Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/SEJ1k7cPbCpTPLLXRiUwJ2vdBMs.roa
File: SEJ1k7cPbCpTPLLXRiUwJ2vdBMs.roa (raw, json)
Hash identifier: ZPm9PeF9tOSFqooJ5rQ6EbgT771A0y+XD4LjNQacXt0=
Subject key identifier: 48:42:75:93:B7:0F:6C:2A:53:3C:B2:D7:46:25:30:27:6B:DD:04:CB
Certificate issuer: /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Certificate serial: 01856F14B6F198933BC35643EF6067AEE6C8
Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/SEJ1k7cPbCpTPLLXRiUwJ2vdBMs.roa
Signing time: Sun 01 Jan 2023 20:45:06 +0000
ROA not before: Sun 01 Jan 2023 20:45:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8220
IP address blocks: 90.152.64.0/19 maxlen: 19
95.175.208.0/20 maxlen: 20
90.152.64.0/18 maxlen: 18
212.36.32.0/19 maxlen: 19
90.152.96.0/19 maxlen: 19
90.152.0.0/18 maxlen: 18
95.175.192.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:b6:f1:98:93:3b:c3:56:43:ef:60:67:ae:e6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Validity
Not Before: Jan 1 20:45:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48427593b70f6c2a533cb2d7462530276bdd04cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:36:ce:9a:21:a9:c2:ab:d5:c3:e3:f0:a9:a0:
7b:20:b7:62:80:e8:5b:a7:11:36:53:0b:9e:f4:8f:
86:0e:cc:9a:a9:7c:d8:ae:1e:9d:02:fe:d1:2f:a3:
5d:79:43:75:04:b8:53:a0:55:39:e6:71:0d:96:e5:
6a:28:e8:59:63:89:7f:98:4c:23:92:f6:83:0a:fd:
53:32:75:05:ac:a7:cd:c4:32:80:b8:a1:bb:a8:c2:
00:15:74:aa:fc:03:df:be:cc:1a:bf:ce:e7:32:d6:
82:14:66:82:2c:14:39:9d:13:7c:e0:1d:6a:98:d3:
c5:be:85:7d:37:54:2e:f5:e5:e5:02:00:b1:19:20:
75:86:da:8b:6a:ab:4e:e2:3c:5d:ae:d4:70:70:3a:
69:9b:38:b2:c7:fc:6a:47:a5:72:3e:3f:ec:94:cc:
3a:ad:70:07:45:05:55:ea:f6:88:fc:ce:01:7e:bf:
97:a9:1c:8b:2e:71:f8:75:37:68:75:e9:b8:b8:bf:
1c:c0:d5:da:29:5e:84:01:16:46:47:75:25:9f:27:
66:e5:ce:53:ae:c1:3e:6a:54:3d:ad:b3:7a:f9:d7:
b4:4f:d4:65:12:e7:c0:67:79:b8:62:8f:b8:d1:b2:
cd:63:c9:6e:a2:5a:3b:32:84:3b:5b:5e:f1:15:58:
03:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:42:75:93:B7:0F:6C:2A:53:3C:B2:D7:46:25:30:27:6B:DD:04:CB
X509v3 Authority Key Identifier:
keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/SEJ1k7cPbCpTPLLXRiUwJ2vdBMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.152.0.0/17
95.175.192.0/19
212.36.32.0/19
Signature Algorithm: sha256WithRSAEncryption
45:a3:ae:9b:10:ba:14:7c:ea:4c:66:07:a1:36:c2:83:c6:19:
0e:2e:f3:7f:31:8b:45:a2:bf:5e:21:44:fa:80:bb:c4:88:a2:
c7:ed:b8:37:cf:9e:75:46:83:74:bc:35:62:5f:5a:7c:1f:b2:
fb:04:51:dc:3b:b5:02:42:13:12:f9:46:9c:48:00:87:c4:68:
e5:54:b9:30:c3:cb:86:c0:36:07:6a:fb:70:17:92:50:9a:71:
4f:30:4d:2b:f5:ea:a6:69:5e:8b:eb:20:3d:d5:7c:d7:6c:09:
49:b1:3e:09:b7:90:93:4a:95:8d:d7:24:26:31:33:fc:a2:19:
eb:00:f8:e1:46:df:bd:45:2d:e0:1d:0c:f0:7e:e5:e5:f3:33:
bb:89:63:6f:08:db:bb:06:93:c6:05:c7:84:10:ee:8e:2b:98:
08:53:50:74:c5:b0:7a:46:be:5b:3e:fe:54:90:c2:a4:ed:b3:
3a:5f:9c:67:15:1d:d4:00:f1:30:ac:9d:80:1b:ef:af:87:a0:
1f:81:10:93:3e:39:e8:c3:9a:c0:f0:ec:2e:01:d7:67:c2:3b:
86:65:10:d8:2d:be:de:bb:7c:be:01:82:a7:a5:1a:e1:63:22:
f3:96:60:b6:7a:eb:a2:2b:cc:0c:49:84:23:72:07:aa:f6:7e:
13:0e:ca:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:49 2024 by rpki-client on console-ams.rpki-client.org