Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ACIN7X4VYfTNDKYF7Nmrk_mC3JU.roa
File: ACIN7X4VYfTNDKYF7Nmrk_mC3JU.roa (raw, json)
Hash identifier: 94AQdOS9PXMRdvbgx8dSbhGyYej8y3Pvp3RNy+WtmJk=
Subject key identifier: 00:22:0D:ED:7E:15:61:F4:CD:0C:A6:05:EC:D9:AB:93:F9:82:DC:95
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018CC86F455808ED6A623F5276547C07439E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ACIN7X4VYfTNDKYF7Nmrk_mC3JU.roa
Signing time: Tue 02 Jan 2024 04:29:44 +0000
ROA not before: Tue 02 Jan 2024 04:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202890
IP address blocks: 45.9.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Apr 2024 11:12:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:45:58:08:ed:6a:62:3f:52:76:54:7c:07:43:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00220ded7e1561f4cd0ca605ecd9ab93f982dc95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:2f:29:97:6e:0a:37:14:a7:19:41:4c:28:
a2:b1:04:d7:3f:0f:ff:2c:5a:91:e0:96:6e:00:9b:
28:e6:f8:ef:13:9c:e6:d5:63:5f:47:de:c7:57:7a:
6b:24:81:b2:0e:fe:8b:95:ec:6e:87:54:4e:c8:45:
b6:fa:51:bc:47:84:b3:bd:87:5e:9b:30:cc:b4:77:
2d:57:d9:ca:ca:6f:53:5d:f5:0f:72:e0:b4:78:ef:
e7:82:d2:ef:1d:b5:06:c4:5a:a4:14:e1:c7:db:66:
42:45:8f:f2:d2:10:77:8b:59:a5:e6:0d:8d:a4:5d:
a8:e3:09:e0:22:aa:3e:5d:24:4c:e5:03:49:67:1f:
b9:bc:08:3b:97:21:2e:a5:02:ef:9d:bd:89:96:c9:
6d:52:9b:09:84:69:ad:28:3f:c6:b2:10:d9:05:57:
8d:f5:65:75:72:48:90:6a:6d:86:4d:6d:60:05:6d:
cd:07:34:6e:b4:0f:a5:48:61:af:a3:90:8f:ad:3a:
d7:60:a2:bd:a1:5d:10:70:4f:90:33:08:83:a2:8c:
3b:25:34:85:2c:a9:60:18:2b:3f:68:2f:3e:31:64:
6e:6d:8a:fd:81:d2:76:70:e2:1b:20:46:93:1e:c3:
5e:c0:a5:98:43:eb:c3:59:06:a3:78:5b:cf:0b:0c:
ae:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:22:0D:ED:7E:15:61:F4:CD:0C:A6:05:EC:D9:AB:93:F9:82:DC:95
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ACIN7X4VYfTNDKYF7Nmrk_mC3JU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.28.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:25:36:08:e0:73:1e:b4:28:e2:f3:f9:fd:7b:0e:96:a1:80:
ba:a3:bf:3a:2e:1c:a8:fb:78:57:86:06:a2:f0:a3:8b:a2:f4:
17:be:b5:ae:b6:77:d6:68:ee:cf:10:9b:37:70:21:16:ab:34:
90:30:e9:56:fb:3f:e3:f1:b4:ea:36:5f:d2:8a:cb:c6:6a:60:
a2:c9:02:ec:95:2e:07:29:e9:b3:de:36:b6:cd:17:79:f5:05:
63:40:7a:ed:ec:57:be:df:e0:55:fd:1f:1a:91:91:a6:d4:7f:
30:b7:5d:cb:8c:1e:b2:f0:66:86:27:37:3d:34:20:6f:01:fe:
f5:32:df:bb:35:e0:5c:28:c4:aa:5b:f0:41:09:f8:37:9a:6d:
cf:1a:fd:c3:d9:02:d6:ae:96:43:2e:91:f0:45:79:6c:40:d7:
31:e6:59:3c:31:53:45:b2:0d:c3:cc:7f:2d:a5:14:95:c4:a5:
cf:01:e7:ee:c3:69:68:36:b5:a9:42:36:98:fc:62:fa:85:58:
6b:29:a6:49:fb:ec:da:75:a3:61:aa:ea:1f:31:50:60:94:fd:
b3:c9:18:fb:91:24:9f:38:d1:74:5c:32:e6:1f:b4:55:92:f7:
b6:ec:45:f3:7f:a3:84:da:4b:84:3b:d9:c0:46:2c:bc:8f:18:
af:33:e4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org