Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Yb4_B1fEXQJmirqpSb2gfU1GoW4.roa
File: Yb4_B1fEXQJmirqpSb2gfU1GoW4.roa (raw, json)
Hash identifier: MOWntygwW27jcX/bWs3OYiBNyRQ5b07RuimJG6eJ/Hg=
Subject key identifier: 61:BE:3F:07:57:C4:5D:02:66:8A:BA:A9:49:BD:A0:7D:4D:46:A1:6E
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018CC2DB62FDA6142AEA1EBACC43155B6EA1
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Yb4_B1fEXQJmirqpSb2gfU1GoW4.roa
Signing time: Mon 01 Jan 2024 02:30:06 +0000
ROA not before: Mon 01 Jan 2024 02:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44648
IP address blocks: 45.151.147.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 15:24:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:62:fd:a6:14:2a:ea:1e:ba:cc:43:15:5b:6e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jan 1 02:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61be3f0757c45d02668abaa949bda07d4d46a16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:7a:7c:64:d9:9e:33:1d:60:30:77:21:ff:
54:85:af:d6:4e:cc:32:de:b3:25:b4:ed:1d:ca:68:
88:df:95:35:ec:24:24:bf:a8:39:70:6f:e8:23:2f:
4e:90:13:ec:96:df:1e:78:da:75:00:39:1d:5b:c9:
11:ce:8b:eb:19:6b:01:cc:16:4f:96:0a:c4:2f:0a:
d3:68:57:9d:0d:37:ca:e2:f8:4e:8f:74:b1:79:f9:
fe:ee:b9:71:02:43:fc:59:4c:7c:d5:1a:e6:6b:ed:
bb:e4:73:56:db:2a:b1:0a:0a:a9:8a:c4:d8:09:ec:
64:c4:d8:de:f4:36:f9:e6:00:3c:cb:f4:6e:5a:2f:
ee:5d:ab:08:60:b5:88:26:7e:4a:9d:95:89:0d:52:
08:83:8c:54:c9:6e:d9:3c:93:f6:59:66:6a:c2:9c:
21:2c:5b:ca:39:f9:bb:e1:5a:b0:c0:7b:e1:93:29:
1d:26:20:cb:0a:63:e5:2a:d7:d9:23:6d:fb:d2:ef:
30:8b:6a:c7:d8:30:20:c5:16:2d:8c:4b:50:79:01:
91:1e:64:cf:de:d7:c3:44:c0:05:98:27:6e:a9:f2:
aa:de:36:ec:5b:73:27:44:9f:f5:91:17:a2:fe:18:
bd:1c:eb:22:29:93:2c:f1:f5:26:39:ca:6f:c6:20:
74:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BE:3F:07:57:C4:5D:02:66:8A:BA:A9:49:BD:A0:7D:4D:46:A1:6E
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/Yb4_B1fEXQJmirqpSb2gfU1GoW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.147.0/24
Signature Algorithm: sha256WithRSAEncryption
97:3b:1f:4d:f0:84:e5:b5:0e:f6:af:51:ac:db:3c:bc:d8:59:
c0:88:11:e9:49:72:f1:a1:1f:87:39:76:fe:9d:2c:f0:e5:a3:
9d:80:1b:f1:e0:8a:3f:42:2d:06:a5:6a:8c:02:b0:54:cb:1b:
92:56:78:33:35:9b:e8:c5:88:00:fb:6e:9d:9b:b4:05:84:49:
6c:39:5e:3a:c9:2a:8d:20:f7:c7:34:16:8d:84:2e:8f:13:d9:
2e:2d:9a:62:19:ee:b1:94:07:5e:28:bc:3d:01:27:40:fe:1a:
9d:0f:8a:5c:76:9b:d6:1f:00:8b:20:06:91:39:ab:98:f3:00:
51:39:df:68:43:9d:9c:49:a3:33:f7:33:d7:74:33:5e:ab:3f:
e2:23:69:38:21:ee:11:f0:18:3f:13:77:b1:62:2c:92:d0:ae:
cc:50:86:18:7f:75:57:e6:77:9c:89:a1:c6:42:2d:32:d1:5f:
df:6b:53:f9:3f:7b:f7:cd:51:c8:76:6c:40:53:a9:00:06:52:
b8:f2:c6:8c:b4:81:a2:67:ef:f5:05:1c:51:d0:47:d5:1f:75:
b7:96:87:3d:02:5e:12:f6:be:16:d7:3a:50:3d:f6:fd:a2:40:
e3:95:60:3d:3f:2b:f4:0a:34:83:28:2b:33:e7:d1:da:d5:c5:
2d:85:f1:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC22L9phQq6h66zEMVW26hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjQwMTAxMDIzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWJlM2YwNzU3YzQ1ZDAyNjY4YWJhYTk0OWJkYTA3ZDRkNDZhMTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5V6fGTZnjMdYDB3If9Uha/WTswy
3rMltO0dymiI35U17CQkv6g5cG/oIy9OkBPslt8eeNp1ADkdW8kRzovrGWsBzBZP
lgrELwrTaFedDTfK4vhOj3Sxefn+7rlxAkP8WUx81Rrma+275HNW2yqxCgqpisTY
CexkxNje9Db55gA8y/RuWi/uXasIYLWIJn5KnZWJDVIIg4xUyW7ZPJP2WWZqwpwh
LFvKOfm74VqwwHvhkykdJiDLCmPlKtfZI2370u8wi2rH2DAgxRYtjEtQeQGRHmTP
3tfDRMAFmCduqfKq3jbsW3MnRJ/1kRei/hi9HOsiKZMs8fUmOcpvxiB0CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGG+PwdXxF0CZoq6qUm9oH1NRqFuMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvWWI0X0IxZkVYUUptaXJxcFNiMmdmVTFHb1c0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZeTMA0G
CSqGSIb3DQEBCwUAA4IBAQCXOx9N8ITltQ72r1Gs2zy82FnAiBHpSXLxoR+HOXb+
nSzw5aOdgBvx4Io/Qi0GpWqMArBUyxuSVngzNZvoxYgA+26dm7QFhElsOV46ySqN
IPfHNBaNhC6PE9kuLZpiGe6xlAdeKLw9ASdA/hqdD4pcdpvWHwCLIAaROauY8wBR
Od9oQ52cSaMz9zPXdDNeqz/iI2k4Ie4R8Bg/E3exYiyS0K7MUIYYf3VX5neciaHG
Qi0y0V/fa1P5P3v3zVHIdmxAU6kABlK48saMtIGiZ+/1BRxR0EfVH3W3loc9Al4S
9r4W1zpQPfb9okDjlWA9Pyv0CjSDKCsz59Ha1cUthfEZ
-----END CERTIFICATE-----
Generated at Tue Feb 20 20:34:57 2024 by rpki-client on console-fra.rpki-client.org