Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-hjoofuczzwklAO9ThfFAYBMIE0.roa
File: 1-hjoofuczzwklAO9ThfFAYBMIE0.roa (raw, json)
Hash identifier: 33/rrE+L7yhSfru33arx5GBvvCGiBx8+CIob/Xkm8eU=
Subject key identifier: FA:18:E8:A1:FB:9C:CF:3C:24:94:03:BD:4E:17:C5:01:80:4C:20:4D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01862663F294E52E5FF113DEB3000D0C0A73
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-hjoofuczzwklAO9ThfFAYBMIE0.roa
Signing time: Mon 06 Feb 2023 11:02:09 +0000
ROA not before: Mon 06 Feb 2023 11:02:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 45.90.17.0/24 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Apr 2023 07:52:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:63:f2:94:e5:2e:5f:f1:13:de:b3:00:0d:0c:0a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 6 11:02:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa18e8a1fb9ccf3c249403bd4e17c501804c204d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a0:0a:91:6d:cb:03:36:6e:15:0d:ff:be:7c:
9a:4e:3f:ec:eb:a0:49:d1:c2:10:ef:8f:24:48:0d:
dc:df:58:f4:12:2e:55:18:9a:b2:fb:93:3e:30:f7:
8b:8b:79:de:33:d8:47:10:0f:ad:83:b0:7e:ca:3c:
be:0b:0d:fd:1e:40:1c:98:b3:87:06:20:b3:7b:a1:
94:4a:0a:33:fa:8e:83:d8:a9:9f:79:90:73:fd:57:
da:96:7e:4d:12:85:fd:92:18:d4:e2:05:c9:ac:bf:
e5:8d:7c:a7:1e:13:52:d1:37:92:97:71:17:16:4f:
fb:4d:37:16:83:fb:99:4b:70:0f:90:e9:b1:6d:8d:
d0:ed:c7:b7:4d:eb:27:14:4a:31:2f:b3:a2:92:09:
7b:d6:cf:ab:29:1d:52:73:7d:09:c8:95:dc:5e:a4:
cd:ff:e9:51:6f:25:d6:55:68:aa:e8:5f:d6:80:8c:
89:55:e5:a7:70:4d:4d:7f:d8:28:00:db:22:77:81:
22:94:a5:25:2a:c9:af:89:c1:bb:70:a9:fc:40:2a:
f2:8a:c7:12:48:dd:e8:10:49:67:10:2b:8a:b8:21:
05:79:af:e5:df:69:dd:6d:78:3c:da:fc:28:2c:c2:
ca:dd:bb:76:99:2c:ca:ab:2f:70:05:9c:64:99:d9:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:18:E8:A1:FB:9C:CF:3C:24:94:03:BD:4E:17:C5:01:80:4C:20:4D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/1-hjoofuczzwklAO9ThfFAYBMIE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.17.0/24
193.58.146.0/24
194.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
44:2f:7b:ba:98:7e:e7:dc:b3:29:d9:35:0d:a4:03:d7:3b:16:
93:3e:40:a9:c7:de:45:6c:3a:1d:ee:8b:91:6f:75:77:59:d3:
aa:dd:fd:30:dd:bc:02:46:1f:86:45:c2:65:98:f0:df:fb:67:
af:86:b6:40:67:24:10:4b:d7:e6:7e:18:45:bb:22:81:10:41:
96:57:ee:af:0c:09:f2:f9:43:60:be:1c:68:a1:e8:27:87:59:
3c:06:83:40:83:6a:ad:23:da:b8:b1:f6:ff:0f:22:97:ff:e5:
ff:62:1a:28:45:07:3c:ee:e4:2c:3f:36:20:58:a9:04:fc:b0:
84:ef:60:29:4a:66:b0:bf:fe:6c:a8:a6:81:10:20:43:07:51:
b9:df:11:1c:75:54:90:a4:14:c0:1a:d2:77:a0:29:76:bc:2b:
1c:5c:df:b9:52:84:84:89:a5:51:46:2e:53:82:20:fe:dd:ba:
9d:83:f0:1f:7c:c0:cb:04:a5:2e:ff:f2:4a:e8:6f:b9:84:64:
bd:7b:99:c3:eb:2e:41:d0:a3:1d:41:d8:a7:fe:5d:2d:7f:b5:
be:b1:51:3e:78:67:f9:82:48:68:59:90:5c:ef:0f:a2:64:e8:
ba:b2:90:62:e3:ad:68:de:36:1d:4f:49:30:c4:1c:29:6d:bb:
12:21:f2:54
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org