Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/gfewxB6dHO_IkhRSpbVvZdLR2k4.roa
File: gfewxB6dHO_IkhRSpbVvZdLR2k4.roa (raw, json)
Hash identifier: mlhsw7IH5tbDxidrKOcXOvTOnDBczcB/acl2LL+tFXg=
Subject key identifier: 81:F7:B0:C4:1E:9D:1C:EF:C8:92:14:52:A5:B5:6F:65:D2:D1:DA:4E
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 01856D0A93F91F053CA08D83DEF74B41C5CD
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/gfewxB6dHO_IkhRSpbVvZdLR2k4.roa
Signing time: Sun 01 Jan 2023 11:14:47 +0000
ROA not before: Sun 01 Jan 2023 11:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 90.159.208.0/20 maxlen: 20
90.159.224.0/21 maxlen: 21
90.159.224.0/20 maxlen: 20
90.159.220.0/24 maxlen: 24
90.159.232.0/22 maxlen: 22
90.159.236.0/22 maxlen: 22
90.159.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:93:f9:1f:05:3c:a0:8d:83:de:f7:4b:41:c5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jan 1 11:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81f7b0c41e9d1cefc8921452a5b56f65d2d1da4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c3:fb:bc:44:4b:3b:c6:3c:95:e2:b7:1a:4d:
d2:eb:3f:6a:99:d5:55:28:e4:d7:ed:7f:d2:0f:3b:
c1:2b:57:e2:be:7b:f8:02:e7:a0:8e:73:d0:4c:94:
fb:d1:df:b1:76:6b:d2:d8:a6:75:4e:8a:62:ee:16:
e2:2e:da:b8:12:f7:17:65:a6:7e:65:dc:c9:c5:fa:
78:f7:a0:6d:1b:b6:ae:b1:d1:02:26:70:6a:f3:c0:
a6:55:60:ad:03:28:e4:10:59:63:dc:43:3d:41:80:
a4:97:14:83:23:62:10:f8:5c:1b:1f:f5:f6:30:62:
84:80:2f:f9:98:79:0d:cf:03:c5:15:cd:b3:7a:03:
11:f5:04:24:93:13:1d:6f:49:6c:e2:15:8e:d8:36:
b9:57:ea:98:15:02:1d:a0:14:a6:31:a7:ca:43:25:
c4:44:92:3e:7c:cd:8c:08:07:5f:e1:92:6a:be:fc:
24:eb:73:3c:32:2a:85:05:75:76:bd:6a:35:5b:75:
50:94:fe:d3:24:95:25:ed:08:43:3d:be:5a:ea:e9:
f4:69:7f:7b:45:1a:3f:9b:1f:48:14:a8:1a:71:de:
fe:1d:eb:6b:5d:c1:8d:13:83:9e:ea:84:57:3c:ae:
61:62:b6:cf:19:cf:2e:14:a4:09:88:69:44:c8:eb:
3e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F7:B0:C4:1E:9D:1C:EF:C8:92:14:52:A5:B5:6F:65:D2:D1:DA:4E
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/gfewxB6dHO_IkhRSpbVvZdLR2k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.159.28.0/24
90.159.208.0-90.159.239.255
Signature Algorithm: sha256WithRSAEncryption
7c:92:43:be:68:cd:6d:80:a3:8f:a2:3f:54:cb:d9:32:49:bb:
25:09:36:53:da:1c:3a:ab:4f:62:70:8e:c5:a7:3a:3a:c3:83:
4f:f6:db:20:6e:dc:83:a7:ab:9b:7d:18:55:85:18:e7:af:d7:
5e:e4:eb:e2:c6:25:f5:7c:4b:8a:a8:c3:44:70:f5:83:96:6e:
42:4c:8f:6b:76:5b:64:15:9b:64:c8:04:5d:f7:1d:77:d5:6f:
62:ab:d4:82:54:6d:de:53:d8:14:a7:0c:4f:63:2d:28:79:9a:
32:71:66:8e:e5:90:2f:2c:78:4e:0a:a1:68:e2:e6:f1:f5:3a:
f6:64:a9:d8:b8:34:81:ec:49:1e:20:fa:f3:a4:f5:09:a0:b2:
36:0e:9f:69:23:b7:54:dd:8e:34:a5:e3:d0:25:8d:ae:b9:b7:
d7:d3:a1:39:84:fe:da:5b:30:b6:74:0a:9c:41:04:3b:b0:ec:
6d:f8:b2:b2:0e:cd:60:d2:81:a3:1d:00:c5:aa:62:2a:c0:e5:
23:86:e0:d2:67:b3:1e:95:26:aa:8a:9a:23:dc:7e:29:e6:b9:
8d:4a:55:86:b9:02:e9:cd:f7:54:70:0a:0c:9f:b3:bb:76:b2:
8a:af:d7:bd:fb:05:32:64:68:f2:83:0c:44:d8:8c:51:31:ab:
26:07:a3:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:14 2024 by rpki-client on console-fra.rpki-client.org