Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gZjuO5EfOV7naCfKOoeEoWpmkNg.roa
File: gZjuO5EfOV7naCfKOoeEoWpmkNg.roa (raw, json)
Hash identifier: 0bSzEyi+wgeN8cKOdL2nBRhD3QJ2J1DIOrw0YzQp/LM=
Subject key identifier: 81:98:EE:3B:91:1F:39:5E:E7:68:27:CA:3A:87:84:A1:6A:66:90:D8
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0190540113F6553A31306EF4766C17EE4DCF
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gZjuO5EfOV7naCfKOoeEoWpmkNg.roa
Signing time: Wed 26 Jun 2024 10:04:35 +0000
ROA not before: Wed 26 Jun 2024 10:04:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208287
IP address blocks: 45.90.89.0/24 maxlen: 24
84.21.173.0/24 maxlen: 24
185.222.160.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jul 2024 13:19:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:01:13:f6:55:3a:31:30:6e:f4:76:6c:17:ee:4d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 26 10:04:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8198ee3b911f395ee76827ca3a8784a16a6690d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e9:28:fa:3b:cd:a5:36:45:02:b3:b3:4a:47:
1f:55:54:5c:23:9e:bf:b0:54:6d:71:07:8a:2a:e9:
3a:cc:87:9e:3f:ab:2a:82:a4:42:76:82:85:74:45:
f9:22:ae:c5:1a:01:99:6e:f3:d6:a6:69:47:90:89:
f4:dd:ac:da:9d:96:9a:2b:92:c0:17:c3:d4:ee:f9:
4c:d5:36:0b:82:25:e9:3a:ff:33:3c:24:86:cb:45:
93:e4:c5:1f:82:52:96:2e:cf:ee:1d:86:ca:91:d2:
72:64:88:95:d9:25:b5:38:4a:b8:41:ff:d6:c7:ea:
27:12:7b:0b:2a:19:ea:7b:a1:b0:60:cc:b5:8f:1f:
3b:79:8c:ab:7f:79:60:d0:ca:92:b2:a2:93:1e:f3:
98:03:b3:e4:27:e3:27:cc:dd:f4:c5:61:b6:26:f6:
b0:e6:cd:77:d6:2e:19:1b:7c:a6:5a:c8:ee:52:c6:
d2:be:6a:9e:4f:6e:75:d3:48:89:0a:63:b8:a5:a1:
6a:3b:e1:73:2b:02:4a:68:e9:e4:6c:33:ee:7a:6c:
c2:0e:39:71:7a:3a:19:17:b8:b3:46:4b:3f:cb:fd:
1a:d3:93:a5:d3:e0:7e:ef:8d:74:95:1b:0e:eb:35:
3b:47:39:6f:df:98:01:ec:75:22:06:9a:ae:09:3b:
60:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:98:EE:3B:91:1F:39:5E:E7:68:27:CA:3A:87:84:A1:6A:66:90:D8
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/gZjuO5EfOV7naCfKOoeEoWpmkNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.89.0/24
84.21.173.0/24
185.222.160.0/24
185.222.162.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e6:43:3c:33:95:8d:4b:6e:4e:fb:59:c7:89:1c:8d:ba:10:
34:63:3e:bc:c4:90:20:3b:a8:e8:0d:73:de:e2:fd:15:9d:85:
c0:7a:dc:ed:cd:40:1b:05:63:24:64:86:73:37:6e:6d:35:3a:
25:5f:ae:17:a5:de:69:7b:30:b9:13:1a:0b:bf:40:13:76:d7:
69:9c:a9:0b:96:32:59:df:88:ae:f9:f2:5f:44:84:cb:ad:f4:
f5:33:de:27:29:60:0b:46:1c:93:b7:6a:e1:72:9d:4d:3d:c5:
49:c5:3b:38:6a:43:34:f7:5d:0f:75:a3:7d:ac:6f:ba:40:d0:
22:73:13:4a:6d:c6:86:a5:bf:e6:88:39:76:6e:53:db:5d:19:
f0:6f:0c:bd:46:46:72:45:5f:2f:34:34:8c:5e:bd:07:eb:bc:
be:93:d5:1a:0f:6a:5f:f4:6d:6c:0a:f2:fd:6c:f8:16:96:6d:
0f:4b:a0:33:72:2f:ce:91:ce:f9:13:3e:3e:99:7f:4b:4e:78:
38:10:dc:f5:74:3f:62:cb:29:27:1e:07:a1:fd:55:72:f3:02:
4b:9f:2a:57:45:43:98:8e:bb:f3:de:55:e1:35:0c:c5:0c:c3:
9d:63:fa:70:6b:a7:ed:20:69:9b:de:6f:be:c0:85:6b:d8:44:
b0:a4:76:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 30 16:02:24 2024 by rpki-client on console-fra.rpki-client.org