Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/xEM6BQeePN8x7dlXCdkVu-N9YUM.roa
File: xEM6BQeePN8x7dlXCdkVu-N9YUM.roa (raw, json)
Hash identifier: XMTJmoxffWI9mhxmhiuhhj5LnSYetYZzpSzhxVrKmng=
Subject key identifier: C4:43:3A:05:07:9E:3C:DF:31:ED:D9:57:09:D9:15:BB:E3:7D:61:43
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 01856FC2859004F12C7666316E86F842B61B
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/xEM6BQeePN8x7dlXCdkVu-N9YUM.roa
Signing time: Sun 01 Jan 2023 23:54:57 +0000
ROA not before: Sun 01 Jan 2023 23:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58040
IP address blocks: 45.132.24.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:32:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:85:90:04:f1:2c:76:66:31:6e:86:f8:42:b6:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 1 23:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4433a05079e3cdf31edd95709d915bbe37d6143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:aa:b3:03:12:63:11:de:ba:1e:3a:91:70:11:
93:33:fa:f5:d1:26:b4:9f:be:8e:38:87:b8:11:a8:
92:0e:af:30:50:34:ab:80:66:9c:e4:db:ae:17:f6:
cd:7c:67:0c:8f:75:66:6b:f7:e1:79:5d:59:e0:16:
1f:7e:cd:57:15:ba:4d:7e:36:44:35:07:29:b1:ac:
c0:c9:0a:4c:39:89:97:e9:34:b9:02:ef:6c:e1:1b:
49:13:bd:a7:20:c5:27:37:14:d9:67:40:37:b4:d1:
10:88:c5:f3:10:0a:a1:44:b5:eb:29:43:dd:f6:c3:
18:ef:11:1d:c9:d9:73:f0:53:de:de:1f:a1:7a:0b:
7b:98:5c:fb:45:c5:a6:c3:ad:0b:b9:f5:a8:21:fb:
c3:0e:f9:16:b0:0c:ea:8e:53:61:4f:ca:0b:f9:cf:
26:dc:1d:11:75:46:20:be:fe:d4:25:d1:2d:61:6c:
ef:62:ed:e5:f0:03:04:89:e8:f2:21:2d:82:e0:c1:
34:51:15:12:9e:ac:9a:33:1e:4c:43:ca:d3:0e:33:
8e:99:70:06:03:18:37:37:b1:d5:47:6a:38:f1:f6:
40:9c:0e:76:78:42:b9:23:b3:fc:23:9f:dd:c7:60:
1a:46:f4:f2:81:4e:2d:3e:62:18:a5:0d:eb:a7:5b:
ce:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:43:3A:05:07:9E:3C:DF:31:ED:D9:57:09:D9:15:BB:E3:7D:61:43
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/xEM6BQeePN8x7dlXCdkVu-N9YUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.24.0/24
Signature Algorithm: sha256WithRSAEncryption
68:e1:1d:44:3f:f6:3b:3d:b1:95:f7:35:18:40:e1:50:bd:29:
bd:39:2e:b6:e8:f5:e1:9a:ff:5f:de:17:25:52:0b:c1:a0:f3:
22:30:01:a7:6a:43:fa:31:30:d7:ff:60:a4:35:e2:72:49:e5:
d8:4d:d7:fb:bb:18:9c:8d:68:18:05:94:99:e5:ba:48:3d:e1:
8c:c6:33:02:9a:16:51:99:38:74:da:d4:df:78:43:8f:15:32:
c8:cb:03:57:67:cc:28:ad:ad:72:0f:2f:bd:ce:08:0d:50:12:
7c:39:b4:e2:93:f3:64:4f:1e:09:b5:7c:fe:4d:49:20:5d:b0:
ea:4a:f1:20:fd:47:90:3b:c4:29:81:eb:67:54:b2:65:57:01:
62:20:18:62:de:76:74:5b:58:58:d2:f4:d2:eb:2f:b2:49:be:
57:4f:9e:34:59:19:c4:33:5f:f0:5c:44:52:3f:ec:40:22:06:
d3:69:7e:71:19:80:bd:9c:54:65:c4:49:e0:ec:71:57:7d:5b:
7b:55:10:3c:7d:94:b4:7a:bf:48:16:99:64:13:ce:bd:ad:29:
d2:ce:23:a3:2c:bf:e3:06:e1:85:d1:0d:38:a5:e0:ba:8c:c3:
2b:9e:2a:eb:e6:3a:54:63:94:b8:0c:46:62:1e:aa:b9:ad:8d:
54:0d:e7:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvwoWQBPEsdmYxbob4QrYbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MThiNzM0MzQ5YmYzMjdkOTQ1M2I5NjUwMWU0NGIxOTJl
NTUxNDIwHhcNMjMwMTAxMjM1NDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDQzM2EwNTA3OWUzY2RmMzFlZGQ5NTcwOWQ5MTViYmUzN2Q2MTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6qzAxJjEd66HjqRcBGTM/r10Sa0
n76OOIe4EaiSDq8wUDSrgGac5NuuF/bNfGcMj3Vma/fheV1Z4BYffs1XFbpNfjZE
NQcpsazAyQpMOYmX6TS5Au9s4RtJE72nIMUnNxTZZ0A3tNEQiMXzEAqhRLXrKUPd
9sMY7xEdydlz8FPe3h+hegt7mFz7RcWmw60LufWoIfvDDvkWsAzqjlNhT8oL+c8m
3B0RdUYgvv7UJdEtYWzvYu3l8AMEiejyIS2C4ME0URUSnqyaMx5MQ8rTDjOOmXAG
Axg3N7HVR2o48fZAnA52eEK5I7P8I5/dx2AaRvTygU4tPmIYpQ3rp1vOJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMRDOgUHnjzfMe3ZVwnZFbvjfWFDMB8GA1UdIwQY
MBaAFDcYtzQ0m/Mn2UU7llAeRLGS5VFCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjct
YzgyM2NjOGYzODM3LzEveEVNNkJRZWVQTjh4N2RsWENka1Z1LU45WVVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My83YmY4YTgtZTQ5Yy00MDZlLThlYjctYzgyM2NjOGYzODM3
LzEvTnhpM05EU2I4eWZaUlR1V1VCNUVzWkxsVVVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYQYMA0G
CSqGSIb3DQEBCwUAA4IBAQBo4R1EP/Y7PbGV9zUYQOFQvSm9OS626PXhmv9f3hcl
UgvBoPMiMAGnakP6MTDX/2CkNeJySeXYTdf7uxicjWgYBZSZ5bpIPeGMxjMCmhZR
mTh02tTfeEOPFTLIywNXZ8wora1yDy+9zggNUBJ8ObTik/NkTx4JtXz+TUkgXbDq
SvEg/UeQO8QpgetnVLJlVwFiIBhi3nZ0W1hY0vTS6y+ySb5XT540WRnEM1/wXERS
P+xAIgbTaX5xGYC9nFRlxEng7HFXfVt7VRA8fZS0er9IFplkE869rSnSziOjLL/j
BuGF0Q04peC6jMMrnirr5jpUY5S4DEZiHqq5rY1UDefQ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:17 2024 by rpki-client on console-fra.rpki-client.org