Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/RXIQr0pgdqqoWyaBoIp7YS8sn5M.roa
File: RXIQr0pgdqqoWyaBoIp7YS8sn5M.roa (raw, json)
Hash identifier: H/DOJu07Pvvek/z6M70H+B6nmSUMA5/iiuYVIrCFf2M=
Subject key identifier: 45:72:10:AF:4A:60:76:AA:A8:5B:26:81:A0:8A:7B:61:2F:2C:9F:93
Certificate issuer: /CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Certificate serial: 018570CBD8217ACFFB80021F7302FFC0FC6A
Authority key identifier: 72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/RXIQr0pgdqqoWyaBoIp7YS8sn5M.roa
Signing time: Mon 02 Jan 2023 04:44:45 +0000
ROA not before: Mon 02 Jan 2023 04:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62093
IP address blocks: 151.248.15.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:d8:21:7a:cf:fb:80:02:1f:73:02:ff:c0:fc:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=725c0c7111e2f57fcaf8113a42e556e882dd5c4b
Validity
Not Before: Jan 2 04:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=457210af4a6076aaa85b2681a08a7b612f2c9f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ca:9e:2f:1f:ea:e4:d0:d5:2e:fc:3d:e2:19:
6b:9e:7c:c5:40:9c:9f:9d:5c:c3:3b:47:07:fa:cf:
48:d3:1c:f8:70:b8:e5:b7:22:9e:8d:e9:ee:3d:cf:
24:41:95:40:70:a5:3a:04:0f:91:0a:d1:9b:d3:cc:
a6:cf:62:b9:22:f5:68:50:68:5b:9e:4b:f0:8d:7f:
dd:b2:9e:32:d2:c4:98:e6:77:f2:15:ae:43:a6:f5:
b0:cf:55:d1:c4:0d:a0:f6:c4:4a:f8:19:4c:2b:7c:
be:45:07:8a:21:98:29:8d:26:3d:68:c2:e6:27:fe:
0b:65:40:f3:2a:92:66:cb:d4:c8:d3:e6:ea:1f:c7:
b3:86:1f:7b:34:1c:41:d6:86:3a:cb:9e:24:44:21:
7b:b9:3d:22:c6:a5:45:df:e9:29:f1:67:68:1e:d8:
47:23:3d:80:ff:2c:2a:92:91:e5:43:1f:83:9b:72:
75:ec:d4:00:d5:88:16:a0:fa:d5:43:4a:f9:b7:7a:
ba:da:85:6e:ae:85:c4:eb:7c:2b:b5:40:8b:c5:52:
a4:62:45:f0:0a:46:d3:2b:cc:a2:2d:5d:01:c8:b5:
f8:ba:99:b3:0f:75:02:b9:6c:23:2c:05:1f:de:d2:
22:24:49:e4:42:a0:51:75:08:e2:7a:65:24:48:7d:
7f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:72:10:AF:4A:60:76:AA:A8:5B:26:81:A0:8A:7B:61:2F:2C:9F:93
X509v3 Authority Key Identifier:
keyid:72:5C:0C:71:11:E2:F5:7F:CA:F8:11:3A:42:E5:56:E8:82:DD:5C:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/clwMcRHi9X_K-BE6QuVW6ILdXEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/RXIQr0pgdqqoWyaBoIp7YS8sn5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0c9b54-130a-499a-bf9f-7610aabaa274/1/clwMcRHi9X_K-BE6QuVW6ILdXEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.15.0/24
Signature Algorithm: sha256WithRSAEncryption
16:03:02:3b:14:be:81:9d:0b:22:60:92:e2:30:0d:6e:43:5c:
fb:f7:75:c1:ee:5d:77:cb:a9:0a:72:ba:71:c9:bc:5b:8d:bb:
c4:aa:dc:41:94:b1:c0:46:05:9b:5d:68:d9:23:ca:83:9c:db:
5e:0d:21:18:c3:ff:67:c7:0c:9d:37:c3:f9:ed:6b:09:d3:48:
57:f4:b9:89:5f:71:ad:6d:63:43:b8:21:cc:33:b2:29:40:72:
5c:7e:ab:c2:2a:d4:73:a2:fc:f2:1c:0b:a2:33:89:d3:00:b0:
cf:8a:41:c4:7f:4e:bd:bf:2f:ab:81:90:5d:a3:ab:ae:ba:f9:
16:46:cc:e4:35:22:6d:12:75:fa:a4:ed:bf:eb:92:21:2b:3d:
3d:a6:7e:0d:3c:33:3f:b1:72:94:65:13:06:43:da:c0:e8:ef:
ee:00:35:dc:74:e1:d0:d3:7e:3f:d9:24:2e:32:4b:f4:23:17:
d4:30:08:ad:9f:32:a8:bc:0b:4c:d3:a1:98:08:41:72:17:c1:
45:67:72:23:28:fa:f8:4d:83:d7:96:e4:2c:dc:91:52:74:e1:
ab:64:84:14:86:78:1d:67:8d:1d:2f:47:b8:4e:f0:f5:fb:29:
1c:5a:12:6f:22:19:91:5e:a3:df:35:be:34:b4:81:28:61:ff:
a8:c4:10:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVwy9ghes/7gAIfcwL/wPxqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNWMwYzcxMTFlMmY1N2ZjYWY4MTEzYTQyZTU1NmU4ODJk
ZDVjNGIwHhcNMjMwMTAyMDQ0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTcyMTBhZjRhNjA3NmFhYTg1YjI2ODFhMDhhN2I2MTJmMmM5ZjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8qeLx/q5NDVLvw94hlrnnzFQJyf
nVzDO0cH+s9I0xz4cLjltyKejenuPc8kQZVAcKU6BA+RCtGb08ymz2K5IvVoUGhb
nkvwjX/dsp4y0sSY5nfyFa5DpvWwz1XRxA2g9sRK+BlMK3y+RQeKIZgpjSY9aMLm
J/4LZUDzKpJmy9TI0+bqH8ezhh97NBxB1oY6y54kRCF7uT0ixqVF3+kp8WdoHthH
Iz2A/ywqkpHlQx+Dm3J17NQA1YgWoPrVQ0r5t3q62oVuroXE63wrtUCLxVKkYkXw
CkbTK8yiLV0ByLX4upmzD3UCuWwjLAUf3tIiJEnkQqBRdQjiemUkSH1/kQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEVyEK9KYHaqqFsmgaCKe2EvLJ+TMB8GA1UdIwQY
MBaAFHJcDHER4vV/yvgROkLlVuiC3VxLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYt
NzYxMGFhYmFhMjc0LzEvUlhJUXIwcGdkcXFvV3lhQm9JcDdZUzhzbjVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wYzliNTQtMTMwYS00OTlhLWJmOWYtNzYxMGFhYmFhMjc0
LzEvY2x3TWNSSGk5WF9LLUJFNlF1Vlc2SUxkWEVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/gPMA0G
CSqGSIb3DQEBCwUAA4IBAQAWAwI7FL6BnQsiYJLiMA1uQ1z793XB7l13y6kKcrpx
ybxbjbvEqtxBlLHARgWbXWjZI8qDnNteDSEYw/9nxwydN8P57WsJ00hX9LmJX3Gt
bWNDuCHMM7IpQHJcfqvCKtRzovzyHAuiM4nTALDPikHEf069vy+rgZBdo6uuuvkW
RszkNSJtEnX6pO2/65IhKz09pn4NPDM/sXKUZRMGQ9rA6O/uADXcdOHQ034/2SQu
Mkv0IxfUMAitnzKovAtM06GYCEFyF8FFZ3IjKPr4TYPXluQs3JFSdOGrZIQUhngd
Z40dL0e4TvD1+ykcWhJvIhmRXqPfNb40tIEoYf+oxBBX
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:41 2024 by rpki-client on console-ams.rpki-client.org