Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/2FneVfOHkcY1LdiuyG_ZCHQ67k0.roa
File: 2FneVfOHkcY1LdiuyG_ZCHQ67k0.roa (raw, json)
Hash identifier: ubZGXZpTDeNsLFPoTD6PXWwwliBf5aLcUMbJvyOBwzE=
Subject key identifier: D8:59:DE:55:F3:87:91:C6:35:2D:D8:AE:C8:6F:D9:08:74:3A:EE:4D
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0191F3FAD993AF137EE5726EEA46AD482C34
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/2FneVfOHkcY1LdiuyG_ZCHQ67k0.roa
Signing time: Sun 15 Sep 2024 04:39:48 +0000
ROA not before: Sun 15 Sep 2024 04:39:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.150.52.0/24 maxlen: 24
185.177.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Sep 2024 19:54:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f3:fa:d9:93:af:13:7e:e5:72:6e:ea:46:ad:48:2c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Sep 15 04:39:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d859de55f38791c6352dd8aec86fd908743aee4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:29:7d:b7:ec:65:dd:f4:dd:35:06:3b:dd:c8:
4f:76:58:1e:f1:5c:55:d8:7c:91:cc:d6:c1:c0:a4:
d2:cc:b5:74:c9:76:b9:d1:48:2e:8e:4e:eb:b2:ad:
52:bf:5c:b5:c6:f3:c5:da:15:62:91:8d:bc:8e:54:
c2:31:ab:fb:24:7b:17:0c:84:ac:65:7d:03:c2:6f:
50:c7:f4:00:03:3a:7b:4b:86:cc:8a:f5:4b:45:97:
0c:d0:de:b1:a1:c0:2d:f8:8b:13:4c:13:54:fc:56:
1f:21:e4:3d:92:a5:69:b5:ca:71:01:4d:d2:dd:ff:
39:74:93:24:53:08:41:87:b6:a4:73:3f:d9:b3:cc:
da:8a:e7:ae:7e:4d:f8:5e:d6:46:ce:09:88:ba:83:
63:33:00:3c:c6:27:05:83:f5:eb:fb:68:5d:4e:6c:
d5:90:cd:87:11:9d:d2:eb:46:54:d0:3f:f9:49:28:
c2:aa:90:2a:99:6a:8d:b0:c8:1d:54:e8:97:36:20:
a4:db:bf:ac:d1:c5:f5:b1:f6:8c:1c:45:3b:05:bd:
66:18:35:a0:a4:4c:4f:0b:88:e5:d2:47:95:9a:a1:
11:d2:74:78:04:75:cb:05:4d:b2:94:d1:94:1b:49:
35:db:93:47:63:66:5b:f9:73:77:0e:fb:31:54:d1:
54:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:59:DE:55:F3:87:91:C6:35:2D:D8:AE:C8:6F:D9:08:74:3A:EE:4D
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/2FneVfOHkcY1LdiuyG_ZCHQ67k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.52.0/24
185.177.27.0/24
Signature Algorithm: sha256WithRSAEncryption
02:39:1e:96:02:9c:b2:74:9f:36:a9:cd:b6:5d:b1:ba:63:8b:
7e:28:4f:0d:e7:3b:9d:d4:fa:f7:c7:e6:17:8c:89:44:e7:0f:
aa:12:8e:21:26:5e:da:69:02:67:f6:c9:c5:00:59:58:d8:a1:
0a:31:fe:a2:bb:a2:bb:27:14:22:39:c1:52:14:57:d6:5f:80:
9a:2d:2e:99:ca:1d:5c:69:6e:16:f5:1e:c4:70:77:d8:31:4b:
82:ee:9f:3b:c9:c6:33:fc:87:25:96:9b:3e:7f:e1:b6:be:5e:
c3:39:06:e4:6f:e5:45:3b:ea:4b:ac:72:b7:80:db:ec:b5:f0:
ff:59:7f:8f:3a:86:f8:28:71:2f:5b:84:06:14:55:0d:e2:80:
59:cc:ed:9a:9f:f1:34:f7:7a:3d:be:62:c9:4e:cb:ce:e4:0c:
49:13:e9:1e:c6:75:b1:74:5f:9a:a9:10:77:1e:aa:32:9c:ea:
49:7b:40:61:9f:d9:6a:79:b6:b6:13:9b:bd:85:f0:34:1e:b4:
79:50:52:78:58:11:25:b6:17:77:04:ae:21:fd:3d:b4:4f:19:
cc:1a:6b:53:9a:6f:8f:ff:49:24:4e:6a:cd:d2:06:94:6b:42:
1f:0b:de:bd:1b:24:2d:81:ae:69:49:71:8e:ae:26:a1:9c:28:
18:0a:3e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 22:27:25 2024 by rpki-client on console-fra.rpki-client.org