Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/fLNXvtdTyX26EYeZ3-g3Si9N6YQ.roa
File: fLNXvtdTyX26EYeZ3-g3Si9N6YQ.roa (raw, json)
Hash identifier: 9IgurVO21YG0l9VCWMg5sx3/6B4ysoK3HWStaHZMUDE=
Subject key identifier: 7C:B3:57:BE:D7:53:C9:7D:BA:11:87:99:DF:E8:37:4A:2F:4D:E9:84
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 018704E1007CCE8C7B54F24FAC267AA89D11
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/fLNXvtdTyX26EYeZ3-g3Si9N6YQ.roa
Signing time: Tue 21 Mar 2023 15:54:27 +0000
ROA not before: Tue 21 Mar 2023 15:54:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56913
IP address blocks: 45.149.36.0/24 maxlen: 24
45.149.37.0/24 maxlen: 24
45.149.38.0/24 maxlen: 24
45.149.39.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 21 Mar 2023 16:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:04:e1:00:7c:ce:8c:7b:54:f2:4f:ac:26:7a:a8:9d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Mar 21 15:54:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cb357bed753c97dba118799dfe8374a2f4de984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ec:f4:4b:6f:d6:09:92:0b:9f:dd:96:bb:bc:
f7:b3:81:3d:da:cb:1f:cc:74:08:3a:1d:41:e9:92:
5f:61:7e:f6:f1:ed:dd:6f:94:c0:2e:78:56:87:b8:
ef:ce:13:3a:7d:c2:57:e7:11:76:95:da:2f:e2:f0:
cb:aa:39:9e:c4:66:98:0d:11:53:a4:68:48:a5:a8:
c0:65:72:f5:16:b3:59:94:61:9d:41:d8:8e:eb:02:
26:36:28:8d:49:0d:03:22:ef:45:1f:c7:3c:0c:55:
ca:1b:a1:36:d0:d3:5e:6f:ad:75:70:f0:7e:53:04:
d0:9a:d3:50:48:ea:34:4a:00:49:3e:34:d0:26:a3:
f5:f4:d9:19:90:06:45:1b:9a:07:30:83:8e:7b:d1:
93:1b:2e:4c:9e:e3:3f:e7:11:fd:66:3a:d7:7b:d0:
62:3b:d6:43:8c:3b:f7:03:c6:28:51:94:0d:48:08:
25:39:dc:d2:c4:6f:5a:e0:b9:98:01:4b:af:b0:0e:
5c:69:cd:6a:72:a7:6b:81:5c:70:fe:ec:3a:01:92:
58:6d:7c:e3:e7:b2:78:50:78:2e:be:c8:bb:f6:61:
12:42:1a:1b:cc:cb:05:c4:7e:da:4f:52:4d:97:9e:
80:09:39:6b:e1:75:9e:7d:7e:e0:11:74:de:e9:cf:
d3:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:B3:57:BE:D7:53:C9:7D:BA:11:87:99:DF:E8:37:4A:2F:4D:E9:84
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/fLNXvtdTyX26EYeZ3-g3Si9N6YQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.36.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:0f:e7:8b:01:51:04:fc:d3:51:0d:8c:2e:28:92:b4:c1:4a:
8b:9a:cd:59:c5:c2:0d:31:fa:81:1a:42:2e:14:83:0d:09:a3:
3f:fd:2b:98:9a:34:6d:5b:50:12:ce:e8:19:e5:a7:21:0d:3c:
48:0f:ef:13:9c:a1:bd:07:8f:3d:f8:1c:31:d7:8d:20:ab:a0:
19:8a:7a:e7:f4:88:4d:40:7d:03:94:d6:6e:dc:9a:cf:cc:bb:
21:20:12:65:e6:a9:de:37:b5:ab:48:55:ba:1e:34:75:4c:de:
ed:62:0b:a7:93:97:bd:50:e9:91:15:ba:7c:ee:cd:06:ab:e6:
8a:90:0f:3e:d1:e8:47:f2:87:79:e4:5b:58:20:d0:d1:79:59:
3f:8d:1e:10:da:ee:09:4b:eb:be:9a:d1:09:8b:51:37:6e:d5:
68:dd:5e:7c:34:ce:90:c8:02:e7:a1:1a:c8:80:e0:6c:ee:d6:
35:17:5d:b8:70:f0:59:66:ff:7d:92:b0:a5:a0:92:83:8b:b5:
38:11:30:18:24:4d:7d:2f:3b:7b:b3:a0:8f:2a:f8:76:d7:40:
e6:8c:8f:8c:13:d0:b8:5b:db:0a:e0:83:ca:0b:30:bb:1d:a1:
9c:e6:6a:c8:35:81:94:f7:dd:69:05:14:58:44:79:46:2a:70:
fd:cf:8b:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYcE4QB8zox7VPJPrCZ6qJ0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTMwZjc5OWY4YTg5ODU1MDJhMmVhMzM1NjAzNzY3NDA4
NWNmY2EwHhcNMjMwMzIxMTU1NDI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2IzNTdiZWQ3NTNjOTdkYmExMTg3OTlkZmU4Mzc0YTJmNGRlOTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApez0S2/WCZILn92Wu7z3s4E92ssf
zHQIOh1B6ZJfYX728e3db5TALnhWh7jvzhM6fcJX5xF2ldov4vDLqjmexGaYDRFT
pGhIpajAZXL1FrNZlGGdQdiO6wImNiiNSQ0DIu9FH8c8DFXKG6E20NNeb611cPB+
UwTQmtNQSOo0SgBJPjTQJqP19NkZkAZFG5oHMIOOe9GTGy5MnuM/5xH9ZjrXe9Bi
O9ZDjDv3A8YoUZQNSAglOdzSxG9a4LmYAUuvsA5cac1qcqdrgVxw/uw6AZJYbXzj
57J4UHguvsi79mESQhobzMsFxH7aT1JNl56ACTlr4XWefX7gEXTe6c/TgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHyzV77XU8l9uhGHmd/oN0ovTemEMB8GA1UdIwQY
MBaAFFcTD3mfiomFUCouozVgN2dAhc/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMt
ZDNiOTBhOWI5YjQxLzEvZkxOWHZ0ZFR5WDI2RVllWjMtZzNTaTlONllRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMtZDNiOTBhOWI5YjQx
LzEvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZUkMA0G
CSqGSIb3DQEBCwUAA4IBAQAcD+eLAVEE/NNRDYwuKJK0wUqLms1ZxcINMfqBGkIu
FIMNCaM//SuYmjRtW1ASzugZ5achDTxID+8TnKG9B489+Bwx140gq6AZinrn9IhN
QH0DlNZu3JrPzLshIBJl5qneN7WrSFW6HjR1TN7tYgunk5e9UOmRFbp87s0Gq+aK
kA8+0ehH8od55FtYINDReVk/jR4Q2u4JS+u+mtEJi1E3btVo3V58NM6QyALnoRrI
gOBs7tY1F124cPBZZv99krCloJKDi7U4ETAYJE19Lzt7s6CPKvh210DmjI+ME9C4
W9sK4IPKCzC7HaGc5mrINYGU991pBRRYRHlGKnD9z4uR
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:30 2024 by rpki-client on console-ams.rpki-client.org