Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1-fBKLPJjNLLnAu_M8_R3Yyx-p-o.roa
File: 1-fBKLPJjNLLnAu_M8_R3Yyx-p-o.roa (raw, json)
Hash identifier: eQ4Ys86fRIZxiPnwltfMkb2iUcAVbKJ0pg0O06/PDqA=
Subject key identifier: F9:F0:4A:2C:F2:63:34:B2:E7:02:EF:CC:F3:F4:77:63:2C:7E:A7:EA
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018A04833DFC72ACA6C4A732F9ACAC75AD79
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1-fBKLPJjNLLnAu_M8_R3Yyx-p-o.roa
Signing time: Thu 17 Aug 2023 17:20:24 +0000
ROA not before: Thu 17 Aug 2023 17:20:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 176.105.231.0/24 maxlen: 24
45.150.55.0/24 maxlen: 24
81.28.252.0/24 maxlen: 24
91.238.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Aug 2023 18:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:04:83:3d:fc:72:ac:a6:c4:a7:32:f9:ac:ac:75:ad:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Aug 17 17:20:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9f04a2cf26334b2e702efccf3f477632c7ea7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:33:3a:c7:68:3a:7f:07:c8:6d:3f:ac:88:f6:
59:17:dc:ca:f1:20:d6:f0:2b:bf:86:d8:71:dd:64:
6e:38:84:f1:23:26:75:1f:ee:99:f3:08:13:30:c4:
d6:21:63:27:a2:e9:d8:e3:85:cd:ef:86:8c:19:7a:
71:ae:68:86:af:56:c5:9d:cf:b1:5f:fb:14:05:7b:
d4:99:24:f4:ba:d3:22:64:f5:f9:91:b4:c0:5e:0b:
a3:0c:60:6f:6b:38:d3:32:f0:07:3c:e3:e0:00:e0:
ee:5b:57:70:41:73:d5:35:11:26:3f:37:25:7b:d6:
5a:6c:03:63:01:d2:f5:30:f6:ba:50:1b:cd:e6:c8:
47:a9:90:80:d9:f9:d2:07:f8:7e:2f:f9:c5:37:8f:
5c:43:68:9d:67:f1:16:90:f7:7f:ed:bc:85:f5:63:
99:63:35:99:7f:45:f3:11:7e:6b:22:f3:1e:f3:45:
2d:d2:f7:d0:cc:57:e1:4d:7a:79:21:c4:4b:ee:99:
1b:2d:d3:40:f2:c0:84:07:d7:0c:b3:0e:55:96:6d:
78:fa:fa:42:e3:cf:71:14:1e:f7:ea:79:b4:43:35:
3a:a4:33:93:13:be:72:06:ac:ee:f1:a1:08:6f:23:
50:88:45:4b:1b:09:db:8a:62:b0:2d:71:95:75:46:
23:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F0:4A:2C:F2:63:34:B2:E7:02:EF:CC:F3:F4:77:63:2C:7E:A7:EA
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1-fBKLPJjNLLnAu_M8_R3Yyx-p-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
81.28.252.0/24
91.238.92.0/24
176.105.231.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e0:0f:e9:e6:38:bb:69:68:40:21:02:5e:e1:c6:64:43:c3:
e1:42:0d:61:3a:4d:43:5e:a1:4b:46:70:ab:48:33:8f:f2:a7:
28:60:07:1e:69:cd:18:06:05:fa:d0:b6:bc:b4:c2:f1:37:4f:
5b:24:b3:53:05:a5:09:1e:e9:6f:84:fd:59:32:8f:f4:fe:bb:
84:d2:0c:b3:5d:78:e5:05:4e:23:07:c7:17:ed:24:72:ab:cb:
70:29:70:f1:20:e1:4b:f6:f3:0b:da:a4:5a:52:ce:db:ea:f8:
94:8b:0f:8f:62:01:96:23:ec:dd:ff:4f:c2:5a:47:16:4a:e2:
f0:72:20:52:e1:66:a9:f8:a2:08:41:cf:25:67:5f:ee:3d:67:
b2:c6:2b:6f:4f:54:9c:5c:54:3b:a8:b2:bc:a1:12:a0:4f:63:
a1:d8:68:38:ab:cf:66:6b:10:5e:ef:e4:27:f7:fe:b8:7c:d4:
4c:7c:2b:d5:90:13:d5:ed:b5:35:8e:03:a4:d9:86:74:df:ec:
14:aa:07:5a:af:17:e0:8b:56:d0:0e:46:29:92:fa:d0:4f:90:
57:1f:cf:d3:91:8e:32:12:2c:0c:2f:2f:99:82:6d:48:36:67:
d0:1f:66:ee:e8:c3:0d:5a:5b:dd:57:40:97:36:d2:de:0c:23:
b1:4c:af:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org