Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/u3H_y4byKLZW_QgWt1TUJLKaKD8.roa
File: u3H_y4byKLZW_QgWt1TUJLKaKD8.roa (raw, json)
Hash identifier: l5F4CrOheZ5u6BsC+mxuTuNtC9xLA+2AHAUXfQbTpQc=
Subject key identifier: BB:71:FF:CB:86:F2:28:B6:56:FD:08:16:B7:54:D4:24:B2:9A:28:3F
Certificate issuer: /CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Certificate serial: 018616318681D4BEDF7D059B45361876AF19
Authority key identifier: 4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/u3H_y4byKLZW_QgWt1TUJLKaKD8.roa
Signing time: Fri 03 Feb 2023 07:33:09 +0000
ROA not before: Fri 03 Feb 2023 07:33:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201850
IP address blocks: 45.136.142.0/23 maxlen: 23
Validation: Failed, certificate revoked on Thu 29 Jun 2023 08:22:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:16:31:86:81:d4:be:df:7d:05:9b:45:36:18:76:af:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a63dc6753a8cbd74b74452c1536f37d9c4dc70c
Validity
Not Before: Feb 3 07:33:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb71ffcb86f228b656fd0816b754d424b29a283f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d0:4e:d7:ba:da:37:a9:20:78:49:a8:40:c0:
f6:bf:71:62:1c:32:38:c4:a1:77:16:e8:9b:62:12:
b2:71:8a:71:0e:35:47:f2:ef:28:5c:56:8e:60:0c:
4b:ec:18:60:dd:70:b1:bf:9c:b9:fa:1d:5e:0d:7c:
48:fb:a4:88:2e:92:3d:87:48:4b:07:d3:82:ec:22:
71:77:5c:6f:21:48:91:a8:e6:66:6e:e4:4a:b2:90:
c9:41:63:e4:63:15:43:df:c1:d3:98:ab:f6:f3:71:
e3:63:a4:b6:56:f6:fe:9c:93:9f:99:e9:14:7f:52:
91:da:ab:fa:72:78:2d:06:f4:7f:45:aa:02:0c:28:
f9:66:c7:a8:c2:c6:76:67:e1:a0:53:6e:5e:1c:79:
32:49:d7:69:f5:d6:db:2f:57:0a:c7:59:d0:e4:71:
b1:a8:a0:70:f0:ba:5c:3e:f7:80:c8:5b:d7:f6:45:
fb:54:2a:a5:af:dd:3c:cf:39:fc:e9:b9:a8:b0:04:
8a:d3:03:3d:d6:d6:cd:e8:dd:7d:1c:57:c7:6f:77:
31:b9:2d:45:39:86:2c:d2:07:65:18:83:ee:a1:9d:
54:14:07:57:03:ee:cc:e6:92:8d:3e:4c:25:db:10:
63:5d:70:88:69:2e:fd:fc:89:3c:a7:b4:13:f7:58:
7c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:71:FF:CB:86:F2:28:B6:56:FD:08:16:B7:54:D4:24:B2:9A:28:3F
X509v3 Authority Key Identifier:
keyid:4A:63:DC:67:53:A8:CB:D7:4B:74:45:2C:15:36:F3:7D:9C:4D:C7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/u3H_y4byKLZW_QgWt1TUJLKaKD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4f0335-e860-4619-9380-e341b0f915d3/1/SmPcZ1Ooy9dLdEUsFTbzfZxNxww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.142.0/23
Signature Algorithm: sha256WithRSAEncryption
80:24:20:75:e7:5a:2d:01:66:a9:92:1f:11:b1:97:2f:4c:83:
c7:6d:8e:0a:ae:b6:1d:f6:06:0e:0a:d1:15:75:cb:0b:44:03:
22:6a:b1:a4:ff:5e:52:bf:6a:76:4f:43:4f:90:85:db:2d:4c:
ee:18:0f:8e:3d:be:4d:3e:a8:0e:29:0a:c4:88:bf:72:9f:73:
ee:7e:d7:a9:5e:8d:92:ac:10:31:3c:e1:62:ca:15:78:1a:18:
a7:00:89:ab:8e:1a:5a:2c:9e:81:af:5c:6e:2f:fa:a9:7e:24:
10:18:fa:8c:c4:a8:49:bf:2e:10:ba:f5:7a:4c:53:e7:dc:11:
42:70:83:64:8b:72:2e:fe:d8:98:29:c7:ab:48:9c:32:31:92:
4b:63:1e:fe:f4:63:f8:73:f9:0c:01:4c:9a:5b:f8:40:47:c4:
84:38:29:87:c2:99:c0:7d:df:db:45:2c:8c:5e:71:0e:9d:d9:
25:b3:58:79:7d:68:b3:54:bb:41:20:df:58:c8:3c:86:70:af:
2f:08:89:2c:54:2a:77:ca:13:e5:ab:0a:1e:b7:75:c8:c2:a0:
99:fb:41:dc:af:58:1c:c7:dc:61:51:2f:7d:6c:7e:3b:bc:f5:
ac:75:2e:ff:4b:94:db:c9:43:d5:5c:a6:43:56:a0:e9:2f:63:
2c:26:d2:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYWMYaB1L7ffQWbRTYYdq8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhNjNkYzY3NTNhOGNiZDc0Yjc0NDUyYzE1MzZmMzdkOWM0
ZGM3MGMwHhcNMjMwMjAzMDczMzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjcxZmZjYjg2ZjIyOGI2NTZmZDA4MTZiNzU0ZDQyNGIyOWEyODNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NBO17raN6kgeEmoQMD2v3FiHDI4
xKF3FuibYhKycYpxDjVH8u8oXFaOYAxL7Bhg3XCxv5y5+h1eDXxI+6SILpI9h0hL
B9OC7CJxd1xvIUiRqOZmbuRKspDJQWPkYxVD38HTmKv283HjY6S2Vvb+nJOfmekU
f1KR2qv6cngtBvR/RaoCDCj5ZseowsZ2Z+GgU25eHHkySddp9dbbL1cKx1nQ5HGx
qKBw8LpcPveAyFvX9kX7VCqlr908zzn86bmosASK0wM91tbN6N19HFfHb3cxuS1F
OYYs0gdlGIPuoZ1UFAdXA+7M5pKNPkwl2xBjXXCIaS79/Ik8p7QT91h8XQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLtx/8uG8ii2Vv0IFrdU1CSymig/MB8GA1UdIwQY
MBaAFEpj3GdTqMvXS3RFLBU2832cTccMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU21QY1oxT295OWRMZEVVc0ZUYnpmWnhOeHd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni80ZjAzMzUtZTg2MC00NjE5LTkzODAt
ZTM0MWIwZjkxNWQzLzEvdTNIX3k0YnlLTFpXX1FnV3QxVFVKTEthS0Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni80ZjAzMzUtZTg2MC00NjE5LTkzODAtZTM0MWIwZjkxNWQz
LzEvU21QY1oxT295OWRMZEVVc0ZUYnpmWnhOeHd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYiOMA0G
CSqGSIb3DQEBCwUAA4IBAQCAJCB151otAWapkh8RsZcvTIPHbY4KrrYd9gYOCtEV
dcsLRAMiarGk/15Sv2p2T0NPkIXbLUzuGA+OPb5NPqgOKQrEiL9yn3PuftepXo2S
rBAxPOFiyhV4GhinAImrjhpaLJ6Br1xuL/qpfiQQGPqMxKhJvy4QuvV6TFPn3BFC
cINki3Iu/tiYKcerSJwyMZJLYx7+9GP4c/kMAUyaW/hAR8SEOCmHwpnAfd/bRSyM
XnEOndkls1h5fWizVLtBIN9YyDyGcK8vCIksVCp3yhPlqwoet3XIwqCZ+0Hcr1gc
x9xhUS99bH47vPWsdS7/S5TbyUPVXKZDVqDpL2MsJtJn
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:25 2024 by rpki-client on console-ams.rpki-client.org