Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ODEjM5y-Hfb4N7UESMN9WypSOrw.roa
File: ODEjM5y-Hfb4N7UESMN9WypSOrw.roa (raw, json)
Hash identifier: E9Nn5HSTb0nob7Og/tU4Jp3ZBAtIMkEbHzWiAaYHkLU=
Subject key identifier: 38:31:23:33:9C:BE:1D:F6:F8:37:B5:04:48:C3:7D:5B:2A:52:3A:BC
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01890BDE31A1EA4A8670F5CABAB58A4142E7
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ODEjM5y-Hfb4N7UESMN9WypSOrw.roa
Signing time: Fri 30 Jun 2023 10:34:18 +0000
ROA not before: Fri 30 Jun 2023 10:34:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60318
IP address blocks: 45.90.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0b:de:31:a1:ea:4a:86:70:f5:ca:ba:b5:8a:41:42:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 30 10:34:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=383123339cbe1df6f837b50448c37d5b2a523abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:39:74:2f:b2:a6:e5:39:9e:25:96:23:cd:04:
f9:51:c6:ca:36:e0:c1:10:56:4a:90:d8:9f:e7:4e:
78:9f:ab:2d:6e:7b:e2:e0:38:9d:0e:05:19:1c:3a:
4e:28:40:c5:eb:2e:c9:c1:d6:82:0c:64:9e:38:5b:
f7:32:a5:b9:f0:30:93:ec:01:0e:ed:b4:10:cc:cc:
02:89:f1:77:7b:92:8b:30:04:b3:83:d8:e8:10:1a:
0c:a5:89:90:b7:5c:8d:ac:39:94:c1:92:7e:32:f0:
d2:c6:26:82:bc:e5:da:a1:fe:92:95:83:b3:55:e0:
24:9a:92:44:61:0b:bc:85:37:29:a8:f3:7f:ba:25:
67:9c:bf:50:ea:9a:38:d4:cb:fb:b4:60:8a:24:13:
68:20:c8:6a:95:33:1f:f1:2e:2d:81:5d:31:e2:56:
29:96:4a:ae:26:a0:b4:27:14:c7:21:1f:14:ca:63:
25:71:d4:b9:f1:3e:da:09:f9:41:cb:85:5a:da:57:
aa:28:a2:66:bd:fb:8b:a1:52:71:3c:09:46:de:74:
1c:bf:25:79:43:4a:d2:81:81:07:8f:8a:cb:17:fb:
dc:a4:ee:ce:69:22:e3:d8:62:41:21:af:20:20:44:
76:38:02:d9:d3:8e:11:96:48:b1:75:7b:5e:66:99:
c4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:31:23:33:9C:BE:1D:F6:F8:37:B5:04:48:C3:7D:5B:2A:52:3A:BC
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ODEjM5y-Hfb4N7UESMN9WypSOrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:da:e0:ec:18:e6:91:26:3e:cc:a4:ed:0a:33:3e:47:b4:e4:
f4:f6:3c:26:34:70:0d:99:f4:21:94:5c:84:05:d2:52:d0:0b:
b3:cd:a7:28:7d:04:e0:f4:68:50:95:a7:b3:ed:68:cf:45:6a:
8f:cc:6c:13:de:1f:b0:70:95:ce:37:ce:4b:93:bb:90:56:c4:
80:e8:1a:56:83:45:d6:ef:9b:b7:0f:96:3e:18:6d:a7:1a:68:
84:f3:c2:69:af:3a:85:7d:96:39:c0:56:ca:99:2e:40:f5:de:
18:07:c0:75:04:a8:28:9c:58:68:8a:54:18:b4:d4:35:76:fa:
d6:7a:4a:ab:db:68:77:2e:ca:9d:d0:07:2c:4d:1b:51:30:f6:
34:9e:b8:d8:d4:23:08:d1:af:5b:23:bf:6d:70:b9:f3:b6:f8:
81:c3:f9:49:22:e3:36:26:46:81:90:60:c5:d1:1e:b6:2e:87:
0c:08:06:51:f3:35:84:1e:3b:97:90:86:3b:5b:6a:92:66:e4:
c8:c0:75:f9:5b:61:c9:b6:89:8c:5d:e9:c4:9b:00:68:0e:05:
3e:1d:e9:5f:b0:fc:5d:5b:36:5d:7e:aa:f4:3d:70:cf:2c:a9:
9b:a8:c9:67:2c:33:fe:42:ee:3f:bf:85:0c:f7:b3:71:37:d3:
e2:2d:c3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:22 2024 by rpki-client on console-ams.rpki-client.org