Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/1-PQ7yPW54s2EBJpGhFYXzTeCeDo.roa
File: 1-PQ7yPW54s2EBJpGhFYXzTeCeDo.roa (raw, json)
Hash identifier: fRGIXAawSv+peG81UqC5IZEnSeyuCJtiPAkEtmLioT8=
Subject key identifier: F8:F4:3B:C8:F5:B9:E2:CD:84:04:9A:46:84:56:17:CD:37:82:78:3A
Certificate issuer: /CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Certificate serial: 0187FF6481E8431B3E4EEA0A688278881294
Authority key identifier: 0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/1-PQ7yPW54s2EBJpGhFYXzTeCeDo.roa
Signing time: Tue 09 May 2023 07:23:09 +0000
ROA not before: Tue 09 May 2023 07:23:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 45.130.46.0/23 maxlen: 24
185.230.103.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:ff:64:81:e8:43:1b:3e:4e:ea:0a:68:82:78:88:12:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Validity
Not Before: May 9 07:23:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f8f43bc8f5b9e2cd84049a46845617cd3782783a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7a:f7:5a:c2:28:f3:ed:3c:82:fc:cc:cd:b9:
d3:d1:09:09:18:b7:5a:9e:06:e3:1d:4e:5c:12:c7:
f9:f9:aa:53:75:9e:b8:ec:c0:fb:82:39:c8:93:0e:
7b:dd:d6:a5:71:f3:2a:b9:d2:80:65:ef:6f:8d:64:
58:ad:6e:f2:e0:53:84:08:4c:85:66:39:08:ba:da:
cd:12:1b:ac:4e:85:41:73:09:35:3a:b9:71:a5:c4:
35:d0:b8:4e:e2:18:88:7e:25:be:05:7a:e3:73:fa:
55:60:8e:1d:f1:b5:e2:82:70:1f:9a:88:73:47:4a:
9d:1f:3a:29:9e:55:b4:5a:a1:3d:09:6a:f1:9f:c5:
21:8c:22:2b:f1:7e:8e:7a:9e:4b:34:d3:cb:58:62:
aa:bd:61:69:5a:d5:a5:d8:bb:a3:64:e0:96:96:a4:
4f:b2:25:ed:60:f2:65:f7:8f:3d:31:c2:93:b7:46:
56:f6:a6:02:e1:01:f9:89:2e:41:d1:19:e8:aa:9f:
6f:8f:c4:0e:5c:e0:da:cc:d6:25:dd:59:f2:0b:5f:
6a:06:e8:05:26:44:c6:92:c7:7f:c5:8e:c9:1a:63:
e6:c4:3b:73:e2:da:94:ac:41:fe:a5:0f:1a:ef:04:
a2:16:dd:f4:cd:48:ac:19:ba:4a:f4:20:54:55:1d:
ac:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:F4:3B:C8:F5:B9:E2:CD:84:04:9A:46:84:56:17:CD:37:82:78:3A
X509v3 Authority Key Identifier:
keyid:0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/1-PQ7yPW54s2EBJpGhFYXzTeCeDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.46.0/23
185.230.103.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b8:a1:2c:fe:bd:56:2f:db:5c:d0:82:03:19:53:5e:c9:42:
88:89:bd:7c:01:7a:72:ca:34:47:c9:e4:92:17:e5:38:84:f4:
6a:da:02:ad:fe:48:e6:91:2b:c2:01:b5:e8:64:27:67:d3:87:
ef:d4:80:ee:eb:14:2d:9d:d4:a7:88:1b:4f:f2:3e:dc:f3:03:
bb:a3:57:c8:3b:fa:ed:63:d3:06:fa:84:7e:2f:9e:7d:45:49:
32:e2:3d:81:41:51:f1:34:65:ef:78:fa:1f:29:ab:85:c7:b5:
06:3e:07:a7:8a:12:1b:44:f3:21:ea:a3:3b:7d:1a:a7:c1:c3:
09:0d:a8:12:34:a6:e9:c1:75:d4:1b:2d:ce:0f:1c:c0:19:88:
26:9f:3b:0f:66:9d:6f:c0:9c:15:16:b2:16:53:c5:35:64:c2:
d8:0a:40:9c:66:0d:8c:a8:e0:7d:ea:94:bd:ee:df:f6:88:17:
2d:86:fd:74:d8:7a:d5:ec:ef:91:bb:e8:44:5c:7b:f7:b0:e4:
91:61:60:b5:9e:11:6a:72:bf:83:0a:d9:6b:ec:35:8b:b2:8b:
26:ee:7a:5d:a3:b6:3f:02:c3:b8:79:db:1e:30:cf:e4:f7:5f:
4d:15:7c:ed:90:76:3c:ed:6d:a6:bd:39:f9:43:9c:4c:62:b5:
de:06:06:ce
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAYf/ZIHoQxs+TuoKaIJ4iBKUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlODMxZmQ3MGM2YmQzN2EyYTc1ZDdhMGVhYzAzMWM5MmRh
OGUxODUwHhcNMjMwNTA5MDcyMzA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGY0M2JjOGY1YjllMmNkODQwNDlhNDY4NDU2MTdjZDM3ODI3ODNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXr3WsIo8+08gvzMzbnT0QkJGLda
ngbjHU5cEsf5+apTdZ647MD7gjnIkw573dalcfMqudKAZe9vjWRYrW7y4FOECEyF
ZjkIutrNEhusToVBcwk1OrlxpcQ10LhO4hiIfiW+BXrjc/pVYI4d8bXignAfmohz
R0qdHzopnlW0WqE9CWrxn8UhjCIr8X6Oep5LNNPLWGKqvWFpWtWl2LujZOCWlqRP
siXtYPJl9489McKTt0ZW9qYC4QH5iS5B0Rnoqp9vj8QOXODazNYl3VnyC19qBugF
JkTGksd/xY7JGmPmxDtz4tqUrEH+pQ8a7wSiFt30zUisGbpK9CBUVR2s0wIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPj0O8j1ueLNhASaRoRWF803gng6MB8GA1UdIwQY
MBaAFA6DH9cMa9N6KnXXoOrAMcktqOGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG9NZjF3eHIwM29xZGRlZzZzQXh5UzJvNFlVLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS85OGE2NjEtNDRmNS00YTA1LWFjYWEt
ZTY3NTgyZjIzMDk3LzEvMS1QUTd5UFc1NHMyRUJKcEdoRllYelRlQ2VEby5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvODEvOThhNjYxLTQ0ZjUtNGEwNS1hY2FhLWU2NzU4MmYyMzA5
Ny8xL0RvTWYxd3hyMDNvcWRkZWc2c0F4eVMybzRZVS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAS2CLgME
ALnmZzANBgkqhkiG9w0BAQsFAAOCAQEAnbihLP69Vi/bXNCCAxlTXslCiIm9fAF6
cso0R8nkkhflOIT0atoCrf5I5pErwgG16GQnZ9OH79SA7usULZ3Up4gbT/I+3PMD
u6NXyDv67WPTBvqEfi+efUVJMuI9gUFR8TRl73j6Hymrhce1Bj4Hp4oSG0TzIeqj
O30ap8HDCQ2oEjSm6cF11Bstzg8cwBmIJp87D2adb8CcFRayFlPFNWTC2ApAnGYN
jKjgfeqUve7f9ogXLYb9dNh61ezvkbvoRFx797DkkWFgtZ4RanK/gwrZa+w1i7KL
Ju56XaO2PwLDuHnbHjDP5PdfTRV87ZB2PO1tpr05+UOcTGK13gYGzg==
-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:59 2024 by rpki-client on console-fra.rpki-client.org