Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/auHP1IqGlP_GXBy90FuPboz2L_c.roa
File: auHP1IqGlP_GXBy90FuPboz2L_c.roa (raw, json)
Hash identifier: Av3e7jpbIvaJ+Vf6OWQDZ9VJ+myYbBFmtKdoiahkBaY=
Subject key identifier: 6A:E1:CF:D4:8A:86:94:FF:C6:5C:1C:BD:D0:5B:8F:6E:8C:F6:2F:F7
Certificate issuer: /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial: 0185708CD40662179E74C692F02FC0F3741E
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/auHP1IqGlP_GXBy90FuPboz2L_c.roa
Signing time: Mon 02 Jan 2023 03:35:55 +0000
ROA not before: Mon 02 Jan 2023 03:35:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46261
IP address blocks: 45.90.204.0/22 maxlen: 22
45.129.220.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:d4:06:62:17:9e:74:c6:92:f0:2f:c0:f3:74:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Validity
Not Before: Jan 2 03:35:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6ae1cfd48a8694ffc65c1cbdd05b8f6e8cf62ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:90:fd:20:63:37:3a:17:d9:2a:61:20:a5:50:
40:76:e8:e6:a6:e8:1e:c2:47:95:41:0d:37:85:1d:
a0:72:24:cd:7e:5f:a2:40:9b:1e:68:78:dc:f0:56:
60:15:b2:77:57:38:c0:f4:58:ef:a0:7c:84:f9:34:
55:94:b7:26:f0:db:89:e3:e5:2d:95:6d:d6:0b:5a:
d9:b5:32:17:4a:62:be:25:53:8a:87:e7:38:2a:f1:
e5:e1:76:be:6f:18:02:8b:de:d3:70:6a:36:cd:29:
e3:af:91:54:d8:46:c1:3e:6e:c8:a9:70:4b:4c:de:
d5:83:a6:2f:eb:43:f6:80:07:5d:b6:e7:c4:b0:59:
64:3d:9e:28:8b:b5:7b:80:e6:c8:9b:c5:ef:ee:35:
4f:ff:5c:ea:91:90:4d:2b:80:8a:a6:23:e4:cf:eb:
51:b7:ab:ca:0f:c5:bb:84:4e:cb:2e:43:39:b3:f1:
ce:be:06:60:b8:bf:26:aa:42:98:d8:43:13:e4:2b:
7c:33:e7:aa:ee:59:23:e2:d5:a1:01:38:b4:41:b3:
3f:1f:37:fe:da:b8:0b:85:37:da:c7:c8:54:79:98:
4c:a0:85:71:e4:10:1c:60:3e:fa:2d:09:8f:a2:97:
38:c7:e4:5a:5c:ed:37:ca:43:19:86:cc:96:7a:16:
f8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E1:CF:D4:8A:86:94:FF:C6:5C:1C:BD:D0:5B:8F:6E:8C:F6:2F:F7
X509v3 Authority Key Identifier:
keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/auHP1IqGlP_GXBy90FuPboz2L_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.204.0/22
45.129.220.0/22
Signature Algorithm: sha256WithRSAEncryption
03:49:96:46:a1:98:53:66:56:13:61:5b:ed:74:50:39:7f:a3:
b7:20:c9:8e:13:a8:dc:4a:27:37:71:ba:83:9c:3a:0c:95:fd:
09:1f:d1:8b:24:bd:43:27:0b:24:cf:6a:68:4b:48:ea:f4:b6:
99:74:70:68:35:a6:8b:de:51:42:93:98:f7:b5:48:36:34:9e:
b9:1a:52:c1:e4:68:82:ba:b0:a3:16:7f:56:3c:16:04:ca:7a:
5e:f6:1c:00:2c:9c:df:ca:53:3e:53:53:e8:00:e9:f5:4b:2f:
c8:31:ac:bd:8c:b3:7e:28:8c:dc:d7:f8:fb:6f:82:39:8f:0c:
06:14:6e:56:93:ed:a4:18:ac:67:a3:03:8c:32:79:10:e8:38:
16:0d:bc:ed:bf:dd:72:f9:86:fc:06:ab:7f:77:ca:71:a5:70:
3b:17:ac:e3:79:f9:f6:d3:f8:33:b2:f9:b4:21:4f:25:81:53:
cc:32:77:dd:95:2c:76:c9:20:dc:73:8f:09:ab:d4:17:9f:f3:
d9:7b:d2:79:50:4d:01:11:7e:b7:ed:b4:50:ea:09:14:61:d8:
60:32:33:cb:bd:9c:73:a8:87:17:81:c7:27:03:a1:21:5f:45:
50:c9:b9:12:dc:57:3a:4a:ef:51:c4:7e:11:ef:50:a9:ad:ba:
79:bb:00:58
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVwjNQGYheedMaS8C/A83QeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1MzNlZjQ2MTE2ZmQ5ZDIxYmZiNTMzZTQ0YmRlNTE3ODkw
YzI0ZGMwHhcNMjMwMTAyMDMzNTU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWUxY2ZkNDhhODY5NGZmYzY1YzFjYmRkMDViOGY2ZThjZjYyZmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJD9IGM3OhfZKmEgpVBAdujmpuge
wkeVQQ03hR2gciTNfl+iQJseaHjc8FZgFbJ3VzjA9FjvoHyE+TRVlLcm8NuJ4+Ut
lW3WC1rZtTIXSmK+JVOKh+c4KvHl4Xa+bxgCi97TcGo2zSnjr5FU2EbBPm7IqXBL
TN7Vg6Yv60P2gAddtufEsFlkPZ4oi7V7gObIm8Xv7jVP/1zqkZBNK4CKpiPkz+tR
t6vKD8W7hE7LLkM5s/HOvgZguL8mqkKY2EMT5Ct8M+eq7lkj4tWhATi0QbM/Hzf+
2rgLhTfax8hUeZhMoIVx5BAcYD76LQmPopc4x+RaXO03ykMZhsyWehb4qwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGrhz9SKhpT/xlwcvdBbj26M9i/3MB8GA1UdIwQY
MBaAFIUz70YRb9nSG/tTPkS95ReJDCTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAt
NzM5MjNkYWVmMTE0LzEvYXVIUDFJcUdsUF9HWEJ5OTBGdVBib3oyTF9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy9lMDQ3MmEtM2FkZi00M2NkLWJmMzAtNzM5MjNkYWVmMTE0
LzEvaFRQdlJoRnYyZEliLTFNLVJMM2xGNGtNSk53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVrMAwQC
LYHcMA0GCSqGSIb3DQEBCwUAA4IBAQADSZZGoZhTZlYTYVvtdFA5f6O3IMmOE6jc
Sic3cbqDnDoMlf0JH9GLJL1DJwskz2poS0jq9LaZdHBoNaaL3lFCk5j3tUg2NJ65
GlLB5GiCurCjFn9WPBYEynpe9hwALJzfylM+U1PoAOn1Sy/IMay9jLN+KIzc1/j7
b4I5jwwGFG5Wk+2kGKxnowOMMnkQ6DgWDbztv91y+Yb8Bqt/d8pxpXA7F6zjefn2
0/gzsvm0IU8lgVPMMnfdlSx2ySDcc48Jq9QXn/PZe9J5UE0BEX637bRQ6gkUYdhg
MjPLvZxzqIcXgccnA6EhX0VQybkS3Fc6Su9RxH4R71Cprbp5uwBY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:24 2024 by rpki-client on console-fra.rpki-client.org