Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/0BQB3S73AQ3Ntf3aYgUI0Kkwozg.roa
File: 0BQB3S73AQ3Ntf3aYgUI0Kkwozg.roa (raw, json)
Hash identifier: vFkpCIZxDI+933EisFLZPIu93Rp22gVAprVwHbBMgrQ=
Subject key identifier: D0:14:01:DD:2E:F7:01:0D:CD:B5:FD:DA:62:05:08:D0:A9:30:A3:38
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018DB0EEBB65A9711A3FDF9FC2F7C14C616C
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/0BQB3S73AQ3Ntf3aYgUI0Kkwozg.roa
Signing time: Fri 16 Feb 2024 08:00:51 +0000
ROA not before: Fri 16 Feb 2024 08:00:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197555
IP address blocks: 5.180.105.0/24 maxlen: 24
45.141.148.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 13:55:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:b0:ee:bb:65:a9:71:1a:3f:df:9f:c2:f7:c1:4c:61:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Feb 16 08:00:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d01401dd2ef7010dcdb5fdda620508d0a930a338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cd:69:71:2a:44:84:70:6f:77:20:34:8b:91:
33:bd:b4:42:59:ee:4e:57:52:ee:1c:61:16:45:a0:
a5:90:f4:73:18:ee:41:35:73:74:1a:e0:29:49:14:
5d:07:b9:a8:d5:65:94:b0:b9:15:5a:92:25:21:92:
8e:f1:1e:36:99:eb:f5:5a:c2:6a:b0:89:c2:28:f7:
86:ce:2e:8e:dd:88:56:1f:59:ca:ab:45:d1:f3:15:
dd:c1:cd:4a:cc:93:58:7f:cd:c1:e8:db:54:96:10:
04:30:09:7d:0c:36:45:f6:e2:95:41:1e:8c:08:d8:
2b:3b:f7:22:06:0f:4c:58:7c:e9:ec:9d:8f:8e:ed:
c4:bc:5e:e2:d2:17:61:cb:5f:42:8c:6d:0a:c8:ca:
75:5e:c0:ce:28:10:4e:08:d6:67:de:ab:9c:1c:be:
5a:38:9b:57:10:4b:96:57:bb:b4:ae:b6:32:24:c6:
48:76:d2:33:00:b8:6b:a0:26:5e:a8:65:8b:a0:ed:
1b:2f:12:50:9d:3b:86:6d:b8:73:c0:b7:7a:a8:33:
3f:dd:fb:ec:da:76:16:42:80:be:6e:a4:59:90:33:
fb:2c:96:c9:1a:db:a3:a2:6f:7f:6f:61:05:20:33:
ae:57:1e:15:a7:37:f2:9a:f0:36:55:c8:0f:35:b6:
b7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:14:01:DD:2E:F7:01:0D:CD:B5:FD:DA:62:05:08:D0:A9:30:A3:38
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/0BQB3S73AQ3Ntf3aYgUI0Kkwozg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.105.0/24
45.141.148.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:60:4c:57:5e:6f:0d:00:c6:08:d6:db:fc:00:62:4e:08:89:
56:94:2d:d6:1a:72:8e:e4:26:11:18:8f:e3:78:80:3f:de:bb:
2c:14:38:91:40:6d:64:9c:52:93:96:12:ab:bf:cc:67:9d:29:
13:57:15:db:3d:af:fb:2c:c0:c0:54:6c:03:8b:a0:b8:c8:00:
ec:17:b6:b7:b0:ab:34:55:82:bd:2a:f7:8d:2a:32:17:69:7d:
7b:dd:22:16:a4:72:b4:e6:19:aa:31:f7:f0:13:a9:8d:b9:e6:
5b:05:33:f2:a3:00:ed:88:f1:96:44:39:f4:4c:98:46:6f:c8:
e7:93:b1:aa:b2:49:a2:a8:41:17:63:24:10:e6:42:63:71:b7:
f4:32:6f:fe:bf:a5:66:67:1b:9a:24:82:ac:3b:a9:b9:0a:85:
98:c8:30:cd:fe:8f:df:ca:43:d5:e9:82:5b:c9:5b:af:97:69:
0a:15:19:40:78:d9:c8:2d:16:e0:83:34:76:e8:cd:a7:e2:e9:
c2:78:47:17:e0:12:4b:01:a9:66:33:6f:f5:3f:55:6a:9e:3f:
c0:26:23:5b:d7:77:82:cc:ae:13:98:7b:40:71:8e:1d:53:58:
7a:12:87:ef:5b:db:98:b9:6d:41:39:21:bc:2f:e3:03:d2:c1:
f4:8d:a0:e1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY2w7rtlqXEaP9+fwvfBTGFsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjQwMjE2MDgwMDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDE0MDFkZDJlZjcwMTBkY2RiNWZkZGE2MjA1MDhkMGE5MzBhMzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM1pcSpEhHBvdyA0i5EzvbRCWe5O
V1LuHGEWRaClkPRzGO5BNXN0GuApSRRdB7mo1WWUsLkVWpIlIZKO8R42mev1WsJq
sInCKPeGzi6O3YhWH1nKq0XR8xXdwc1KzJNYf83B6NtUlhAEMAl9DDZF9uKVQR6M
CNgrO/ciBg9MWHzp7J2Pju3EvF7i0hdhy19CjG0KyMp1XsDOKBBOCNZn3qucHL5a
OJtXEEuWV7u0rrYyJMZIdtIzALhroCZeqGWLoO0bLxJQnTuGbbhzwLd6qDM/3fvs
2nYWQoC+bqRZkDP7LJbJGtujom9/b2EFIDOuVx4VpzfymvA2VcgPNba3UQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNAUAd0u9wENzbX92mIFCNCpMKM4MB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvMEJRQjNTNzNBUTNOdGYzYVlnVUkwS2t3b3pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQABbRpAwQA
LY2UMA0GCSqGSIb3DQEBCwUAA4IBAQAPYExXXm8NAMYI1tv8AGJOCIlWlC3WGnKO
5CYRGI/jeIA/3rssFDiRQG1knFKTlhKrv8xnnSkTVxXbPa/7LMDAVGwDi6C4yADs
F7a3sKs0VYK9KveNKjIXaX173SIWpHK05hmqMffwE6mNueZbBTPyowDtiPGWRDn0
TJhGb8jnk7GqskmiqEEXYyQQ5kJjcbf0Mm/+v6VmZxuaJIKsO6m5CoWYyDDN/o/f
ykPV6YJbyVuvl2kKFRlAeNnILRbggzR26M2n4unCeEcX4BJLAalmM2/1P1Vqnj/A
JiNb13eCzK4TmHtAcY4dU1h6EofvW9uYuW1BOSG8L+MD0sH0jaDh
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:22 2025 by rpki-client