Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/SB9skrgOxZ02VTTqdvplEkMKZoY.roa
File: SB9skrgOxZ02VTTqdvplEkMKZoY.roa (raw, json)
Hash identifier: fhkIhklGcx0j7nQEvzHSXhSR4IZ17w7NsV/MqTIGayA=
Subject key identifier: 48:1F:6C:92:B8:0E:C5:9D:36:55:34:EA:76:FA:65:12:43:0A:66:86
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 018B1E2A14AA690175240309B561A845FF12
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/SB9skrgOxZ02VTTqdvplEkMKZoY.roa
Signing time: Wed 11 Oct 2023 09:55:56 +0000
ROA not before: Wed 11 Oct 2023 09:55:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5511
IP address blocks: 45.139.228.0/24 maxlen: 24
45.139.230.0/24 maxlen: 24
45.131.228.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:2a:14:aa:69:01:75:24:03:09:b5:61:a8:45:ff:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Oct 11 09:55:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=481f6c92b80ec59d365534ea76fa6512430a6686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:12:1d:68:7d:2b:f1:c9:35:4e:b4:53:11:d1:
c2:df:02:c4:80:3e:67:a3:2c:a1:e8:8f:55:5e:59:
b3:06:50:90:40:18:57:e4:4f:52:7d:28:86:2e:c1:
79:60:9a:b1:bf:6b:cc:fc:68:01:54:2d:1c:d1:b6:
ab:07:10:e8:35:07:be:fb:7e:83:93:8a:63:f5:38:
c0:8c:86:0d:62:ef:7a:b7:38:be:07:64:34:69:96:
a9:70:16:4e:f0:c6:bf:ca:f7:63:28:93:3c:13:9e:
e9:51:70:0c:cc:7f:7d:f2:8e:7a:f6:24:d4:50:d9:
64:d3:07:b6:da:59:c2:45:01:54:ef:51:fc:78:38:
57:98:7f:58:cb:2e:38:a5:b3:74:d5:23:91:04:3d:
58:ca:2a:81:55:6d:37:56:5a:66:2e:62:fd:4b:3c:
0b:72:8e:fb:87:f4:f4:41:2e:a8:98:84:da:bc:1e:
d7:c6:0a:e4:64:57:a9:d7:65:49:d3:9d:9e:4f:f4:
31:47:2b:0e:be:77:b8:fb:88:f5:c8:c7:e2:b3:4b:
e0:49:ba:75:f9:2b:82:43:9e:7e:d7:8f:3c:fe:89:
e1:e0:95:76:73:58:d9:77:25:c1:0f:9a:ff:00:de:
63:64:bd:1b:64:44:95:69:a4:b8:4e:a1:63:d2:a4:
ec:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:1F:6C:92:B8:0E:C5:9D:36:55:34:EA:76:FA:65:12:43:0A:66:86
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/SB9skrgOxZ02VTTqdvplEkMKZoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.228.0/22
45.139.228.0/24
45.139.230.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:82:3d:e8:81:d4:bd:92:47:9c:93:cf:3d:72:93:75:3a:62:
ca:b5:e9:24:12:31:5e:1c:de:32:ba:4a:13:e3:28:c6:c9:7e:
36:6d:60:8e:d5:02:39:34:44:1f:28:70:17:70:08:84:90:c9:
2d:61:7c:89:5c:bc:bf:22:4d:bb:07:89:5f:9f:63:78:7b:ac:
95:b4:1e:b0:3f:a9:aa:94:6e:49:6c:e1:4c:96:29:eb:5b:a3:
c9:90:d8:af:23:fe:65:bd:70:59:47:fb:c4:6b:e6:63:f3:19:
e2:2e:1c:0e:f1:24:b0:04:25:f8:8d:1c:e3:1f:7e:e5:50:ea:
81:13:78:27:4a:cf:89:ab:4f:90:0a:1e:0e:06:fa:ed:93:96:
52:4d:f9:df:84:a8:f2:f2:52:e0:88:24:53:68:5a:67:ca:c4:
90:85:d4:d3:5d:f2:5e:04:74:7b:af:39:67:11:4d:6b:6f:bd:
05:11:ac:b5:25:80:58:95:e4:5c:3c:55:1d:96:28:74:0d:9f:
9e:18:48:61:65:cc:40:2b:c2:29:74:23:6b:fd:8e:27:47:d7:
09:5c:85:d3:b0:fb:95:aa:e5:d3:a6:c2:b9:7d:e0:ac:27:e8:
44:72:57:1f:0e:b6:c9:e6:49:b0:69:c8:66:c1:32:43:d1:11:
7f:8c:b0:f5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYseKhSqaQF1JAMJtWGoRf8SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl
MTdjMjcwHhcNMjMxMDExMDk1NTU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODFmNmM5MmI4MGVjNTlkMzY1NTM0ZWE3NmZhNjUxMjQzMGE2Njg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRIdaH0r8ck1TrRTEdHC3wLEgD5n
oyyh6I9VXlmzBlCQQBhX5E9SfSiGLsF5YJqxv2vM/GgBVC0c0barBxDoNQe++36D
k4pj9TjAjIYNYu96tzi+B2Q0aZapcBZO8Ma/yvdjKJM8E57pUXAMzH998o569iTU
UNlk0we22lnCRQFU71H8eDhXmH9Yyy44pbN01SORBD1YyiqBVW03VlpmLmL9SzwL
co77h/T0QS6omITavB7XxgrkZFep12VJ052eT/QxRysOvne4+4j1yMfis0vgSbp1
+SuCQ55+1488/onh4JV2c1jZdyXBD5r/AN5jZL0bZESVaaS4TqFj0qTspwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFEgfbJK4DsWdNlU06nb6ZRJDCmaGMB8GA1UdIwQY
MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It
ZDc4ZDU2MzFkN2Y2LzEvU0I5c2tyZ094WjAyVlRUcWR2cGxFa01LWm9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2
LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLYPkAwQA
LYvkAwQALYvmMA0GCSqGSIb3DQEBCwUAA4IBAQDQgj3ogdS9kkeck889cpN1OmLK
tekkEjFeHN4yukoT4yjGyX42bWCO1QI5NEQfKHAXcAiEkMktYXyJXLy/Ik27B4lf
n2N4e6yVtB6wP6mqlG5JbOFMlinrW6PJkNivI/5lvXBZR/vEa+Zj8xniLhwO8SSw
BCX4jRzjH37lUOqBE3gnSs+Jq0+QCh4OBvrtk5ZSTfnfhKjy8lLgiCRTaFpnysSQ
hdTTXfJeBHR7rzlnEU1rb70FEay1JYBYleRcPFUdlih0DZ+eGEhhZcxAK8IpdCNr
/Y4nR9cJXIXTsPuVquXTpsK5feCsJ+hEclcfDrbJ5kmwachmwTJD0RF/jLD1
-----END CERTIFICATE-----
Generated at Mon Nov 27 13:38:04 2023 by rpki-client on console-fra.rpki-client.org