Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/baKXMZvLhHF-_ixfVOEg0-hupGs.roa
File: baKXMZvLhHF-_ixfVOEg0-hupGs.roa (raw, json)
Hash identifier: h6GcXswwDqhB/JWnwBFxF7H9AHKuGkc+z9fAP2CCzxg=
Subject key identifier: 6D:A2:97:31:9B:CB:84:71:7E:FE:2C:5F:54:E1:20:D3:E8:6E:A4:6B
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 01879ED2192D669EC6D9F3642B1706884655
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/baKXMZvLhHF-_ixfVOEg0-hupGs.roa
Signing time: Thu 20 Apr 2023 13:19:41 +0000
ROA not before: Thu 20 Apr 2023 13:19:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56488
IP address blocks: 45.90.20.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Apr 2023 12:21:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9e:d2:19:2d:66:9e:c6:d9:f3:64:2b:17:06:88:46:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Apr 20 13:19:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6da297319bcb84717efe2c5f54e120d3e86ea46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4a:98:62:64:4f:20:62:5b:b8:2d:13:3a:f3:
15:1a:ee:b7:37:d1:d8:c5:fb:5c:28:35:a6:23:a8:
3f:dd:f3:69:63:1d:2c:69:49:0e:76:2c:c8:d1:54:
1f:17:34:cc:c3:53:ad:2b:1c:53:e2:db:3d:54:29:
fc:8d:00:f5:ea:00:3a:ac:18:da:5c:46:e0:6d:db:
4e:b5:e4:76:ad:cf:0c:0b:63:ba:d3:ff:36:78:86:
a5:2e:16:64:46:83:bf:20:d9:d8:73:53:4a:d5:0e:
57:bf:54:6e:0c:2b:48:d1:7c:e2:6a:ef:70:43:bf:
7d:45:c2:4b:f1:68:59:62:1f:25:59:c6:f1:29:ae:
c2:8d:18:19:a6:54:7d:71:44:b9:5d:03:64:00:cd:
14:19:82:f1:23:17:e7:e2:2b:34:15:ac:12:73:85:
44:79:db:ce:35:cf:39:47:7f:86:ad:42:1b:78:b3:
14:bc:15:a7:68:de:95:34:7e:1c:3b:eb:eb:61:c3:
de:1f:c1:ba:ec:bd:e2:64:d5:16:e0:02:12:c9:1d:
40:a4:5a:24:69:b4:1a:b2:01:d6:aa:2a:6e:2a:6d:
24:76:58:6b:b7:d8:57:25:14:d5:a9:e6:05:d7:45:
c6:34:e7:66:a6:b1:8c:95:c8:54:f0:a7:9d:1a:65:
97:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A2:97:31:9B:CB:84:71:7E:FE:2C:5F:54:E1:20:D3:E8:6E:A4:6B
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/baKXMZvLhHF-_ixfVOEg0-hupGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.20.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:f1:b8:ef:9f:00:ff:36:35:e9:90:9f:43:a2:f7:86:6e:c0:
05:11:f2:7f:69:01:67:3c:60:40:62:db:c2:40:c3:52:a2:72:
2b:16:b2:c8:8e:bf:5e:39:8a:40:4f:69:1f:e6:74:7b:cb:d8:
59:ba:03:88:a9:dc:bb:83:cb:d8:d7:02:05:77:0d:d4:1e:7d:
9d:2f:78:45:38:45:0e:13:46:99:62:d2:d2:d5:ab:c7:4b:a1:
14:6d:a7:c5:04:24:0b:67:23:7f:fc:50:e2:c8:40:7e:d1:ee:
fc:26:5c:d2:9e:ac:14:2f:5c:b3:6c:fe:74:8f:59:44:79:8f:
8e:45:af:a2:14:fc:ab:34:c5:88:3a:55:02:e0:59:68:ca:3f:
bc:f4:80:44:86:4a:fc:52:19:b2:85:22:0a:0e:d5:20:13:53:
99:13:c4:20:15:d7:71:d2:46:e5:cd:2c:df:1f:85:c7:72:4b:
a8:36:d0:c5:60:17:4f:bf:8d:95:32:a1:f0:e6:e3:bb:25:bb:
06:ca:95:44:c2:da:2c:16:35:66:63:a2:12:cd:b7:3d:dd:d4:
98:ab:fd:6a:c3:cc:97:b2:8d:28:08:4e:48:f2:ee:94:50:69:
a7:ba:2b:c4:98:cd:2e:af:fc:3e:ef:b6:71:c1:06:ad:9b:04:
6b:dc:da:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:29 2024 by rpki-client on console-fra.rpki-client.org