Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IdSeNvYDIc4oXPqGskVpEE6zW10.roa
File: IdSeNvYDIc4oXPqGskVpEE6zW10.roa (raw, json)
Hash identifier: 0ZBUBGvTkzxbQPjE8m8ooemNwrEdSIm8ZYuZxHmdVK8=
Subject key identifier: 21:D4:9E:36:F6:03:21:CE:28:5C:FA:86:B2:45:69:10:4E:B3:5B:5D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0185777A02DFF613B857629FC9E25EFE2F88
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IdSeNvYDIc4oXPqGskVpEE6zW10.roa
Signing time: Tue 03 Jan 2023 11:52:42 +0000
ROA not before: Tue 03 Jan 2023 11:52:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211237
IP address blocks: 45.90.18.0/24 maxlen: 24
45.147.226.0/24 maxlen: 24
185.251.230.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
185.246.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Feb 2023 11:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:7a:02:df:f6:13:b8:57:62:9f:c9:e2:5e:fe:2f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 3 11:52:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=21d49e36f60321ce285cfa86b24569104eb35b5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:40:f8:1c:8c:31:57:02:ba:d3:dc:eb:b9:de:
4e:ba:c5:73:bc:cc:9f:2b:5d:c6:52:fa:ad:bb:81:
0f:1f:27:68:61:10:01:7c:27:ad:52:e3:b5:b7:3d:
96:95:2e:3f:e9:96:6b:d0:21:8f:ed:ab:2e:d0:50:
dc:a3:a3:ba:ab:da:6f:d8:47:73:0c:c6:44:74:6c:
f2:da:a5:72:2f:94:df:ad:a1:c1:33:f6:13:54:12:
d7:4c:8f:71:46:fe:8d:e5:66:6b:99:a2:7f:e6:ef:
8a:25:cb:1b:16:ba:ef:58:bb:58:fa:07:28:8c:30:
ea:0d:14:66:da:23:b9:e4:d3:d3:42:d5:10:f5:d5:
d8:9a:66:ce:ab:3a:01:0e:ef:a5:e7:8d:1b:7c:f0:
d1:e9:19:2d:f3:c7:ac:7d:77:5e:b9:44:8d:ab:0c:
dd:93:5f:bc:f3:d9:bd:6c:a6:b2:60:55:6a:94:94:
8d:73:93:38:70:44:13:9c:c4:78:a5:86:92:77:59:
f1:89:09:48:96:28:76:ba:1f:61:8e:3f:bc:51:c2:
01:12:99:86:3d:8c:9c:83:bc:9e:ff:91:8a:d7:24:
cf:a0:c7:30:92:ed:b1:87:02:27:f3:c8:6e:f8:39:
0f:b2:83:b8:84:e0:ac:f7:30:19:81:15:e3:22:b6:
61:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D4:9E:36:F6:03:21:CE:28:5C:FA:86:B2:45:69:10:4E:B3:5B:5D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/IdSeNvYDIc4oXPqGskVpEE6zW10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.18.0/24
45.147.226.0/24
185.246.113.0/24
185.251.230.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d3:f6:23:5d:51:41:43:42:50:fb:1e:da:1d:cf:e5:3f:2c:
fb:8a:76:e7:26:26:4b:e8:d0:37:d8:2a:7f:53:72:13:d2:63:
fa:23:3c:28:48:de:95:e4:f6:6f:28:54:8d:69:4e:bc:19:07:
ac:b8:8b:ed:c6:40:bb:d9:6a:45:42:a1:56:c0:a9:b3:b4:1d:
d7:3e:d8:50:a1:c7:02:b0:d6:bf:52:65:01:3b:3f:f3:9a:eb:
b0:d8:e3:5d:0d:7a:9b:aa:db:96:ca:b1:0a:07:c0:6a:fd:a0:
9b:6a:59:c9:09:f9:9d:a0:de:b0:e6:3a:9e:f3:02:ac:05:f6:
86:1d:d5:9f:37:1d:26:85:34:22:6f:7b:1c:ef:39:6e:7f:62:
0e:d9:d6:fc:b5:7d:1a:59:4f:e6:0f:34:ee:26:c9:36:ab:f1:
30:7c:3c:67:6e:be:63:93:98:1d:38:6e:c0:42:1b:36:bb:4c:
b4:eb:53:26:90:a7:b8:2a:24:6e:41:25:46:b2:b8:00:f1:33:
2f:81:e6:47:55:20:d2:c5:4e:7c:4d:8f:b8:49:2c:bd:b1:87:
2a:fe:15:44:b1:51:a5:83:37:d8:7d:b7:9e:fb:6f:37:57:3f:
02:20:c5:b3:23:5e:3d:8f:ec:ff:0e:d5:94:1b:df:18:53:61:
b4:60:df:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org