Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sGb8WXnvVNeEU9cb341kQw2425w.roa
File: sGb8WXnvVNeEU9cb341kQw2425w.roa (raw, json)
Hash identifier: 9UquEsDFVzXM0l4YHFmhSMwLDyejL6KlVhUDfmnZ2Lo=
Subject key identifier: B0:66:FC:59:79:EF:54:D7:84:53:D7:1B:DF:8D:64:43:0D:B8:DB:9C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E9ECEEF120244E625F8F58AF1CDBEA2CE
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sGb8WXnvVNeEU9cb341kQw2425w.roa
Signing time: Tue 02 Apr 2024 12:35:45 +0000
ROA not before: Tue 02 Apr 2024 12:35:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20911
IP address blocks: 45.90.90.0/23 maxlen: 24
84.21.174.0/23 maxlen: 24
193.42.34.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 08:35:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9e:ce:ef:12:02:44:e6:25:f8:f5:8a:f1:cd:be:a2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 2 12:35:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b066fc5979ef54d78453d71bdf8d64430db8db9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7c:8a:17:8c:f5:c5:03:e8:49:37:4f:58:9f:
08:40:73:3c:74:c5:51:60:d0:87:5e:20:ca:99:7c:
bd:c8:8b:81:2f:72:d9:e0:ee:27:f9:b3:75:16:dc:
56:e3:25:52:b8:9b:2a:8e:48:3a:f7:c2:27:f6:01:
3a:23:e5:43:89:ef:0a:30:d4:f0:4e:52:fc:f2:ff:
ab:e4:c7:0d:4a:27:6c:37:e2:9c:eb:3c:80:0a:8a:
fb:4c:36:ef:1c:95:bc:34:72:32:b8:ce:f6:c4:09:
46:3b:32:19:4f:f8:0f:15:d9:ff:be:9f:e5:75:9e:
02:ca:40:e9:5d:62:62:62:cf:cb:c6:23:5d:4a:90:
fc:bb:ae:4e:0a:60:13:ef:7c:fc:60:3f:e2:b9:e0:
3c:47:5e:d2:44:43:53:57:ad:b1:22:f3:4f:c5:35:
b2:77:c7:7e:5e:7b:9e:4b:ea:b3:54:15:8c:64:46:
61:e3:c5:25:55:fa:a1:81:71:fb:76:4f:56:87:d7:
51:9e:59:a2:97:51:99:f0:9b:c9:52:fb:aa:00:4f:
e8:fc:7a:9e:b1:0f:7c:cf:83:e9:1c:f9:ec:ff:e6:
b1:df:a8:0b:2a:96:07:a1:be:0b:c6:76:1c:e4:17:
80:61:2a:81:6e:b5:c1:ea:41:ef:3a:d8:d7:b6:f2:
d4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:66:FC:59:79:EF:54:D7:84:53:D7:1B:DF:8D:64:43:0D:B8:DB:9C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/sGb8WXnvVNeEU9cb341kQw2425w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.90.0/23
84.21.174.0/23
193.42.34.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:c3:94:c1:ee:cf:d8:78:02:78:00:c3:bb:0d:cd:b2:e5:fd:
21:d3:99:c4:97:7f:0b:11:50:e0:d0:44:86:02:72:82:ae:58:
3c:d2:43:e0:3a:9e:eb:10:41:ad:c6:7c:64:09:b5:6d:13:be:
3f:73:2f:1c:8c:22:7a:dd:16:88:46:3a:fa:17:f2:5f:98:f4:
cf:a9:bc:a7:1c:f5:8d:3d:80:d5:e8:2c:23:ca:14:1f:b7:fb:
2f:10:15:d1:8a:60:d6:07:fc:c2:d9:25:d9:85:b9:f1:fe:97:
f0:b1:b7:20:9c:62:a9:f1:cb:2e:25:15:20:51:af:d9:35:b5:
19:c5:d4:27:ed:28:53:7d:6f:ec:fb:c1:c0:e7:a9:4e:ea:6f:
2c:ea:20:ee:9b:da:fa:49:d5:dd:7f:a1:90:eb:b6:64:43:d6:
59:bb:78:72:50:e4:10:a3:d7:4e:6e:c5:7f:9a:dc:3c:83:b1:
e3:d1:30:0b:31:97:e7:fc:7a:3c:5e:c0:cd:af:e2:31:8c:91:
3f:97:11:fd:6a:65:b2:40:cb:65:94:f9:8f:13:8f:01:e8:c5:
4a:6c:65:c8:06:e1:b7:5c:f5:8c:21:5b:30:de:1f:c1:d7:9e:
02:bd:15:e5:9d:b9:f5:49:57:1b:6a:f4:80:54:22:c3:aa:74:
74:d9:5b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:44 2024 by rpki-client on console-ams.rpki-client.org