Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/cFEjWs_5Y8q0yOILFN23Ch7HjKY.roa
File: cFEjWs_5Y8q0yOILFN23Ch7HjKY.roa (raw, json)
Hash identifier: KhJJ89g0Zdt1BTDcjfByzMP5Ouk130ylmZSfARoqpUI=
Subject key identifier: 70:51:23:5A:CF:F9:63:CA:B4:C8:E2:0B:14:DD:B7:0A:1E:C7:8C:A6
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01856F798D93D45AB7E0738D7F0EE151047F
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/cFEjWs_5Y8q0yOILFN23Ch7HjKY.roa
Signing time: Sun 01 Jan 2023 22:35:15 +0000
ROA not before: Sun 01 Jan 2023 22:35:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199524
IP address blocks: 45.130.137.0/24 maxlen: 24
45.130.139.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 22 Jul 2023 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:8d:93:d4:5a:b7:e0:73:8d:7f:0e:e1:51:04:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 22:35:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7051235acff963cab4c8e20b14ddb70a1ec78ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f2:86:14:07:9d:f4:a4:de:d1:a1:d2:88:37:
c4:61:ee:7f:17:8c:ed:06:cd:34:42:35:e9:8d:ab:
f2:4d:39:cf:88:2d:d1:50:f5:66:c9:6b:01:bc:5d:
3c:a1:17:18:bb:d0:f2:2c:41:0c:62:c1:cd:e6:86:
8a:85:e9:e9:08:a0:45:dd:de:4b:c7:c9:e2:63:1a:
da:67:55:29:91:30:79:45:9d:e1:4d:4e:ea:50:88:
b9:f2:a7:87:3a:b6:e4:0d:e5:cd:d5:85:f6:54:2e:
46:bb:63:f7:00:ed:39:06:a7:b8:46:3e:5a:68:8f:
f2:95:dd:f8:89:32:b2:1b:e6:c7:dd:43:5a:30:ba:
36:80:dd:9e:48:a4:a7:b7:34:16:dd:ac:b3:e8:ff:
3c:3d:c8:a4:a1:4f:f1:c5:d7:93:b1:8e:a5:f6:b7:
9c:12:e3:a6:02:10:db:ac:0e:c1:a6:dc:b5:f2:7e:
15:4b:f9:b4:20:b7:76:8d:7e:86:1c:53:aa:96:a0:
d1:7a:23:62:09:09:b7:b1:70:ee:da:60:5d:6f:1e:
7f:29:8b:73:a2:fd:2f:0e:5e:45:a4:00:96:f6:bb:
e8:06:d9:06:d0:0b:3f:44:50:06:01:1c:b7:5f:bd:
70:e2:a3:07:73:de:a2:97:9a:2a:9a:a8:e5:ae:b4:
df:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:51:23:5A:CF:F9:63:CA:B4:C8:E2:0B:14:DD:B7:0A:1E:C7:8C:A6
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/cFEjWs_5Y8q0yOILFN23Ch7HjKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.137.0/24
45.130.139.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:30:7c:85:36:54:d5:2e:9c:88:d2:7f:98:6e:8f:1e:3c:3f:
14:d7:74:c0:c6:a1:12:f7:56:24:e3:7a:77:fc:ea:2f:42:41:
4f:5f:9b:8d:28:55:35:05:6e:a8:43:93:0e:9d:28:0b:b7:94:
f4:ef:31:20:c4:13:6f:e4:13:0d:14:e9:bb:50:e4:23:de:be:
7f:90:a9:1f:a2:6c:99:47:6b:16:29:f4:26:93:e1:34:0c:6f:
79:7b:2a:b1:c6:39:ec:f0:06:f7:69:c6:74:47:7d:8a:93:75:
9d:2c:e3:ea:f2:64:4d:96:de:2d:c2:e4:db:fa:ce:53:24:b2:
b7:06:dc:f3:c4:84:84:d4:17:fb:41:3d:eb:8e:39:ef:26:76:
9a:d5:e6:a5:58:f5:42:c2:12:11:4d:cb:21:91:62:17:45:b3:
e0:50:06:35:8c:46:d5:1a:b3:e1:74:01:43:2d:cc:26:93:58:
93:39:3b:6b:0c:76:91:58:f7:79:e3:9e:c0:f8:14:69:4c:55:
13:aa:7a:76:f3:b3:f8:e7:42:b1:88:9f:af:ef:d9:0d:48:c9:
a1:13:dc:54:9b:07:7c:41:ad:4e:55:13:15:ca:a2:b4:7b:bc:
0f:71:58:bd:c1:d0:d3:e3:16:c8:68:3e:39:2c:30:62:cc:a7:
0d:73:36:c3
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVveY2T1Fq34HONfw7hUQR/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjMwMTAxMjIzNTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDUxMjM1YWNmZjk2M2NhYjRjOGUyMGIxNGRkYjcwYTFlYzc4Y2E2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/KGFAed9KTe0aHSiDfEYe5/F4zt
Bs00QjXpjavyTTnPiC3RUPVmyWsBvF08oRcYu9DyLEEMYsHN5oaKhenpCKBF3d5L
x8niYxraZ1UpkTB5RZ3hTU7qUIi58qeHOrbkDeXN1YX2VC5Gu2P3AO05Bqe4Rj5a
aI/yld34iTKyG+bH3UNaMLo2gN2eSKSntzQW3ayz6P88PcikoU/xxdeTsY6l9rec
EuOmAhDbrA7Bpty18n4VS/m0ILd2jX6GHFOqlqDReiNiCQm3sXDu2mBdbx5/KYtz
ov0vDl5FpACW9rvoBtkG0As/RFAGARy3X71w4qMHc96il5oqmqjlrrTfcQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHBRI1rP+WPKtMjiCxTdtwoex4ymMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvY0ZFaldzXzVZOHEweU9JTEZOMjNDaDdIaktZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALYKJAwQA
LYKLMA0GCSqGSIb3DQEBCwUAA4IBAQDCMHyFNlTVLpyI0n+Ybo8ePD8U13TAxqES
91Yk43p3/OovQkFPX5uNKFU1BW6oQ5MOnSgLt5T07zEgxBNv5BMNFOm7UOQj3r5/
kKkfomyZR2sWKfQmk+E0DG95eyqxxjns8Ab3acZ0R32Kk3WdLOPq8mRNlt4twuTb
+s5TJLK3BtzzxISE1Bf7QT3rjjnvJnaa1ealWPVCwhIRTcshkWIXRbPgUAY1jEbV
GrPhdAFDLcwmk1iTOTtrDHaRWPd5457A+BRpTFUTqnp287P450KxiJ+v79kNSMmh
E9xUmwd8Qa1OVRMVyqK0e7wPcVi9wdDT4xbIaD45LDBizKcNczbD
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:52 2024 by rpki-client on console-fra.rpki-client.org