Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XQkFvnmkP938nT0Qq8IsSRW8PQE.roa
File: XQkFvnmkP938nT0Qq8IsSRW8PQE.roa (raw, json)
Hash identifier: EiuRi02ufhRUP53KlnlzHAYmkkQwTEd8db5rJwhpdZE=
Subject key identifier: 5D:09:05:BE:79:A4:3F:DD:FC:9D:3D:10:AB:C2:2C:49:15:BC:3D:01
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018FF832776777EB8FDDA1C3D89AB2A02FB2
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XQkFvnmkP938nT0Qq8IsSRW8PQE.roa
Signing time: Sat 08 Jun 2024 14:13:27 +0000
ROA not before: Sat 08 Jun 2024 14:13:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63023
IP address blocks: 45.90.88.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 11 Oct 2024 08:41:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f8:32:77:67:77:eb:8f:dd:a1:c3:d8:9a:b2:a0:2f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 8 14:13:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d0905be79a43fddfc9d3d10abc22c4915bc3d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:0b:8e:2d:b7:7b:fd:b1:c5:9b:64:c6:b7:33:
76:2e:8b:46:2b:72:e2:68:f4:df:a0:f9:83:51:4c:
d5:c4:36:46:21:89:ec:39:ce:66:b9:14:17:9b:24:
62:d7:7a:0c:71:38:66:6c:74:d2:2a:c6:35:8e:fa:
a7:ed:db:28:3c:eb:5d:a7:d4:14:26:55:de:e7:b2:
7a:d2:9e:07:96:41:12:50:5e:b1:00:86:0b:b6:45:
c4:a1:be:2c:37:59:6a:6c:ea:7b:99:a8:19:6e:aa:
37:06:df:1c:4b:63:08:ef:85:a1:e9:2a:b1:ee:f2:
86:cf:d3:8c:c0:31:2b:d2:fc:53:42:e6:00:bd:37:
04:66:17:d0:5f:21:37:42:36:6a:6d:16:e7:59:a1:
b8:33:4e:65:e2:f5:75:80:ae:ce:a9:e8:80:c0:1c:
5b:cd:dc:b0:c6:7b:6d:f6:bd:d4:c6:be:df:03:90:
53:2d:d1:22:34:ea:b5:93:27:74:49:fc:ea:65:3f:
72:a5:29:2c:02:1e:25:95:bf:c1:68:dc:1a:8e:73:
54:bb:12:eb:98:df:0f:d3:e1:49:59:7f:86:4f:40:
13:b0:0e:ed:b5:8d:8f:00:7d:c5:01:78:8d:6d:e7:
76:88:61:bf:c0:a8:b5:61:42:78:10:03:87:e8:80:
9e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:09:05:BE:79:A4:3F:DD:FC:9D:3D:10:AB:C2:2C:49:15:BC:3D:01
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XQkFvnmkP938nT0Qq8IsSRW8PQE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.88.0/24
Signature Algorithm: sha256WithRSAEncryption
93:a5:c3:b1:3c:e7:b8:75:6c:b4:14:99:58:1e:e2:ae:26:4b:
92:98:4e:9f:6c:50:70:cd:99:b1:26:89:81:df:65:ed:3d:8f:
59:6d:24:43:b1:5d:66:68:3b:5c:55:68:d0:49:10:7e:7e:ae:
6a:c7:f7:a2:78:29:4d:08:84:ae:cd:b9:ce:a5:53:58:0d:3b:
ac:53:28:34:02:09:8b:75:3f:a1:30:0c:5c:7c:07:21:60:a1:
f0:b0:d5:2d:0e:76:07:4a:59:08:8c:fe:8a:08:5f:6a:f5:e5:
1b:6b:dc:39:60:3b:3e:31:41:aa:89:8b:e9:aa:81:11:92:02:
7a:de:6a:d5:c1:92:c1:5e:86:16:d1:66:d3:2a:e8:9c:d9:df:
70:0b:82:13:1c:78:3d:71:ca:8c:e5:d6:38:d6:ac:95:4b:38:
49:13:33:de:a7:01:e8:2c:fb:6b:78:8a:8f:ea:7c:ee:1b:39:
a7:6e:61:20:d6:82:05:54:10:22:c4:6a:2d:d8:16:2d:41:43:
98:26:d2:a2:ed:a6:f1:79:ce:53:91:e0:a9:38:f7:89:b4:c0:
86:75:3d:ea:01:18:af:59:f4:86:1b:a1:d0:a6:35:a6:60:27:
de:a2:88:37:76:39:af:e6:1b:86:77:cd:b4:c9:85:86:18:af:
81:16:a6:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 11 13:27:56 2024 by rpki-client on console-ams.rpki-client.org