Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9Y5Sc5LDmB8_ajmHPQFTl-7CVPQ.roa
File: 9Y5Sc5LDmB8_ajmHPQFTl-7CVPQ.roa (raw, json)
Hash identifier: Kp3P9Rb7RiEi4IMNr3REnn1ji9eE3TTEKTFyG0Npez0=
Subject key identifier: F5:8E:52:73:92:C3:98:1F:3F:6A:39:87:3D:01:53:97:EE:C2:54:F4
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018A98107643CBB12587438DD3B08CDE96A8
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9Y5Sc5LDmB8_ajmHPQFTl-7CVPQ.roa
Signing time: Fri 15 Sep 2023 08:58:50 +0000
ROA not before: Fri 15 Sep 2023 08:58:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211318
IP address blocks: 45.90.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 15 Nov 2023 10:54:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:98:10:76:43:cb:b1:25:87:43:8d:d3:b0:8c:de:96:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Sep 15 08:58:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f58e527392c3981f3f6a39873d015397eec254f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:de:55:75:9e:95:18:97:8a:58:e7:1d:cc:
e3:64:d9:a1:71:ea:40:d8:59:0b:23:d0:9b:8e:d2:
d6:8f:c2:aa:c4:83:51:8c:23:d7:d4:4d:56:f4:69:
b0:8c:95:82:b6:82:e2:a1:b9:27:9f:88:0c:63:76:
d5:ad:42:74:c0:2e:f8:f7:7e:94:39:f0:47:1b:cf:
68:b8:b4:22:ff:12:89:55:53:a4:3f:40:69:fc:33:
0f:71:e8:c9:f7:21:8a:a2:ee:d6:a2:cd:14:0f:cb:
53:0f:48:1b:03:64:e1:4c:ea:57:a1:8e:a4:58:60:
ed:50:25:0e:33:d3:d2:59:f5:c1:34:3d:a2:a6:f6:
73:ec:bd:7f:d5:59:5c:3a:f9:34:10:64:a5:92:48:
58:5e:36:94:d6:2d:81:79:c6:8c:4f:7d:98:94:fb:
be:47:0f:81:3f:48:76:41:93:29:d2:de:6b:7f:72:
89:32:81:6a:bc:c9:10:3c:57:53:71:3a:18:c9:97:
0a:51:3a:95:5a:69:38:a3:87:85:74:ac:ce:ad:2e:
b3:3a:59:ea:72:54:8d:ce:81:20:2f:49:e1:96:b0:
06:27:44:71:bd:66:b7:bb:91:16:5e:fc:8c:4e:b2:
8c:ad:c3:f6:4f:fc:d3:35:d6:47:94:5c:e3:ed:72:
4b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8E:52:73:92:C3:98:1F:3F:6A:39:87:3D:01:53:97:EE:C2:54:F4
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9Y5Sc5LDmB8_ajmHPQFTl-7CVPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.16.0/24
Signature Algorithm: sha256WithRSAEncryption
af:a8:c0:99:bb:e4:56:e1:16:7a:e1:af:9b:b2:2b:a9:29:ac:
aa:1e:c7:92:f1:14:94:5b:50:da:2e:aa:65:f7:19:d0:b7:18:
b5:9b:75:14:91:14:68:50:6c:59:05:e8:24:d6:dc:45:37:22:
20:bf:a0:0f:db:0a:fe:4c:c7:0d:b8:73:a2:cb:1c:0e:4d:0a:
58:90:31:b4:ba:a7:6c:b7:6d:7e:dc:7e:d3:3e:8f:e7:eb:16:
9c:ba:5c:ae:17:17:4c:ff:18:73:d2:8f:70:15:12:e5:bd:6e:
6f:33:dd:73:10:ad:3b:2f:43:7b:06:d8:5a:bb:bb:04:b7:b7:
53:3e:aa:1c:b9:b2:12:4c:d3:c9:cc:c5:5f:30:74:91:b9:3a:
a2:77:05:46:7f:9c:18:65:01:cc:20:f4:35:6b:3f:bb:84:01:
b5:f8:82:cf:58:fc:05:12:3e:ef:c0:f3:c9:68:7e:91:7b:43:
54:3a:c6:1c:db:35:16:e2:40:ab:c0:e6:3c:6a:41:0d:34:1d:
d7:a3:84:57:86:a6:dd:81:70:e1:25:d3:52:5b:a6:93:14:79:
3d:f4:b5:ad:30:55:37:43:a3:60:0f:26:a2:f1:15:c0:2f:a0:
b7:78:76:63:c4:fc:de:7b:73:6f:45:ff:b6:22:bc:76:6c:a2:
70:79:54:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org