Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/kGsiOZZkmM1HOQ-jORNMJQiib-c.roa
File: kGsiOZZkmM1HOQ-jORNMJQiib-c.roa (raw, json)
Hash identifier: SqQ/wbLHxVcDjYCGWeXQinP3uMDid/KXIpDoJIsP0m0=
Subject key identifier: 90:6B:22:39:96:64:98:CD:47:39:0F:A3:39:13:4C:25:08:A2:6F:E7
Certificate issuer: /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Certificate serial: 0185711E44EDB6807776652566E8351326AA
Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/kGsiOZZkmM1HOQ-jORNMJQiib-c.roa
Signing time: Mon 02 Jan 2023 06:14:47 +0000
ROA not before: Mon 02 Jan 2023 06:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210412
IP address blocks: 89.106.203.0/24 maxlen: 24
45.150.57.0/24 maxlen: 24
2a12:b380::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:1e:44:ed:b6:80:77:76:65:25:66:e8:35:13:26:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Validity
Not Before: Jan 2 06:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=906b2239966498cd47390fa339134c2508a26fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:50:04:b8:de:b7:6c:5c:28:8e:be:f9:2b:
88:97:59:b4:e6:50:6d:f1:be:60:66:b9:35:dd:27:
23:5d:9d:e1:ef:1d:dd:4c:9f:78:dc:a1:c3:8a:e6:
e8:b7:0c:49:85:da:11:54:81:63:6f:15:3a:9c:89:
71:a7:9e:b8:79:f6:85:96:b3:97:75:7b:b8:07:30:
50:0e:bc:6e:b0:12:23:a2:83:10:e4:2e:f7:e2:cb:
35:70:ba:36:64:79:9e:e3:72:28:e6:00:8b:7d:f6:
83:0a:8f:7c:bb:e1:15:20:d6:f4:db:39:32:0d:59:
12:45:21:cc:c3:ec:c5:51:5a:e0:e9:8d:6a:64:33:
8a:1c:ae:42:5a:63:b5:40:34:4a:62:9d:71:8a:cf:
ca:17:4e:9b:4d:02:59:c3:f6:3d:b3:24:d6:64:b4:
93:f2:75:17:94:a7:5e:ba:8d:b0:0e:a6:53:fc:fa:
77:6d:dd:41:0c:b2:87:b5:65:2e:e2:8d:97:46:6b:
4b:61:e4:6c:d4:7e:86:48:07:22:cf:7a:3f:14:cb:
cb:da:60:7e:8e:30:bf:42:eb:d0:b8:3e:85:2a:1b:
51:1d:8c:21:b4:cb:22:d7:35:2d:ac:a3:c7:31:eb:
fb:39:42:7e:6d:ef:da:19:71:2f:f8:82:3f:a7:e7:
b9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6B:22:39:96:64:98:CD:47:39:0F:A3:39:13:4C:25:08:A2:6F:E7
X509v3 Authority Key Identifier:
keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/kGsiOZZkmM1HOQ-jORNMJQiib-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.57.0/24
89.106.203.0/24
IPv6:
2a12:b380::/29
Signature Algorithm: sha256WithRSAEncryption
1d:02:7a:70:d0:e6:67:3c:8f:66:e1:d2:52:3c:1c:9b:a3:55:
4a:8e:3e:99:7c:ed:89:e0:70:ea:ca:6b:d6:ab:e3:42:10:f3:
01:0b:7e:84:40:b8:bf:ac:be:cc:9d:b2:8a:35:de:d1:3e:e2:
d4:65:2e:ee:3b:e6:b2:0d:6e:63:96:0e:d6:62:dd:8e:e8:78:
5e:77:e7:e7:cf:b8:d7:1d:7a:0c:18:3d:a7:2f:46:0a:05:2d:
00:7f:3c:e9:3f:8f:88:b9:e6:fe:ae:92:1f:6b:aa:7e:09:d9:
4e:db:96:b2:d7:99:d2:a7:8d:64:05:2d:b4:81:12:a0:3a:fe:
10:4e:4a:05:cc:97:91:cd:92:9e:8e:90:27:16:78:5d:ac:7e:
19:44:7a:65:b2:8a:20:b7:70:1e:72:93:5f:fd:51:dc:5c:e0:
cb:05:eb:8d:33:e7:ff:18:0e:f1:5d:6d:bc:19:1f:6f:c7:6c:
77:bf:59:b1:3e:cd:53:f4:ff:7f:c3:03:5a:7d:16:b3:23:5b:
be:78:51:7e:7d:28:f0:d7:08:ae:c8:a4:cd:29:fa:4e:e2:e2:
f0:93:e8:5e:7c:16:c2:d9:50:65:d8:c7:c2:22:2d:ce:6f:8f:
3a:25:12:53:e0:db:fd:87:e1:06:05:4a:35:2b:2c:3c:6d:e7:
91:f7:86:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:27 2024 by rpki-client on console-ams.rpki-client.org