Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/9sc_XShmYMnndkbGgX83nge8acQ.roa
File: 9sc_XShmYMnndkbGgX83nge8acQ.roa (raw, json)
Hash identifier: UQ4m8rcocMz5X5xdUVPLQxTzS6dh54myWkeIBliqWxw=
Subject key identifier: F6:C7:3F:5D:28:66:60:C9:E7:76:46:C6:81:7F:37:9E:07:BC:69:C4
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019131A72AEF1652D0F32B047938EF6956C4
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/9sc_XShmYMnndkbGgX83nge8acQ.roa
Signing time: Thu 08 Aug 2024 11:02:04 +0000
ROA not before: Thu 08 Aug 2024 11:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216459
IP address blocks: 45.130.54.0/23 maxlen: 23
194.156.176.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Sep 2024 10:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:a7:2a:ef:16:52:d0:f3:2b:04:79:38:ef:69:56:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Aug 8 11:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6c73f5d286660c9e77646c6817f379e07bc69c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:6d:ac:82:7a:4f:cf:eb:37:e6:ac:04:27:55:
fc:8b:b1:e9:9b:8e:fb:e6:5a:89:29:8e:dd:95:05:
dc:98:b4:4f:f8:1c:f6:10:2a:fc:d3:17:17:4b:62:
ba:9c:98:d2:00:b7:73:50:38:2e:be:37:3b:d9:08:
9a:48:a0:de:ae:78:25:9f:7c:d6:79:41:a6:6a:33:
67:83:40:de:6a:37:c0:10:59:65:eb:f1:44:7f:bc:
86:6c:8e:ef:de:2b:51:ae:43:b4:3d:b3:ca:12:a2:
6d:82:57:75:ca:8b:e1:65:54:11:a7:79:61:56:ec:
28:31:71:a2:c9:53:44:b2:16:dd:4c:8b:dd:7e:d1:
fa:84:2d:41:39:3a:eb:fc:a3:df:3b:f5:24:b5:e8:
9b:26:dd:e4:be:03:7b:ea:59:35:95:3f:c1:22:09:
5e:4c:59:1c:a8:c4:1c:2f:62:73:0b:26:42:08:86:
9b:a1:f9:ad:e8:02:46:8b:53:de:4e:19:b8:bb:88:
4a:0b:b1:47:46:e6:ae:0d:9e:2a:95:30:b9:62:54:
ad:27:c2:68:91:9f:22:e4:68:82:30:9e:b5:0e:6f:
aa:43:85:a9:4c:a0:8a:ed:4c:be:55:c0:75:b4:9e:
d5:79:d3:e4:fe:67:9b:56:34:a8:46:40:65:4f:a9:
0e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C7:3F:5D:28:66:60:C9:E7:76:46:C6:81:7F:37:9E:07:BC:69:C4
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/9sc_XShmYMnndkbGgX83nge8acQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.54.0/23
194.156.176.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ee:1f:18:43:92:10:a5:f4:91:2d:38:53:7a:81:00:34:16:
5d:83:75:c4:c7:d4:5e:25:42:64:c1:59:e9:70:53:5f:f5:ad:
a1:de:9f:5c:86:ac:6d:8a:95:52:9a:8e:6a:9b:9d:07:83:07:
b8:e2:42:11:07:11:67:4d:d7:80:09:64:08:bd:14:9e:0a:f4:
68:14:f2:da:1a:9f:57:54:e2:cb:a4:a1:04:dd:63:91:fb:71:
0a:e9:fa:c0:a3:8f:a2:a0:10:b8:4d:3e:82:55:ac:11:0e:32:
95:59:3f:08:a4:ff:a9:ce:ac:03:b8:9d:4e:e3:ad:d3:67:b6:
95:0f:1e:54:92:10:8a:b3:b8:8f:7c:a7:a6:5c:88:69:78:17:
f0:20:64:18:48:1f:72:0a:d6:78:ed:11:7d:d1:bd:0c:65:4d:
59:43:e3:d2:00:da:87:8e:f5:bc:ac:e8:60:9f:fc:e3:45:7c:
45:b6:62:3e:30:d8:88:7a:4a:72:4b:c3:ef:16:f1:d4:d1:3d:
32:46:c4:36:e1:69:2b:55:85:6a:3e:2f:c1:88:d3:c6:09:53:
1f:fa:24:68:63:11:c0:6a:1a:d6:fc:dd:ee:bf:0f:78:8e:44:
8a:23:d8:c4:02:b0:86:d0:77:4b:7c:ea:32:4d:93:dc:7b:8a:
44:60:82:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 17:01:53 2024 by rpki-client on console-ams.rpki-client.org