Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/fjieDAnKGkUnoDRlfkaCON87ics.roa
File: fjieDAnKGkUnoDRlfkaCON87ics.roa (raw, json)
Hash identifier: 8aQJfbfcJ13qm3pWqkZ3IFMe7ICC34lqgT4NIzRDdIk=
Subject key identifier: 7E:38:9E:0C:09:CA:1A:45:27:A0:34:65:7E:46:82:38:DF:3B:89:CB
Certificate issuer: /CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Certificate serial: 0191E1AD2F51091E35A6F9B7C2D9DF35C896
Authority key identifier: EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/fjieDAnKGkUnoDRlfkaCON87ics.roa
Signing time: Wed 11 Sep 2024 15:21:48 +0000
ROA not before: Wed 11 Sep 2024 15:21:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207669
IP address blocks: 45.90.240.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 13 Sep 2024 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:ad:2f:51:09:1e:35:a6:f9:b7:c2:d9:df:35:c8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaa5abe9f7304383198ba1ffa592790ecf2c3ceb
Validity
Not Before: Sep 11 15:21:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e389e0c09ca1a4527a034657e468238df3b89cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:36:0b:36:64:0e:df:8f:d9:68:ca:00:03:5e:
05:63:59:22:9a:97:67:f1:4b:4a:69:d2:06:2d:b1:
f0:b2:5c:2f:90:03:ad:02:c3:eb:cf:9d:44:20:d8:
95:0b:d9:da:50:24:b3:af:f1:f4:40:eb:8b:2a:b0:
e9:d0:42:60:02:ff:cb:21:ec:05:0f:74:d8:a5:91:
8b:76:4b:c8:21:d0:90:77:fd:0c:4c:7b:91:a0:ab:
e8:0e:b0:c0:d8:e7:af:fa:8e:28:de:51:76:9c:2e:
94:db:bb:83:f3:6e:d2:4f:9d:ca:ed:f2:be:68:85:
99:7b:4e:8d:67:43:c7:21:5e:d0:d8:ec:16:fb:35:
17:51:e2:03:7e:d3:73:54:41:f9:0c:31:0f:05:1c:
12:db:1d:8d:98:1a:62:e4:20:d9:f3:74:0d:47:52:
4e:01:6d:2b:aa:87:97:6e:d0:98:ff:70:5b:da:ed:
8f:ed:9b:1e:99:52:96:74:4f:b0:9d:48:bc:fc:af:
f9:f1:be:d0:7e:c5:7b:e1:96:d9:24:97:de:25:e8:
39:e0:36:5b:23:f6:d6:8c:f1:e6:cf:97:dc:85:67:
26:8c:c8:a9:78:b0:99:56:45:89:6d:67:4a:7b:f4:
92:8e:9d:0c:78:f0:fa:08:df:fc:d0:9d:45:6c:1b:
b8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:38:9E:0C:09:CA:1A:45:27:A0:34:65:7E:46:82:38:DF:3B:89:CB
X509v3 Authority Key Identifier:
keyid:EA:A5:AB:E9:F7:30:43:83:19:8B:A1:FF:A5:92:79:0E:CF:2C:3C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/fjieDAnKGkUnoDRlfkaCON87ics.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/fb2aa1-004b-49c4-aa41-c9de22b916ca/1/6qWr6fcwQ4MZi6H_pZJ5Ds8sPOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.240.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:a0:59:61:e2:19:aa:9d:42:0c:5b:a7:32:0f:4d:eb:aa:0e:
5b:4d:5e:05:dc:f5:5d:c9:6a:38:cb:0f:49:69:56:06:d0:cf:
13:25:ec:8f:0a:c0:05:0c:64:26:f0:ce:b6:29:8c:b0:89:57:
11:34:ba:11:b1:ea:d2:61:e1:28:7f:45:51:dd:10:8f:2b:f8:
3f:41:72:9a:a3:6a:9c:d8:46:c7:4a:e0:ca:e3:4d:f1:d2:5a:
04:27:de:48:8e:bf:c5:2a:9b:5b:30:1e:65:bc:91:50:f2:56:
b9:70:a0:3f:1d:e7:fd:d8:56:79:97:b5:4f:b2:b4:78:38:e9:
a2:43:03:38:e1:5e:d5:f4:f7:f2:86:bc:9e:88:8d:4a:3a:7c:
a8:db:c1:e4:c4:91:9c:f0:69:fd:d4:25:4f:b3:40:69:f9:0a:
f3:c9:3d:82:f1:88:c5:5d:0d:32:9c:c5:a2:9f:66:4f:cb:77:
c0:ca:aa:d0:d6:86:75:85:52:d0:ae:fb:38:8b:93:92:8c:ef:
55:2e:83:90:55:97:44:59:87:c3:ec:0b:22:56:97:c7:b7:2b:
34:17:6b:cf:18:74:35:c0:d0:36:a0:ab:91:b5:98:65:16:54:
4f:1a:40:88:a0:6c:c5:25:65:4b:0a:e1:77:75:23:76:13:e2:
85:a4:7d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:14 2025 by rpki-client