Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XmbfWMevS4bxtwKxnyUyfNfKDXI.roa
File: XmbfWMevS4bxtwKxnyUyfNfKDXI.roa (raw, json)
Hash identifier: yh71SYnb0WvLsyVQCvAFmPdnhPdOcAerFCxJS9ZbycE=
Subject key identifier: 5E:66:DF:58:C7:AF:4B:86:F1:B7:02:B1:9F:25:32:7C:D7:CA:0D:72
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0188D7F4307223039EC0ADD93B28C6418E30
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XmbfWMevS4bxtwKxnyUyfNfKDXI.roa
Signing time: Tue 20 Jun 2023 08:38:04 +0000
ROA not before: Tue 20 Jun 2023 08:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209043
IP address blocks: 45.90.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 08:56:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d7:f4:30:72:23:03:9e:c0:ad:d9:3b:28:c6:41:8e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 20 08:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5e66df58c7af4b86f1b702b19f25327cd7ca0d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:da:84:f3:9b:d8:41:e0:5e:73:69:01:73:43:
d0:7c:e7:fe:08:d9:ed:1e:da:ed:44:a5:dd:16:9c:
97:8b:d5:7d:21:81:77:64:03:35:5e:39:96:90:74:
ad:34:f0:05:a1:67:aa:d4:c9:b3:a3:86:bb:38:83:
22:34:02:c3:14:d0:73:99:c1:ed:65:9c:e6:94:46:
49:10:01:de:4a:4e:df:e9:ca:42:9c:61:7d:90:b4:
ee:7a:2e:f5:04:80:05:55:28:24:b3:aa:a7:1a:de:
9c:d7:2e:70:a8:5e:71:b1:ff:21:48:4f:bb:8f:da:
5e:96:18:0c:6c:f7:0d:b5:40:f6:dd:5b:1e:96:52:
98:86:6f:b7:89:56:13:4f:cc:1e:2e:0b:b1:a9:60:
17:68:ea:0d:26:22:be:a3:99:80:ba:4c:0a:d4:79:
4c:af:9d:bf:d1:ba:bd:de:62:69:d1:c3:2a:b2:5f:
3b:ec:e8:f6:24:93:42:b5:84:8c:20:a9:e7:62:87:
cb:12:75:ce:b9:68:04:7b:37:36:2f:bc:ea:87:8b:
ea:00:03:59:b9:da:b0:35:cc:ed:13:d8:2d:f7:43:
38:8e:3c:d2:60:1a:fd:dd:07:30:38:5b:6a:64:b3:
ee:e2:f0:96:e8:b1:c9:03:4f:a5:ac:36:d6:3a:8a:
9f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:66:DF:58:C7:AF:4B:86:F1:B7:02:B1:9F:25:32:7C:D7:CA:0D:72
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/XmbfWMevS4bxtwKxnyUyfNfKDXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.16.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:51:d3:c1:58:68:70:ca:8c:dc:43:b5:af:fd:13:06:fc:08:
9f:dc:5f:b8:ae:c6:23:fb:ee:72:42:8e:5a:fb:b9:1d:92:6a:
f2:d4:52:6a:2a:f7:13:b0:1a:e6:1e:86:f3:29:ad:2e:1d:da:
30:a5:8e:8e:66:52:ea:1e:9c:2f:7b:25:8b:1d:bc:58:17:1a:
de:cf:7c:ba:52:b5:99:2b:a9:3c:7a:81:6f:a6:8d:ed:34:b7:
93:d2:64:cc:14:09:99:7d:5e:48:b0:0b:1a:cd:ce:d4:24:d1:
09:c8:fb:fc:41:05:ac:92:64:48:f1:be:f7:03:38:c4:13:6e:
61:a8:fc:43:ca:98:b7:27:1e:1e:19:e0:cf:99:b6:3f:b3:6d:
43:4d:6e:7f:02:65:26:d3:78:32:ad:04:45:10:b4:c2:58:a4:
88:94:17:10:78:24:2c:fc:a3:23:7f:77:7a:81:e4:b9:07:ea:
16:ab:c0:95:ef:a6:2e:10:ab:00:d9:a3:b9:a1:ea:98:88:78:
91:e1:84:9f:cb:35:be:96:cd:60:23:a3:72:da:fe:34:7d:7d:
65:20:67:4d:f0:e9:8a:19:95:c2:bc:6e:a0:25:43:a6:82:1d:
aa:9d:2e:69:c3:5a:a8:f7:f8:d2:ec:9c:cf:0f:c7:96:ad:3b:
c1:36:43:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:42 2024 by rpki-client on console-fra.rpki-client.org