Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/fcixnAuOkQPzIyxMhNo0_BEWQi8.roa
File: fcixnAuOkQPzIyxMhNo0_BEWQi8.roa (raw, json)
Hash identifier: BcBAXwTahN13pXmFmvDzS3WoC5sCBhDERiz3lJTDmzw=
Subject key identifier: 7D:C8:B1:9C:0B:8E:91:03:F3:23:2C:4C:84:DA:34:FC:11:16:42:2F
Certificate issuer: /CN=17526ccac4f9064e058549b30172c84439787fbc
Certificate serial: 018895B5FCC39E8B075F73D3865BA32807A3
Authority key identifier: 17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/fcixnAuOkQPzIyxMhNo0_BEWQi8.roa
Signing time: Wed 07 Jun 2023 11:55:11 +0000
ROA not before: Wed 07 Jun 2023 11:55:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206150
IP address blocks: 45.90.84.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:b5:fc:c3:9e:8b:07:5f:73:d3:86:5b:a3:28:07:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17526ccac4f9064e058549b30172c84439787fbc
Validity
Not Before: Jun 7 11:55:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dc8b19c0b8e9103f3232c4c84da34fc1116422f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:43:52:bf:ed:9a:b8:3f:76:50:e3:0a:8a:
15:2a:12:b3:87:c0:88:8e:60:5e:1b:df:14:d2:e9:
59:9c:ce:3b:86:e6:08:4c:77:61:ef:57:d4:4c:b5:
60:27:60:75:be:16:73:04:9b:37:4e:a5:ac:41:50:
d4:8c:49:ea:8a:f8:d0:a5:67:c9:b6:ff:c7:58:cb:
e6:95:3c:d4:3b:3f:6c:45:7c:6e:20:96:94:26:8e:
da:72:2d:84:3d:1a:de:f6:e4:69:59:57:8e:db:eb:
7a:b1:f8:2e:ab:17:82:63:93:33:20:64:ff:41:06:
f9:a5:3a:7e:3a:70:4e:ce:9b:d8:ca:ef:74:45:46:
e8:d9:5e:3e:ba:8a:02:ff:b7:a2:ca:b3:5c:ae:5c:
fc:59:bd:30:63:06:9b:01:00:1f:2b:be:9e:e3:93:
b8:74:7b:a5:8b:f7:52:f2:27:3a:b0:07:fb:63:f1:
5b:c8:88:fb:e1:94:11:49:16:d9:68:eb:42:9f:be:
1e:fe:25:2c:36:ce:6e:a6:b3:c0:b8:9e:75:98:92:
5e:36:64:99:0d:9b:4f:1b:7b:b8:76:f0:0f:3e:87:
c4:21:fe:11:d3:58:f9:6e:0c:26:f0:c0:05:66:0b:
73:3b:84:c8:4c:24:c3:72:32:30:d3:4f:f5:d0:c0:
4b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C8:B1:9C:0B:8E:91:03:F3:23:2C:4C:84:DA:34:FC:11:16:42:2F
X509v3 Authority Key Identifier:
keyid:17:52:6C:CA:C4:F9:06:4E:05:85:49:B3:01:72:C8:44:39:78:7F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1JsysT5Bk4FhUmzAXLIRDl4f7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/fcixnAuOkQPzIyxMhNo0_BEWQi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c9aa81-5bfd-4535-9606-941cc6a7bad9/1/F1JsysT5Bk4FhUmzAXLIRDl4f7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.84.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:71:9c:2f:21:11:0a:af:ec:d9:36:78:b4:95:5b:78:e0:8c:
35:b6:0a:43:00:34:c3:c7:94:66:d3:0c:21:3f:a0:a6:77:2c:
19:3a:e9:0b:e5:9e:93:32:29:5e:03:ff:fa:9e:f2:a7:70:9c:
20:fc:d6:f9:e6:59:de:50:48:a5:6e:bf:2b:07:17:7a:d1:a3:
90:81:c2:c2:4d:a7:48:46:54:14:5d:e1:8d:39:5c:91:a9:74:
58:f7:c9:58:24:9a:07:e7:83:c5:70:01:b7:0f:38:d4:68:c6:
66:3d:25:d6:4b:f2:f9:30:18:77:18:c8:c9:07:18:65:e7:5d:
b6:09:49:2e:ea:cc:27:8e:8d:8a:ca:a9:b5:33:0c:af:ec:31:
f2:a1:ba:02:54:33:0c:4e:69:03:27:c0:e0:f3:ec:14:d6:9a:
b8:74:a9:92:3c:34:ce:85:90:9b:2e:c3:44:bd:10:d0:18:2c:
7a:89:96:9a:9d:71:22:67:20:9a:8b:ff:f2:1e:cc:43:ef:e5:
9c:d2:10:fd:b2:a0:23:b0:17:19:dd:df:63:b4:32:da:a5:6b:
aa:26:41:06:07:0c:db:f4:cd:6d:26:ed:13:12:95:f8:d3:5f:
ca:3d:b1:52:8d:87:06:41:9e:e5:da:15:9c:a1:43:01:06:75:
ff:bd:dc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:15 2024 by rpki-client on console-fra.rpki-client.org