Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tgt87AR4ugf1-Zz7qI9l1WVqQjg.roa
File: tgt87AR4ugf1-Zz7qI9l1WVqQjg.roa (raw, json)
Hash identifier: L8j4GOKl1shO1H7o6ZQt0ev5Ixfpo1Wxp09MOaDh80w=
Subject key identifier: B6:0B:7C:EC:04:78:BA:07:F5:F9:9C:FB:A8:8F:65:D5:65:6A:42:38
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018571B641FE350C6670F70A4192C64E0AE5
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tgt87AR4ugf1-Zz7qI9l1WVqQjg.roa
Signing time: Mon 02 Jan 2023 09:00:47 +0000
ROA not before: Mon 02 Jan 2023 09:00:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 45.90.17.0/24 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.64.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Jan 2023 11:58:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b6:41:fe:35:0c:66:70:f7:0a:41:92:c6:4e:0a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 09:00:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b60b7cec0478ba07f5f99cfba88f65d5656a4238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:43:2a:a0:9c:8a:54:c1:0a:67:ed:3e:48:ac:
18:6c:57:3c:ca:75:25:f4:c7:50:45:17:35:3e:06:
30:24:68:55:d4:b6:f7:fb:32:dc:c9:68:a4:8f:9d:
b2:a7:a5:d1:c8:68:24:f8:41:c5:eb:8f:50:39:0d:
48:11:22:b3:c7:2c:21:cc:58:04:cf:b9:02:f1:19:
1a:80:ce:f6:73:36:78:74:9b:6f:95:91:75:65:9f:
36:54:aa:e9:11:ff:c4:08:05:d1:a6:70:db:bf:39:
f3:96:1a:bf:68:19:b0:a7:47:a3:85:3c:d3:b3:3f:
67:c4:e7:1e:80:bc:50:ae:ad:9e:07:f6:b2:84:ab:
3f:57:06:35:84:ca:e9:bf:79:ce:2d:8a:d0:53:31:
9d:c2:1a:23:99:90:80:1f:7c:78:45:cf:9a:1a:b4:
2d:be:7d:b0:03:8e:65:4d:85:2b:93:3a:46:3b:e3:
06:6e:2d:f8:d4:d4:fd:8d:94:6c:9b:d6:06:a9:f4:
d0:51:ef:ea:f0:82:cf:8e:fc:74:9e:24:18:46:66:
ae:bb:cd:ec:68:3f:1a:d6:84:13:75:77:43:ab:eb:
92:3f:f7:a4:7a:14:73:d7:b5:30:d2:86:4b:f6:4b:
fe:75:5a:52:b5:f4:64:0c:d9:df:8c:27:71:aa:7d:
35:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0B:7C:EC:04:78:BA:07:F5:F9:9C:FB:A8:8F:65:D5:65:6A:42:38
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/tgt87AR4ugf1-Zz7qI9l1WVqQjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.17.0/24
193.58.146.0/24
194.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:86:d8:d6:bc:c3:42:8f:a7:e1:3c:63:a2:40:c4:41:f0:1b:
92:4b:45:33:3e:01:ea:cf:3d:0b:40:2a:d6:d4:a7:af:15:f4:
f7:d9:02:3a:7c:a3:f9:0c:5d:49:77:eb:23:cc:a5:60:40:5c:
b2:43:28:7d:17:3d:66:c7:a0:d6:fe:74:c0:ca:08:3a:b6:20:
ca:38:67:ff:1a:81:0a:4b:32:94:f1:24:92:44:0b:c2:1d:fc:
b0:30:81:71:12:51:16:2b:27:c4:fe:64:1d:b9:5f:d2:7a:6a:
9c:cc:22:e3:37:a7:6d:2e:fd:7c:cd:ee:91:0d:fa:1a:1e:02:
df:d0:a0:d5:49:4a:5c:9c:14:77:55:d4:60:3e:14:00:4b:fa:
cf:14:bc:90:63:eb:e0:28:8c:56:3b:5d:63:54:3d:dc:93:42:
07:43:40:af:1c:eb:4a:68:49:34:3f:e5:9b:37:25:ff:df:52:
e2:fa:a4:83:2b:b4:ec:65:51:57:1f:5f:64:9d:4a:b4:32:b7:
ae:1f:5c:32:2b:45:6f:08:0a:e5:35:48:63:08:1f:af:13:05:
5e:27:32:84:6f:b0:c1:4d:b5:c9:d2:ff:3f:d8:fd:ee:eb:e0:
8d:d4:3d:5b:3d:06:50:0c:48:60:cf:b1:d7:7e:f7:99:0a:f0:
66:72:2f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:43 2024 by rpki-client on console-fra.rpki-client.org