Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/9Rt7hhZ-VmUx8b7LIux9nOIO90I.roa
File: 9Rt7hhZ-VmUx8b7LIux9nOIO90I.roa (raw, json)
Hash identifier: KsycPkIlgQ4w/PQnVou4REG+T+nuWqOYrXEYXTB7a3k=
Subject key identifier: F5:1B:7B:86:16:7E:56:65:31:F1:BE:CB:22:EC:7D:9C:E2:0E:F7:42
Certificate issuer: /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial: 018570E75EF337F5A9D6D806C5D95F411B86
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/9Rt7hhZ-VmUx8b7LIux9nOIO90I.roa
Signing time: Mon 02 Jan 2023 05:14:49 +0000
ROA not before: Mon 02 Jan 2023 05:14:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20836
IP address blocks: 185.112.90.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:5e:f3:37:f5:a9:d6:d8:06:c5:d9:5f:41:1b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Validity
Not Before: Jan 2 05:14:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f51b7b86167e566531f1becb22ec7d9ce20ef742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:80:08:22:21:82:f2:ec:6c:cc:c4:d6:26:ae:
b2:e8:52:38:32:f4:1e:7f:5a:a4:58:bc:60:9d:dd:
d9:4e:43:c4:68:11:d9:1b:ea:ed:97:40:7f:c0:10:
57:cb:d6:e0:05:4f:37:e5:a8:b1:e2:c2:ee:e8:32:
54:d5:a9:ba:0f:da:39:0f:c4:b3:9e:c5:0c:25:9e:
f0:40:bb:c3:9a:83:0f:f7:4f:af:89:3b:86:e0:cf:
32:5c:18:7b:36:70:ba:c3:6f:07:28:af:09:ea:5d:
25:d3:34:58:4a:48:91:f6:05:1b:36:6c:32:f1:63:
3e:ab:fb:64:95:60:c1:58:29:af:6a:fe:fa:fa:ac:
12:d9:af:5e:9d:aa:82:e3:57:da:53:85:5e:9a:2f:
7f:25:68:33:06:d9:7d:2e:c5:00:0a:b9:2a:64:b2:
68:cb:21:69:e7:03:9a:df:53:9a:4a:84:a2:bf:27:
9d:9f:93:15:b7:bc:7d:a3:17:84:43:13:80:bb:a4:
16:f7:15:a1:38:13:af:29:88:4f:9a:40:0d:9a:86:
7b:64:0a:70:26:b9:40:00:32:a6:9f:6f:61:3d:88:
b3:50:6f:02:ca:46:c6:a8:f5:30:cf:b0:16:9a:c0:
83:27:5f:05:00:5d:82:11:6b:9d:e9:50:ff:1e:ac:
25:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1B:7B:86:16:7E:56:65:31:F1:BE:CB:22:EC:7D:9C:E2:0E:F7:42
X509v3 Authority Key Identifier:
keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/9Rt7hhZ-VmUx8b7LIux9nOIO90I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.90.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:1a:ff:c5:eb:a2:3c:66:1f:af:cd:e4:b8:10:4b:b3:3f:2f:
11:7a:a1:00:45:1e:7d:92:1c:15:51:98:d6:a5:dd:b7:d9:75:
77:5e:6d:95:51:62:7d:ff:54:8f:85:b9:21:10:ce:3e:45:c0:
82:d2:6e:82:15:b1:20:b6:0a:90:c3:80:9b:21:2e:56:ef:2f:
74:dd:77:b9:5b:e6:ac:ff:e3:5a:d7:5d:39:66:b1:41:f0:1f:
75:0c:0c:7f:f8:a2:41:72:af:02:02:7f:8a:98:5b:c2:3f:83:
7a:40:64:cf:3b:7e:67:c1:ab:0b:1e:4a:cf:69:ab:b3:8c:10:
37:6c:39:89:05:93:5c:f8:ff:92:70:d2:d2:61:7f:f0:75:d0:
e6:bc:80:18:75:bd:a1:9b:8f:8f:4a:f8:6c:5f:93:07:e3:68:
ee:cc:bc:52:ea:0d:a8:b1:fa:d9:83:c0:61:99:1a:4e:df:83:
e4:4f:e6:18:81:65:4c:99:28:d6:be:40:03:24:69:77:e5:9f:
48:15:24:f5:03:5b:b0:97:97:e2:35:68:9e:3b:f0:68:04:0e:
80:a6:fd:d9:b9:4c:8d:e2:3d:90:f8:67:c4:2c:3f:28:4e:15:
ae:70:b0:2c:b4:30:49:1e:ea:36:13:b1:38:ef:42:25:47:a3:
f0:19:07:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:46 2024 by rpki-client on console-ams.rpki-client.org