Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/2VS0E6tC5vT9Y2V6raZM4ItD_8E.roa
File: 2VS0E6tC5vT9Y2V6raZM4ItD_8E.roa (raw, json)
Hash identifier: itNRplK9vf3/0Achc4PIWOElZg+YljQGpC+OFmjS+1o=
Subject key identifier: D9:54:B4:13:AB:42:E6:F4:FD:63:65:7A:AD:A6:4C:E0:8B:43:FF:C1
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 018C820FDB65EAD98C4A3A3330EE3F17C98A
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/2VS0E6tC5vT9Y2V6raZM4ItD_8E.roa
Signing time: Tue 19 Dec 2023 12:32:06 +0000
ROA not before: Tue 19 Dec 2023 12:32:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21859
IP address blocks: 45.158.60.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:82:0f:db:65:ea:d9:8c:4a:3a:33:30:ee:3f:17:c9:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Dec 19 12:32:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d954b413ab42e6f4fd63657aada64ce08b43ffc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f7:00:bf:06:8e:28:b7:08:ce:3e:a6:47:97:
b8:b4:71:8b:18:dc:23:ed:fd:4c:82:68:ac:b9:6a:
96:3c:50:cd:8d:17:c0:92:c9:9d:87:be:04:9d:b1:
be:2f:d5:94:ca:4f:c7:e7:7b:02:86:66:4d:f8:13:
10:c8:15:86:5a:ed:45:99:9b:e5:6f:2b:8e:52:b4:
e4:a0:d5:27:bc:86:c5:08:88:83:a6:b3:8c:ed:b7:
91:ac:22:ad:c9:1c:7d:77:3e:c8:79:28:21:a8:d8:
53:da:90:ac:91:7e:a0:08:fd:e6:ef:f4:fd:5f:87:
ff:c0:5d:10:e9:67:ca:86:b3:6f:f5:4c:51:7e:28:
fb:37:64:4d:8b:53:7e:c0:7d:26:a3:87:60:96:78:
ae:96:85:2b:16:fa:c1:58:d3:a4:1e:d4:f6:f6:38:
f5:9d:49:5b:4d:81:14:0b:cc:fe:36:b1:86:fd:56:
0b:f4:bd:be:9b:56:a8:90:04:26:1a:85:e1:9e:86:
84:4d:7b:63:9f:c9:af:08:75:7b:52:7d:f1:4e:d0:
aa:cf:73:ca:b6:97:62:fc:24:e4:2d:c3:d6:73:22:
e4:63:24:bb:4c:75:2b:fc:fe:62:61:77:4b:a9:56:
8b:4c:f5:a8:7d:29:46:55:0d:38:95:7a:c4:39:c8:
be:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:54:B4:13:AB:42:E6:F4:FD:63:65:7A:AD:A6:4C:E0:8B:43:FF:C1
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/2VS0E6tC5vT9Y2V6raZM4ItD_8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.60.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:cc:3a:d7:c8:c1:af:2f:d6:ed:b9:34:7a:7f:be:1f:ea:b5:
b9:7d:fc:a9:9f:1a:ad:65:5a:fe:c8:8d:a7:01:2b:62:dc:7a:
a4:c5:ed:0e:b7:15:c4:e4:49:3d:39:f3:df:59:c6:4c:87:93:
46:85:c8:4f:a9:c9:aa:8f:93:9d:87:e1:13:8f:94:44:29:47:
23:fc:86:51:cc:ea:dd:3e:ce:2a:56:26:48:cd:46:0d:6a:7a:
d5:21:ec:ac:7d:d1:e0:04:6f:b6:20:a0:78:36:55:4a:57:c4:
30:c8:2d:10:f5:a9:df:6b:9f:4a:c0:4d:a3:02:86:07:70:e5:
b6:77:f9:c4:9b:df:97:80:5f:73:4d:5d:44:f2:67:79:a0:3c:
66:1a:22:cb:2d:7e:76:d1:a7:1b:ea:2f:4c:86:3b:e6:7b:ca:
2e:08:f4:73:1d:89:8c:c0:fe:2f:3c:81:2f:43:46:8f:92:6d:
3f:e0:a8:b8:68:72:02:2a:6f:92:3d:c3:19:06:19:63:fc:6f:
1b:9d:3e:25:8a:bc:10:ba:ab:b5:0c:bc:dd:03:3e:df:64:35:
e7:c6:04:00:8c:1b:48:72:e7:9c:8c:05:9a:fb:d8:fd:8f:94:
00:57:c0:7a:72:df:15:4a:d0:d5:40:5a:8f:88:57:db:72:94:
19:46:18:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYyCD9tl6tmMSjozMO4/F8mKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZWNmOWJhYmM5Y2E2YmFlOTA4NWNlMjkyZmIxYzJjYzE4
ZDM0NGYwHhcNMjMxMjE5MTIzMjA2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTU0YjQxM2FiNDJlNmY0ZmQ2MzY1N2FhZGE2NGNlMDhiNDNmZmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/cAvwaOKLcIzj6mR5e4tHGLGNwj
7f1MgmisuWqWPFDNjRfAksmdh74EnbG+L9WUyk/H53sChmZN+BMQyBWGWu1FmZvl
byuOUrTkoNUnvIbFCIiDprOM7beRrCKtyRx9dz7IeSghqNhT2pCskX6gCP3m7/T9
X4f/wF0Q6WfKhrNv9UxRfij7N2RNi1N+wH0mo4dglniuloUrFvrBWNOkHtT29jj1
nUlbTYEUC8z+NrGG/VYL9L2+m1aokAQmGoXhnoaETXtjn8mvCHV7Un3xTtCqz3PK
tpdi/CTkLcPWcyLkYyS7THUr/P5iYXdLqVaLTPWofSlGVQ04lXrEOci+8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNlUtBOrQub0/WNleq2mTOCLQ//BMB8GA1UdIwQY
MBaAFFHs+bq8nKa66Qhc4pL7HCzBjTRPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9mYjA0YzgtNzA1Ny00NWI3LWEzNGMt
ZGNmYzZhOWUwZGM3LzEvMlZTMEU2dEM1dlQ5WTJWNnJhWk00SXREXzhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9mYjA0YzgtNzA1Ny00NWI3LWEzNGMtZGNmYzZhOWUwZGM3
LzEvVWV6NXVyeWNwcnJwQ0Z6aWt2c2NMTUdOTkU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZ48MA0G
CSqGSIb3DQEBCwUAA4IBAQBazDrXyMGvL9btuTR6f74f6rW5ffypnxqtZVr+yI2n
ASti3Hqkxe0OtxXE5Ek9OfPfWcZMh5NGhchPqcmqj5Odh+ETj5REKUcj/IZRzOrd
Ps4qViZIzUYNanrVIeysfdHgBG+2IKB4NlVKV8QwyC0Q9anfa59KwE2jAoYHcOW2
d/nEm9+XgF9zTV1E8md5oDxmGiLLLX520acb6i9Mhjvme8ouCPRzHYmMwP4vPIEv
Q0aPkm0/4Ki4aHICKm+SPcMZBhlj/G8bnT4lirwQuqu1DLzdAz7fZDXnxgQAjBtI
cuecjAWa+9j9j5QAV8B6ct8VStDVQFqPiFfbcpQZRhgS
-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:15 2024 by rpki-client on console-fra.rpki-client.org