Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1-v_Pdz5uuU8BazLrp550Z2OnH6Q.roa
File: 1-v_Pdz5uuU8BazLrp550Z2OnH6Q.roa (raw, json)
Hash identifier: sSSfe2WyOINUw63e0h63BZB76yEtO14gMGKnfV2wss4=
Subject key identifier: FA:FF:CF:77:3E:6E:B9:4F:01:6B:32:EB:A7:9E:74:67:63:A7:1F:A4
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018A41E50C9B65F83A6822C397AB3149536F
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1-v_Pdz5uuU8BazLrp550Z2OnH6Q.roa
Signing time: Tue 29 Aug 2023 15:24:04 +0000
ROA not before: Tue 29 Aug 2023 15:24:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.137.16.0/23 maxlen: 24
176.105.231.0/24 maxlen: 24
45.150.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 02 Sep 2023 06:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:41:e5:0c:9b:65:f8:3a:68:22:c3:97:ab:31:49:53:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Aug 29 15:24:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=faffcf773e6eb94f016b32eba79e746763a71fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cd:62:4a:29:40:32:87:c8:50:6f:2e:89:26:
60:f8:a0:6e:1a:37:81:cb:d4:dd:04:97:dc:e4:53:
02:06:c2:ae:fa:0d:da:9d:ac:c3:64:5a:a5:23:85:
b2:5c:00:ef:9c:d0:df:70:74:2f:7a:5e:25:db:f1:
f4:cc:27:33:6c:55:1b:7c:19:cc:8f:18:27:e7:8e:
cc:ea:79:2b:bb:70:fc:b3:b1:a5:c7:67:d3:5c:f3:
8c:2e:84:07:7d:b3:36:a3:2f:a7:73:54:51:08:86:
a6:3e:fa:b1:f0:37:bb:e4:31:50:0c:80:3e:1a:69:
39:c7:d8:ec:01:b3:3d:b2:f5:29:51:c8:43:13:ba:
f8:84:36:a6:b6:8b:1e:2e:57:2c:77:ad:88:da:a6:
ee:6c:cf:2f:66:54:b7:1e:37:01:99:71:2d:3b:b4:
a4:ad:55:d1:a0:c9:8d:2b:96:62:17:a3:05:97:b1:
0c:4b:ac:65:29:0d:04:ad:2a:3f:2f:4b:b7:e6:f2:
ee:67:e2:13:c1:13:cd:c8:36:da:89:60:39:f0:54:
7c:1d:70:7f:63:3f:1b:10:12:81:40:47:80:34:3b:
92:ff:eb:ed:c8:af:64:a5:9c:0d:41:ef:ec:46:38:
8d:02:46:aa:90:50:5f:88:cd:df:47:ca:73:e7:63:
81:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:FF:CF:77:3E:6E:B9:4F:01:6B:32:EB:A7:9E:74:67:63:A7:1F:A4
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1-v_Pdz5uuU8BazLrp550Z2OnH6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
45.150.55.0/24
176.105.231.0/24
Signature Algorithm: sha256WithRSAEncryption
76:d0:d1:fc:72:ec:3d:44:35:eb:44:55:05:62:16:7c:80:2a:
1e:c0:31:8a:fe:81:61:86:b7:c8:56:f2:3f:f7:ba:c3:d0:b4:
61:16:87:11:56:57:31:bd:91:69:6f:0c:32:2b:50:11:5d:7f:
4b:60:fd:f1:ff:6c:3b:46:12:a2:72:12:ba:19:ec:cb:15:2a:
b3:dd:0a:47:df:27:50:e2:0e:29:fe:98:a0:54:0e:0b:5f:ac:
6b:f1:7c:ff:ab:79:5b:44:5e:b4:ef:68:88:ba:8d:bd:79:8d:
da:99:0e:ba:9f:54:d3:a3:9e:91:92:58:65:5e:9d:4c:3c:7d:
94:19:c8:b9:62:5a:7c:64:0c:88:23:1d:db:40:e3:55:e9:e0:
e9:c7:13:4d:9f:fe:b9:97:4a:6b:66:45:06:9c:17:74:33:89:
a5:62:40:f0:9f:d2:86:6d:4f:23:5e:b5:ba:b3:ea:c9:69:b2:
d7:c3:d4:fc:eb:86:ee:87:ad:55:13:6e:f0:bf:cf:15:11:68:
ca:1c:84:58:09:e7:30:b7:9f:8c:f4:8f:69:c8:76:99:77:9d:
68:e4:fc:c4:90:19:7e:c9:26:99:1b:b0:cf:5f:22:71:9b:0b:
99:ba:5b:ec:a5:33:1e:38:ad:eb:e8:61:d9:07:08:c6:0f:29:
f1:0b:11:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org