Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FdtueKneP2W8mPSu_adAyueo3yE.roa
File: FdtueKneP2W8mPSu_adAyueo3yE.roa (raw, json)
Hash identifier: CVhP7GMZFgQCEjwDuN1J7IqX4KoRc2cUizV6l3BNK7U=
Subject key identifier: 15:DB:6E:78:A9:DE:3F:65:BC:98:F4:AE:FD:A7:40:CA:E7:A8:DF:21
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0187614E1EDB23D32140E355DD27066EB909
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FdtueKneP2W8mPSu_adAyueo3yE.roa
Signing time: Sat 08 Apr 2023 14:38:42 +0000
ROA not before: Sat 08 Apr 2023 14:38:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.90.16.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
193.58.144.0/24 maxlen: 24
193.58.145.0/24 maxlen: 24
45.147.224.0/24 maxlen: 24
176.125.249.0/24 maxlen: 24
185.225.0.0/23 maxlen: 23
45.131.134.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 12 Apr 2023 07:38:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:61:4e:1e:db:23:d3:21:40:e3:55:dd:27:06:6e:b9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 8 14:38:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15db6e78a9de3f65bc98f4aefda740cae7a8df21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f1:38:0a:5f:f4:b5:c1:70:5d:14:a3:6b:98:
06:b7:84:de:0d:0d:42:58:be:a7:7f:74:69:7d:25:
d9:48:a3:ce:da:5c:31:8d:32:2b:9c:3e:9c:4c:94:
06:bf:25:af:b6:01:c2:85:86:96:fd:47:92:ff:7f:
08:ce:ec:dc:9a:a6:ef:92:e3:76:c6:0d:57:ec:35:
16:5e:9a:34:a2:4e:4b:5f:84:c3:eb:a8:f5:db:91:
e9:d0:35:8d:ec:8a:09:00:58:69:ae:55:d9:86:56:
2b:96:27:9c:9f:4f:a0:05:ad:e1:ce:c1:72:d6:11:
5e:6d:8a:72:33:0d:48:2f:d4:0e:70:e2:73:54:4d:
db:1e:d6:0c:65:b6:1a:38:2a:46:ad:01:86:84:8f:
8c:58:d8:00:13:5a:b2:49:73:cf:9f:8d:fd:0e:66:
87:72:16:4a:36:61:21:93:54:47:f7:96:b7:bc:be:
ee:1c:42:8d:f1:f4:2f:01:00:60:db:90:f9:62:89:
12:e3:f9:63:97:bd:3f:0d:7e:a0:fc:b1:18:4a:ed:
b8:47:07:ef:35:b0:30:6b:00:80:9d:98:c5:5c:82:
be:14:62:2a:46:f5:88:5d:d1:61:c7:17:30:62:63:
64:4c:95:7e:48:33:84:b8:ab:21:42:4f:51:8d:70:
92:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DB:6E:78:A9:DE:3F:65:BC:98:F4:AE:FD:A7:40:CA:E7:A8:DF:21
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/FdtueKneP2W8mPSu_adAyueo3yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.16.0/24
45.131.134.0/24
45.147.224.0/24
176.125.249.0/24
185.218.20.0/24
185.225.0.0/23
193.58.144.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:f4:b4:fd:88:84:26:b7:f6:bb:fb:46:c1:54:39:16:15:87:
47:2c:4a:d6:13:31:4b:5c:95:d6:24:e3:12:27:45:9e:73:71:
1b:4e:8b:c7:d0:85:6e:94:f3:53:df:8a:71:c8:10:f0:a0:26:
a3:b0:39:2a:92:b4:6c:07:87:80:92:a0:c6:96:2c:99:ec:74:
37:ca:8c:f5:9a:65:e7:44:59:e0:38:5b:3b:18:d0:58:f0:45:
6e:62:ac:c0:ef:8c:f2:dd:9d:fa:28:67:c5:ba:3c:d2:36:b8:
d9:de:e1:d3:b7:9b:f0:de:6f:64:80:3e:2f:9e:3a:1b:a4:cb:
d4:20:36:2d:08:26:e3:c0:9c:63:97:5b:ae:4f:ae:54:79:ba:
53:48:ff:a7:57:8a:87:5d:07:af:be:f8:c2:e2:a6:ea:87:91:
0b:ea:4c:38:f2:3b:b8:17:bc:70:e4:1b:ff:71:4b:80:ed:a1:
7b:0b:1f:b4:e7:31:af:f2:ce:98:d0:d2:7b:1c:59:ca:25:6f:
37:e4:f8:dd:14:71:3d:cf:10:42:8b:03:8b:43:5c:b1:8f:d0:
5d:c2:f0:cc:7c:c8:2e:74:66:2f:8d:10:a5:f1:f0:db:97:53:
38:b0:b5:0f:5f:25:ae:59:62:dc:21:6b:e6:9e:0c:58:9d:3d:
a3:14:5d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org