Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/cVBMJGlQ8uWKpXg7MfRtd_-q8-8.roa
File: cVBMJGlQ8uWKpXg7MfRtd_-q8-8.roa (raw, json)
Hash identifier: 0idjdgKDPB6vrpt7Spv8X/G9dBfIg35jwsNq2uHHmKE=
Subject key identifier: 71:50:4C:24:69:50:F2:E5:8A:A5:78:3B:31:F4:6D:77:FF:AA:F3:EF
Certificate issuer: /CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Certificate serial: 0185715E55D84EB0B9E301329B59D1CBCF43
Authority key identifier: 8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/cVBMJGlQ8uWKpXg7MfRtd_-q8-8.roa
Signing time: Mon 02 Jan 2023 07:24:45 +0000
ROA not before: Mon 02 Jan 2023 07:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49447
IP address blocks: 45.9.148.0/24 maxlen: 24
45.9.150.0/23 maxlen: 23
45.9.149.0/24 maxlen: 24
2a0e:fa00:1::/48 maxlen: 48
2a0e:fa00::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:55:d8:4e:b0:b9:e3:01:32:9b:59:d1:cb:cf:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f084f3a80b4a1df4811642aab8d7951639a2e58
Validity
Not Before: Jan 2 07:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71504c246950f2e58aa5783b31f46d77ffaaf3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4e:d6:ba:db:d0:93:04:c6:0a:65:ed:16:29:
8d:f1:b0:aa:59:3d:9e:47:8d:b4:f4:20:6c:60:0a:
4d:f8:6f:4d:92:35:91:ee:7e:8f:82:2b:dc:5e:35:
32:d7:84:70:13:8f:d9:f0:2e:b3:e7:60:30:0a:0f:
9a:19:d1:c0:45:a2:8d:d7:c1:71:b8:a2:95:a6:90:
c2:71:3f:f9:45:c3:32:0a:54:c1:d6:43:9b:54:6b:
97:c0:58:52:c1:55:d0:9d:47:db:c9:2b:99:af:00:
bd:b6:5c:14:42:e1:f4:0c:87:b7:40:75:76:b1:bc:
4b:da:78:3a:8a:7b:24:2b:24:12:0c:fb:fc:4f:aa:
84:33:cb:cb:30:f1:ae:6a:1c:10:dd:a2:92:e4:37:
ce:59:b3:1b:8c:91:b5:49:98:64:37:b5:7d:4c:23:
3c:b8:0a:ac:81:21:b8:41:eb:62:cb:e6:21:ef:82:
1a:0d:1c:aa:47:d8:09:b1:43:c8:11:0a:7f:de:eb:
13:f3:2f:81:b0:8f:d0:a4:6b:f5:8a:4d:42:61:e6:
77:17:7d:c2:13:a9:dd:93:a3:11:2e:3a:ef:14:c4:
1e:8e:16:b0:d7:9f:2b:3b:5b:c8:af:f1:a0:f1:1c:
f6:e2:df:82:c2:8c:1b:01:39:7f:18:21:e3:f9:3a:
6f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:50:4C:24:69:50:F2:E5:8A:A5:78:3B:31:F4:6D:77:FF:AA:F3:EF
X509v3 Authority Key Identifier:
keyid:8F:08:4F:3A:80:B4:A1:DF:48:11:64:2A:AB:8D:79:51:63:9A:2E:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwhPOoC0od9IEWQqq415UWOaLlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/cVBMJGlQ8uWKpXg7MfRtd_-q8-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8c5f5f-a1b8-4a2c-9b3c-b0f6ccd46387/1/jwhPOoC0od9IEWQqq415UWOaLlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.148.0/22
IPv6:
2a0e:fa00::/47
Signature Algorithm: sha256WithRSAEncryption
6a:01:f5:a4:46:41:19:66:92:2f:28:ce:c8:bd:f8:42:f4:30:
05:c8:25:cd:ce:f6:fc:f0:a0:2a:04:d8:b7:c7:b3:c4:3a:90:
56:5f:eb:0b:e2:56:19:84:35:bb:34:d7:66:86:7b:a1:15:b7:
28:6f:5c:2e:04:48:80:46:70:bc:94:8e:6c:3a:bb:76:01:42:
a8:ad:19:0e:78:f2:36:dc:b7:26:f9:3f:2d:7c:9b:cc:d0:9a:
a4:1a:7b:e9:be:09:d5:3e:f5:af:06:e9:d9:1b:b9:48:bc:90:
e0:94:6b:98:5b:6b:50:82:4c:86:a4:e4:44:0e:16:91:40:4d:
48:c6:66:99:47:4c:7c:ff:39:d6:78:1c:d9:cf:c6:ce:19:30:
1a:18:89:9b:5b:d5:57:1f:3f:e7:27:ef:37:a3:a3:d4:21:34:
d0:07:92:f2:85:bb:b4:c7:23:43:cf:aa:d1:ca:e2:1b:fc:a9:
c6:fc:68:63:e6:e3:5a:88:8f:b6:80:09:24:a0:3e:26:53:1d:
cc:84:b8:61:f5:4e:c2:83:3a:ab:83:b6:a6:9a:66:88:f3:26:
d4:8e:5a:37:c5:f1:1a:d5:ad:ec:b7:d0:ba:c2:25:20:5e:6b:
04:8c:a8:71:8b:9a:6e:e6:2e:9c:3d:c0:0f:5a:48:d8:f4:ee:
21:4d:12:df
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVxXlXYTrC54wEym1nRy89DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMDg0ZjNhODBiNGExZGY0ODExNjQyYWFiOGQ3OTUxNjM5
YTJlNTgwHhcNMjMwMTAyMDcyNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTUwNGMyNDY5NTBmMmU1OGFhNTc4M2IzMWY0NmQ3N2ZmYWFmM2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr07WutvQkwTGCmXtFimN8bCqWT2e
R4209CBsYApN+G9NkjWR7n6PgivcXjUy14RwE4/Z8C6z52AwCg+aGdHARaKN18Fx
uKKVppDCcT/5RcMyClTB1kObVGuXwFhSwVXQnUfbySuZrwC9tlwUQuH0DIe3QHV2
sbxL2ng6inskKyQSDPv8T6qEM8vLMPGuahwQ3aKS5DfOWbMbjJG1SZhkN7V9TCM8
uAqsgSG4Qetiy+Yh74IaDRyqR9gJsUPIEQp/3usT8y+BsI/QpGv1ik1CYeZ3F33C
E6ndk6MRLjrvFMQejhaw158rO1vIr/Gg8Rz24t+CwowbATl/GCHj+TpvqwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHFQTCRpUPLliqV4OzH0bXf/qvPvMB8GA1UdIwQY
MBaAFI8ITzqAtKHfSBFkKquNeVFjmi5YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandoUE9vQzBvZDlJRVdRcXE0MTVVV09hTGxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS84YzVmNWYtYTFiOC00YTJjLTliM2Mt
YjBmNmNjZDQ2Mzg3LzEvY1ZCTUpHbFE4dVdLcFhnN01mUnRkXy1xOC04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS84YzVmNWYtYTFiOC00YTJjLTliM2MtYjBmNmNjZDQ2Mzg3
LzEvandoUE9vQzBvZDlJRVdRcXE0MTVVV09hTGxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLQmUMA8E
AgACMAkDBwEqDvoAAAAwDQYJKoZIhvcNAQELBQADggEBAGoB9aRGQRlmki8ozsi9
+EL0MAXIJc3O9vzwoCoE2LfHs8Q6kFZf6wviVhmENbs012aGe6EVtyhvXC4ESIBG
cLyUjmw6u3YBQqitGQ548jbctyb5Py18m8zQmqQae+m+CdU+9a8G6dkbuUi8kOCU
a5hba1CCTIak5EQOFpFATUjGZplHTHz/OdZ4HNnPxs4ZMBoYiZtb1VcfP+cn7zej
o9QhNNAHkvKFu7THI0PPqtHK4hv8qcb8aGPm41qIj7aACSSgPiZTHcyEuGH1TsKD
OquDtqaaZojzJtSOWjfF8RrVrey30LrCJSBeawSMqHGLmm7mLpw9wA9aSNj07iFN
Et8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:04 2024 by rpki-client on console-fra.rpki-client.org