Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/mwpyBu2qynGcXm_BwUQNgbCvEP0.roa
File: mwpyBu2qynGcXm_BwUQNgbCvEP0.roa (raw, json)
Hash identifier: wfyU2goxth7kx5hVZ79ALeDcGC0VS7HGTD31sc77X5k=
Subject key identifier: 9B:0A:72:06:ED:AA:CA:71:9C:5E:6F:C1:C1:44:0D:81:B0:AF:10:FD
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 01856F823D10ECB137104BF8ADBAC0A4349E
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/mwpyBu2qynGcXm_BwUQNgbCvEP0.roa
Signing time: Sun 01 Jan 2023 22:44:44 +0000
ROA not before: Sun 01 Jan 2023 22:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35085
IP address blocks: 45.12.184.0/24 maxlen: 24
2a0e:b700::/32 maxlen: 48
2a0e:b702::/32 maxlen: 48
2a0e:b701::/32 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:3d:10:ec:b1:37:10:4b:f8:ad:ba:c0:a4:34:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Jan 1 22:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b0a7206edaaca719c5e6fc1c1440d81b0af10fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:69:ff:97:3a:3a:97:64:4c:f0:13:d8:9f:df:
52:70:bc:ec:67:23:b4:4c:04:e5:64:25:a9:36:78:
95:70:7f:aa:56:51:32:e2:7d:d9:56:f5:02:01:a1:
ed:cb:1e:cd:df:bb:da:80:c6:76:56:23:35:aa:89:
30:33:50:d3:80:6c:3b:ad:e4:5d:7d:70:60:14:8e:
9c:2c:fa:13:40:a0:82:8a:3a:ed:b6:61:33:0f:9e:
cd:96:49:ca:14:81:9c:f0:8d:7c:af:f6:2e:0d:d3:
e7:81:4c:3f:ab:0e:76:7a:fd:b2:51:ad:a5:04:f6:
ae:93:f7:0a:7c:d5:ed:21:5d:0b:a9:00:b1:39:f0:
38:5b:b0:dc:e5:44:73:8e:c0:2b:01:47:cf:0e:1a:
37:43:f9:0c:ae:32:d8:06:4d:4d:20:84:f8:2b:9f:
8d:c1:b2:6f:1d:a0:f9:8c:fc:6f:8a:aa:9d:26:6a:
8b:08:1d:33:80:b0:33:5d:2f:71:ea:ec:d2:e8:d7:
1f:14:3d:f1:66:2d:6b:80:b2:e6:63:f7:35:a8:8b:
41:55:c1:8c:d3:47:82:65:59:54:80:ef:fc:6e:5f:
ef:0a:ab:7d:25:7d:1d:fc:e6:01:b4:1c:ba:a5:48:
61:e4:8e:7e:70:a8:23:fa:b7:9e:53:ad:6b:62:b4:
fb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0A:72:06:ED:AA:CA:71:9C:5E:6F:C1:C1:44:0D:81:B0:AF:10:FD
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/mwpyBu2qynGcXm_BwUQNgbCvEP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.184.0/24
IPv6:
2a0e:b700::-2a0e:b702:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
75:f5:25:7a:1b:42:93:74:21:87:8b:da:cf:11:fe:e7:e6:44:
2e:58:6e:28:74:dd:ea:bb:89:94:34:62:80:b3:4c:97:1e:a1:
99:09:ff:99:3f:fb:83:b1:29:cb:98:97:77:96:b1:57:38:5c:
c7:f7:d5:7f:7f:cf:98:f4:bb:cb:57:64:2d:7c:9b:bc:db:11:
95:a4:9c:1a:d3:84:99:51:fa:33:b2:09:25:86:43:e9:70:25:
85:52:99:2a:c0:98:4d:1e:63:4f:4f:f8:73:ee:22:b5:85:0f:
02:5b:61:93:00:67:bf:1b:5c:9e:62:4e:24:41:05:c7:c0:da:
7e:43:19:ff:aa:da:46:d8:82:4c:99:e4:3a:cb:f7:7c:90:40:
31:42:e5:30:83:13:6f:de:e7:91:f1:63:6d:bf:87:1b:b7:f1:
d2:0e:01:7c:29:c7:06:d0:89:f2:aa:1f:86:b7:4e:4b:92:c4:
da:a3:8e:34:2c:0d:1f:f6:76:a5:6c:37:e8:a9:78:33:01:1f:
d6:f6:64:0a:c2:86:8f:23:8c:65:8b:73:9c:b8:83:87:6d:a9:
e7:31:4b:34:77:5e:bc:22:f4:34:b0:65:60:e6:56:b3:17:f6:
72:9b:41:11:33:04:10:0a:7c:93:e6:b6:8d:78:d8:46:8e:c0:
ad:7c:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:11 2024 by rpki-client on console-fra.rpki-client.org