Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4X0ST-Jt-1Cws9HWS1fdlp7ceSE.roa
File: 4X0ST-Jt-1Cws9HWS1fdlp7ceSE.roa (raw, json)
Hash identifier: dslCEvjmRk8ETLBic4/R4BKyZplt90H7gzvRjiVuloU=
Subject key identifier: E1:7D:12:4F:E2:6D:FB:50:B0:B3:D1:D6:4B:57:DD:96:9E:DC:79:21
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018AB2A9F57BB191413320DCC7A9135F7E22
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4X0ST-Jt-1Cws9HWS1fdlp7ceSE.roa
Signing time: Wed 20 Sep 2023 12:56:37 +0000
ROA not before: Wed 20 Sep 2023 12:56:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60068
IP address blocks: 45.90.19.0/24 maxlen: 24
185.246.115.0/24 maxlen: 24
185.36.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Sep 2023 10:15:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:b2:a9:f5:7b:b1:91:41:33:20:dc:c7:a9:13:5f:7e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 20 12:56:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e17d124fe26dfb50b0b3d1d64b57dd969edc7921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:49:c0:a0:5a:81:3a:90:e6:fe:d6:2e:ca:af:
e3:3f:ba:5b:0e:f1:af:b2:9a:89:4f:00:3b:8e:49:
b1:1f:0c:22:69:14:c6:51:64:e2:21:74:e5:e2:eb:
2c:cf:e2:8c:4c:c0:96:eb:41:a7:d5:42:9f:fc:ff:
0a:ae:95:2a:0d:ce:96:20:ef:b4:b9:56:bc:4b:a4:
7a:0d:05:53:77:07:3b:c7:ab:bb:42:90:51:84:f0:
86:b3:f4:be:19:15:ac:3e:e9:f3:dc:83:31:dc:ff:
ec:37:dc:b3:b8:63:89:95:df:99:cf:06:be:d3:e8:
81:a5:d6:b5:c9:43:46:ee:58:01:f4:ff:e2:30:df:
db:bc:6f:72:38:5c:73:f1:aa:31:f0:77:95:4e:cd:
22:de:42:24:06:d8:f0:da:c9:10:fd:31:e8:17:28:
78:af:d5:3f:1b:4f:a6:ea:cf:24:bd:bb:a0:cb:9f:
4d:73:2b:c2:f8:d8:0a:cc:4e:94:a9:7c:90:68:21:
8a:69:9c:73:71:d7:fa:1b:2b:18:04:7c:9b:b0:0e:
d7:ba:fa:62:17:87:bb:e6:95:4c:c8:40:98:1e:8e:
1c:6b:4e:0f:a8:39:da:35:d7:b3:04:89:b9:ad:7b:
16:11:db:3c:7c:39:b9:4e:43:59:f8:35:34:0c:02:
b0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:7D:12:4F:E2:6D:FB:50:B0:B3:D1:D6:4B:57:DD:96:9E:DC:79:21
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/4X0ST-Jt-1Cws9HWS1fdlp7ceSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.19.0/24
185.36.204.0/24
185.246.115.0/24
Signature Algorithm: sha256WithRSAEncryption
59:cc:48:6b:08:5b:2a:a0:2b:a3:4e:c4:25:6e:2f:c8:81:9c:
a2:a7:84:ec:23:8c:25:7d:fd:16:a2:4a:b3:45:11:a7:88:fe:
55:31:45:72:02:d8:42:e2:cd:11:17:bc:79:97:98:ba:65:40:
ac:00:81:3c:5b:ca:ec:ef:71:f4:15:4a:78:c3:f0:fc:de:cc:
70:0c:39:78:0e:84:9d:1e:45:36:6d:34:fb:e5:27:49:19:ba:
c0:31:68:1e:24:d1:25:5e:0e:2c:a2:85:59:4e:fb:f0:ce:8e:
d6:9c:80:3e:bb:56:77:c1:8f:b7:d6:4d:ab:74:14:59:0d:d6:
82:4a:9e:7b:b3:75:57:d2:01:65:23:11:08:13:a3:53:67:c9:
bb:4c:22:4f:98:fe:71:64:17:6d:af:67:0c:51:3a:9e:d7:39:
a0:1a:76:7e:39:42:27:bd:fe:90:85:14:6d:9f:3c:78:b5:58:
f6:52:8e:b2:d6:26:43:8f:28:be:19:d7:5c:fc:65:77:16:46:
b0:99:0d:75:ad:47:85:c0:63:37:bb:e6:c3:ba:76:ba:88:2e:
e3:c2:58:30:3a:57:a8:32:5e:11:e8:ca:75:9c:0b:63:bb:2e:
d4:0a:6d:55:7c:09:c9:b4:cb:f7:e4:16:d1:c0:6e:f4:27:24:
b6:96:da:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org