Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/xd_V88exCu_NMw5iR6CsEIET8yg.roa
File: xd_V88exCu_NMw5iR6CsEIET8yg.roa (raw, json)
Hash identifier: QgD1+N+N8kIwp7uF/+wT/6QniLc81b1JhK3dqyNNGO4=
Subject key identifier: C5:DF:D5:F3:C7:B1:0A:EF:CD:33:0E:62:47:A0:AC:10:81:13:F3:28
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 0191DA4F317E969518D3BCA7B71E2094E915
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/xd_V88exCu_NMw5iR6CsEIET8yg.roa
Signing time: Tue 10 Sep 2024 05:01:48 +0000
ROA not before: Tue 10 Sep 2024 05:01:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.12.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 18:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:da:4f:31:7e:96:95:18:d3:bc:a7:b7:1e:20:94:e9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Sep 10 05:01:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5dfd5f3c7b10aefcd330e6247a0ac108113f328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:96:b4:27:2a:cf:3c:0e:7e:ee:6e:41:32:4f:
08:6a:3e:fc:c5:4f:59:69:3e:32:b6:8f:c1:22:cb:
3b:76:c5:72:b2:2f:3e:0b:93:ac:ce:07:e6:81:53:
61:84:d0:0b:30:ab:76:36:d9:74:3d:8b:35:04:82:
f6:35:c6:d2:a2:ba:6d:16:d6:1b:7a:52:8f:56:f8:
b7:44:44:af:4a:89:80:d3:56:ad:67:36:83:d0:a6:
b8:d9:4b:50:3a:1c:ce:82:d1:70:d5:d0:7f:9e:97:
b1:a6:02:e9:aa:69:4f:aa:85:e2:69:16:fb:bf:de:
c9:b2:89:0a:87:86:0d:a2:28:5f:57:40:c5:71:ed:
0b:fb:70:f1:10:a5:85:50:b9:3a:21:51:db:14:63:
4f:d6:78:31:b6:b6:7d:41:49:dc:12:7b:57:6d:0f:
20:27:e1:4c:50:1a:f0:a4:f9:b7:32:32:1d:f8:2c:
11:99:23:f5:49:c0:a3:ff:c8:c4:95:53:af:13:18:
32:e9:5a:ea:a9:d6:9d:52:0a:eb:49:a4:8b:72:26:
e2:19:16:13:4b:ce:5f:5f:f4:01:6b:b0:44:01:6c:
6d:5c:11:4d:3d:47:02:f7:0a:6a:2a:c2:6d:40:de:
d0:ce:76:13:bb:36:5e:00:18:00:c3:b9:09:00:ab:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DF:D5:F3:C7:B1:0A:EF:CD:33:0E:62:47:A0:AC:10:81:13:F3:28
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/xd_V88exCu_NMw5iR6CsEIET8yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.185.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:63:dc:bd:ea:03:24:33:fe:33:78:e7:c9:b6:ed:3f:3e:42:
27:21:e0:30:b0:6a:ee:8e:cb:e5:81:1f:94:c1:71:fe:35:81:
ba:76:03:76:a4:3c:a9:f1:1a:b1:e7:f8:3f:18:72:fe:f3:ee:
0d:d8:ac:df:42:6d:8c:c6:df:6e:2b:9a:45:51:78:1d:81:ee:
62:61:61:b5:ee:61:9e:00:b5:70:dd:70:10:88:4a:0e:48:13:
0e:93:4c:76:54:ba:52:ba:d1:b5:00:c0:80:17:24:92:24:96:
ab:51:1d:90:67:18:b4:c6:04:1e:5d:7d:4d:ce:c4:8b:c0:b9:
59:d7:00:bb:4a:89:5b:fa:38:e8:72:dc:6e:fb:f9:31:b4:4a:
80:ea:cd:6f:cd:02:14:15:e0:f4:3b:f1:3b:c2:8b:8a:2a:ba:
5d:ad:2e:bf:22:ff:d3:68:57:6f:20:e5:6b:51:3e:04:21:ad:
ad:8e:9b:85:ca:cd:f3:eb:7b:50:05:40:d2:25:92:4f:cb:83:
17:fb:77:a6:31:74:85:47:cf:86:8a:b8:a9:74:cd:52:b6:0c:
db:ee:ac:f8:95:d0:21:a4:78:59:c3:04:1a:3d:63:56:92:9b:
6e:20:8f:62:f3:ee:0a:56:81:30:73:0e:cc:e3:09:8e:45:cf:
eb:98:08:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHaTzF+lpUY07yntx4glOkVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhMzBiNjM1ZDM1NzQ2OGQ3ZjkzMmQzZTFmNTlkNTM3M2Nm
OWY0NjUwHhcNMjQwOTEwMDUwMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWRmZDVmM2M3YjEwYWVmY2QzMzBlNjI0N2EwYWMxMDgxMTNmMzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJa0JyrPPA5+7m5BMk8Iaj78xU9Z
aT4yto/BIss7dsVysi8+C5OszgfmgVNhhNALMKt2Ntl0PYs1BIL2NcbSorptFtYb
elKPVvi3RESvSomA01atZzaD0Ka42UtQOhzOgtFw1dB/npexpgLpqmlPqoXiaRb7
v97JsokKh4YNoihfV0DFce0L+3DxEKWFULk6IVHbFGNP1ngxtrZ9QUncEntXbQ8g
J+FMUBrwpPm3MjId+CwRmSP1ScCj/8jElVOvExgy6VrqqdadUgrrSaSLcibiGRYT
S85fX/QBa7BEAWxtXBFNPUcC9wpqKsJtQN7QznYTuzZeABgAw7kJAKsUJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMXf1fPHsQrvzTMOYkegrBCBE/MoMB8GA1UdIwQY
MBaAFAowtjXTV0aNf5MtPh9Z1Tc8+fRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjIt
NmRlZjM5OGNlNWM5LzEveGRfVjg4ZXhDdV9OTXc1aVI2Q3NFSUVUOHlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xNzg1ZjEtYWUyMy00MGYwLTgzZjItNmRlZjM5OGNlNWM5
LzEvQ2pDMk5kTlhSbzFfa3kwLUgxblZOeno1OUdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQy5MA0G
CSqGSIb3DQEBCwUAA4IBAQBvY9y96gMkM/4zeOfJtu0/PkInIeAwsGrujsvlgR+U
wXH+NYG6dgN2pDyp8Rqx5/g/GHL+8+4N2KzfQm2Mxt9uK5pFUXgdge5iYWG17mGe
ALVw3XAQiEoOSBMOk0x2VLpSutG1AMCAFySSJJarUR2QZxi0xgQeXX1NzsSLwLlZ
1wC7Solb+jjoctxu+/kxtEqA6s1vzQIUFeD0O/E7wouKKrpdrS6/Iv/TaFdvIOVr
UT4EIa2tjpuFys3z63tQBUDSJZJPy4MX+3emMXSFR8+GiripdM1Stgzb7qz4ldAh
pHhZwwQaPWNWkptuII9i8+4KVoEwcw7M4wmORc/rmAhs
-----END CERTIFICATE-----
Generated at Thu Sep 19 21:35:30 2024 by rpki-client on console-fra.rpki-client.org