Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pJB5WvOv1IPFwVxFJONj8PVQGgI.roa
File: pJB5WvOv1IPFwVxFJONj8PVQGgI.roa (raw, json)
Hash identifier: Rnr4yEqjD2m3vcm8XmVQH57eKIfQtGMi8dUglAnJmmI=
Subject key identifier: A4:90:79:5A:F3:AF:D4:83:C5:C1:5C:45:24:E3:63:F0:F5:50:1A:02
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01879DC7B3A386C18D6B76D36DE76C1A56E0
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pJB5WvOv1IPFwVxFJONj8PVQGgI.roa
Signing time: Thu 20 Apr 2023 08:28:43 +0000
ROA not before: Thu 20 Apr 2023 08:28:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 399976
IP address blocks: 45.90.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 20 May 2023 08:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:9d:c7:b3:a3:86:c1:8d:6b:76:d3:6d:e7:6c:1a:56:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Apr 20 08:28:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a490795af3afd483c5c15c4524e363f0f5501a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e6:7e:93:6d:d5:58:55:36:09:86:ef:1b:c8:
80:16:d8:1a:f1:21:a8:0f:40:2a:ea:9c:7c:a0:31:
1f:9a:d6:d5:a3:42:74:b9:92:2e:b1:c3:9f:8d:d5:
41:e3:70:68:99:9d:b9:ed:21:72:d6:e8:fe:57:9c:
0a:ed:3b:a3:47:c9:97:fc:9a:19:1f:58:b3:a2:fb:
58:2e:2a:fa:d7:82:56:62:81:c0:8b:bb:31:33:b8:
62:5d:12:ae:4a:92:36:5f:57:1d:23:d1:a9:7c:3f:
50:65:a0:e6:23:13:44:bb:b4:b2:df:3a:e1:11:c5:
84:92:0e:75:74:1f:f3:3d:d6:51:47:17:9f:35:c5:
e0:cc:95:88:3f:83:6d:2c:5a:57:4e:3d:23:c6:1d:
4b:9e:87:84:5f:fb:1c:8a:ee:65:ef:64:97:a5:b5:
c0:66:93:b6:51:6c:8c:e2:85:c0:07:86:91:4c:38:
06:b3:c2:38:a0:63:f8:9c:9c:c4:e2:33:01:11:a4:
8b:38:ab:64:66:b5:da:7c:2b:6f:1a:8e:cc:32:86:
78:f5:52:c2:37:90:40:0d:34:05:05:37:36:43:d6:
7c:5d:42:56:1f:70:1b:09:20:d8:78:53:ec:bb:48:
71:24:93:e8:4a:69:0f:7c:5a:0e:bc:87:a6:43:0d:
5e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:90:79:5A:F3:AF:D4:83:C5:C1:5C:45:24:E3:63:F0:F5:50:1A:02
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/pJB5WvOv1IPFwVxFJONj8PVQGgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.17.0/24
Signature Algorithm: sha256WithRSAEncryption
54:3a:f7:b9:ca:75:d5:7a:a1:9b:18:97:ec:b6:c1:1b:1c:3f:
59:7e:ee:08:19:34:d1:57:46:04:09:3c:d7:93:6b:e6:39:56:
d8:87:ba:62:6b:f4:29:b5:bd:ba:30:53:bf:3f:27:6f:f1:b9:
b6:90:aa:fe:f2:49:21:f8:87:bd:80:24:20:42:89:ba:17:c6:
8d:3f:45:93:bc:13:c6:c7:41:47:55:2e:93:e6:ea:0b:e9:80:
16:df:cd:bf:9b:ad:3c:65:2e:6c:ba:60:03:a1:5a:52:48:f2:
90:90:2a:bf:78:a4:5b:cd:aa:5a:ed:8b:55:0f:4f:d3:4e:55:
1a:10:ef:a1:b3:ba:82:73:ad:a5:c5:b6:ef:bc:67:b9:a8:28:
af:7f:8d:4d:f0:11:e1:ac:8f:f5:35:69:1b:a4:0b:db:ca:3d:
76:2d:1e:7f:f0:1d:84:e7:7c:f1:3f:7b:5d:3c:70:53:d9:20:
5e:93:29:d0:d4:1a:36:c2:d0:a8:5d:2e:93:dc:77:3c:be:e3:
7b:17:b7:f7:d0:dd:ec:f0:29:83:60:34:4c:a0:b7:f5:34:33:
79:50:98:c2:b1:97:df:c3:24:76:75:c5:b3:8c:e3:46:a6:1e:
81:cf:62:3f:e5:bc:1d:fa:3b:3f:fa:20:b4:3a:09:7d:25:22:
91:42:4d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org