Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/ng-Px9j9BYfhZUKv48lqMYCzvHc.roa
File: ng-Px9j9BYfhZUKv48lqMYCzvHc.roa (raw, json)
Hash identifier: 1ChJKp/h7ruG3g00FkOFRXzUl18QLZsey3OVwTwjp3A=
Subject key identifier: 9E:0F:8F:C7:D8:FD:05:87:E1:65:42:AF:E3:C9:6A:31:80:B3:BC:77
Certificate issuer: /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Certificate serial: 0185728C9CCD1881E4BFB2E3ACB249977CF8
Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/ng-Px9j9BYfhZUKv48lqMYCzvHc.roa
Signing time: Mon 02 Jan 2023 12:54:55 +0000
ROA not before: Mon 02 Jan 2023 12:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35367
IP address blocks: 45.155.72.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:9c:cd:18:81:e4:bf:b2:e3:ac:b2:49:97:7c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Validity
Not Before: Jan 2 12:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e0f8fc7d8fd0587e16542afe3c96a3180b3bc77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c0:54:b0:bc:da:57:44:c9:df:c2:7b:db:81:
11:ea:7a:65:75:a4:84:de:2d:d7:0e:2d:40:65:c7:
e4:50:5f:66:7d:6d:60:d2:33:b8:12:ed:20:71:1c:
01:46:d6:5a:2f:85:30:f1:3d:02:5e:ed:a7:04:b1:
a7:1c:c7:6f:6d:47:21:78:56:59:81:b7:ba:8d:55:
d2:5a:a4:56:f4:c0:54:20:30:38:e7:4a:13:be:40:
e3:e5:db:62:79:52:46:9d:13:be:db:7d:19:13:83:
68:70:9d:d5:0a:7e:73:1c:b3:95:5e:db:b1:5e:64:
48:fd:55:9c:a2:0a:19:98:65:f3:74:3d:24:df:34:
94:31:bf:5b:cf:0e:d5:47:18:d6:20:90:2d:f0:37:
37:cc:71:c6:f2:f4:da:37:4b:f3:a6:10:dc:69:64:
83:9c:65:69:01:68:a2:12:5e:b1:80:22:75:85:b3:
2e:67:65:0d:2d:af:91:4a:7c:09:30:93:d1:10:5f:
17:3c:e5:7b:b4:8b:7e:6c:fc:6c:67:d1:df:62:1d:
2b:ea:b1:d9:57:e0:79:a4:b5:56:63:85:5b:00:4a:
f3:13:a8:45:99:77:0b:28:73:de:2c:52:fe:e0:3e:
18:c6:c6:cb:3a:38:d1:05:a8:b7:e3:01:a3:64:07:
2d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0F:8F:C7:D8:FD:05:87:E1:65:42:AF:E3:C9:6A:31:80:B3:BC:77
X509v3 Authority Key Identifier:
keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/ng-Px9j9BYfhZUKv48lqMYCzvHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.72.0/22
Signature Algorithm: sha256WithRSAEncryption
10:74:f4:e7:f9:90:b1:22:0b:5d:88:b6:6a:7d:aa:c3:19:9d:
64:e6:61:a3:22:15:a3:42:ff:94:18:71:e5:f1:3e:03:c0:42:
53:7b:e8:7a:18:f9:d8:4a:33:af:6a:8b:64:73:64:86:c9:5e:
84:76:97:76:71:c8:ea:05:40:5a:1b:08:d7:19:fa:1c:35:9b:
28:a3:3b:7a:b1:92:34:91:12:4a:2a:58:fd:04:49:e6:a5:44:
11:75:a7:9b:ac:a3:e1:f4:59:17:00:f7:93:d3:89:d0:c7:2a:
18:08:63:45:3c:5e:54:8b:e6:6d:dc:1d:d8:fa:fb:97:52:6b:
3c:c8:22:4f:48:46:6e:fe:3e:91:c2:64:a9:bc:11:42:54:f1:
ce:7b:e1:90:bf:3d:45:b5:53:f9:f9:9e:93:40:01:8e:04:25:
2e:e4:40:d2:56:f6:23:a7:86:76:e6:a1:d3:ad:c6:89:14:9c:
cf:83:f4:a6:58:53:39:03:bd:76:dc:a2:71:51:35:5a:de:c2:
81:ec:24:57:cd:6c:ac:34:a6:e4:99:2f:95:5e:39:b3:2b:8c:
cb:3e:c1:8c:f6:2b:78:4a:d8:e1:4e:ed:ac:d5:f7:a2:94:c9:
19:5d:63:ff:d1:f3:af:94:90:d5:a4:0b:b3:89:39:9c:ce:fb:
b6:f2:c1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:23 2024 by rpki-client on console-ams.rpki-client.org