Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gRvp3RMthLeYXsKKn0rXrlMYk_U.roa
File: gRvp3RMthLeYXsKKn0rXrlMYk_U.roa (raw, json)
Hash identifier: LILr7K2WjowSAR8t6J8pSv7nuRLrK6ICWHK1r4zKgzw=
Subject key identifier: 81:1B:E9:DD:13:2D:84:B7:98:5E:C2:8A:9F:4A:D7:AE:53:18:93:F5
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCD3E7BC87387EB0C559EE5AD22D33
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gRvp3RMthLeYXsKKn0rXrlMYk_U.roa
Signing time: Tue 02 Jan 2024 06:29:24 +0000
ROA not before: Tue 02 Jan 2024 06:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20911
IP address blocks: 45.90.90.0/23 maxlen: 24
193.42.34.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Apr 2024 12:35:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:d3:e7:bc:87:38:7e:b0:c5:59:ee:5a:d2:2d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=811be9dd132d84b7985ec28a9f4ad7ae531893f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:49:96:58:f5:57:ce:94:46:40:c4:5c:1d:
21:d7:66:08:e9:90:03:8c:9a:b1:df:a6:ff:ac:91:
7c:9f:ca:ef:8b:3e:e2:06:93:be:72:a2:fe:1f:78:
e4:d4:da:f0:54:22:88:b6:f2:27:97:9e:3f:e0:26:
dc:ce:69:39:ac:b2:f6:94:31:ef:32:09:90:94:0f:
6e:80:44:60:5e:91:14:aa:af:cd:b0:ab:39:2b:5a:
02:05:6b:ff:82:36:9d:35:37:dc:62:f0:f5:8f:74:
16:c3:41:e0:b1:5c:94:09:97:16:00:88:14:11:37:
3b:14:f1:e0:3e:6f:44:ad:2c:20:76:c3:9e:e8:8c:
cd:62:da:00:d8:77:31:61:d8:85:a6:31:06:71:4f:
e0:53:9d:03:ac:a7:7c:9e:64:17:e4:56:ca:51:47:
96:1d:19:11:96:33:15:0b:7f:79:92:a5:cf:60:a6:
c6:a9:df:c9:a0:d5:a0:c1:2e:d0:ec:e6:88:67:ea:
1f:bb:af:98:be:e5:4e:89:37:b4:31:b4:df:e2:8d:
4b:91:64:11:c7:0c:c1:47:89:bb:75:fc:22:c8:f4:
93:55:6e:c1:05:40:2d:db:c0:0d:a7:76:fc:90:cf:
49:fe:a0:b3:da:d2:a4:ec:c0:e1:5f:6b:2a:bf:76:
fe:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:1B:E9:DD:13:2D:84:B7:98:5E:C2:8A:9F:4A:D7:AE:53:18:93:F5
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gRvp3RMthLeYXsKKn0rXrlMYk_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.90.0/23
193.42.34.0/23
Signature Algorithm: sha256WithRSAEncryption
48:d7:42:45:2d:dc:98:a1:c3:83:80:3b:55:a1:9b:cb:82:91:
22:6c:b9:36:88:e4:a0:ad:57:d5:01:3c:ea:4d:52:17:8f:c9:
2c:16:3a:61:41:a3:cb:65:fd:8d:d9:51:89:64:20:2a:a3:49:
c1:e2:84:85:1a:b6:a7:93:4a:44:0e:73:0d:92:7b:e8:96:0d:
82:2f:f7:a5:56:13:d6:74:53:a0:ce:4f:43:fe:68:8f:d5:e6:
8a:5f:73:c6:a3:34:5b:61:91:ff:72:49:58:c2:a1:13:22:90:
bf:b6:a4:a5:24:5e:21:d9:1d:be:bf:e2:23:2d:09:86:1a:40:
46:c8:29:9e:b6:b1:88:d3:67:85:7d:7f:ec:65:59:83:a9:6e:
7c:30:f4:af:3a:d7:57:53:29:75:d7:01:93:82:71:19:ed:72:
23:5f:d7:3b:c3:10:ef:83:f9:64:df:72:f1:de:e7:39:c0:d0:
62:a3:63:2b:93:8a:b1:86:41:93:35:87:ef:4e:d2:12:ee:9f:
15:0b:70:36:d7:95:26:58:1b:fc:88:62:70:2f:40:61:39:94:
79:e0:a6:76:1f:ea:bd:18:17:58:63:ab:46:b4:09:82:23:58:
d0:95:24:55:33:21:06:18:9b:34:0d:2b:dc:a9:31:c7:30:0f:
80:06:20:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 2 17:38:53 2024 by rpki-client on console-ams.rpki-client.org