Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/fP_rJm_VnYBfSqGKaz2feOwXCEY.roa
File: fP_rJm_VnYBfSqGKaz2feOwXCEY.roa (raw, json)
Hash identifier: FRGn1D6jqMDCvLu80FNoOn7pyKQj9eiUily6ffn2mCQ=
Subject key identifier: 7C:FF:EB:26:6F:D5:9D:80:5F:4A:A1:8A:6B:3D:9F:78:EC:17:08:46
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01869ED9F44D8511D0999F0FA89E606B17B0
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/fP_rJm_VnYBfSqGKaz2feOwXCEY.roa
Signing time: Wed 01 Mar 2023 20:25:29 +0000
ROA not before: Wed 01 Mar 2023 20:25:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34582
IP address blocks: 45.158.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:9e:d9:f4:4d:85:11:d0:99:9f:0f:a8:9e:60:6b:17:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Mar 1 20:25:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cffeb266fd59d805f4aa18a6b3d9f78ec170846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:40:90:f0:b3:44:45:50:49:76:bb:70:1c:d2:
6a:5d:ae:72:9c:ad:63:d3:e7:9a:97:2f:ae:99:2f:
39:b6:79:79:cd:fa:9b:0b:e1:9c:45:df:df:92:9a:
4a:56:e6:c0:29:3b:81:27:40:06:0f:92:39:88:de:
4c:d2:00:bf:06:f5:e0:b3:e4:67:e4:60:d9:d4:c9:
76:4a:51:45:92:2e:a3:34:c6:36:ec:82:2f:d8:ba:
77:a8:27:3c:9a:ff:d9:a9:b3:f8:4c:48:b8:ac:a5:
15:76:db:a4:53:f9:b2:b0:15:9c:ec:9a:df:cb:3d:
ca:c7:9e:c4:1d:dc:ee:1b:e7:77:01:26:03:63:10:
05:2a:0f:8d:0e:bb:70:48:0c:03:e0:44:fe:ee:59:
58:b9:11:fa:2c:7c:4e:4f:75:21:c5:94:11:77:af:
0b:b2:8c:43:52:23:6e:15:86:50:e0:f6:c2:70:d1:
ef:15:94:ef:28:e5:02:c9:cc:33:12:fd:ee:91:42:
b9:fb:38:b0:96:b6:8a:be:fe:4c:2c:0c:4c:71:fe:
5a:c0:80:58:ae:69:1e:fb:70:67:d2:2e:e6:2d:27:
15:2b:89:da:b4:55:88:e2:79:9d:29:d4:e5:16:d7:
72:e5:eb:60:98:dd:6d:9f:9a:c3:e2:d8:f9:3d:1a:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FF:EB:26:6F:D5:9D:80:5F:4A:A1:8A:6B:3D:9F:78:EC:17:08:46
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/fP_rJm_VnYBfSqGKaz2feOwXCEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.47.0/24
Signature Algorithm: sha256WithRSAEncryption
68:ee:60:73:e5:c0:ab:7f:29:0d:25:70:d6:49:87:2e:37:c8:
f4:a6:61:28:ab:6e:5d:f3:41:5f:0b:70:51:c2:76:02:74:cc:
2a:12:95:e9:92:9d:c4:fd:4c:04:7d:ee:b1:70:e6:17:2c:36:
50:50:ad:36:b2:93:65:91:f6:55:df:9c:0a:55:7c:3b:fb:52:
d3:89:1b:2b:b5:8b:aa:19:43:85:4b:e0:b3:82:f8:67:78:ef:
41:66:23:d5:bb:c9:25:a9:c8:36:e7:96:92:ad:f4:c1:b7:18:
43:41:5e:ac:66:b6:02:c3:5a:01:d9:07:5c:ab:c4:1c:15:9a:
6f:a8:8a:9a:2c:0b:6c:f9:dd:77:47:95:28:51:76:02:47:c2:
9d:63:0f:6b:4d:6b:12:3b:8c:4e:44:97:ca:35:e3:94:70:f2:
f4:eb:0f:c6:80:cf:41:72:05:ea:4f:4f:bb:6c:c9:c2:66:5c:
fb:22:e4:a4:99:b7:ab:43:53:6f:2f:0a:dd:76:de:88:3f:b5:
29:21:a1:ea:73:de:03:27:99:71:6e:04:f9:c3:5d:77:23:fc:
3b:69:2f:a2:e3:d6:ca:f5:b7:bc:03:b3:e0:06:a3:e7:49:5b:
df:75:d5:79:e2:a1:5e:31:9c:c5:49:94:65:c7:d3:eb:01:08:
53:fd:1c:8c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYae2fRNhRHQmZ8PqJ5gaxewMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjMwMzAxMjAyNTI5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Y2ZmZWIyNjZmZDU5ZDgwNWY0YWExOGE2YjNkOWY3OGVjMTcwODQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUCQ8LNERVBJdrtwHNJqXa5ynK1j
0+ealy+umS85tnl5zfqbC+GcRd/fkppKVubAKTuBJ0AGD5I5iN5M0gC/BvXgs+Rn
5GDZ1Ml2SlFFki6jNMY27IIv2Lp3qCc8mv/ZqbP4TEi4rKUVdtukU/mysBWc7Jrf
yz3Kx57EHdzuG+d3ASYDYxAFKg+NDrtwSAwD4ET+7llYuRH6LHxOT3UhxZQRd68L
soxDUiNuFYZQ4PbCcNHvFZTvKOUCycwzEv3ukUK5+ziwlraKvv5MLAxMcf5awIBY
rmke+3Bn0i7mLScVK4natFWI4nmdKdTlFtdy5etgmN1tn5rD4tj5PRq45QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHz/6yZv1Z2AX0qhims9n3jsFwhGMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvZlBfckptX1ZuWUJmU3FHS2F6MmZlT3dYQ0VZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZ4vMA0G
CSqGSIb3DQEBCwUAA4IBAQBo7mBz5cCrfykNJXDWSYcuN8j0pmEoq25d80FfC3BR
wnYCdMwqEpXpkp3E/UwEfe6xcOYXLDZQUK02spNlkfZV35wKVXw7+1LTiRsrtYuq
GUOFS+CzgvhneO9BZiPVu8klqcg255aSrfTBtxhDQV6sZrYCw1oB2Qdcq8QcFZpv
qIqaLAts+d13R5UoUXYCR8KdYw9rTWsSO4xORJfKNeOUcPL06w/GgM9BcgXqT0+7
bMnCZlz7IuSkmberQ1NvLwrddt6IP7UpIaHqc94DJ5lxbgT5w113I/w7aS+i49bK
9be8A7PgBqPnSVvfddV54qFeMZzFSZRlx9PrAQhT/RyM
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:38 2024 by rpki-client on console-ams.rpki-client.org