Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/0rSmCVG0KDprVi7D6I_DmPlVxUs.roa
File: 0rSmCVG0KDprVi7D6I_DmPlVxUs.roa (raw, json)
Hash identifier: OsSOeRIPSXggUYSlYk5ExMwdp3UMVBE2YpkLtta1jHU=
Subject key identifier: D2:B4:A6:09:51:B4:28:3A:6B:56:2E:C3:E8:8F:C3:98:F9:55:C5:4B
Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Certificate serial: 01857115441337BC77DD29D93A22A669D17A
Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/0rSmCVG0KDprVi7D6I_DmPlVxUs.roa
Signing time: Mon 02 Jan 2023 06:04:56 +0000
ROA not before: Mon 02 Jan 2023 06:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207669
IP address blocks: 45.90.240.0/23 maxlen: 23
45.90.240.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:44:13:37:bc:77:dd:29:d9:3a:22:a6:69:d1:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Validity
Not Before: Jan 2 06:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d2b4a60951b4283a6b562ec3e88fc398f955c54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:79:c4:55:dc:32:d8:e4:b7:f3:43:23:96:9f:
03:14:d2:a1:6c:d6:93:68:49:2d:af:95:a2:04:33:
85:72:8b:8a:d0:fd:fe:ab:51:9c:da:fb:06:0f:47:
37:e3:21:01:d9:e4:d4:7f:9a:f8:23:85:a4:fc:5d:
7b:63:ec:d4:3a:4f:51:47:67:28:9d:87:24:3e:03:
94:ea:d9:53:c3:22:ca:1a:2d:1e:1c:47:e6:0a:37:
c3:fb:95:40:f2:6a:6f:36:ce:66:3f:68:9e:c1:f2:
ba:50:5c:84:1f:61:0e:61:76:b5:87:8f:a1:6d:91:
da:99:be:23:99:64:50:e2:03:00:5b:e8:bb:b8:c3:
27:f7:3d:db:47:7a:b1:b4:28:ac:dd:f7:00:48:2c:
f4:3a:ac:39:53:4d:05:2c:5c:2a:01:2f:d9:7b:8c:
f4:8f:9a:a2:78:70:a4:d1:29:98:70:c9:4a:54:c1:
a4:a0:ef:ba:97:f2:bb:1c:40:0c:d1:e1:b8:66:db:
4c:76:ff:25:cc:4d:99:25:c7:7c:47:5b:66:d4:eb:
d0:49:34:f9:cf:f7:c0:7b:56:29:ec:63:83:4e:be:
d9:15:4b:25:f1:14:eb:4c:1f:6d:ae:29:4c:dc:de:
cd:0d:ab:b6:08:e3:30:c9:2d:6d:18:8a:5b:27:3d:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B4:A6:09:51:B4:28:3A:6B:56:2E:C3:E8:8F:C3:98:F9:55:C5:4B
X509v3 Authority Key Identifier:
keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/0rSmCVG0KDprVi7D6I_DmPlVxUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.240.0/22
Signature Algorithm: sha256WithRSAEncryption
95:85:73:77:f1:c0:bb:92:13:a7:cb:fd:71:23:2d:6c:4d:2d:
d6:43:3a:e8:8a:56:2f:9f:70:39:b2:f1:31:22:f1:13:7d:09:
5d:81:09:84:c5:c8:a7:b7:7a:53:bf:ab:51:06:92:d9:33:ad:
90:db:a3:51:49:28:f9:34:0c:cb:51:6c:b9:85:14:f1:5f:ed:
78:76:d1:1e:fb:ec:e7:88:eb:f1:ac:7f:00:7b:fe:e3:26:99:
5d:a2:98:0a:b9:16:05:67:42:c6:cc:4d:a1:07:aa:d0:63:10:
72:d5:0c:28:26:1f:8d:49:9d:93:56:09:79:43:3f:37:a9:04:
59:f9:48:97:10:50:f6:c7:f7:3c:ac:78:83:07:68:3e:60:c3:
3e:20:ca:d6:5f:62:eb:45:da:c8:68:53:fe:59:72:c5:0a:e8:
95:32:06:b7:9f:8a:e5:d2:56:a6:42:85:58:64:e6:dc:ff:c7:
04:2c:e3:10:b3:eb:cc:66:e6:b6:2b:c6:cb:7e:5c:92:e0:94:
e6:04:eb:55:11:35:14:4b:9f:74:c9:ab:44:dd:6f:b2:8b:a9:
32:78:2e:42:79:c5:09:11:45:2a:35:d5:e2:63:f2:66:37:da:
0e:45:7c:ff:e7:2c:53:1e:d6:2d:3f:4d:f5:c8:ff:6d:82:4b:
53:13:b1:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:55 2024 by rpki-client on console-fra.rpki-client.org