Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/49BBwFzPzzTQwfnmFnfyDTZ_wGM.roa
File: 49BBwFzPzzTQwfnmFnfyDTZ_wGM.roa (raw, json)
Hash identifier: LBENHlTx+2qF0FM92D+g14MLj8c4Zry/NWE2VKyythk=
Subject key identifier: E3:D0:41:C0:5C:CF:CF:34:D0:C1:F9:E6:16:77:F2:0D:36:7F:C0:63
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01900BF8859C0DE343030A572B44C3F51529
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/49BBwFzPzzTQwfnmFnfyDTZ_wGM.roa
Signing time: Wed 12 Jun 2024 10:22:34 +0000
ROA not before: Wed 12 Jun 2024 10:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208287
IP address blocks: 45.90.89.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jun 2024 10:04:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0b:f8:85:9c:0d:e3:43:03:0a:57:2b:44:c3:f5:15:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 12 10:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e3d041c05ccfcf34d0c1f9e61677f20d367fc063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3f:a2:9b:6b:d6:5f:89:f6:33:00:87:5d:c4:
50:ff:9c:c7:bf:3d:eb:d0:e5:0f:8b:87:4d:cd:04:
af:96:be:d2:fe:91:8f:6f:5d:e4:9a:38:45:76:7c:
6c:38:35:d4:d7:0b:56:f7:29:38:e3:72:ef:8e:79:
53:af:b6:a8:bc:70:4f:dd:68:6f:35:8b:77:cb:60:
a9:ef:03:6a:5b:71:00:9d:be:c3:03:8c:0e:f0:24:
06:29:a6:94:dc:ea:bb:66:02:4d:82:87:08:f1:11:
8a:dc:b2:a9:63:52:4b:af:92:58:de:66:54:d4:ce:
75:61:9b:f4:13:93:6f:d8:08:fd:93:58:ec:97:cc:
46:8c:b1:55:c3:cd:73:44:e3:ff:a2:68:c0:f2:bb:
f8:30:f7:72:cf:63:9f:9c:e5:c2:91:db:73:5e:81:
08:c2:00:db:64:f1:44:23:d5:96:d8:a7:3c:90:96:
96:eb:15:af:96:32:1d:2b:b7:9a:74:fb:ac:87:1c:
09:49:3e:5c:0b:cd:64:45:df:ce:5d:ef:e2:72:2a:
5d:1b:b3:32:6c:00:98:9e:9a:10:a7:ed:28:a0:0c:
73:48:e0:54:d5:3c:b8:91:44:41:48:a8:54:ec:0c:
c7:23:91:77:fb:8f:39:1d:5d:de:52:ea:f6:9c:15:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:D0:41:C0:5C:CF:CF:34:D0:C1:F9:E6:16:77:F2:0D:36:7F:C0:63
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/49BBwFzPzzTQwfnmFnfyDTZ_wGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.89.0/24
84.21.173.0/24
185.222.160.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:c5:1f:9d:fe:7c:74:cd:d7:39:12:f6:ae:64:c2:c3:ba:10:
75:df:b1:14:39:b0:4e:66:af:de:7a:4a:42:85:ae:3e:ac:5b:
39:1b:70:b8:f0:98:ed:2c:bf:d7:78:14:ea:e6:4f:39:ad:8c:
af:17:9f:9f:83:c2:ce:08:86:fb:65:12:4f:9b:68:5b:e8:70:
af:85:5a:56:be:8f:9d:c9:a0:84:e4:b8:fb:fb:4d:76:32:1f:
b4:2d:5f:51:38:89:0a:a1:f4:20:e2:9c:9f:6b:c5:5c:a5:39:
d2:c7:29:2d:e9:23:cb:6b:13:ac:2a:6d:0f:8a:a1:62:04:77:
cb:bc:4e:49:61:ef:c5:3f:a3:04:15:25:a8:d4:00:be:71:3d:
13:d1:ec:07:33:34:cd:6e:ee:fb:dd:05:bb:f0:62:3b:c5:22:
99:52:75:86:9f:fb:f9:95:9f:27:c8:65:90:45:ba:46:1b:47:
29:63:9d:95:a2:96:7e:3c:04:df:c1:ef:8e:d5:1e:a9:87:95:
3a:27:25:7d:82:0d:ad:a0:d9:b3:06:8d:7a:20:c2:24:85:32:
33:31:65:23:57:32:a4:fd:cc:b4:d4:6d:17:6a:30:91:fd:6b:
56:44:fa:5f:8b:d3:9a:bc:80:6e:7c:54:e3:40:00:62:e3:36:
4c:e0:c4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 15:26:58 2024 by rpki-client on console-fra.rpki-client.org