Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/rBXZXb6W8zV6zj4zLJkqz-G-qsw.roa
File: rBXZXb6W8zV6zj4zLJkqz-G-qsw.roa (raw, json)
Hash identifier: MTadMzeipGVR0Pgj2x2Ea8TP7dAU5sKCswMV4EDM0Lw=
Subject key identifier: AC:15:D9:5D:BE:96:F3:35:7A:CE:3E:33:2C:99:2A:CF:E1:BE:AA:CC
Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Certificate serial: 0186FE46F0105BCBB82163CE6EE4E9E9A486
Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/rBXZXb6W8zV6zj4zLJkqz-G-qsw.roa
Signing time: Mon 20 Mar 2023 09:08:27 +0000
ROA not before: Mon 20 Mar 2023 09:08:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60475
IP address blocks: 45.90.242.0/24 maxlen: 24
45.90.242.0/23 maxlen: 23
45.90.243.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:46:f0:10:5b:cb:b8:21:63:ce:6e:e4:e9:e9:a4:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Validity
Not Before: Mar 20 09:08:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ac15d95dbe96f3357ace3e332c992acfe1beaacc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:66:77:b2:ed:8e:88:eb:83:38:b3:6f:6d:9c:
b7:f1:15:56:a3:54:f2:92:1b:65:6b:8c:ca:44:c6:
2a:0b:c9:38:27:83:e8:be:80:c9:53:fb:e9:90:45:
9b:14:22:52:5d:6f:e7:2e:1b:80:70:0a:e2:94:8e:
09:b9:16:0b:fa:f3:c4:f9:4a:36:bb:07:1c:d4:5e:
3d:e5:c1:da:a4:84:57:89:31:ec:a8:c2:97:eb:fb:
7e:9d:9e:ae:de:cb:d9:60:23:08:cb:fd:46:36:36:
3a:b6:e9:b8:57:5c:6e:10:9e:13:80:79:7f:40:55:
08:22:90:dc:5e:f1:a3:7e:f5:5f:28:8b:c4:36:53:
dd:c0:63:af:64:89:47:0c:3d:db:8b:e4:59:b7:1a:
08:0e:3e:2c:2c:fe:2b:a1:e2:c6:de:d0:f5:77:9d:
fa:7f:e4:e9:b5:ad:42:1a:89:7d:15:af:20:e8:14:
62:b3:88:83:47:7d:cc:49:75:fa:3a:58:29:94:4d:
04:09:c6:81:4f:85:78:c5:66:6a:85:39:31:57:92:
3d:cb:ae:d4:e0:d0:63:e5:2a:68:70:cb:fc:4c:0b:
d2:fd:e6:36:91:7f:af:96:c1:5a:e0:3f:a6:0a:9e:
bd:5f:0a:7d:e3:20:4f:69:24:07:9e:6f:6a:b9:b5:
dc:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:15:D9:5D:BE:96:F3:35:7A:CE:3E:33:2C:99:2A:CF:E1:BE:AA:CC
X509v3 Authority Key Identifier:
keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/rBXZXb6W8zV6zj4zLJkqz-G-qsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.242.0/23
Signature Algorithm: sha256WithRSAEncryption
32:65:fa:23:84:55:bf:15:f1:bd:e7:ef:03:62:3f:23:ad:ad:
6b:87:e0:bb:03:b9:69:93:04:eb:32:21:87:81:b0:00:30:84:
6b:34:29:0e:1e:53:a0:fa:15:cd:c0:d6:81:a7:dc:db:6c:a9:
ea:86:5b:67:3f:7e:86:3b:ef:fb:7b:9e:88:69:ac:37:a1:20:
07:11:30:84:95:5b:66:82:ac:bc:2a:da:5e:20:6b:99:58:89:
92:22:db:2b:60:82:df:41:35:9e:f0:06:a4:3f:b6:a8:bb:aa:
ce:ae:ef:b2:a5:17:1f:e9:16:4d:ce:97:5e:3d:33:30:d6:d5:
ad:03:73:e4:42:53:85:fd:49:d5:19:ac:f8:3b:bb:38:0d:d0:
cb:49:34:84:76:76:9a:c0:3c:57:f0:f2:f3:66:f0:16:bd:b3:
8c:2d:79:b7:fc:4b:fb:7a:c5:d5:58:32:87:10:49:a7:dc:0d:
cc:a5:37:cd:de:a2:95:0d:61:8d:9a:2d:14:fa:bf:9f:92:37:
5a:d6:11:23:09:ba:ae:89:f8:20:b3:f9:66:97:08:40:eb:23:
83:c1:45:4d:bd:9d:7d:31:a4:c4:c6:18:53:a9:f2:ad:ca:1b:
54:49:ff:72:92:3e:da:52:c7:5a:46:cf:d7:ce:6d:6d:c3:61:
de:cc:f7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:55 2024 by rpki-client on console-fra.rpki-client.org