Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1-ez2CLRQQ_213y-d8vvW9vXY-l4.roa
File: 1-ez2CLRQQ_213y-d8vvW9vXY-l4.roa (raw, json)
Hash identifier: onrh1RQTzrxb7Dfb6chaYS9aLY363yj4AU5BLJj7wLo=
Subject key identifier: F9:EC:F6:08:B4:50:43:FD:B5:DF:2F:9D:F2:FB:D6:F6:F5:D8:FA:5E
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018FBB66B9703BCEBF5E58234781E62D10EC
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1-ez2CLRQQ_213y-d8vvW9vXY-l4.roa
Signing time: Mon 27 May 2024 18:53:42 +0000
ROA not before: Mon 27 May 2024 18:53:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.137.16.0/24 maxlen: 24
45.137.17.0/24 maxlen: 24
45.137.19.0/24 maxlen: 24
81.28.252.0/24 maxlen: 24
81.28.253.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 16:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bb:66:b9:70:3b:ce:bf:5e:58:23:47:81:e6:2d:10:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: May 27 18:53:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f9ecf608b45043fdb5df2f9df2fbd6f6f5d8fa5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:5b:6c:6c:26:e7:34:cf:65:be:20:e9:49:
3d:12:d7:65:93:06:c5:4f:ca:98:e6:ae:79:b0:29:
14:c2:e9:47:e9:ef:ff:bc:18:0c:6f:15:63:cb:8c:
59:43:93:8a:5c:88:10:6f:33:89:f2:99:c5:c4:b5:
93:e1:dc:ab:3b:fb:51:f5:07:13:cd:d9:14:b2:ba:
bc:fc:51:6f:36:61:b5:ea:ec:e5:a5:76:17:c7:80:
40:e0:4d:84:65:20:26:98:bc:31:28:8c:bf:cd:18:
5d:90:fb:f4:8d:f8:1d:c6:d2:89:1f:fe:35:ae:ca:
61:42:79:51:3d:b4:fb:0f:75:04:d3:24:71:cc:47:
ff:ba:78:b5:4b:f3:73:bb:4c:6f:7e:33:c5:99:5b:
1a:3c:f8:86:b6:f3:2c:7e:b7:ec:c9:3a:09:e4:7c:
41:29:9a:a2:cc:85:ac:b2:22:90:c3:0a:19:af:2b:
21:f0:31:29:e7:f5:59:a2:7d:1e:83:67:cf:1c:e4:
35:83:56:ee:35:65:f8:72:bc:ba:bb:5a:5a:77:83:
43:31:58:a3:d5:82:c8:4c:fb:39:cd:e2:79:21:95:
37:4b:27:7f:11:9b:ae:92:b8:eb:a0:50:42:69:61:
e7:76:e9:8b:12:aa:d8:66:27:23:39:32:32:f0:52:
31:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EC:F6:08:B4:50:43:FD:B5:DF:2F:9D:F2:FB:D6:F6:F5:D8:FA:5E
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1-ez2CLRQQ_213y-d8vvW9vXY-l4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
45.137.19.0/24
81.28.252.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:81:90:eb:67:bd:81:d7:d4:1b:02:9c:03:f8:3b:76:40:74:
d0:68:c5:ae:73:43:85:72:a9:bb:60:03:1f:51:d6:50:bf:1e:
7e:8a:1c:de:e3:b7:7f:40:6e:99:4b:c2:06:e9:df:f0:90:64:
53:43:5d:53:d6:f9:9e:ed:b9:01:0d:05:45:5b:56:08:e4:9b:
c1:ca:57:0d:b7:34:71:4f:b2:58:52:c9:3b:c4:ef:cd:11:fc:
12:b9:1a:6d:f4:46:6c:75:8c:a2:ab:86:26:a8:32:f5:63:b5:
5a:68:72:b5:2a:e1:93:ab:eb:3a:9a:91:43:fa:5f:bc:e1:99:
ad:cf:9b:95:55:b1:49:77:a5:f0:e4:36:6d:89:2f:64:fc:12:
2c:b0:41:c2:04:10:ec:f4:23:81:1d:a1:84:ab:ee:a7:cc:21:
89:91:7c:78:b0:69:a2:70:e2:61:0b:f8:24:4f:47:ec:b8:ee:
cc:bb:38:5e:c0:0b:45:ac:81:76:bc:76:ac:be:c4:ac:1f:7b:
c1:dd:70:fb:d5:6d:de:2a:14:b7:50:84:7c:5f:5d:13:1d:db:
1e:6c:49:38:34:bf:dc:56:d2:f9:ef:d6:1c:76:61:bf:1f:15:
12:1a:3c:63:2c:c0:f5:91:6e:44:ab:d7:5d:2c:96:ba:c3:e1:
7f:7c:56:89
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org