Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Rhh0I1OoOrXbTdnleL4AwWv8-5U.roa
File: Rhh0I1OoOrXbTdnleL4AwWv8-5U.roa (raw, json)
Hash identifier: CeDqjWf3xXmTzIx4XXbSJWbfR6jFRrUoLn8+IiR9jEY=
Subject key identifier: 46:18:74:23:53:A8:3A:B5:DB:4D:D9:E5:78:BE:00:C1:6B:FC:FB:95
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01890B9FEF5DCC2F9A142B35EEFE87182767
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Rhh0I1OoOrXbTdnleL4AwWv8-5U.roa
Signing time: Fri 30 Jun 2023 09:26:18 +0000
ROA not before: Fri 30 Jun 2023 09:26:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 45.90.19.0/24 maxlen: 24
194.147.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 18 Jul 2023 18:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0b:9f:ef:5d:cc:2f:9a:14:2b:35:ee:fe:87:18:27:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 30 09:26:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4618742353a83ab5db4dd9e578be00c16bfcfb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:85:97:f5:5b:e5:00:0e:27:f7:23:b0:71:
c0:ae:26:9d:a6:01:e6:08:7a:0e:81:2c:00:49:8d:
c3:18:ff:32:ac:a5:1f:9a:d2:88:18:4b:a7:60:b1:
63:11:f5:13:11:57:57:13:cc:71:d1:95:32:2b:6c:
a8:e3:ee:39:b9:2b:57:c1:98:c1:99:bb:27:01:8f:
cd:d2:cb:5c:56:b4:a6:c2:1f:bb:9b:25:96:d2:61:
f1:28:db:f5:f9:10:fe:32:c3:1e:53:a2:71:93:f3:
f9:bd:88:5f:5c:cc:2b:cb:5f:2d:13:24:1a:98:b8:
dd:73:5d:4e:b4:7d:53:d2:d7:02:6a:5a:f5:59:ed:
28:b4:de:0d:67:ce:1a:a3:82:43:4f:b2:0c:d1:ae:
02:88:99:60:e5:b6:95:fe:0e:cb:54:a0:4c:89:40:
60:1a:e6:1b:8b:0a:72:ce:55:6b:ae:d1:83:ac:4b:
3a:ba:0f:04:2c:59:05:03:9b:12:9c:6e:e6:0e:02:
4b:57:ac:d8:1b:a7:6e:73:7d:87:c3:b5:ce:e4:ad:
cf:5f:4e:06:d0:3d:f4:e9:3a:ec:aa:80:fc:51:68:
0c:49:fa:d8:d3:6e:5c:33:e8:93:51:ba:d6:fd:83:
90:15:a2:52:02:90:51:35:0f:25:39:7a:e6:3e:fe:
43:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:18:74:23:53:A8:3A:B5:DB:4D:D9:E5:78:BE:00:C1:6B:FC:FB:95
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Rhh0I1OoOrXbTdnleL4AwWv8-5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.19.0/24
194.147.16.0/24
Signature Algorithm: sha256WithRSAEncryption
19:10:e7:6b:9a:65:b8:3f:f0:55:1d:ef:5e:fa:b7:4e:d0:32:
0f:c2:30:98:91:e8:74:18:c0:6b:09:a7:33:a7:30:22:20:42:
e6:8c:70:96:c3:06:b4:c0:bc:9a:3a:4e:09:6e:6d:75:51:c9:
72:af:ef:bc:c1:b5:c4:99:c5:a4:b9:97:6e:55:8c:6a:87:4c:
3a:46:7f:7d:58:c1:d2:ef:4a:0f:63:6e:64:c9:2c:81:17:b9:
f0:25:e5:87:41:2c:20:ff:12:00:5b:f4:b1:1e:06:5c:15:b7:
b1:68:f6:8a:f1:f1:69:29:24:5b:99:57:14:5d:06:8a:f6:06:
21:be:cc:61:2c:4e:9a:18:cf:6c:d2:39:3d:ef:a9:d0:39:03:
8a:c4:6a:46:b8:05:4f:64:c4:b2:c1:b6:5a:53:d6:d1:2b:16:
35:d7:42:a7:07:39:60:0e:cf:82:19:7d:d4:ad:55:6a:cc:1e:
6e:d3:53:f1:29:05:d6:f6:3c:ed:80:69:f1:a2:05:4b:22:bf:
64:d8:a6:30:18:05:ce:b6:3b:2d:1e:12:a1:e0:15:78:90:d8:
6c:25:28:60:ab:69:09:5f:54:91:d7:47:f7:ac:b3:59:5a:e4:
7b:9b:56:b0:ff:21:e7:22:b1:53:86:f0:26:16:7b:e7:8b:8b:
0e:ce:b8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org