Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/x1ov9UDAT5jhOcA8Ur2HVct9e5s.roa
File: x1ov9UDAT5jhOcA8Ur2HVct9e5s.roa (raw, json)
Hash identifier: T/nkZpHsktdsntFclnTBvynXgfkXaPh3Nou/ht0P6qA=
Subject key identifier: C7:5A:2F:F5:40:C0:4F:98:E1:39:C0:3C:52:BD:87:55:CB:7D:7B:9B
Certificate issuer: /CN=f97fdecadb3261334387cf091d02e0713b781d31
Certificate serial: 01857230EF7DFB269905855E1E4EFF086226
Authority key identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/x1ov9UDAT5jhOcA8Ur2HVct9e5s.roa
Signing time: Mon 02 Jan 2023 11:14:47 +0000
ROA not before: Mon 02 Jan 2023 11:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212700
IP address blocks: 45.13.146.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:30:ef:7d:fb:26:99:05:85:5e:1e:4e:ff:08:62:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97fdecadb3261334387cf091d02e0713b781d31
Validity
Not Before: Jan 2 11:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c75a2ff540c04f98e139c03c52bd8755cb7d7b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:bc:1a:64:43:46:f5:22:82:e7:21:50:62:
37:c2:e5:63:db:25:47:fb:6c:ef:37:4e:61:31:75:
09:70:97:58:ed:7e:45:ec:e5:90:51:9c:af:17:fa:
70:d6:87:77:b1:6e:1a:bd:4e:4c:08:17:a9:e5:00:
e1:88:cb:e8:ac:f6:fa:b4:81:de:d4:96:93:c7:ff:
90:3e:ba:89:b1:67:79:b9:15:4e:75:13:da:bc:15:
4f:d5:22:6d:23:d3:d1:7e:b6:0d:94:14:fb:c4:cd:
41:cc:52:b8:29:b9:0c:8c:c6:67:63:72:65:85:cb:
49:5d:54:a2:c2:35:4a:63:cb:82:49:30:58:67:7e:
b3:95:45:74:6e:eb:4e:b7:d0:2a:30:86:c0:e3:d8:
c6:32:c6:c4:84:4d:3e:3b:29:56:35:d2:8d:40:1a:
c9:9d:94:78:4b:d4:38:28:09:36:3b:f2:cc:82:81:
ad:ca:9f:31:8a:dc:7c:91:99:31:53:fe:27:1e:31:
e2:08:b1:38:12:5b:a3:dd:da:3e:27:91:f6:1c:ba:
dd:04:c0:73:d6:b0:38:cd:5d:fc:ea:a1:32:91:ec:
80:7b:5f:7a:24:92:ca:59:9c:a6:e7:29:1d:31:05:
a1:58:82:56:e8:42:e4:82:47:c6:56:ba:a2:45:25:
8e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5A:2F:F5:40:C0:4F:98:E1:39:C0:3C:52:BD:87:55:CB:7D:7B:9B
X509v3 Authority Key Identifier:
keyid:F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/x1ov9UDAT5jhOcA8Ur2HVct9e5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.146.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:4f:76:64:9b:54:3b:1a:06:c0:b4:66:b6:dc:b7:1c:d3:ec:
f6:a2:d0:3a:6f:f4:03:be:e4:f7:8a:23:a1:97:d7:7f:0d:81:
5b:48:c7:4c:c4:59:ab:7a:03:a8:b7:15:5b:a0:59:4c:59:78:
42:6c:87:e0:23:a3:dc:6d:9d:80:e2:21:e2:3c:21:cd:a4:0c:
7b:49:71:fa:f6:b5:e4:e5:7a:fb:10:2d:da:a5:48:d1:a3:c6:
ea:7e:46:5c:8c:8a:07:8b:35:09:fa:a2:c3:1a:40:9c:64:4c:
f0:82:f0:ad:76:9e:7a:f7:85:d8:50:64:8d:49:4e:79:5d:4d:
1a:d8:c0:53:42:d5:a5:78:77:f5:75:3a:b1:55:db:e1:70:77:
8c:f0:ff:a2:53:5e:c4:c1:bf:48:a3:46:bd:6e:14:e5:71:1f:
68:f2:43:32:cd:d9:b9:72:95:e9:ca:32:d3:10:9e:ae:54:ba:
84:75:70:e6:68:90:1e:38:af:33:6d:cd:13:53:f8:d2:5c:d2:
5d:1a:53:3e:25:c5:05:23:b2:7b:73:65:3c:70:f6:71:9e:c6:
35:79:3e:2d:f0:ee:86:32:73:4f:62:c0:ea:93:f8:20:67:7e:
e0:53:d1:b0:11:cb:79:f4:3f:55:21:da:7e:04:93:20:4f:ce:
0a:0d:51:b4
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYVyMO99+yaZBYVeHk7/CGImMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5N2ZkZWNhZGIzMjYxMzM0Mzg3Y2YwOTFkMDJlMDcxM2I3
ODFkMzEwHhcNMjMwMTAyMTExNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNzVhMmZmNTQwYzA0Zjk4ZTEzOWMwM2M1MmJkODc1NWNiN2Q3YjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfC8GmRDRvUiguchUGI3wuVj2yVH
+2zvN05hMXUJcJdY7X5F7OWQUZyvF/pw1od3sW4avU5MCBep5QDhiMvorPb6tIHe
1JaTx/+QPrqJsWd5uRVOdRPavBVP1SJtI9PRfrYNlBT7xM1BzFK4KbkMjMZnY3Jl
hctJXVSiwjVKY8uCSTBYZ36zlUV0butOt9AqMIbA49jGMsbEhE0+OylWNdKNQBrJ
nZR4S9Q4KAk2O/LMgoGtyp8xitx8kZkxU/4nHjHiCLE4Eluj3do+J5H2HLrdBMBz
1rA4zV386qEykeyAe196JJLKWZym5ykdMQWhWIJW6ELkgkfGVrqiRSWO6wIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMdaL/VAwE+Y4TnAPFK9h1XLfXubMB8GA1UdIwQY
MBaAFPl/3srbMmEzQ4fPCR0C4HE7eB0xMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YX2V5dHN5WVRORGg4OEpIUUxnY1R0NEhURS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYThhMzY0LTc0MzAtNGRhNi04ZjQz
LWViN2JmMmJkZGQwOC8xL3gxb3Y5VURBVDVqaE9jQThVcjJIVmN0OWU1cy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTgvYThhMzY0LTc0MzAtNGRhNi04ZjQzLWViN2JmMmJkZGQw
OC8xLzEtWF9leXRzeVlUTkRoODhKSFFMZ2NUdDRIVEUuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAEtDZIw
DQYJKoZIhvcNAQELBQADggEBAKpPdmSbVDsaBsC0ZrbctxzT7Pai0Dpv9AO+5PeK
I6GX138NgVtIx0zEWat6A6i3FVugWUxZeEJsh+Ajo9xtnYDiIeI8Ic2kDHtJcfr2
teTlevsQLdqlSNGjxup+RlyMigeLNQn6osMaQJxkTPCC8K12nnr3hdhQZI1JTnld
TRrYwFNC1aV4d/V1OrFV2+Fwd4zw/6JTXsTBv0ijRr1uFOVxH2jyQzLN2blylenK
MtMQnq5UuoR1cOZokB44rzNtzRNT+NJc0l0aUz4lxQUjsntzZTxw9nGexjV5Pi3w
7oYyc09iwOqT+CBnfuBT0bARy3n0P1Uh2n4EkyBPzgoNUbQ=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:08 2024 by rpki-client on console-ams.rpki-client.org