Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/XbcowvQgYmS3TzZR49wVwbdMXq8.roa
File: XbcowvQgYmS3TzZR49wVwbdMXq8.roa (raw, json)
Hash identifier: xc4was8hB+uCzVAUsjCmo3qAJlY9I5hoDfQWJMW6ruE=
Subject key identifier: 5D:B7:28:C2:F4:20:62:64:B7:4F:36:51:E3:DC:15:C1:B7:4C:5E:AF
Certificate issuer: /CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Certificate serial: 018650A9891F0F715148C561B711ED468AB3
Authority key identifier: BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/XbcowvQgYmS3TzZR49wVwbdMXq8.roa
Signing time: Tue 14 Feb 2023 16:02:13 +0000
ROA not before: Tue 14 Feb 2023 16:02:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11351
IP address blocks: 45.94.152.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Feb 2023 19:51:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:50:a9:89:1f:0f:71:51:48:c5:61:b7:11:ed:46:8a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb83e99bf7254f948057a5e981be6fa5c2054dd
Validity
Not Before: Feb 14 16:02:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5db728c2f4206264b74f3651e3dc15c1b74c5eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:44:65:16:06:64:b7:61:ac:9a:f6:e0:47:1d:
56:e2:a0:93:b2:a8:bf:97:b2:e4:b4:5a:4c:fd:fb:
cd:8f:4b:97:83:fc:30:93:be:c9:5c:08:87:03:09:
1e:df:0e:d6:cf:7d:16:26:28:0d:e5:cf:3c:88:ca:
8a:b4:27:01:05:e6:46:7f:36:1b:19:e8:7c:8f:aa:
6c:fc:85:32:be:bc:67:34:57:0a:2c:46:88:e7:12:
a9:37:e0:85:6f:e4:b9:64:2d:06:53:0b:e7:85:dd:
72:a4:4c:09:7f:f5:26:ee:e4:3a:df:38:a1:8e:c0:
78:8f:bb:ee:1e:71:73:43:4e:16:8e:16:8f:a2:ac:
b2:74:ac:89:c6:60:6f:0e:36:02:ca:c6:dc:23:27:
b4:3f:18:8f:6b:ba:6d:f5:32:50:b8:65:90:82:07:
93:b7:ab:b0:de:5c:a9:18:82:af:18:91:01:f9:8e:
cd:7a:4a:cf:24:e8:25:b8:04:2d:b6:0c:11:55:61:
e4:33:ba:7d:63:dd:b5:01:ab:12:ae:d4:32:51:4f:
18:f7:51:e3:34:65:28:02:47:50:5b:06:8c:bf:7c:
40:98:5f:25:4c:c4:77:c4:66:e7:04:07:f1:be:5b:
3c:17:83:fd:28:30:1e:56:e0:ea:5e:d9:f5:6e:07:
ea:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B7:28:C2:F4:20:62:64:B7:4F:36:51:E3:DC:15:C1:B7:4C:5E:AF
X509v3 Authority Key Identifier:
keyid:BD:B8:3E:99:BF:72:54:F9:48:05:7A:5E:98:1B:E6:FA:5C:20:54:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbg-mb9yVPlIBXpemBvm-lwgVN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/XbcowvQgYmS3TzZR49wVwbdMXq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5e205a-ec0a-4fee-aef1-e495aaa0cac0/1/vbg-mb9yVPlIBXpemBvm-lwgVN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.152.0/24
Signature Algorithm: sha256WithRSAEncryption
38:2c:56:47:19:d9:e4:90:97:ac:5c:7c:9f:9a:dc:15:bd:50:
14:40:52:43:7d:cf:9a:29:00:68:10:6d:a0:c9:16:e7:b6:7e:
cd:7a:73:76:62:d1:61:cf:4e:c1:10:fd:26:36:06:1b:0c:26:
0b:09:a0:f5:07:3a:80:59:41:a3:3a:71:c3:70:01:26:0f:00:
d9:b0:30:0c:4d:5c:9e:b0:35:f3:6a:65:ed:7c:eb:58:f3:0d:
9e:a5:8e:10:2f:f6:e0:77:ae:ce:ca:df:a9:a8:f6:31:f9:86:
e2:a9:b2:19:28:4d:c5:68:39:a2:7e:d4:6f:03:bb:43:ea:58:
91:25:3f:67:48:c4:ad:8c:e2:f6:5d:a0:7c:cf:36:d4:86:e4:
02:43:04:cc:40:97:93:54:86:fd:7b:2b:0f:b4:86:46:b1:ef:
14:b8:4b:45:4a:5a:8d:f4:1a:1a:01:76:ff:ec:ad:42:b1:54:
4a:53:3d:2d:93:0a:75:fe:ee:d2:a6:3b:ac:6d:8f:ff:52:71:
48:17:b0:2e:77:c0:60:a7:2c:c2:a2:24:27:b8:2d:e9:c8:8d:
cb:6c:a5:0e:7f:b1:de:5b:eb:e7:e3:ec:28:03:a1:19:34:f0:
f9:71:29:62:5b:ec:81:a2:47:3a:cd:07:0d:98:c3:08:09:dd:
cb:8c:01:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZQqYkfD3FRSMVhtxHtRoqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYjgzZTk5YmY3MjU0Zjk0ODA1N2E1ZTk4MWJlNmZhNWMy
MDU0ZGQwHhcNMjMwMjE0MTYwMjEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGI3MjhjMmY0MjA2MjY0Yjc0ZjM2NTFlM2RjMTVjMWI3NGM1ZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0RlFgZkt2GsmvbgRx1W4qCTsqi/
l7LktFpM/fvNj0uXg/wwk77JXAiHAwke3w7Wz30WJigN5c88iMqKtCcBBeZGfzYb
Geh8j6ps/IUyvrxnNFcKLEaI5xKpN+CFb+S5ZC0GUwvnhd1ypEwJf/Um7uQ63zih
jsB4j7vuHnFzQ04WjhaPoqyydKyJxmBvDjYCysbcIye0PxiPa7pt9TJQuGWQggeT
t6uw3lypGIKvGJEB+Y7NekrPJOgluAQttgwRVWHkM7p9Y921AasSrtQyUU8Y91Hj
NGUoAkdQWwaMv3xAmF8lTMR3xGbnBAfxvls8F4P9KDAeVuDqXtn1bgfqrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF23KML0IGJkt082UePcFcG3TF6vMB8GA1UdIwQY
MBaAFL24Ppm/clT5SAV6Xpgb5vpcIFTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEt
ZTQ5NWFhYTBjYWMwLzEvWGJjb3d2UWdZbVMzVHpaUjQ5d1Z3YmRNWHE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81ZTIwNWEtZWMwYS00ZmVlLWFlZjEtZTQ5NWFhYTBjYWMw
LzEvdmJnLW1iOXlWUGxJQlhwZW1Cdm0tbHdnVk4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV6YMA0G
CSqGSIb3DQEBCwUAA4IBAQA4LFZHGdnkkJesXHyfmtwVvVAUQFJDfc+aKQBoEG2g
yRbntn7NenN2YtFhz07BEP0mNgYbDCYLCaD1BzqAWUGjOnHDcAEmDwDZsDAMTVye
sDXzamXtfOtY8w2epY4QL/bgd67Oyt+pqPYx+YbiqbIZKE3FaDmiftRvA7tD6liR
JT9nSMStjOL2XaB8zzbUhuQCQwTMQJeTVIb9eysPtIZGse8UuEtFSlqN9BoaAXb/
7K1CsVRKUz0tkwp1/u7SpjusbY//UnFIF7Aud8BgpyzCoiQnuC3pyI3LbKUOf7He
W+vn4+woA6EZNPD5cSliW+yBokc6zQcNmMMICd3LjAHo
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:14 2024 by rpki-client on console-ams.rpki-client.org