Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/gf5rQ2hTfbZvXll6_bAPUctDl50.roa
File: gf5rQ2hTfbZvXll6_bAPUctDl50.roa (raw, json)
Hash identifier: /1hkDgBbXOOeognOoCgTBFbDjjca4laLirXgLqrEYyc=
Subject key identifier: 81:FE:6B:43:68:53:7D:B6:6F:5E:59:7A:FD:B0:0F:51:CB:43:97:9D
Certificate issuer: /CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Certificate serial: 018B98209CB977DB326B449B6B7D05FCFEF4
Authority key identifier: 20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/gf5rQ2hTfbZvXll6_bAPUctDl50.roa
Signing time: Sat 04 Nov 2023 02:19:15 +0000
ROA not before: Sat 04 Nov 2023 02:19:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209784
IP address blocks: 45.148.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:98:20:9c:b9:77:db:32:6b:44:9b:6b:7d:05:fc:fe:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2078baee6b6ec5425a16b1fc00c52c30ed95a3f0
Validity
Not Before: Nov 4 02:19:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81fe6b4368537db66f5e597afdb00f51cb43979d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ca:9b:17:25:eb:1b:da:c8:3e:8f:71:e0:7d:
07:3e:92:bb:aa:11:e0:2e:d5:af:ab:bb:35:5e:98:
83:84:77:81:02:ab:19:01:6f:10:ce:c4:60:8e:d8:
ce:26:31:23:7f:82:cc:d5:e2:f1:f0:70:16:bf:a5:
1a:92:8a:3f:84:fa:0d:7a:0c:e4:a9:a9:0f:29:5e:
16:1f:84:a9:1c:91:ba:75:1f:12:7a:d5:47:f0:47:
0e:e9:cb:c1:b6:e8:8d:30:6f:8b:54:b1:6d:e3:ba:
ec:7f:c7:05:a5:53:28:fe:33:29:90:ab:be:4b:0a:
97:38:62:3c:b7:e8:1a:f0:53:ef:24:c4:23:94:6a:
23:fe:97:55:7c:c3:d2:19:3a:6c:17:f4:60:14:4d:
f5:6d:c7:fb:a5:ed:b0:f3:77:65:ff:5f:bf:ff:e1:
99:84:4f:89:34:4e:0e:74:18:16:28:af:eb:b1:3c:
68:51:19:32:08:29:52:9b:49:71:0a:0a:c4:e7:cb:
60:99:e8:d4:cd:d1:e0:23:40:6c:b5:1a:49:c3:e2:
44:d8:2b:d6:c6:e5:b6:e4:88:29:ec:cc:6a:42:31:
4e:d7:43:17:9b:7d:af:71:be:71:a0:e2:9f:a7:9f:
e3:36:48:bf:25:87:d4:48:08:a0:32:29:aa:8b:19:
03:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FE:6B:43:68:53:7D:B6:6F:5E:59:7A:FD:B0:0F:51:CB:43:97:9D
X509v3 Authority Key Identifier:
keyid:20:78:BA:EE:6B:6E:C5:42:5A:16:B1:FC:00:C5:2C:30:ED:95:A3:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IHi67mtuxUJaFrH8AMUsMO2Vo_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/gf5rQ2hTfbZvXll6_bAPUctDl50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/b182bc-bc32-4e2f-bad7-ca51fb408901/1/IHi67mtuxUJaFrH8AMUsMO2Vo_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.211.0/24
Signature Algorithm: sha256WithRSAEncryption
41:73:3d:fe:1a:ad:d5:7c:f9:25:e4:95:0e:ef:4b:8d:74:14:
78:be:8c:57:ba:50:16:fd:ba:b8:e8:72:1e:ae:b2:43:a6:38:
84:b0:30:68:58:84:62:cc:c1:ce:bf:e2:f4:2b:12:dd:fe:30:
e5:4c:d8:eb:1e:23:d3:79:c4:9b:e6:0b:68:44:98:ab:7c:d8:
aa:d2:ca:06:94:be:19:19:5e:82:6c:5d:64:65:8f:b4:2e:ca:
d7:03:02:aa:7d:bc:4f:43:fe:5b:2e:4c:38:39:6a:14:c6:25:
f8:fc:dd:f1:6d:d7:54:13:f2:2c:fa:0f:35:ff:e1:2a:e9:aa:
c3:0e:23:d9:52:0f:00:24:cd:d2:97:c1:26:59:fc:de:64:34:
d8:b4:b9:b0:5e:ba:cb:a0:ad:a1:ab:58:9b:ac:6f:47:fc:ee:
05:27:3e:7c:6f:d8:c2:f2:57:7e:56:06:82:c3:6c:44:83:a9:
6a:2b:71:7e:59:61:31:dd:be:c0:f2:66:e4:e1:e4:cf:59:be:
46:da:bf:b5:d4:c6:fe:d1:02:a4:53:4f:e0:8e:a4:67:f7:07:
84:15:73:19:43:67:1f:94:ed:47:91:15:77:4e:42:a4:5f:53:
56:ec:ed:a2:f8:f4:a5:e4:c2:88:99:c4:0b:b2:38:ec:3c:27:
a2:ae:e5:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuYIJy5d9sya0Sba30F/P70MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNzhiYWVlNmI2ZWM1NDI1YTE2YjFmYzAwYzUyYzMwZWQ5
NWEzZjAwHhcNMjMxMTA0MDIxOTE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MWZlNmI0MzY4NTM3ZGI2NmY1ZTU5N2FmZGIwMGY1MWNiNDM5NzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcqbFyXrG9rIPo9x4H0HPpK7qhHg
LtWvq7s1XpiDhHeBAqsZAW8QzsRgjtjOJjEjf4LM1eLx8HAWv6Uakoo/hPoNegzk
qakPKV4WH4SpHJG6dR8SetVH8EcO6cvBtuiNMG+LVLFt47rsf8cFpVMo/jMpkKu+
SwqXOGI8t+ga8FPvJMQjlGoj/pdVfMPSGTpsF/RgFE31bcf7pe2w83dl/1+//+GZ
hE+JNE4OdBgWKK/rsTxoURkyCClSm0lxCgrE58tgmejUzdHgI0BstRpJw+JE2CvW
xuW25Igp7MxqQjFO10MXm32vcb5xoOKfp5/jNki/JYfUSAigMimqixkD4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIH+a0NoU322b15Zev2wD1HLQ5edMB8GA1UdIwQY
MBaAFCB4uu5rbsVCWhax/ADFLDDtlaPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDct
Y2E1MWZiNDA4OTAxLzEvZ2Y1clEyaFRmYlp2WGxsNl9iQVBVY3REbDUwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9iMTgyYmMtYmMzMi00ZTJmLWJhZDctY2E1MWZiNDA4OTAx
LzEvSUhpNjdtdHV4VUphRnJIOEFNVXNNTzJWb19BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZTTMA0G
CSqGSIb3DQEBCwUAA4IBAQBBcz3+Gq3VfPkl5JUO70uNdBR4voxXulAW/bq46HIe
rrJDpjiEsDBoWIRizMHOv+L0KxLd/jDlTNjrHiPTecSb5gtoRJirfNiq0soGlL4Z
GV6CbF1kZY+0LsrXAwKqfbxPQ/5bLkw4OWoUxiX4/N3xbddUE/Is+g81/+Eq6arD
DiPZUg8AJM3Sl8EmWfzeZDTYtLmwXrrLoK2hq1ibrG9H/O4FJz58b9jC8ld+VgaC
w2xEg6lqK3F+WWEx3b7A8mbk4eTPWb5G2r+11Mb+0QKkU0/gjqRn9weEFXMZQ2cf
lO1HkRV3TkKkX1NW7O2i+PSl5MKImcQLsjjsPCeiruUe
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:51 2024 by rpki-client on console-ams.rpki-client.org