Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/hUjKw6Q5AlJVea-POz682L2_738.roa
File: hUjKw6Q5AlJVea-POz682L2_738.roa (raw, json)
Hash identifier: RlC757rilgeUYXMjJrlPTAuWpgZ/6pSQQoyxVETuJP0=
Subject key identifier: 85:48:CA:C3:A4:39:02:52:55:79:AF:8F:3B:3E:BC:D8:BD:BF:EF:7F
Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Certificate serial: 01856F4B63045ADCF7288D3C652FE5512E3D
Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/hUjKw6Q5AlJVea-POz682L2_738.roa
Signing time: Sun 01 Jan 2023 21:44:49 +0000
ROA not before: Sun 01 Jan 2023 21:44:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7922
IP address blocks: 45.90.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 20 Jan 2023 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:63:04:5a:dc:f7:28:8d:3c:65:2f:e5:51:2e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27
Validity
Not Before: Jan 1 21:44:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8548cac3a43902525579af8f3b3ebcd8bdbfef7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:12:e2:d6:75:7b:93:a5:94:50:25:77:40:34:
84:fc:64:c4:19:ab:51:92:f3:1b:dc:72:33:ee:3d:
cd:83:39:04:61:b2:db:9b:26:04:10:fb:b3:ca:d1:
1d:bc:33:cb:3c:eb:b5:e0:d1:67:f8:66:fd:b7:f2:
c2:ed:e1:06:4c:cf:53:50:87:07:92:7e:67:3c:41:
6c:d7:7b:ba:40:85:77:e8:89:e4:12:7d:a1:7e:f6:
c8:76:f8:90:17:2d:85:a9:60:9d:47:38:c5:b5:70:
4c:45:25:8d:40:0e:67:4f:d8:f6:96:98:41:8d:af:
28:d8:18:46:ad:bf:49:9e:77:93:bc:a3:9c:f4:e4:
fc:46:2b:de:74:41:c9:5d:5d:f9:a6:d6:7b:02:af:
19:fb:5d:67:40:48:77:45:0f:65:47:5a:66:1e:46:
22:73:77:5d:9d:72:b2:03:82:3d:6b:e4:15:0d:7a:
51:2a:20:66:e0:cf:45:ca:6d:40:82:be:e3:e6:c7:
76:00:e5:0b:fa:23:60:83:7a:8c:ab:48:1d:2f:0a:
74:f1:bf:6f:f4:20:4f:70:38:06:9b:48:b2:19:00:
78:d1:99:f6:f5:e0:c6:b2:cc:8b:7c:7c:ad:f3:89:
1a:73:c3:6d:de:89:68:f6:50:cd:4d:4b:3a:61:21:
f1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:48:CA:C3:A4:39:02:52:55:79:AF:8F:3B:3E:BC:D8:BD:BF:EF:7F
X509v3 Authority Key Identifier:
keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/hUjKw6Q5AlJVea-POz682L2_738.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.200.0/22
Signature Algorithm: sha256WithRSAEncryption
de:5b:99:84:98:90:08:ef:d9:44:a2:86:36:79:85:24:4f:2c:
02:b6:26:0a:7a:99:14:e7:6a:7e:39:02:dc:3b:0b:bd:77:ff:
f2:68:56:2a:de:2d:e0:cf:f2:cd:0f:11:31:fc:19:f1:1f:c5:
d3:32:1e:93:f2:d2:23:aa:cf:16:ba:7a:ee:09:9e:66:15:f6:
76:6b:aa:76:3e:83:68:90:a8:fc:43:de:7d:90:96:50:18:50:
5c:7b:a9:eb:e1:31:03:99:f6:b8:85:fc:cc:ea:5c:59:da:8f:
f0:b0:ea:c6:88:ea:04:04:6c:38:12:40:d0:32:7f:4e:6b:40:
11:0f:d1:62:33:d4:05:15:93:29:e4:69:ab:c1:42:e2:45:bd:
76:f5:36:04:62:94:63:6e:b5:b2:45:58:a6:9c:64:46:25:d0:
d9:70:ab:99:75:7e:63:e3:2d:48:84:10:9b:2a:9c:5d:57:30:
99:c4:f7:52:d3:8f:a0:65:23:5f:7a:38:26:55:98:06:9d:88:
b0:d1:f5:8b:48:6b:b4:56:dc:1d:8a:35:4b:8d:1c:1c:22:2d:
a9:7b:e3:61:0b:18:c8:27:99:74:0b:9d:63:16:6f:d7:e6:9e:
87:67:70:32:6f:d6:55:e2:83:10:1c:c4:b8:bc:ac:04:58:68:
70:88:9f:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvS2MEWtz3KI08ZS/lUS49MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl
MTdjMjcwHhcNMjMwMTAxMjE0NDQ5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTQ4Y2FjM2E0MzkwMjUyNTU3OWFmOGYzYjNlYmNkOGJkYmZlZjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRLi1nV7k6WUUCV3QDSE/GTEGatR
kvMb3HIz7j3NgzkEYbLbmyYEEPuzytEdvDPLPOu14NFn+Gb9t/LC7eEGTM9TUIcH
kn5nPEFs13u6QIV36InkEn2hfvbIdviQFy2FqWCdRzjFtXBMRSWNQA5nT9j2lphB
ja8o2BhGrb9JnneTvKOc9OT8RivedEHJXV35ptZ7Aq8Z+11nQEh3RQ9lR1pmHkYi
c3ddnXKyA4I9a+QVDXpRKiBm4M9Fym1Agr7j5sd2AOUL+iNgg3qMq0gdLwp08b9v
9CBPcDgGm0iyGQB40Zn29eDGssyLfHyt84kac8Nt3olo9lDNTUs6YSHx3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIVIysOkOQJSVXmvjzs+vNi9v+9/MB8GA1UdIwQY
MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It
ZDc4ZDU2MzFkN2Y2LzEvaFVqS3c2UTVBbEpWZWEtUE96NjgyTDJfNzM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2
LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVrIMA0G
CSqGSIb3DQEBCwUAA4IBAQDeW5mEmJAI79lEooY2eYUkTywCtiYKepkU52p+OQLc
Owu9d//yaFYq3i3gz/LNDxEx/BnxH8XTMh6T8tIjqs8WunruCZ5mFfZ2a6p2PoNo
kKj8Q959kJZQGFBce6nr4TEDmfa4hfzM6lxZ2o/wsOrGiOoEBGw4EkDQMn9Oa0AR
D9FiM9QFFZMp5GmrwULiRb129TYEYpRjbrWyRVimnGRGJdDZcKuZdX5j4y1IhBCb
KpxdVzCZxPdS04+gZSNfejgmVZgGnYiw0fWLSGu0VtwdijVLjRwcIi2pe+NhCxjI
J5l0C51jFm/X5p6HZ3Ayb9ZV4oMQHMS4vKwEWGhwiJ8S
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:37 2024 by rpki-client on console-ams.rpki-client.org