Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/flT3sOYkjV8UmAMKdzPuiRe_1tU.roa
File: flT3sOYkjV8UmAMKdzPuiRe_1tU.roa (raw, json)
Hash identifier: cZrMw3bJgVZq/ESbZdqwqQIOXQ/a1rhZ7u84aiXcmGI=
Subject key identifier: 7E:54:F7:B0:E6:24:8D:5F:14:98:03:0A:77:33:EE:89:17:BF:D6:D5
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018626BD3D7B082182CD21033C249FDDC7CA
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/flT3sOYkjV8UmAMKdzPuiRe_1tU.roa
Signing time: Mon 06 Feb 2023 12:39:41 +0000
ROA not before: Mon 06 Feb 2023 12:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202513
IP address blocks: 45.90.237.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:26:bd:3d:7b:08:21:82:cd:21:03:3c:24:9f:dd:c7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Feb 6 12:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e54f7b0e6248d5f1498030a7733ee8917bfd6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:86:7c:ad:4d:fa:98:7f:0f:79:00:fe:2f:38:
b5:c9:96:8e:d7:88:ab:15:e3:e2:1c:20:61:37:ed:
55:34:49:f4:9c:f2:f0:dc:76:28:c1:43:02:83:b2:
b7:0f:01:e4:b9:c8:6d:88:d4:9c:0f:13:ec:5d:a7:
43:e8:2f:0e:99:2b:45:b6:7c:eb:84:54:6c:ce:ce:
3e:d1:2c:de:16:c7:f5:77:17:b2:ce:95:b1:59:f5:
0b:02:ad:40:9a:a0:19:f4:5d:84:ea:41:dc:46:a7:
6d:47:d0:57:eb:1d:62:0f:02:54:36:bd:26:b8:24:
fe:8c:44:c0:3b:53:8a:27:a1:9d:f3:38:40:2e:5d:
a0:b4:f5:fa:a0:a1:5c:51:4d:f8:56:08:bb:a1:85:
c9:11:98:e9:13:93:3f:4b:7b:01:10:c6:ce:8e:e3:
6c:4b:87:94:7c:a3:ed:be:85:0f:a8:45:d8:4f:e1:
dd:13:17:04:8f:2a:99:06:22:b8:71:bc:4b:a1:c4:
c2:e4:54:29:65:8a:d0:b8:72:b3:cc:4a:23:a7:4c:
c9:88:23:db:42:03:ff:ee:86:f1:3d:c6:ed:77:70:
e4:71:dc:7b:56:51:41:a6:a5:d8:e6:d8:d0:02:4f:
9c:27:50:f8:49:7b:47:d5:7a:86:d5:f7:94:c9:17:
f2:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:54:F7:B0:E6:24:8D:5F:14:98:03:0A:77:33:EE:89:17:BF:D6:D5
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/flT3sOYkjV8UmAMKdzPuiRe_1tU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.237.0/24
Signature Algorithm: sha256WithRSAEncryption
45:53:66:19:3c:3a:a7:d5:d5:44:5f:15:0a:bf:54:6f:ba:4e:
18:ac:c7:b6:2f:bc:31:27:23:c6:36:90:ff:ed:e1:2f:36:d8:
eb:89:ba:f8:cb:1f:6d:4f:61:37:d1:eb:88:07:aa:e7:2b:52:
20:ea:68:35:7f:81:ea:e5:8e:82:2d:75:f6:07:8d:fd:7a:92:
97:54:09:a8:6a:57:63:4e:22:88:1e:8b:ed:e9:44:99:4c:5a:
19:3e:cc:e7:b0:69:d1:af:c3:9f:16:44:4b:50:04:e6:be:c7:
a2:2e:3f:92:49:2e:42:08:9a:ea:c0:37:6f:d9:47:27:f8:41:
d2:dd:cb:70:f1:40:f4:f4:6e:54:a4:ac:58:3f:ed:38:23:07:
71:05:9b:98:70:b4:4d:40:67:b8:8c:09:d7:b7:eb:13:25:e9:
8f:7a:83:8f:be:35:28:18:35:3d:8f:b7:f9:a8:27:cd:07:62:
89:e6:5c:b0:86:b9:90:78:85:36:f2:a8:3a:b5:69:cc:63:b0:
5a:9c:8c:da:bb:0a:89:71:53:48:05:90:eb:7a:28:17:23:d7:
42:9c:41:ca:d4:be:56:6a:a1:87:e9:60:32:16:78:ca:04:91:
35:32:42:9c:17:70:fc:ed:35:81:67:cc:e0:38:08:a9:fe:77:
d2:3b:d2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org