Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/8Jt_S_qfCRhdmljBNZj7Ju2kmHs.roa
File: 8Jt_S_qfCRhdmljBNZj7Ju2kmHs.roa (raw, json)
Hash identifier: kjHKDqkTHYh1WIqbxc27+VIhtnhYXoAjKeEK7/zY9Ao=
Subject key identifier: F0:9B:7F:4B:FA:9F:09:18:5D:9A:58:C1:35:98:FB:26:ED:A4:98:7B
Certificate issuer: /CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Certificate serial: 018AA2EB15CAAEFD9BFC841AF8691B04026D
Authority key identifier: 84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/8Jt_S_qfCRhdmljBNZj7Ju2kmHs.roa
Signing time: Sun 17 Sep 2023 11:33:50 +0000
ROA not before: Sun 17 Sep 2023 11:33:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216312
IP address blocks: 45.90.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a2:eb:15:ca:ae:fd:9b:fc:84:1a:f8:69:1b:04:02:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84c17102b6e92e292ec8acaf659e3c290a8d0b68
Validity
Not Before: Sep 17 11:33:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f09b7f4bfa9f09185d9a58c13598fb26eda4987b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:f2:85:bf:70:05:1d:d4:4e:2f:d4:46:ab:
bb:b0:f2:ab:30:2d:83:d3:7c:c9:fb:96:26:ff:74:
9b:e1:a2:80:04:95:1a:6b:32:c4:a6:8b:50:c1:80:
e1:e1:bb:87:cd:91:e4:a7:58:5d:1c:c6:4f:21:63:
1f:77:24:aa:6f:fe:fc:50:83:fb:66:6f:8d:39:5e:
06:40:c8:78:22:e7:fb:4b:fd:26:a6:d0:f9:5f:13:
0b:88:28:fd:be:89:25:80:f3:51:94:f6:50:f7:ed:
67:f7:cc:6c:4f:7b:ff:5a:d7:ca:a9:50:22:d1:bb:
e4:57:ca:78:8f:91:ad:38:fb:6a:f8:8a:a2:5d:a1:
da:11:1c:f2:04:1a:ed:47:c9:87:20:99:7d:53:78:
d0:81:bf:d2:c8:8a:52:d9:48:05:77:93:38:79:d8:
99:74:04:fc:b6:7e:bd:7f:10:bf:c7:5f:47:fe:ed:
96:03:82:75:4f:54:c2:cc:e6:36:b4:1e:06:0d:37:
3e:8e:d7:c7:f4:94:03:16:fb:3c:9b:cc:d2:29:f1:
12:ac:5b:e2:83:f0:50:0e:8f:1f:e7:d3:96:a3:96:
d2:07:ec:1b:a5:1a:d4:5c:3f:d1:70:bc:5b:f5:c1:
99:66:bb:37:db:49:65:33:a8:0c:ca:7c:14:dd:b8:
d8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:9B:7F:4B:FA:9F:09:18:5D:9A:58:C1:35:98:FB:26:ED:A4:98:7B
X509v3 Authority Key Identifier:
keyid:84:C1:71:02:B6:E9:2E:29:2E:C8:AC:AF:65:9E:3C:29:0A:8D:0B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hMFxArbpLikuyKyvZZ48KQqNC2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/8Jt_S_qfCRhdmljBNZj7Ju2kmHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/6d569d-c44b-4c34-a159-d583f9a66e3b/1/hMFxArbpLikuyKyvZZ48KQqNC2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.81.0/24
Signature Algorithm: sha256WithRSAEncryption
44:0c:b0:a6:1c:71:e7:43:5a:80:db:38:0a:83:b1:df:b1:6e:
b8:1d:c9:78:bf:3d:8b:2f:98:60:81:f0:a4:f1:d9:ba:3f:37:
ad:34:60:60:0a:47:47:c6:b4:fc:19:e0:2f:78:ca:61:6b:30:
0b:cb:c7:51:d2:47:57:71:b8:6c:de:aa:14:ee:c2:53:3d:29:
30:e2:b4:0e:55:b4:61:9d:e8:31:3a:16:93:0d:3e:58:ab:e9:
61:1b:7a:33:87:49:f6:37:7f:df:3b:57:6b:48:2c:dd:ad:fd:
81:70:2f:cb:a4:cb:d0:ac:de:c6:d6:4e:5d:16:1f:d1:82:7d:
26:7f:9c:54:0a:92:40:1b:bf:05:ef:2a:05:30:3a:04:ee:28:
88:40:03:9e:25:0f:a1:3d:3f:70:97:2f:cc:a5:48:af:73:25:
08:c8:d9:2a:48:e3:b5:f2:50:a8:c6:aa:74:5a:e4:72:63:22:
b3:0f:e1:a0:eb:38:4e:9f:a3:9b:69:c9:5d:92:99:71:10:60:
34:4d:e7:b9:88:fb:30:43:4a:28:9e:9b:52:2c:cb:82:67:f9:
e9:26:91:c7:51:28:74:ec:63:3f:88:b5:2b:6e:c4:73:d5:e9:
81:9f:de:e4:a0:dd:6b:a3:c4:33:ec:3f:4c:64:57:6e:67:13:
d9:c1:c6:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYqi6xXKrv2b/IQa+GkbBAJtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YzE3MTAyYjZlOTJlMjkyZWM4YWNhZjY1OWUzYzI5MGE4
ZDBiNjgwHhcNMjMwOTE3MTEzMzUwWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDliN2Y0YmZhOWYwOTE4NWQ5YTU4YzEzNTk4ZmIyNmVkYTQ5ODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/7yhb9wBR3UTi/URqu7sPKrMC2D
03zJ+5Ym/3Sb4aKABJUaazLEpotQwYDh4buHzZHkp1hdHMZPIWMfdySqb/78UIP7
Zm+NOV4GQMh4Iuf7S/0mptD5XxMLiCj9voklgPNRlPZQ9+1n98xsT3v/WtfKqVAi
0bvkV8p4j5GtOPtq+IqiXaHaERzyBBrtR8mHIJl9U3jQgb/SyIpS2UgFd5M4ediZ
dAT8tn69fxC/x19H/u2WA4J1T1TCzOY2tB4GDTc+jtfH9JQDFvs8m8zSKfESrFvi
g/BQDo8f59OWo5bSB+wbpRrUXD/RcLxb9cGZZrs320llM6gMynwU3bjYAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPCbf0v6nwkYXZpYwTWY+ybtpJh7MB8GA1UdIwQY
MBaAFITBcQK26S4pLsisr2WePCkKjQtoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC82ZDU2OWQtYzQ0Yi00YzM0LWExNTkt
ZDU4M2Y5YTY2ZTNiLzEvOEp0X1NfcWZDUmhkbWxqQk5aajdKdTJrbUhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC82ZDU2OWQtYzQ0Yi00YzM0LWExNTktZDU4M2Y5YTY2ZTNi
LzEvaE1GeEFyYnBMaWt1eUt5dlpaNDhLUXFOQzJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVpRMA0G
CSqGSIb3DQEBCwUAA4IBAQBEDLCmHHHnQ1qA2zgKg7HfsW64Hcl4vz2LL5hggfCk
8dm6PzetNGBgCkdHxrT8GeAveMphazALy8dR0kdXcbhs3qoU7sJTPSkw4rQOVbRh
negxOhaTDT5Yq+lhG3ozh0n2N3/fO1drSCzdrf2BcC/LpMvQrN7G1k5dFh/Rgn0m
f5xUCpJAG78F7yoFMDoE7iiIQAOeJQ+hPT9wly/MpUivcyUIyNkqSOO18lCoxqp0
WuRyYyKzD+Gg6zhOn6ObacldkplxEGA0Tee5iPswQ0oonptSLMuCZ/npJpHHUSh0
7GM/iLUrbsRz1emBn97koN1ro8Qz7D9MZFduZxPZwcZB
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:40 2024 by rpki-client on console-fra.rpki-client.org