Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/3bdVStn8a7oi6AG73sb03sh1lKs.roa
File: 3bdVStn8a7oi6AG73sb03sh1lKs.roa (raw, json)
Hash identifier: OKV4wb+ajA14WnnvXKoOwgw7YiS9+gr7MxP9l/qirUc=
Subject key identifier: DD:B7:55:4A:D9:FC:6B:BA:22:E8:01:BB:DE:C6:F4:DE:C8:75:94:AB
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 018E8A3492FF891F2179A43B1012C0819D49
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/3bdVStn8a7oi6AG73sb03sh1lKs.roa
Signing time: Fri 29 Mar 2024 12:34:45 +0000
ROA not before: Fri 29 Mar 2024 12:34:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12846
IP address blocks: 90.188.0.0/20 maxlen: 23
90.188.16.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 16 Apr 2024 11:47:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:8a:34:92:ff:89:1f:21:79:a4:3b:10:12:c0:81:9d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Mar 29 12:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddb7554ad9fc6bba22e801bbdec6f4dec87594ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:df:13:4c:7a:ff:27:d8:07:46:2e:8c:fc:
d5:48:d8:7e:1a:52:ef:67:82:9b:23:f9:e0:dc:c0:
8d:96:7f:95:69:27:21:f0:be:aa:36:98:7d:87:25:
03:83:5d:e6:97:59:ed:38:f4:7e:19:e0:70:38:1a:
3e:94:c7:7e:e4:19:7b:52:f9:7c:ad:c0:54:84:b6:
e8:62:be:11:c4:f8:f0:59:73:ca:ff:34:fa:1d:c0:
d8:30:0d:43:4a:fd:58:e8:8f:ab:d2:dd:aa:57:06:
07:78:37:a4:56:22:fb:97:77:11:e0:03:e3:f8:26:
5d:37:6a:9d:03:b0:2f:19:5e:6c:1e:d7:c5:4c:7f:
6e:39:05:d0:b3:8a:de:8c:9a:4e:0b:5e:b4:f6:9f:
21:a6:b1:90:85:be:03:d7:44:89:95:37:94:be:b4:
4e:cd:94:21:41:e4:67:cd:19:a6:e9:db:be:28:65:
e3:e8:f2:a7:73:d0:9f:18:ef:9b:98:7e:35:4d:cd:
d4:96:74:57:4e:3f:86:2a:e4:5c:29:c6:3c:0a:ee:
00:74:6f:73:0e:02:a4:16:eb:52:07:1c:b5:ce:6f:
5f:f2:ad:b4:16:31:3b:67:30:f9:69:45:13:1f:98:
67:b2:04:d5:48:39:0c:7d:86:b8:22:f7:92:b6:9b:
78:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B7:55:4A:D9:FC:6B:BA:22:E8:01:BB:DE:C6:F4:DE:C8:75:94:AB
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/3bdVStn8a7oi6AG73sb03sh1lKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.188.0.0/19
Signature Algorithm: sha256WithRSAEncryption
17:dc:22:e0:99:2c:fa:5f:46:ea:63:57:ce:c1:ce:a5:de:3e:
da:31:1f:bf:34:f0:53:fa:cc:a7:dd:38:a4:81:56:9e:c5:d4:
92:5d:ac:03:7f:86:3a:d5:6f:54:dd:3e:28:0b:a2:19:13:e4:
47:b6:91:11:e6:a3:59:93:c0:20:c0:8a:0e:01:68:88:7c:a9:
80:9a:e5:ad:87:fe:8b:c8:b1:9f:6a:c5:65:9d:27:11:d5:c3:
fe:9d:d1:17:0f:ae:85:62:8a:52:5d:83:37:9f:91:81:c2:10:
32:e1:28:ba:6c:58:3c:0e:0c:ad:3f:45:f9:8c:58:b4:dc:9d:
5b:cd:e9:4b:9d:77:a1:a5:55:85:05:5f:7c:f2:9b:1a:ad:63:
53:d7:c6:49:da:ff:e6:4f:ca:a6:9d:60:c1:df:a3:eb:9f:56:
2c:cc:63:9b:9d:17:23:d2:42:47:90:96:7e:6a:88:28:37:8d:
d8:09:22:5c:7f:7a:cc:f1:23:eb:98:5d:02:d2:7e:13:fe:14:
46:8e:34:89:22:77:2b:32:8e:db:1e:95:55:a5:d0:c6:7e:b4:
c5:60:e3:18:f6:a2:44:cf:3a:29:16:0e:f4:0b:33:fc:09:69:
0e:09:df:02:43:30:73:d1:8a:56:42:6e:0c:d1:93:79:21:db:
9d:72:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 16 15:59:15 2024 by rpki-client on console.sobornost.net