:31:b5:e4:2e:2b:fc:3c:4f:
37:77:41:8b:78:50:c7:e3:a3:86:fb:43:59:38:2d:
c0:6f:26:42:82:9f:af:83:32:64:0f:67:3f:bc:b9:
e4:56:42:b9:f4:f6:60:74:98:d1:58:18:2b:10:5c:
2f:d1:77:87:90:93:2d:78:db:5a:bb:91:65:8b:42:
72:d7:5f:cf:ad:6a:9b:33:4d:00:dc:e9:72:b4:16:
71:88:d1:87:83:7f:a6:79:7e:a6:d7:81:e6:d2:ec:
2c:a8:76:6b:74:69:fb:a7:fd:fb:c0:92:6c:3d:24:
a9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:51:41:CB:DA:18:C4:E4:1A:8A:65:14:9D:FD:AB:D5:38:06:18:26
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/XlFBy9oYxOQaimUUnf2r1TgGGCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.174.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:43:1a:d0:c4:91:b3:a1:78:3f:a0:94:0d:d2:b6:6b:6e:07:
01:b1:21:b2:43:55:f5:10:b2:2a:c2:bf:b9:67:73:90:1e:1d:
04:0f:0e:c7:d0:e2:b6:6a:71:3c:81:b8:ca:89:92:69:9f:f7:
1a:04:d2:b1:48:e3:64:fb:21:9c:cc:c8:6a:e4:c6:4f:86:89:
3e:ce:23:d7:82:85:30:a5:d8:1f:f9:8d:f7:42:98:b5:e6:19:
d6:03:83:33:a0:83:3e:30:ca:0f:08:6e:5f:c7:79:15:c4:f6:
0a:f8:5e:95:55:c0:e1:8c:0d:e3:8e:62:09:a6:d2:cf:17:5e:
4b:5f:24:cc:4c:67:68:0b:e8:ff:2c:27:8c:5a:01:a1:6d:fe:
ab:39:47:a9:8a:50:09:3c:e0:ee:9f:b5:d7:b1:5c:9b:80:df:
6b:84:6f:ed:45:bf:89:6a:a4:a2:5e:9f:29:98:19:20:dc:5b:
8e:c8:e5:a2:04:65:14:fe:64:79:1f:d4:28:e4:2e:01:fe:81:
8c:2e:dc:99:4d:98:b8:81:57:71:8c:ba:20:86:d7:59:80:17:
56:4e:eb:21:d9:11:89:a2:df:42:0a:53:5b:1d:44:85:0d:a5:
81:c1:90:0c:79:95:33:77:e1:d7:75:2c:3e:a9:19:7d:e6:a6:
20:ed:c5:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+5abGYuJgVbYK9+oQ6PSv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwNTI3MDkzNzQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTUxNDFjYmRhMThjNGU0MWE4YTY1MTQ5ZGZkYWJkNTM4MDYxODI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWSfaMo30vWtNbcp8Tj99cRg0TR7
fPYvs0qj/AQNQc8vC3pHSJXYSK1eaTxOeHTJrBGr9Gi1ZPFq9K/FK5AyUkgQU4ws
SoQz9IivlwjLl/OCq/quLBOPIiIFOVsAydQKSxOzdc6Y+4NVt8TOOjJtq+ts2Hy2
llRkODFiAq1Fs9Or31s91WMT4THGLt04MbXkLiv8PE83d0GLeFDH46OG+0NZOC3A
byZCgp+vgzJkD2c/vLnkVkK59PZgdJjRWBgrEFwv0XeHkJMteNtau5Fli0Jy11/P
rWqbM00A3OlytBZxiNGHg3+meX6m14Hm0uwsqHZrdGn7p/37wJJsPSSpVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF5RQcvaGMTkGoplFJ39q9U4BhgmMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvWGxGQnk5b1l4T1FhaW1VVW5mMnIxVGdHR0NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZCuMA0G
CSqGSIb3DQEBCwUAA4IBAQA/QxrQxJGzoXg/oJQN0rZrbgcBsSGyQ1X1ELIqwr+5
Z3OQHh0EDw7H0OK2anE8gbjKiZJpn/caBNKxSONk+yGczMhq5MZPhok+ziPXgoUw
pdgf+Y33Qpi15hnWA4MzoIM+MMoPCG5fx3kVxPYK+F6VVcDhjA3jjmIJptLPF15L
XyTMTGdoC+j/LCeMWgGhbf6rOUepilAJPODun7XXsVybgN9rhG/tRb+JaqSiXp8p
mBkg3FuOyOWiBGUU/mR5H9Qo5C4B/oGMLtyZTZi4gVdxjLoghtdZgBdWTush2RGJ
ot9CClNbHUSFDaWBwZAMeZUzd+HXdSw+qRl95qYg7cV7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:07 2024 by rpki-client on console-fra.rpki-client.org