Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/vXrwayK3mfS8N8_yOggxcMvH3gY.roa
File: vXrwayK3mfS8N8_yOggxcMvH3gY.roa (raw, json)
Hash identifier: UxZYLeSxASK8CUa0t3V/lFzuZYz8+rAWrrM3MeZbluk=
Subject key identifier: BD:7A:F0:6B:22:B7:99:F4:BC:37:CF:F2:3A:08:31:70:CB:C7:DE:06
Certificate issuer: /CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Certificate serial: 0185708C99A7D521A99F2CDF136A5B0EBC67
Authority key identifier: 48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/vXrwayK3mfS8N8_yOggxcMvH3gY.roa
Signing time: Mon 02 Jan 2023 03:35:40 +0000
ROA not before: Mon 02 Jan 2023 03:35:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208247
IP address blocks: 45.151.87.0/24 maxlen: 24
45.151.86.0/24 maxlen: 24
2a0f:1500::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:30:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:99:a7:d5:21:a9:9f:2c:df:13:6a:5b:0e:bc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480526dbf3d578ed8b630c0e71dbd18cd547a5cd
Validity
Not Before: Jan 2 03:35:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd7af06b22b799f4bc37cff23a083170cbc7de06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:93:26:bb:c7:93:3f:a8:f2:dc:a1:d7:84:f2:
b1:ff:2a:6f:aa:ab:9b:19:6b:b7:f8:9e:b5:58:0f:
3e:67:39:61:11:91:bb:6c:83:52:e0:16:a6:ea:12:
32:53:3b:22:4e:03:aa:1f:95:a0:08:ba:2b:b4:36:
96:76:58:09:a8:21:18:b3:6b:1c:5b:54:75:9e:1e:
fa:60:1d:81:26:b4:4b:4b:67:0e:19:9c:4b:93:44:
d8:c1:c3:c3:ee:24:88:7a:40:e8:f3:dd:f7:8d:7f:
08:ef:b6:92:1c:79:14:77:31:1b:ff:2d:82:da:20:
69:83:6e:fd:62:5c:f2:e8:f8:96:f6:f5:b6:f1:d9:
bd:d9:42:11:7a:78:f7:39:df:41:b3:cd:76:1a:85:
0e:6f:df:f8:a8:e8:e6:8c:14:65:f5:d2:27:f0:4a:
f3:aa:f0:24:9b:3e:d3:24:1a:92:f9:ac:96:03:87:
c0:7b:a3:04:03:43:fa:3f:de:e9:c8:b4:c2:fc:94:
b3:2f:81:79:ec:34:22:ef:e1:55:96:0e:5a:0d:bb:
5e:2b:4b:45:5c:f5:ee:99:8e:b7:33:de:23:98:a2:
bb:3c:3f:71:08:3c:c2:4f:28:a2:1b:14:41:f2:81:
63:72:fc:34:1c:4f:91:a5:fa:40:9f:a6:b4:f9:a1:
d1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7A:F0:6B:22:B7:99:F4:BC:37:CF:F2:3A:08:31:70:CB:C7:DE:06
X509v3 Authority Key Identifier:
keyid:48:05:26:DB:F3:D5:78:ED:8B:63:0C:0E:71:DB:D1:8C:D5:47:A5:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAUm2_PVeO2LYwwOcdvRjNVHpc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/vXrwayK3mfS8N8_yOggxcMvH3gY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/087c77-8fa0-41a1-b28e-8010f13ba15a/1/SAUm2_PVeO2LYwwOcdvRjNVHpc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.86.0/23
IPv6:
2a0f:1500::/29
Signature Algorithm: sha256WithRSAEncryption
4c:fd:1f:64:0d:19:91:b4:27:57:65:3c:ec:f1:60:35:cb:80:
15:c1:85:d8:a2:20:c3:6d:db:c9:2c:a2:1b:a0:7f:d6:58:fb:
2d:f5:e1:8b:4b:fe:a7:23:60:5e:bf:ea:b4:5d:4c:77:4e:fe:
df:1f:e4:4f:fc:cb:e7:ba:97:62:f7:d1:de:4b:db:36:b7:6f:
0a:0a:d8:ed:a9:23:cd:7c:9f:3b:68:3b:56:a6:0d:c3:5b:44:
85:d0:41:78:ff:27:b4:87:67:c3:e2:4a:ad:ae:fd:d2:a5:fc:
2e:1b:cd:cf:9a:94:34:a1:b8:17:0d:0e:c3:f4:c5:41:00:56:
a9:7d:9c:8a:4d:0d:06:bb:50:7c:e3:7f:2f:33:1f:43:4f:dc:
97:21:df:06:81:49:66:6b:e6:ca:51:1d:74:6a:12:28:8e:e4:
f0:8b:c3:3c:72:32:99:b3:2e:02:2a:d1:00:af:ca:4e:e7:2b:
7a:b0:57:5e:1b:ed:4c:e5:41:ce:23:5c:ae:7f:87:93:c6:3b:
1a:bc:2e:dc:58:59:6f:22:a6:24:8f:49:47:eb:0e:50:83:9f:
ce:fc:e6:47:fb:cb:8a:60:cc:df:d1:b0:9a:cc:39:59:9c:00:
73:de:b1:b0:2a:13:e3:61:d6:13:24:cf:95:cd:84:41:82:88:
1e:68:d7:6b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVwjJmn1SGpnyzfE2pbDrxnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDUyNmRiZjNkNTc4ZWQ4YjYzMGMwZTcxZGJkMThjZDU0
N2E1Y2QwHhcNMjMwMTAyMDMzNTQwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDdhZjA2YjIyYjc5OWY0YmMzN2NmZjIzYTA4MzE3MGNiYzdkZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpMmu8eTP6jy3KHXhPKx/ypvqqub
GWu3+J61WA8+ZzlhEZG7bINS4Bam6hIyUzsiTgOqH5WgCLortDaWdlgJqCEYs2sc
W1R1nh76YB2BJrRLS2cOGZxLk0TYwcPD7iSIekDo8933jX8I77aSHHkUdzEb/y2C
2iBpg279Ylzy6PiW9vW28dm92UIRenj3Od9Bs812GoUOb9/4qOjmjBRl9dIn8Erz
qvAkmz7TJBqS+ayWA4fAe6MEA0P6P97pyLTC/JSzL4F57DQi7+FVlg5aDbteK0tF
XPXumY63M94jmKK7PD9xCDzCTyiiGxRB8oFjcvw0HE+RpfpAn6a0+aHREwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFL168Gsit5n0vDfP8joIMXDLx94GMB8GA1UdIwQY
MBaAFEgFJtvz1Xjti2MMDnHb0YzVR6XNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FVbTJfUFZlTzJMWXd3T2NkdlJqTlZIcGMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8wODdjNzctOGZhMC00MWExLWIyOGUt
ODAxMGYxM2JhMTVhLzEvdlhyd2F5SzNtZlM4TjhfeU9nZ3hjTXZIM2dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8wODdjNzctOGZhMC00MWExLWIyOGUtODAxMGYxM2JhMTVh
LzEvU0FVbTJfUFZlTzJMWXd3T2NkdlJqTlZIcGMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLZdWMA0E
AgACMAcDBQMqDxUAMA0GCSqGSIb3DQEBCwUAA4IBAQBM/R9kDRmRtCdXZTzs8WA1
y4AVwYXYoiDDbdvJLKIboH/WWPst9eGLS/6nI2Bev+q0XUx3Tv7fH+RP/Mvnupdi
99HeS9s2t28KCtjtqSPNfJ87aDtWpg3DW0SF0EF4/ye0h2fD4kqtrv3SpfwuG83P
mpQ0obgXDQ7D9MVBAFapfZyKTQ0Gu1B8438vMx9DT9yXId8GgUlma+bKUR10ahIo
juTwi8M8cjKZsy4CKtEAr8pO5yt6sFdeG+1M5UHOI1yuf4eTxjsavC7cWFlvIqYk
j0lH6w5Qg5/O/OZH+8uKYMzf0bCazDlZnABz3rGwKhPjYdYTJM+VzYRBgogeaNdr
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:34 2024 by rpki-client on console-ams.rpki-client.org