Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/_MOjYAY7CBJlHyilHpZdLnzjpQo.roa
File: _MOjYAY7CBJlHyilHpZdLnzjpQo.roa (raw, json)
Hash identifier: wKokdmaUffuZcV3/qB8vBZrcHW2tGVe9JnbGKpQ55Kk=
Subject key identifier: FC:C3:A3:60:06:3B:08:12:65:1F:28:A5:1E:96:5D:2E:7C:E3:A5:0A
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 0192BA359F819BB07049CCB546DB4A80FCD4
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/_MOjYAY7CBJlHyilHpZdLnzjpQo.roa
Signing time: Wed 23 Oct 2024 16:28:49 +0000
ROA not before: Wed 23 Oct 2024 16:28:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54994
IP address blocks: 140.150.0.0/24 maxlen: 24
140.150.1.0/24 maxlen: 24
140.150.2.0/24 maxlen: 24
140.150.3.0/24 maxlen: 24
140.150.4.0/24 maxlen: 24
140.150.5.0/24 maxlen: 24
140.150.6.0/24 maxlen: 24
140.150.7.0/24 maxlen: 24
140.150.8.0/23 maxlen: 24
140.150.18.0/24 maxlen: 24
140.150.19.0/24 maxlen: 24
140.150.21.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 31 Oct 2024 01:50:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ba:35:9f:81:9b:b0:70:49:cc:b5:46:db:4a:80:fc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Oct 23 16:28:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fcc3a360063b0812651f28a51e965d2e7ce3a50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:01:19:aa:11:00:49:73:60:b9:fc:62:a3:
d0:c4:d3:97:f4:6f:1a:87:77:04:bf:86:33:85:32:
dc:cb:96:91:9a:3e:cf:80:a9:4c:73:6f:8d:f7:a4:
30:23:49:24:1a:c0:cf:4e:b2:5e:42:f2:f8:e7:fd:
03:66:66:6c:0c:36:27:7b:ae:fa:91:32:db:d8:de:
db:4c:20:0a:ce:e4:fa:bb:ab:17:44:29:f7:af:c9:
6d:2d:09:06:3b:66:8a:24:22:11:bc:b5:5f:5f:3e:
df:35:a8:c2:71:b3:e4:b8:57:fc:5e:2b:eb:e0:74:
79:49:3f:25:ac:13:a5:95:83:d0:76:f7:64:19:d0:
c8:ba:2a:dc:0e:ea:80:52:26:8e:01:1c:19:13:08:
4e:ea:f3:20:1b:94:a6:bc:2e:58:b7:19:92:29:e3:
53:ff:2f:5c:a3:8a:d0:9f:0e:3b:5b:2a:7f:c5:95:
05:35:a8:3f:bf:be:bc:30:17:53:33:47:6b:3e:7a:
7f:83:91:95:d5:3f:53:ad:09:0b:bd:1a:df:68:81:
b7:f1:69:f5:af:7d:f8:9e:7d:10:f5:b4:1f:ff:b7:
76:8c:9b:5d:9d:53:f8:05:ee:25:ac:15:7a:9f:27:
0c:2a:40:93:f2:01:a9:b5:e6:20:cb:70:ae:84:c2:
a6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C3:A3:60:06:3B:08:12:65:1F:28:A5:1E:96:5D:2E:7C:E3:A5:0A
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/_MOjYAY7CBJlHyilHpZdLnzjpQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.0.0-140.150.9.255
140.150.18.0/23
140.150.21.0/24
Signature Algorithm: sha256WithRSAEncryption
67:52:29:de:19:e3:40:ad:09:8d:85:51:e1:98:5a:28:01:1d:
53:67:39:c4:ec:65:a5:71:63:d7:e3:0d:83:0c:72:0d:bd:7b:
69:9b:35:69:20:e9:3f:e5:cf:c2:56:7a:ee:77:f0:c2:7a:27:
b0:ac:58:8c:b5:d0:5d:0a:20:b9:7e:1e:15:d6:57:9f:b3:c4:
bb:9d:11:33:48:ae:1e:fb:13:e7:a5:7a:57:e5:47:90:59:1e:
ee:3f:51:a8:f6:66:e7:a0:20:c0:f7:6e:77:3f:82:d1:67:10:
1d:1f:15:c0:27:e8:8d:10:12:c5:2e:ab:4a:ac:3b:fc:e2:54:
f3:cc:4e:fe:02:c6:f0:56:c8:b9:99:c1:63:3f:c4:1f:68:c7:
1b:3a:bb:14:00:11:8a:98:70:44:1c:70:0d:89:46:2b:3e:0c:
6b:9b:cd:ec:5a:8a:e3:a1:47:65:2c:48:fe:3b:ce:dd:46:88:
35:a4:76:91:52:22:a8:92:1b:cb:9e:65:e4:ae:78:1b:06:c0:
5d:48:76:e1:de:a9:8b:10:dd:42:5e:22:9b:7b:02:8a:5f:db:
2b:36:1e:a8:9a:28:8a:d7:d1:b5:91:3c:4e:87:07:75:b1:2a:
af:b7:b9:8b:61:08:0f:6e:60:3b:bb:02:77:6f:36:e7:1e:b0:
48:0e:af:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 31 03:53:36 2024 by rpki-client on console-fra.rpki-client.org