Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/9fsAmj8zMmQF3xFpEMnLTBlCtc4.roa
File: 9fsAmj8zMmQF3xFpEMnLTBlCtc4.roa (raw, json)
Hash identifier: epfzZrUel58mpRplMaqQbYtIPkOTMlDTDhxSyIAF5Ok=
Subject key identifier: F5:FB:00:9A:3F:33:32:64:05:DF:11:69:10:C9:CB:4C:19:42:B5:CE
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018FB88EE15628EE722D5309D1D134550537
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/9fsAmj8zMmQF3xFpEMnLTBlCtc4.roa
Signing time: Mon 27 May 2024 05:38:42 +0000
ROA not before: Mon 27 May 2024 05:38:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3758
IP address blocks: 45.86.188.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jun 2024 18:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b8:8e:e1:56:28:ee:72:2d:53:09:d1:d1:34:55:05:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: May 27 05:38:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5fb009a3f33326405df116910c9cb4c1942b5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7b:19:6d:f1:55:63:c5:60:92:99:40:f9:76:
1b:25:9a:95:ae:b8:83:39:73:3d:43:5b:ad:73:7b:
bb:38:c6:9b:80:89:8a:ac:f7:bc:2f:e0:e7:74:3b:
4f:66:c7:50:c6:9c:88:9b:55:88:12:c5:e2:4e:c1:
89:d4:9a:42:37:f8:85:c9:77:52:5a:b0:c0:44:8e:
1b:48:89:72:d9:cf:0f:2c:5c:04:1e:f1:64:ec:22:
4e:82:cb:9d:d7:83:5d:c2:22:24:64:ef:23:06:02:
8e:d2:cd:6a:d6:82:8b:ce:4f:23:a0:48:a7:6b:50:
f6:25:bf:7f:85:cc:cb:b3:80:33:86:ef:41:09:6e:
25:7e:c2:48:a6:0a:5e:33:09:b6:29:d7:b7:a5:27:
fb:88:d5:56:64:2a:b0:2d:5f:49:f7:a4:ed:10:01:
e8:5e:ea:b3:ed:41:d2:b5:fd:50:81:e1:21:b4:77:
49:ca:51:0a:73:13:16:3a:5f:61:7d:ff:65:99:37:
86:52:23:7a:ce:9b:25:bb:57:70:45:db:11:4a:52:
6f:4a:6e:e7:db:29:f9:e6:df:97:d3:8d:78:84:77:
55:5b:53:24:b5:3b:91:e8:e5:65:78:48:3a:f7:77:
01:42:0a:0d:c0:ef:d3:75:c7:2a:7c:d5:e9:31:9a:
9f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FB:00:9A:3F:33:32:64:05:DF:11:69:10:C9:CB:4C:19:42:B5:CE
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/9fsAmj8zMmQF3xFpEMnLTBlCtc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.188.0/23
Signature Algorithm: sha256WithRSAEncryption
78:6d:29:31:ba:31:29:1d:82:4c:b0:9c:31:d1:dc:36:ba:2e:
62:33:69:36:76:8f:1b:34:5b:15:9b:d8:28:da:16:6b:08:d7:
96:dd:c9:34:a9:ed:7a:57:9b:6f:d9:a6:2d:4e:41:8d:b0:31:
83:1e:cc:78:fe:ba:bc:c1:19:66:9b:cd:5d:fc:66:45:03:a5:
e0:39:e8:87:b3:01:b7:f1:97:13:aa:72:1b:1b:de:fd:96:2f:
5d:4a:f2:15:81:b7:d8:be:46:00:cf:fc:81:6d:70:94:75:e9:
bc:f8:09:1b:f7:60:86:fd:be:76:35:a4:4f:9e:61:3b:94:9a:
5a:5f:d1:a6:14:29:66:ce:85:93:24:86:8c:ea:05:e0:4c:41:
06:b3:85:a8:d0:14:2c:2d:bc:21:28:9f:9f:95:7f:e5:de:f5:
8f:04:1c:7c:f8:9c:8a:b9:48:f0:64:e7:20:cd:1c:24:83:df:
70:f9:e7:93:07:d3:05:4c:97:6b:e0:14:b6:3c:1f:41:4e:cb:
2b:39:23:0a:69:a4:02:9a:ee:26:61:97:ee:9a:cf:96:7a:4a:
54:1b:5e:a6:20:66:d2:1c:be:8a:9f:10:99:ad:ea:de:b7:19:
e5:46:ad:be:ff:d8:a9:d2:8a:cd:85:3c:a5:bc:ea:01:a0:9d:
12:dd:7c:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+4juFWKO5yLVMJ0dE0VQU3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl
MTdjMjcwHhcNMjQwNTI3MDUzODQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWZiMDA5YTNmMzMzMjY0MDVkZjExNjkxMGM5Y2I0YzE5NDJiNWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXsZbfFVY8VgkplA+XYbJZqVrriD
OXM9Q1utc3u7OMabgImKrPe8L+DndDtPZsdQxpyIm1WIEsXiTsGJ1JpCN/iFyXdS
WrDARI4bSIly2c8PLFwEHvFk7CJOgsud14NdwiIkZO8jBgKO0s1q1oKLzk8joEin
a1D2Jb9/hczLs4Azhu9BCW4lfsJIpgpeMwm2Kde3pSf7iNVWZCqwLV9J96TtEAHo
Xuqz7UHStf1QgeEhtHdJylEKcxMWOl9hff9lmTeGUiN6zpslu1dwRdsRSlJvSm7n
2yn55t+X0414hHdVW1MktTuR6OVleEg693cBQgoNwO/TdccqfNXpMZqfQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPX7AJo/MzJkBd8RaRDJy0wZQrXOMB8GA1UdIwQY
MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It
ZDc4ZDU2MzFkN2Y2LzEvOWZzQW1qOHpNbVFGM3hGcEVNbkxUQmxDdGM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2
LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVa8MA0G
CSqGSIb3DQEBCwUAA4IBAQB4bSkxujEpHYJMsJwx0dw2ui5iM2k2do8bNFsVm9go
2hZrCNeW3ck0qe16V5tv2aYtTkGNsDGDHsx4/rq8wRlmm81d/GZFA6XgOeiHswG3
8ZcTqnIbG979li9dSvIVgbfYvkYAz/yBbXCUdem8+Akb92CG/b52NaRPnmE7lJpa
X9GmFClmzoWTJIaM6gXgTEEGs4Wo0BQsLbwhKJ+flX/l3vWPBBx8+JyKuUjwZOcg
zRwkg99w+eeTB9MFTJdr4BS2PB9BTssrOSMKaaQCmu4mYZfums+WekpUG16mIGbS
HL6KnxCZreretxnlRq2+/9ip0orNhTylvOoBoJ0S3Xy7
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:12:41 2025 by rpki-client