Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/FnPnNSSN5nRbS4Q_Hz5mUHr2HJw.roa
File: FnPnNSSN5nRbS4Q_Hz5mUHr2HJw.roa (raw, json)
Hash identifier: vn/b6+58nAH6UFlcl/Dip5TkjKm3mbiWzzeDufJAdmY=
Subject key identifier: 16:73:E7:35:24:8D:E6:74:5B:4B:84:3F:1F:3E:66:50:7A:F6:1C:9C
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 01857356029F1A3AB41669847415D53CA352
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/FnPnNSSN5nRbS4Q_Hz5mUHr2HJw.roa
Signing time: Mon 02 Jan 2023 16:34:54 +0000
ROA not before: Mon 02 Jan 2023 16:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209993
IP address blocks: 45.90.192.0/22 maxlen: 22
2a0e:240::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:56:02:9f:1a:3a:b4:16:69:84:74:15:d5:3c:a3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Jan 2 16:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1673e735248de6745b4b843f1f3e66507af61c9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:77:b2:d3:c7:04:44:70:81:64:58:72:65:e8:
e7:cc:a2:05:4c:50:5d:e8:5e:16:18:90:17:19:69:
1e:50:43:9b:b4:50:b7:f8:81:c6:ac:c0:13:05:16:
82:20:c7:2a:a6:14:d0:3d:f2:bd:c3:e9:1b:2c:4a:
35:68:66:b8:67:98:37:37:98:74:60:66:88:ed:16:
14:5e:3c:54:39:d8:24:49:b8:cf:3b:74:cc:9d:aa:
90:4d:fd:12:2d:45:7f:c8:22:00:c4:72:2d:df:ca:
bd:22:81:9d:c6:eb:49:ab:a1:18:c1:91:d6:33:86:
e0:bc:89:85:fe:86:29:e5:46:21:32:b0:31:c3:5b:
f6:98:2c:28:90:79:69:0a:bc:12:de:47:33:d7:99:
27:b7:8b:3f:60:76:11:8a:0a:5a:18:7d:08:f2:f1:
72:7f:ec:b1:7b:e9:9f:99:7b:22:1f:46:a0:e6:6f:
99:20:10:28:1f:3a:52:0c:b9:fe:2a:23:f1:b5:cc:
c8:0d:73:1d:91:55:17:ed:c8:9c:2b:52:7a:cc:88:
3c:00:99:76:74:96:74:93:68:88:ac:1f:38:b4:89:
1e:bc:de:d0:95:88:d0:c4:b8:07:46:56:af:58:a9:
37:6c:c9:45:ee:5b:ad:4c:63:55:b3:66:c4:f1:26:
c5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:73:E7:35:24:8D:E6:74:5B:4B:84:3F:1F:3E:66:50:7A:F6:1C:9C
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/FnPnNSSN5nRbS4Q_Hz5mUHr2HJw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.192.0/22
IPv6:
2a0e:240::/29
Signature Algorithm: sha256WithRSAEncryption
25:c8:05:25:d3:12:23:b8:49:42:aa:d9:6e:83:cc:3b:87:b1:
ef:42:ea:bf:45:d3:8e:0b:9f:de:b1:2b:44:8c:0e:22:1d:bd:
f4:ff:fa:7e:be:cf:96:2e:3e:ed:65:7a:07:0d:de:e2:14:fc:
e9:28:df:f4:6b:30:44:a7:d1:ab:80:fb:dd:39:e8:d5:4d:2c:
37:d5:55:03:b0:a7:9d:e5:da:2f:6b:02:21:e3:6f:34:a5:ab:
95:25:92:eb:35:12:4f:09:93:4e:a4:32:06:f0:68:98:22:71:
1a:64:90:aa:0a:24:6b:1f:92:30:a2:b5:27:8d:6f:85:17:78:
2a:91:42:11:dd:21:60:5a:ef:8a:96:96:41:da:d3:ae:00:3a:
3a:b1:90:4b:eb:49:5c:1f:9b:e5:08:11:1a:20:f8:c3:f3:aa:
dd:56:c1:57:9c:b0:ca:7d:f2:be:f7:f6:2a:b3:34:0f:62:3b:
1c:8c:f7:43:34:4a:d2:51:0f:85:6b:24:d1:bd:63:d3:b1:9b:
5e:20:87:9f:2b:44:a9:15:9c:fe:34:dc:22:ca:f1:7a:4f:9e:
65:95:11:9e:35:ad:81:81:4f:43:6a:b7:30:b7:a6:28:c2:9c:
9a:22:43:a0:92:cd:57:7d:41:44:fd:08:ef:fc:e4:17:8c:34:
74:83:1b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:32 2024 by rpki-client on console-ams.rpki-client.org