Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ibToOUTlHmLSK5GVcVxJ5SJBU4Q.roa
File: ibToOUTlHmLSK5GVcVxJ5SJBU4Q.roa (raw, json)
Hash identifier: bR0BGElDWgUerk3J8SB/FC5WARzOBTiyMaIPXiW8Jro=
Subject key identifier: 89:B4:E8:39:44:E5:1E:62:D2:2B:91:95:71:5C:49:E5:22:41:53:84
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01856CE64E8077E6FEC5DB98109DE5523E92
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ibToOUTlHmLSK5GVcVxJ5SJBU4Q.roa
Signing time: Sun 01 Jan 2023 10:35:10 +0000
ROA not before: Sun 01 Jan 2023 10:35:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25374
IP address blocks: 90.154.225.0/24 maxlen: 24
213.91.189.0/24 maxlen: 24
213.16.41.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:4e:80:77:e6:fe:c5:db:98:10:9d:e5:52:3e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 10:35:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89b4e83944e51e62d22b9195715c49e522415384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6a:84:b1:46:e2:f6:dd:85:42:56:5c:1e:e8:
bc:3d:a3:3c:0f:43:2e:89:97:51:04:42:4d:57:c1:
4d:a0:90:49:c2:6d:03:7f:78:de:6b:05:29:05:3c:
f8:34:ae:45:28:83:b9:3e:74:23:47:56:28:71:bc:
c5:b5:64:5e:44:3d:d8:f9:f4:4c:04:9a:fe:aa:8f:
5e:07:e5:91:fc:71:bc:c1:f7:09:44:1f:31:8f:bb:
61:fe:3f:31:84:7a:08:f4:43:60:98:c7:9b:f3:67:
33:39:81:e6:b2:a8:54:8d:a2:4a:3d:70:f5:45:39:
45:8f:20:86:a1:e1:48:ad:90:90:e9:c8:51:ca:07:
ac:8a:c4:40:79:31:e0:8b:11:3c:0e:73:21:02:3b:
73:7d:5f:21:8e:19:3c:07:2e:ec:13:ef:95:e8:c3:
46:a6:ae:b9:a6:f9:52:03:b6:d7:81:a2:9d:a3:a5:
16:71:48:31:81:f6:7f:6c:19:f5:ac:bb:e5:31:40:
2d:9d:42:24:c0:42:a6:4c:4d:bc:42:d8:ea:a8:21:
fe:27:6e:1f:e6:89:d6:fb:8c:11:c8:fc:e3:99:8f:
bd:dc:d8:6c:9f:68:a6:8c:a4:d7:d6:74:5d:da:85:
47:e0:ad:69:4a:21:9d:ab:d4:61:6d:d8:36:47:03:
c5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B4:E8:39:44:E5:1E:62:D2:2B:91:95:71:5C:49:E5:22:41:53:84
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/ibToOUTlHmLSK5GVcVxJ5SJBU4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.154.225.0/24
213.16.41.0/24
213.91.189.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:18:bd:9f:8a:46:89:4b:7e:8c:39:85:1e:91:c4:c9:ab:b5:
bd:6a:b3:80:ad:f7:8a:d8:72:ea:0a:ea:6e:1b:af:6d:cc:a7:
54:45:0f:68:41:ed:90:7b:fa:2d:64:7e:09:c5:55:69:49:79:
9f:85:7a:fa:63:0e:dc:50:18:e0:39:e4:6a:f3:fb:22:a8:47:
4a:95:dc:2d:ac:67:a2:3f:4d:b4:5f:85:ce:d6:ab:d8:04:25:
b4:ca:83:ea:f6:03:53:48:e9:65:0c:f9:6f:0a:12:5f:e0:91:
e9:75:71:0d:bb:eb:0c:d3:3e:02:ec:12:22:66:1e:ec:44:8f:
74:e4:06:55:57:2a:f4:22:d0:16:51:df:13:f4:e1:4d:8b:c4:
fa:99:a2:23:e8:bf:65:b7:99:ee:3b:b9:0d:fc:98:e9:0b:c1:
b7:9e:29:f5:7d:bc:e9:fa:c4:7f:dd:8e:e2:90:30:95:d5:52:
55:5f:d8:f2:4d:2c:df:fe:ec:fb:48:5e:6e:fc:ef:a1:9f:00:
bd:5f:7a:fb:c8:79:5b:e0:65:ea:f7:e0:97:54:58:03:1f:ca:
ba:19:68:3d:27:9c:35:e8:62:61:a8:5d:1a:db:31:3d:1e:ad:
1a:f6:e9:dc:3b:9d:d5:2e:ea:9b:ae:e4:31:43:d5:e6:15:3c:
27:88:b9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:54 2024 by rpki-client on console-ams.rpki-client.org