Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1229Nsr5lwv_9PCHoBiGryDnQck.roa
File: 1229Nsr5lwv_9PCHoBiGryDnQck.roa (raw, json)
Hash identifier: YUThvkT2Fl0vlEBzhq9dNRBqLBp8cNrIzZHRxlvgP78=
Subject key identifier: D7:6D:BD:36:CA:F9:97:0B:FF:F4:F0:87:A0:18:86:AF:20:E7:41:C9
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018CC500B433CB895EE99BD9B9991F65BC99
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1229Nsr5lwv_9PCHoBiGryDnQck.roa
Signing time: Mon 01 Jan 2024 12:30:06 +0000
ROA not before: Mon 01 Jan 2024 12:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202673
IP address blocks: 45.137.17.0/24 maxlen: 24
176.105.230.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jan 2024 05:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:b4:33:cb:89:5e:e9:9b:d9:b9:99:1f:65:bc:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 12:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d76dbd36caf9970bfff4f087a01886af20e741c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:98:d7:38:91:72:79:3d:89:3a:76:4e:7e:
06:32:2a:59:2a:19:7f:3f:c6:84:4e:0a:1b:a9:ae:
c0:69:12:16:fd:f8:2d:3d:03:22:10:56:d9:c5:eb:
6c:e2:a8:8a:57:09:d4:21:6a:9b:29:1a:c6:b1:fb:
9e:d2:4f:84:9f:0b:9f:e4:81:da:c3:c9:8e:4a:42:
3f:75:58:73:fb:85:43:be:8b:c5:f5:e0:e6:31:94:
81:1c:d2:a9:60:54:be:bd:81:a2:20:ef:20:83:07:
f9:2c:d5:e1:7c:3c:f9:5c:87:4a:a7:69:32:3a:ba:
91:d6:0e:03:0a:86:8e:9d:01:aa:11:fe:2f:df:c2:
40:1b:70:f9:d1:84:b1:58:30:46:0e:13:f6:b7:68:
df:20:64:3b:33:a5:e8:90:ba:f8:23:f3:eb:68:5c:
c7:3d:84:1a:d0:9c:69:f5:4c:31:35:2f:f3:4c:26:
fe:8b:02:74:d3:87:05:27:e2:38:ea:27:77:df:45:
c2:c1:96:d4:9b:22:60:36:54:47:b9:06:46:6f:5c:
1d:25:d4:97:c7:42:3d:14:9d:9f:08:7d:1e:9e:2e:
dc:53:f1:06:e1:e9:63:75:12:01:26:5d:36:8f:9d:
bf:2d:79:d9:c3:7f:ed:f3:24:bb:a5:5a:a6:af:90:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6D:BD:36:CA:F9:97:0B:FF:F4:F0:87:A0:18:86:AF:20:E7:41:C9
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/1229Nsr5lwv_9PCHoBiGryDnQck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.17.0/24
176.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:36:04:3d:bb:6c:bb:ce:f7:42:8f:16:43:b3:78:4e:12:3e:
cb:2c:b7:83:88:57:c6:01:d5:d4:22:cb:f5:bd:8c:81:b0:a4:
53:dd:e1:f5:a1:3c:68:78:cc:ea:6a:14:38:93:22:05:c5:eb:
5e:bf:fc:02:92:ae:28:a5:28:a3:3a:70:47:1c:ea:c9:37:1b:
f7:2b:ef:e4:e4:81:5b:a1:9a:9e:fc:36:9c:92:93:cf:42:63:
b6:21:e6:d7:50:0d:5f:14:21:c0:e8:57:06:1a:54:ae:0b:dc:
c3:4d:56:5b:0a:80:2c:a2:25:f3:f2:3b:13:c9:4e:cf:f1:73:
eb:f4:d1:61:2c:a9:f3:8f:51:99:bf:b7:9b:b9:b6:7c:b2:8c:
66:97:a8:ee:5a:be:45:fa:d3:51:21:8f:74:34:aa:7a:ba:46:
23:a6:2e:f3:76:a8:be:51:27:9d:37:5e:f4:66:ac:2d:38:c6:
eb:ce:be:b3:fd:30:69:99:5f:fc:00:18:4c:0a:c6:3e:ac:09:
83:45:ba:29:b1:f7:48:e1:7c:f7:74:4a:0f:6f:d3:c0:19:b1:
95:62:1f:66:62:18:52:04:f7:73:e7:cd:11:14:79:f8:36:e2:
4f:79:d0:44:e4:f3:04:dc:4c:29:b3:53:c5:be:76:85:b6:09:
76:3b:87:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org