Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/aFiFdDx7Odcm-JTBWWVAS5Ns-qk.roa
File: aFiFdDx7Odcm-JTBWWVAS5Ns-qk.roa (raw, json)
Hash identifier: IsIM0IB4T+zKzpshgu3pFtw3vE1OJj6eALJlSMoMaXI=
Subject key identifier: 68:58:85:74:3C:7B:39:D7:26:F8:94:C1:59:65:40:4B:93:6C:FA:A9
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 01856E2F957DFC5B967EEBEDF9F275B5D712
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/aFiFdDx7Odcm-JTBWWVAS5Ns-qk.roa
Signing time: Sun 01 Jan 2023 16:34:50 +0000
ROA not before: Sun 01 Jan 2023 16:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 90.155.112.0/24 maxlen: 24
90.155.113.0/24 maxlen: 24
90.155.114.0/24 maxlen: 24
90.155.115.0/24 maxlen: 24
90.155.116.0/24 maxlen: 24
90.155.117.0/24 maxlen: 24
90.155.118.0/24 maxlen: 24
90.155.119.0/24 maxlen: 24
90.155.120.0/24 maxlen: 24
90.155.121.0/24 maxlen: 24
90.155.122.0/24 maxlen: 24
90.155.123.0/24 maxlen: 24
90.155.124.0/24 maxlen: 24
90.155.125.0/24 maxlen: 24
90.155.126.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:95:7d:fc:5b:96:7e:eb:ed:f9:f2:75:b5:d7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: Jan 1 16:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=685885743c7b39d726f894c15965404b936cfaa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:17:0b:c5:35:5d:82:65:4d:91:74:3b:96:b7:
22:70:3d:42:76:e9:58:2f:e9:96:a5:0e:44:25:0c:
d6:4d:c1:3f:5a:01:4f:ce:22:50:07:91:2f:21:45:
6f:54:5e:fa:93:f7:44:a2:06:5a:cc:8b:e0:31:5c:
c1:c5:14:cf:b5:e1:5b:e1:c1:de:2f:31:17:38:77:
45:07:2f:c5:c9:19:ac:36:f2:3e:6d:44:30:e8:92:
52:4f:cf:d0:a0:a0:1b:4e:4e:12:90:d2:df:3b:e4:
18:d6:ee:6a:cf:f1:b0:16:91:9c:6d:19:89:87:6d:
27:66:d8:66:5d:96:28:9b:cb:3b:b7:f3:71:0b:2f:
4c:8e:7c:99:09:5f:32:60:9d:12:50:d6:54:74:bf:
3b:4c:ce:b1:2e:15:02:3a:80:ee:eb:c2:61:4a:58:
84:44:73:b6:5a:bf:09:ed:b0:6f:fc:7c:6d:bf:6b:
53:ab:7b:46:7c:bc:f1:d4:23:8c:8e:64:ab:53:bf:
9d:88:01:a1:83:66:12:88:ef:67:c6:15:d8:fe:69:
ab:90:b2:43:b8:c0:86:c1:a2:c2:1c:3f:fc:3a:dd:
56:fa:1b:93:b6:8a:22:ab:12:73:e6:3d:f9:e2:f3:
d1:70:33:fc:94:be:5b:b7:7e:37:2a:bc:5e:98:44:
f8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:58:85:74:3C:7B:39:D7:26:F8:94:C1:59:65:40:4B:93:6C:FA:A9
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/aFiFdDx7Odcm-JTBWWVAS5Ns-qk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.155.112.0-90.155.126.255
Signature Algorithm: sha256WithRSAEncryption
9b:0d:33:f3:5b:d6:23:78:75:72:47:14:19:6c:eb:2c:79:51:
8a:dd:7d:7a:16:f9:37:69:85:02:f5:8f:2a:ca:2a:8a:b8:8a:
fd:89:6f:52:9f:52:b2:20:14:90:ca:b7:9f:c2:c0:56:2d:b9:
2f:9a:b2:79:05:03:6c:1b:b5:48:ad:da:e7:ca:31:f4:c3:89:
56:01:d8:9f:ec:42:94:82:ab:d4:8a:69:c1:dc:2d:9a:0e:c9:
24:86:a0:b0:ca:f6:d1:b8:fd:c7:9b:15:25:a3:d5:26:51:03:
ce:eb:f1:42:db:e0:a0:93:bf:59:67:fa:f0:c2:f3:3e:5e:ac:
58:e7:d7:2a:50:d8:47:02:bb:41:7e:f3:03:9c:84:b7:5e:f7:
42:3c:0b:73:8c:3a:ff:1f:49:06:85:1d:d3:4a:ce:d7:fc:26:
c9:cf:43:c8:ad:19:2d:1e:d4:be:9e:e8:63:db:f9:0d:33:d3:
4e:6b:a7:30:38:24:b9:7a:42:14:e8:d7:06:83:f7:56:11:02:
6e:83:c4:20:27:4f:12:25:70:6b:60:c8:60:94:e1:e4:67:ca:
c0:0e:fc:d2:df:f1:12:08:b4:5b:89:7d:18:b2:05:74:97:bf:
a9:96:df:aa:78:52:d6:bf:46:17:5b:95:db:a5:20:72:01:2e:
ac:b6:03:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:40 2024 by rpki-client on console-ams.rpki-client.org