Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/n8KDYl25CPgYXWF1892QqJg9YRg.roa
File: n8KDYl25CPgYXWF1892QqJg9YRg.roa (raw, json)
Hash identifier: 6W50GWQs8tUZ2E7XCsicSmqUP0TJz6KytM9FL6dqDsE=
Subject key identifier: 9F:C2:83:62:5D:B9:08:F8:18:5D:61:75:F3:DD:90:A8:98:3D:61:18
Certificate issuer: /CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Certificate serial: 01901CADDC0860F482CF03EA9541887F2491
Authority key identifier: 91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/n8KDYl25CPgYXWF1892QqJg9YRg.roa
Signing time: Sat 15 Jun 2024 16:14:34 +0000
ROA not before: Sat 15 Jun 2024 16:14:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8767
IP address blocks: 45.84.72.0/23 maxlen: 23
45.84.74.0/23 maxlen: 23
2a0e:a680::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 18 Jun 2024 07:18:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:1c:ad:dc:08:60:f4:82:cf:03:ea:95:41:88:7f:24:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d7ecf17142b3b0935f8e37b8f7d9c253f0ee19
Validity
Not Before: Jun 15 16:14:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9fc283625db908f8185d6175f3dd90a8983d6118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:42:09:75:e9:08:4d:77:19:11:65:dc:e3:
21:f0:3e:4e:2f:13:85:a6:21:c9:ab:2a:ea:ff:d1:
4a:69:32:15:13:26:c9:78:b6:01:ac:ce:de:ff:e6:
c8:21:dc:e6:ee:03:b7:e8:ce:30:9c:c6:9d:c5:1f:
ce:53:c8:19:a1:c3:77:f8:10:9c:62:31:bb:6d:6b:
e3:02:a9:35:ca:5a:a4:0f:54:b7:56:b6:dd:ed:4f:
d0:18:4a:91:10:94:c0:84:c7:bc:14:80:64:87:38:
f9:15:2e:71:b6:37:79:14:1b:e2:0e:ce:57:4f:ff:
9f:18:2c:19:9e:28:d8:32:97:61:6a:d0:46:8d:a2:
81:8e:15:77:9f:ea:2c:ca:a3:9b:4c:8d:f7:bc:f5:
f8:a8:3d:19:f3:30:33:18:d0:ca:38:69:0a:ef:8d:
6e:77:85:da:1a:ce:e7:33:42:ea:29:3e:f0:88:dc:
d7:38:84:fb:8d:1e:a0:1d:61:34:46:07:3f:81:69:
03:b4:c5:e9:bb:50:6c:20:de:3f:4b:ec:0a:e1:b9:
e6:0e:79:05:aa:48:c6:cf:8c:a5:82:ba:f9:d2:55:
e4:4f:bb:d4:de:b1:f6:07:6d:0f:4c:cf:fa:2a:bd:
ec:97:ff:2e:22:34:70:4a:19:0f:ee:6d:b3:49:7f:
e7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C2:83:62:5D:B9:08:F8:18:5D:61:75:F3:DD:90:A8:98:3D:61:18
X509v3 Authority Key Identifier:
keyid:91:D7:EC:F1:71:42:B3:B0:93:5F:8E:37:B8:F7:D9:C2:53:F0:EE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdfs8XFCs7CTX443uPfZwlPw7hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/n8KDYl25CPgYXWF1892QqJg9YRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b08e6e-0822-4224-954b-a6b1ad34e08c/1/kdfs8XFCs7CTX443uPfZwlPw7hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.72.0/22
IPv6:
2a0e:a680::/48
Signature Algorithm: sha256WithRSAEncryption
05:e4:80:3f:8c:da:b9:3f:c3:c2:fa:8b:49:65:fc:27:15:67:
e4:be:ab:16:1f:68:f4:c6:8a:1c:8b:a7:62:ca:25:34:34:e3:
bd:23:21:56:cc:a9:28:a0:5b:d0:89:1e:76:92:11:07:2e:7e:
ee:9a:e4:d7:05:63:11:17:0f:46:a2:8b:85:d9:a8:2e:39:a1:
be:e2:2f:fc:e5:8b:62:b3:be:c3:12:4e:fc:66:5a:ea:9e:15:
4d:63:a1:e8:f9:48:51:6c:4f:a0:59:62:92:42:b9:a3:d7:27:
7a:ae:63:69:24:33:95:59:34:89:ff:7e:9a:67:52:69:b9:f1:
bf:0f:ee:97:e1:8b:70:93:c9:02:4b:01:e4:02:26:d0:a7:47:
8e:70:1e:93:d4:c5:43:dc:c5:1b:b2:59:6a:70:51:5f:8d:1b:
50:4c:00:81:63:35:96:b2:72:7e:59:61:17:f0:24:ff:e5:9c:
c2:80:11:c2:1c:ad:43:12:77:1d:70:05:77:a7:90:5c:99:08:
71:20:aa:8a:de:77:7d:3f:5d:fd:8a:d1:c6:f4:4d:5d:cd:d1:
5d:c9:65:61:7f:56:07:d0:ea:6a:24:30:f9:29:ba:99:e5:a5:
ba:9b:51:ea:f6:13:35:79:bc:92:c5:60:25:6c:4b:9a:f4:bf:
44:d0:69:e2
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZAcrdwIYPSCzwPqlUGIfySRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZDdlY2YxNzE0MmIzYjA5MzVmOGUzN2I4ZjdkOWMyNTNm
MGVlMTkwHhcNMjQwNjE1MTYxNDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZmMyODM2MjVkYjkwOGY4MTg1ZDYxNzVmM2RkOTBhODk4M2Q2MTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNhCCXXpCE13GRFl3OMh8D5OLxOF
piHJqyrq/9FKaTIVEybJeLYBrM7e/+bIIdzm7gO36M4wnMadxR/OU8gZocN3+BCc
YjG7bWvjAqk1ylqkD1S3Vrbd7U/QGEqREJTAhMe8FIBkhzj5FS5xtjd5FBviDs5X
T/+fGCwZnijYMpdhatBGjaKBjhV3n+osyqObTI33vPX4qD0Z8zAzGNDKOGkK741u
d4XaGs7nM0LqKT7wiNzXOIT7jR6gHWE0Rgc/gWkDtMXpu1BsIN4/S+wK4bnmDnkF
qkjGz4ylgrr50lXkT7vU3rH2B20PTM/6Kr3sl/8uIjRwShkP7m2zSX/niwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ/Cg2JduQj4GF1hdfPdkKiYPWEYMB8GA1UdIwQY
MBaAFJHX7PFxQrOwk1+ON7j32cJT8O4ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2RmczhYRkNzN0NUWDQ0M3VQZlp3bFB3N2hrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9iMDhlNmUtMDgyMi00MjI0LTk1NGIt
YTZiMWFkMzRlMDhjLzEvbjhLRFlsMjVDUGdZWFdGMTg5MlFxSmc5WVJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9iMDhlNmUtMDgyMi00MjI0LTk1NGItYTZiMWFkMzRlMDhj
LzEva2RmczhYRkNzN0NUWDQ0M3VQZlp3bFB3N2hrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLVRIMA8E
AgACMAkDBwAqDqaAAAAwDQYJKoZIhvcNAQELBQADggEBAAXkgD+M2rk/w8L6i0ll
/CcVZ+S+qxYfaPTGihyLp2LKJTQ0470jIVbMqSigW9CJHnaSEQcufu6a5NcFYxEX
D0aii4XZqC45ob7iL/zli2KzvsMSTvxmWuqeFU1joej5SFFsT6BZYpJCuaPXJ3qu
Y2kkM5VZNIn/fppnUmm58b8P7pfhi3CTyQJLAeQCJtCnR45wHpPUxUPcxRuyWWpw
UV+NG1BMAIFjNZaycn5ZYRfwJP/lnMKAEcIcrUMSdx1wBXenkFyZCHEgqored30/
Xf2K0cb0TV3N0V3JZWF/VgfQ6mokMPkpupnlpbqbUer2EzV5vJLFYCVsS5r0v0TQ
aeI=
-----END CERTIFICATE-----
Generated at Tue Jun 18 11:00:38 2024 by rpki-client on console-fra.rpki-client.org