Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/Sj9bSpowMsxrrzrZkAPJM_2Ov6U.roa
File: Sj9bSpowMsxrrzrZkAPJM_2Ov6U.roa (raw, json)
Hash identifier: WWsfmQLwlqTlpEwpt8PtUuJBOwZJjIHZsiffJa3Gyxk=
Subject key identifier: 4A:3F:5B:4A:9A:30:32:CC:6B:AF:3A:D9:90:03:C9:33:FD:8E:BF:A5
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 0187A3C35A03A8FE526D237B854124F91ECB
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/Sj9bSpowMsxrrzrZkAPJM_2Ov6U.roa
Signing time: Fri 21 Apr 2023 12:21:41 +0000
ROA not before: Fri 21 Apr 2023 12:21:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30848
IP address blocks: 45.131.76.0/23 maxlen: 24
45.90.20.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:c3:5a:03:a8:fe:52:6d:23:7b:85:41:24:f9:1e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Apr 21 12:21:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a3f5b4a9a3032cc6baf3ad99003c933fd8ebfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:c9:d9:98:4f:a6:eb:31:de:64:75:ba:c3:
6a:7a:fb:ae:0b:6a:3c:f7:b1:3e:f3:5d:fe:d5:ed:
b4:65:e7:11:a1:72:a8:14:6c:90:5c:58:a9:af:11:
3f:29:96:95:68:c2:25:ac:f5:da:ec:e0:55:78:c2:
24:cd:a3:ae:82:35:5a:f5:2e:32:68:23:dd:ae:f3:
03:2a:38:6d:4b:bc:67:d7:e9:18:86:c7:94:c7:cb:
81:54:34:3f:a9:57:b7:51:50:e4:e1:62:b7:30:13:
e1:13:5b:a2:16:e4:0c:11:6b:0d:93:2f:d6:f4:51:
93:a6:00:29:48:3a:32:fe:2a:84:b1:68:41:42:1a:
0a:e5:cf:d5:70:3c:2b:f5:15:2b:f3:19:a9:a0:3b:
97:fe:e4:10:42:c9:3f:0a:12:8c:e8:e6:a9:90:82:
19:29:25:a2:63:3e:9d:ab:bb:24:0c:a0:3e:5c:c6:
4f:17:3e:74:2a:d3:f6:f8:fa:0e:44:69:66:0c:25:
3f:b0:0d:43:d4:90:d6:10:09:45:a6:ab:d1:c1:d5:
a2:13:40:2f:c0:54:0d:2d:ad:b9:b8:1e:10:2f:8c:
77:7d:e3:bb:39:9b:2e:c6:68:57:c2:63:a4:74:b0:
af:72:dd:24:42:f1:b5:52:69:10:bc:b1:14:49:c9:
17:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3F:5B:4A:9A:30:32:CC:6B:AF:3A:D9:90:03:C9:33:FD:8E:BF:A5
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/Sj9bSpowMsxrrzrZkAPJM_2Ov6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.20.0/22
45.131.76.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:f8:22:93:af:33:4a:2c:e7:6e:d3:86:c2:13:bd:2c:10:c1:
15:09:8f:da:01:6c:eb:c5:f7:c1:74:a0:a1:e2:9c:9f:fb:c4:
d7:59:35:fb:ef:b4:c2:52:40:0c:c6:f6:1c:b7:d7:81:e6:14:
d2:27:54:e0:18:ed:62:6d:e5:30:cc:b8:64:be:dd:d2:af:63:
1a:a9:68:2a:55:b5:f0:a9:b4:63:a0:a4:e9:08:88:1c:62:c0:
57:c1:6c:bd:d5:db:90:c8:df:03:24:d6:09:73:4a:2a:6d:39:
cc:04:6b:e5:aa:83:cf:13:a3:da:59:9a:ea:6f:cb:b2:01:29:
8f:7f:42:c8:11:a2:fa:3d:c4:16:9a:7f:89:3d:d6:f4:c7:e4:
88:45:da:dd:48:b3:97:91:31:16:73:12:75:d5:f1:fe:af:30:
99:e0:5e:2f:e6:91:45:c4:49:d6:93:3e:dc:c8:ff:d7:e0:2e:
17:4a:d6:65:d5:aa:df:73:82:3c:b5:17:62:e4:62:49:1c:58:
dc:36:1b:3e:b5:f4:bb:c6:2e:23:ab:55:6c:10:33:cf:aa:5b:
85:be:32:ff:86:28:88:96:68:6e:c9:3a:f7:19:50:9d:c8:a4:
64:99:e1:7c:ad:55:1d:c3:a4:61:e5:d3:f3:32:83:b2:d4:ea:
9b:e1:82:7f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYejw1oDqP5SbSN7hUEk+R7LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2
MmU1NmUwHhcNMjMwNDIxMTIyMTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTNmNWI0YTlhMzAzMmNjNmJhZjNhZDk5MDAzYzkzM2ZkOGViZmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHDJ2ZhPpusx3mR1usNqevuuC2o8
97E+813+1e20ZecRoXKoFGyQXFiprxE/KZaVaMIlrPXa7OBVeMIkzaOugjVa9S4y
aCPdrvMDKjhtS7xn1+kYhseUx8uBVDQ/qVe3UVDk4WK3MBPhE1uiFuQMEWsNky/W
9FGTpgApSDoy/iqEsWhBQhoK5c/VcDwr9RUr8xmpoDuX/uQQQsk/ChKM6OapkIIZ
KSWiYz6dq7skDKA+XMZPFz50KtP2+PoORGlmDCU/sA1D1JDWEAlFpqvRwdWiE0Av
wFQNLa25uB4QL4x3feO7OZsuxmhXwmOkdLCvct0kQvG1UmkQvLEUSckXrwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEo/W0qaMDLMa6862ZADyTP9jr+lMB8GA1UdIwQY
MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt
YjBiMzVhMzRlMzg4LzEvU2o5YlNwb3dNc3hycnpyWmtBUEpNXzJPdjZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4
LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLVoUAwQB
LYNMMA0GCSqGSIb3DQEBCwUAA4IBAQBs+CKTrzNKLOdu04bCE70sEMEVCY/aAWzr
xffBdKCh4pyf+8TXWTX777TCUkAMxvYct9eB5hTSJ1TgGO1ibeUwzLhkvt3Sr2Ma
qWgqVbXwqbRjoKTpCIgcYsBXwWy91duQyN8DJNYJc0oqbTnMBGvlqoPPE6PaWZrq
b8uyASmPf0LIEaL6PcQWmn+JPdb0x+SIRdrdSLOXkTEWcxJ11fH+rzCZ4F4v5pFF
xEnWkz7cyP/X4C4XStZl1arfc4I8tRdi5GJJHFjcNhs+tfS7xi4jq1VsEDPPqluF
vjL/hiiIlmhuyTr3GVCdyKRkmeF8rVUdw6Rh5dPzMoOy1Oqb4YJ/
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:37 2024 by rpki-client on console-ams.rpki-client.org