Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DQBYo80hpf7IEpRz9fv5j6bSKIo.roa
File: DQBYo80hpf7IEpRz9fv5j6bSKIo.roa (raw, json)
Hash identifier: 54b0jk8QY+MRft97wSAZw/Z9Jxht8XvykkUGm5mvuxA=
Subject key identifier: 0D:00:58:A3:CD:21:A5:FE:C8:12:94:73:F5:FB:F9:8F:A6:D2:28:8A
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0186C580BADA0DEF9C86CF5FBB14D3C2307A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DQBYo80hpf7IEpRz9fv5j6bSKIo.roa
Signing time: Thu 09 Mar 2023 08:33:13 +0000
ROA not before: Thu 09 Mar 2023 08:33:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 45.90.16.0/24 maxlen: 24
185.126.83.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
194.147.16.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 13 Mar 2023 11:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c5:80:ba:da:0d:ef:9c:86:cf:5f:bb:14:d3:c2:30:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 9 08:33:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0d0058a3cd21a5fec8129473f5fbf98fa6d2288a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:c5:0d:d9:77:b4:2a:3c:5f:9d:7a:8a:7e:
77:e1:84:cf:f3:e3:36:a9:a0:27:08:76:56:eb:42:
93:63:d3:bb:f5:48:c9:2d:8e:41:29:0d:77:06:7f:
45:bb:14:ea:69:51:23:c3:b2:61:4a:97:ee:73:e6:
0b:0c:89:c0:0a:70:3d:d4:54:4d:26:9e:82:23:f9:
66:7f:58:02:36:52:03:2a:4a:c4:00:db:73:9b:c0:
39:34:7d:40:66:3c:63:48:70:be:c5:e2:24:ec:a3:
4d:60:f2:fd:10:79:3c:ff:79:8b:e1:f0:d2:d4:94:
10:08:31:5f:1d:1a:87:5f:8b:06:45:dd:7e:16:2d:
e0:ce:5e:5e:1a:1b:8e:61:01:9c:81:37:7a:f2:16:
13:8a:18:51:90:d2:96:04:d9:4e:73:70:c9:1f:7e:
db:44:8f:d4:f1:c5:95:9b:f1:99:6b:72:48:c3:cf:
e0:7f:3d:d4:6a:a5:dc:f8:e7:1d:23:ef:f0:b6:44:
dd:11:b2:d0:cc:7f:af:f9:27:94:78:cd:1b:96:ca:
4c:10:78:40:82:de:d4:93:5e:0c:25:c5:f2:48:4a:
f3:6b:b7:e2:98:82:7f:be:0c:36:05:04:bd:16:7c:
8c:35:82:2a:11:32:94:f0:54:57:c8:1b:b7:da:e2:
61:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:00:58:A3:CD:21:A5:FE:C8:12:94:73:F5:FB:F9:8F:A6:D2:28:8A
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/DQBYo80hpf7IEpRz9fv5j6bSKIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.16.0/24
45.131.134.0/24
185.126.83.0/24
193.58.144.0/24
194.147.16.0/24
Signature Algorithm: sha256WithRSAEncryption
80:a4:8d:60:f7:68:47:3d:85:70:a3:b9:26:42:22:9c:ce:52:
8d:82:73:f8:84:d6:56:7c:81:5c:8a:62:3f:fe:8b:f9:2b:84:
ea:a2:dc:19:ca:30:6b:13:13:84:a9:1a:4a:36:16:be:0a:86:
f1:c0:e5:99:b1:86:ba:4c:08:73:12:36:8c:3b:03:23:59:20:
21:bf:ce:fa:6c:ce:be:96:28:bd:3b:fc:c9:35:61:c6:67:d8:
c6:d9:d0:59:60:7c:46:32:a5:28:18:c2:57:ed:10:21:6b:c1:
ce:cf:cb:c8:4a:07:03:91:c9:f7:3c:4a:ea:67:2c:cd:74:8c:
b9:7f:5f:f6:e6:e2:37:5c:2d:e0:a7:07:e2:9d:b0:22:db:d7:
4f:01:5b:5b:d3:67:d9:86:8c:0f:59:33:d8:6a:4c:1e:95:52:
29:bd:9f:c9:18:ee:71:27:3f:ad:77:86:d9:b0:0b:d5:f8:bd:
08:d6:78:a6:0e:47:94:e4:6d:ac:e2:f2:9f:93:86:91:43:a3:
66:d7:e8:fe:1a:85:1f:b5:b7:7b:d0:ba:e8:e5:fa:1a:e1:29:
77:f9:4e:e5:d1:e2:9c:43:89:02:00:49:8e:6f:26:ee:87:b5:
32:50:7d:0a:ba:39:b9:1b:a8:d2:05:36:28:88:5c:26:34:da:
6f:fc:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org