Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/mxDQopy1MjZ5Bn-89Kk_LKcm5yU.roa
File: mxDQopy1MjZ5Bn-89Kk_LKcm5yU.roa (raw, json)
Hash identifier: vkoDnF5hLpoEW7THxeWaYDpHsarVEnAEDwAOwF/dYiE=
Subject key identifier: 9B:10:D0:A2:9C:B5:32:36:79:06:7F:BC:F4:A9:3F:2C:A7:26:E7:25
Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Certificate serial: 0186A6AFE0BF44BEE9901FCCF6162F77DDB5
Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/mxDQopy1MjZ5Bn-89Kk_LKcm5yU.roa
Signing time: Fri 03 Mar 2023 08:56:29 +0000
ROA not before: Fri 03 Mar 2023 08:56:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207269
IP address blocks: 45.153.180.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:af:e0:bf:44:be:e9:90:1f:cc:f6:16:2f:77:dd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5
Validity
Not Before: Mar 3 08:56:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b10d0a29cb5323679067fbcf4a93f2ca726e725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1a:ff:ac:88:55:97:5a:45:7e:0b:bf:43:8e:
9c:46:95:25:b6:62:9b:8c:54:53:f3:53:a2:f3:a2:
bd:f7:d9:e1:a0:7c:f2:05:4d:09:d6:4e:bc:7c:c4:
94:a7:29:1b:d3:97:65:44:20:3f:6b:12:af:a1:18:
d5:a9:b3:7b:fb:81:48:61:3a:e3:29:47:b8:60:21:
74:ce:ec:f3:50:37:f8:f1:23:45:20:59:fd:58:f3:
4f:48:8e:4b:b3:8c:4e:9d:1d:91:13:02:ce:df:08:
c9:68:53:df:70:45:e6:65:14:26:91:95:be:f2:a3:
79:b4:2a:c9:75:51:da:3d:d3:e0:3b:87:31:81:94:
83:12:a1:c8:91:7b:f0:8b:2c:fb:66:4a:11:4c:95:
89:8b:ef:18:b3:45:88:e5:b5:13:8b:6d:2b:53:56:
92:59:84:4d:24:7b:5d:c4:df:b8:d5:d8:14:04:f0:
02:1e:fc:3a:cd:17:b9:9e:f6:b0:bc:90:67:b3:d5:
0c:59:c5:2d:ac:71:d7:be:ec:09:e5:d2:6d:bf:20:
79:4e:88:b2:b3:d7:0d:09:2e:5f:74:db:87:ef:38:
a1:6f:35:dd:8a:09:51:82:22:70:15:05:c8:ee:5d:
6c:6b:48:c9:5e:02:b4:f8:23:00:d0:1d:8c:8a:e8:
a4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:10:D0:A2:9C:B5:32:36:79:06:7F:BC:F4:A9:3F:2C:A7:26:E7:25
X509v3 Authority Key Identifier:
keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/mxDQopy1MjZ5Bn-89Kk_LKcm5yU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.180.0/23
Signature Algorithm: sha256WithRSAEncryption
57:0d:8f:af:3a:d6:48:42:14:65:30:4a:9c:e6:90:55:30:35:
03:2c:10:d3:76:6f:47:88:3b:8c:34:4f:70:d6:d3:b9:39:f8:
1d:c6:ea:5f:4f:7c:04:08:22:de:69:85:59:00:03:fc:19:98:
d8:20:ac:ee:5f:09:20:eb:5f:ae:8b:fd:a2:95:99:d8:1d:51:
80:1b:5f:db:cf:2b:4b:33:ce:83:b7:ac:e6:e7:b7:8f:7f:2e:
53:64:5e:e9:30:2f:30:d3:f8:ac:69:dc:a9:17:ed:24:dc:f5:
19:93:29:c8:ed:26:cf:2f:bc:04:f1:eb:48:f2:d0:9e:27:96:
2b:72:6d:5e:52:46:74:d9:b6:8d:f1:ea:1c:4f:20:2c:b9:1a:
b7:37:92:04:75:e3:d9:16:85:09:1b:82:af:ed:ec:08:72:a6:
ad:f1:a4:d4:a4:63:83:dc:78:96:b8:ce:cf:6b:1e:51:15:09:
de:f3:03:e9:94:c1:24:f9:e1:69:d8:7f:59:fe:4b:86:a8:99:
64:a9:da:3f:fb:1d:ef:84:72:f4:30:46:e4:f8:e5:bc:f4:7d:
78:a5:45:ff:ab:7b:de:dd:02:c3:6f:36:4b:8a:cb:38:4c:8c:
79:14:e6:b2:31:1e:f6:78:1c:3e:c6:d0:c6:e2:10:07:54:57:
a8:2f:51:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYamr+C/RL7pkB/M9hYvd921MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNjAwY2JhZmQyNmZlZTUwNjRmYzg5ZjMwMWRmYzhlM2Mx
ZDNjYTUwHhcNMjMwMzAzMDg1NjI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjEwZDBhMjljYjUzMjM2NzkwNjdmYmNmNGE5M2YyY2E3MjZlNzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxr/rIhVl1pFfgu/Q46cRpUltmKb
jFRT81Oi86K999nhoHzyBU0J1k68fMSUpykb05dlRCA/axKvoRjVqbN7+4FIYTrj
KUe4YCF0zuzzUDf48SNFIFn9WPNPSI5Ls4xOnR2REwLO3wjJaFPfcEXmZRQmkZW+
8qN5tCrJdVHaPdPgO4cxgZSDEqHIkXvwiyz7ZkoRTJWJi+8Ys0WI5bUTi20rU1aS
WYRNJHtdxN+41dgUBPACHvw6zRe5nvawvJBns9UMWcUtrHHXvuwJ5dJtvyB5Toiy
s9cNCS5fdNuH7zihbzXdiglRgiJwFQXI7l1sa0jJXgK0+CMA0B2MiuikawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJsQ0KKctTI2eQZ/vPSpPyynJuclMB8GA1UdIwQY
MBaAFNNgDLr9Jv7lBk/InzAd/I48HTylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmIt
MWM2ODBhZGY3YTI2LzEvbXhEUW9weTFNalo1Qm4tODlLa19MS2NtNXlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmItMWM2ODBhZGY3YTI2
LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLZm0MA0G
CSqGSIb3DQEBCwUAA4IBAQBXDY+vOtZIQhRlMEqc5pBVMDUDLBDTdm9HiDuMNE9w
1tO5OfgdxupfT3wECCLeaYVZAAP8GZjYIKzuXwkg61+ui/2ilZnYHVGAG1/bzytL
M86Dt6zm57ePfy5TZF7pMC8w0/isadypF+0k3PUZkynI7SbPL7wE8etI8tCeJ5Yr
cm1eUkZ02baN8eocTyAsuRq3N5IEdePZFoUJG4Kv7ewIcqat8aTUpGOD3HiWuM7P
ax5RFQne8wPplMEk+eFp2H9Z/kuGqJlkqdo/+x3vhHL0MEbk+OW89H14pUX/q3ve
3QLDbzZLiss4TIx5FOayMR72eBw+xtDG4hAHVFeoL1E9
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:16 2024 by rpki-client on console-ams.rpki-client.org