Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1-QhyL0v3QBG8hnYsxZSdLFxmQzU.roa
File: 1-QhyL0v3QBG8hnYsxZSdLFxmQzU.roa (raw, json)
Hash identifier: ls31MlVqiIZLd6nSWQ9IAz1WQKOUHyIM5pTbcb8rWqc=
Subject key identifier: F9:08:72:2F:4B:F7:40:11:BC:86:76:2C:C5:94:9D:2C:5C:66:43:35
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018A904F9914D94F81B29C20F6EE630E8AAA
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1-QhyL0v3QBG8hnYsxZSdLFxmQzU.roa
Signing time: Wed 13 Sep 2023 20:50:50 +0000
ROA not before: Wed 13 Sep 2023 20:50:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 45.150.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Dec 2023 19:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:90:4f:99:14:d9:4f:81:b2:9c:20:f6:ee:63:0e:8a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Sep 13 20:50:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f908722f4bf74011bc86762cc5949d2c5c664335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4d:1b:53:2d:f6:13:09:df:56:cf:23:a1:cd:
85:5b:2d:00:96:76:6f:c4:0c:6e:70:f5:b0:6f:cb:
64:0d:44:7c:90:cb:b3:5c:f6:91:4b:c1:c1:af:85:
f2:8a:fd:56:0a:3c:08:b4:73:09:a1:cd:ac:af:96:
2c:d5:ec:75:d8:6f:c8:7c:53:ee:61:cc:db:f2:d8:
cb:7e:c9:13:f9:5d:36:e9:e5:d0:c7:23:b4:4f:ad:
4e:fd:e6:12:30:36:db:f4:ea:66:a0:fd:dc:2a:22:
14:b6:c1:79:31:47:3a:db:ac:89:9c:12:48:62:3a:
94:48:70:83:72:e8:21:4a:a9:be:a0:36:75:ae:4c:
e7:cc:72:83:3b:73:ef:09:46:d5:eb:14:25:1d:19:
00:cd:3b:b9:77:4a:51:69:ea:7f:5f:0b:64:7e:18:
8c:28:5f:40:77:8a:5d:0f:fa:98:84:7a:cc:44:b5:
b0:94:84:2d:f4:de:71:94:f1:03:ee:1e:41:61:70:
63:53:30:3e:9a:9b:68:78:e9:50:f3:56:57:5c:12:
72:9b:13:5a:7f:fa:d0:ec:1e:90:fd:26:cb:06:d2:
41:88:a0:b8:e0:83:47:9f:77:53:63:0d:ba:5a:68:
99:ee:8d:75:87:bb:43:8e:a0:02:9a:90:eb:aa:d2:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:08:72:2F:4B:F7:40:11:BC:86:76:2C:C5:94:9D:2C:5C:66:43:35
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1-QhyL0v3QBG8hnYsxZSdLFxmQzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.53.0/24
Signature Algorithm: sha256WithRSAEncryption
12:33:48:2c:72:ad:80:48:b7:99:f8:aa:81:35:a0:24:17:38:
65:1e:00:91:21:bc:78:e8:e6:f9:79:66:c9:3d:42:a7:6a:fa:
89:82:28:50:ce:27:58:66:21:31:51:b9:ec:3e:92:97:fe:50:
49:47:9d:84:25:a1:95:41:1b:9f:52:84:86:38:c4:cf:5b:5f:
97:6b:80:5d:7d:07:ea:22:43:99:db:f8:e9:22:15:05:b9:e7:
d7:3f:17:89:f7:fe:6d:88:c7:fa:f1:38:6d:18:35:42:a1:47:
a8:5d:84:d5:b3:41:0d:70:be:91:97:7c:96:81:e6:69:4a:5c:
55:12:cf:be:38:3f:b3:82:df:37:0d:ff:61:3e:f1:49:54:7f:
5c:19:91:77:4a:cb:0d:1a:48:cf:7f:bf:e3:91:a3:dc:76:f8:
75:7a:c5:44:d3:1a:c1:50:de:07:24:fb:4c:83:fb:e7:61:2f:
51:ae:cf:72:29:e8:e8:df:5c:22:a8:fb:d3:9c:e6:53:d9:ab:
a5:87:20:1a:b1:55:4c:24:4b:08:06:c4:4f:f0:4c:ce:20:bd:
09:c4:e3:a7:dd:27:62:3e:0b:15:a1:7a:16:46:11:b9:e0:b9:
a3:cb:a6:01:e3:ee:87:e7:fa:df:3d:a5:86:98:9c:93:3f:a4:
b0:59:44:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org