Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SdRRp3Lowsea69TbVR7t1-rrZGE.roa
File: SdRRp3Lowsea69TbVR7t1-rrZGE.roa (raw, json)
Hash identifier: fREmxQZ94AEgYwVwnYL6zKHIPTkjjP6PdCX2UDF7a0k=
Subject key identifier: 49:D4:51:A7:72:E8:C2:C7:9A:EB:D4:DB:55:1E:ED:D7:EA:EB:64:61
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0185777F7E1A1482BFBE142D89D6E0A20796
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SdRRp3Lowsea69TbVR7t1-rrZGE.roa
Signing time: Tue 03 Jan 2023 11:58:41 +0000
ROA not before: Tue 03 Jan 2023 11:58:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 45.90.17.0/24 maxlen: 24
185.218.20.0/24 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 06 Feb 2023 11:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:77:7f:7e:1a:14:82:bf:be:14:2d:89:d6:e0:a2:07:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 3 11:58:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=49d451a772e8c2c79aebd4db551eedd7eaeb6461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:01:a8:6f:8c:38:72:a3:01:75:4f:80:29:87:
cc:4e:86:c9:90:5c:ed:c7:d9:bd:c3:a7:5d:df:59:
8c:34:c7:03:a2:5e:44:36:b2:32:f7:fb:44:c8:a7:
8e:c9:d1:d1:fe:8e:14:82:38:60:2e:91:2a:41:07:
d1:a0:ef:06:d0:05:c2:7c:15:7c:56:7d:57:bc:9a:
b9:95:81:e1:e3:dd:63:3c:06:e5:f6:c6:dc:0a:be:
67:b2:8b:0d:bd:81:a6:27:45:83:e7:90:77:ba:39:
d5:8d:9c:63:6a:00:e0:c8:e4:ef:a4:20:8d:3c:48:
41:3b:a3:72:d8:9a:50:68:e7:f8:5b:7f:cf:fb:5a:
44:90:1b:7e:23:45:7b:5e:ed:50:fc:00:5b:10:c2:
36:c2:55:72:34:44:3a:e7:5e:b5:8d:5f:f9:3e:fd:
04:d2:4b:34:88:c0:fc:64:2d:a1:66:f0:89:f7:6f:
99:e1:4f:e2:c9:31:01:92:43:92:56:e5:21:14:b1:
dc:db:ec:35:67:31:e8:c5:63:6c:38:6c:d4:ec:09:
11:ed:12:18:5c:cd:d7:d2:28:94:0d:5f:54:d8:7a:
e1:38:24:cd:0e:f1:44:c2:22:ce:46:0e:7c:20:57:
8f:88:8c:7f:d4:1b:24:4a:0f:83:fb:7b:53:94:55:
e6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D4:51:A7:72:E8:C2:C7:9A:EB:D4:DB:55:1E:ED:D7:EA:EB:64:61
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/SdRRp3Lowsea69TbVR7t1-rrZGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.17.0/24
185.218.20.0/24
193.58.146.0/24
194.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
63:76:ff:d5:14:94:d6:92:2f:22:21:f6:dd:e7:cf:b6:19:b2:
e4:cb:8d:da:20:a3:f5:02:10:74:c5:4d:b9:6c:dc:65:a2:e6:
46:70:db:50:7b:c8:a5:1b:6f:69:a1:14:11:23:dc:15:4f:4f:
b8:43:82:b3:9e:2d:1a:ab:28:15:23:02:62:9d:8f:1c:a6:aa:
c0:f7:82:42:05:83:9b:ce:41:dd:c0:ef:65:97:bc:48:9d:ec:
4c:c5:7f:32:7f:70:bf:b7:7d:44:36:5c:dd:5d:68:ec:68:7c:
54:33:03:e8:ce:df:c1:43:3d:c6:34:f1:39:6d:5d:6f:7f:07:
e3:f2:81:3c:a9:be:b7:17:27:c8:62:9c:8c:42:c3:3c:41:4c:
87:ca:70:86:8e:ee:d8:e4:a1:c9:71:e4:80:1a:91:de:c7:e5:
7c:09:57:e8:cc:bd:57:d0:12:26:32:78:2c:07:1d:21:33:07:
d9:14:9e:af:e6:dc:de:fa:83:4d:54:8f:b4:68:ec:99:35:0a:
d1:4c:2b:d6:eb:91:34:24:bb:30:bb:3c:99:43:5c:79:4f:a1:
2f:7f:92:88:62:25:06:76:87:32:ec:83:34:1b:26:6e:4e:8f:
70:48:5f:84:85:57:b8:c4:cb:a4:56:76:e3:65:4c:ea:93:33:
f8:2f:e2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:26 2024 by rpki-client on console-ams.rpki-client.org