Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rTqfI5DmVwX0_jcf7dPugq2Ag3c.roa
File: rTqfI5DmVwX0_jcf7dPugq2Ag3c.roa (raw, json)
Hash identifier: V3IhU65/b6omuDPzJYQBhe36IjkcQQ4OjHhsVtRZbQI=
Subject key identifier: AD:3A:9F:23:90:E6:57:05:F4:FE:37:1F:ED:D3:EE:82:AD:80:83:77
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0186AE1694FE8110C28FC36F5D7C24CA5A0C
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rTqfI5DmVwX0_jcf7dPugq2Ag3c.roa
Signing time: Sat 04 Mar 2023 19:26:00 +0000
ROA not before: Sat 04 Mar 2023 19:26:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211585
IP address blocks: 185.206.248.0/24 maxlen: 24
45.90.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 27 Mar 2023 12:28:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:ae:16:94:fe:81:10:c2:8f:c3:6f:5d:7c:24:ca:5a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Mar 4 19:26:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad3a9f2390e65705f4fe371fedd3ee82ad808377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:7b:f6:55:61:f5:49:0f:9d:eb:5b:ba:4b:
b4:31:a2:29:ce:ae:e7:a3:e5:e0:2f:7b:fc:2d:e4:
85:40:75:96:a7:a8:75:55:48:f0:f5:fe:8e:6e:ab:
f7:40:52:c2:48:72:e7:a9:56:c6:be:a7:e1:38:55:
f2:c2:02:c2:80:77:74:7a:f4:34:8e:77:47:81:0e:
18:b3:ca:86:f8:02:e5:54:9c:63:db:46:75:7a:dc:
b7:53:9f:d4:1e:de:71:e2:c9:15:81:f1:ce:f6:62:
2a:65:9f:fd:0c:b3:b1:3d:fc:8f:b0:05:c1:69:a6:
80:6a:b1:2d:04:ae:17:dc:a0:c0:53:21:11:f2:4a:
74:92:90:27:2d:26:f7:74:3c:53:8b:48:89:95:a4:
26:b5:40:e7:f0:d0:3e:72:49:ed:ab:be:56:bc:a4:
6b:c4:5b:ac:74:3f:7b:b5:d3:23:f7:fe:7d:0b:29:
d1:6b:4e:db:a1:3c:d8:fc:5e:c0:24:29:f1:5d:22:
38:a1:45:b9:07:90:9e:46:c7:9f:4f:fb:4d:df:a2:
06:9e:96:60:5d:66:01:f7:12:f6:ef:87:59:3b:1a:
5d:ce:e1:a5:75:00:ac:c4:15:e0:31:47:ca:b7:b7:
1d:0f:1e:22:0a:51:98:21:7f:7f:d8:b4:8c:b8:b0:
a0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3A:9F:23:90:E6:57:05:F4:FE:37:1F:ED:D3:EE:82:AD:80:83:77
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/rTqfI5DmVwX0_jcf7dPugq2Ag3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.19.0/24
185.206.248.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:f4:e5:c5:eb:44:0f:ce:7c:11:30:95:91:80:ad:cc:0c:74:
a5:6a:a7:e6:72:2f:97:10:7d:54:50:cb:c7:f4:6a:ba:92:fc:
1e:e1:20:1e:de:30:50:f3:7d:99:4c:93:40:ae:d9:52:98:91:
c1:6a:99:6d:d0:de:7b:50:c2:15:b4:11:86:fc:d1:7a:6e:2a:
12:75:82:e4:cb:b7:3f:17:45:59:0c:11:1a:4d:e0:f8:26:86:
ac:82:7a:e5:51:54:1e:71:a4:9e:5c:6b:13:2a:61:e5:cf:28:
cd:95:3b:af:44:fd:d7:17:f8:1d:ed:c2:f3:f5:a8:46:b2:6e:
43:ce:e0:b9:4f:e1:b6:aa:b2:81:46:11:90:f6:29:35:a1:d1:
e9:94:c4:7c:39:c8:7b:16:68:f2:33:0f:b7:95:ad:fa:18:93:
d7:86:89:7b:b1:10:63:e6:e0:22:f5:67:20:4f:ca:9f:0a:d8:
14:76:00:5c:10:9d:39:85:66:9d:63:a3:ce:70:98:32:31:33:
7f:c1:28:c8:f4:ac:13:2e:81:fc:bd:a4:d0:94:9d:78:4f:fc:
f6:2f:1a:4f:61:b4:20:2f:c6:68:f1:5f:73:36:f6:45:95:55:
b1:32:34:84:6a:ff:d1:06:66:fc:c8:db:c3:dc:b7:5f:6a:da:
cd:ed:54:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org