Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/2ymNhcSe1rxOmZqA_SXnZraWit0.roa
File: 2ymNhcSe1rxOmZqA_SXnZraWit0.roa (raw, json)
Hash identifier: j7+N97OND/NeTltTQXJi7hqZZiFaEIykZpbr2o3yPf4=
Subject key identifier: DB:29:8D:85:C4:9E:D6:BC:4E:99:9A:80:FD:25:E7:66:B6:96:8A:DD
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018A72A29D9FD5737F8E20A7C97BA74BB04A
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/2ymNhcSe1rxOmZqA_SXnZraWit0.roa
Signing time: Fri 08 Sep 2023 02:32:54 +0000
ROA not before: Fri 08 Sep 2023 02:32:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.177.24.0/22 maxlen: 24
45.150.55.0/24 maxlen: 24
45.150.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Sep 2023 22:59:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:72:a2:9d:9f:d5:73:7f:8e:20:a7:c9:7b:a7:4b:b0:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Sep 8 02:32:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db298d85c49ed6bc4e999a80fd25e766b6968add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:79:07:5a:3e:ba:3d:51:cf:f5:64:74:c0:10:
2b:f8:50:d5:6c:01:0b:c5:ef:b0:f9:ff:fb:85:0d:
7b:5f:c6:b4:a9:8c:e3:31:80:fe:ae:46:81:4f:25:
70:4f:17:25:8e:31:d7:07:e4:63:40:e9:a2:58:80:
cd:50:6c:ac:98:04:79:53:06:05:01:08:51:a6:17:
63:10:9d:b6:26:75:6a:2b:15:d2:bb:f2:20:57:11:
0e:4c:5f:96:92:3a:e0:f5:36:5c:03:ff:ab:9c:83:
4f:03:ac:e2:f6:8c:20:73:dc:b6:4a:0b:db:c7:56:
f5:64:10:65:69:26:dc:7d:92:78:a9:bd:8a:50:78:
41:d5:6a:ca:30:20:86:7e:09:39:b4:d0:e4:fa:a7:
66:10:83:2c:a5:2f:2e:7c:98:26:2f:d4:ed:40:72:
4d:70:4f:bd:ba:73:0e:89:3c:a0:73:36:e6:c0:b7:
b9:f6:d4:c1:21:6b:45:bb:3c:1e:cb:7d:4e:4a:8a:
80:8f:f4:23:9a:ca:6a:5c:6d:21:a0:21:37:51:49:
a5:a2:cf:ca:fa:33:8d:96:8d:05:d4:37:f3:81:8a:
78:78:d5:40:45:57:f6:1b:71:ad:8a:67:64:77:9b:
89:5c:16:75:e5:97:28:a7:2a:59:d1:b9:d6:f2:ca:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:29:8D:85:C4:9E:D6:BC:4E:99:9A:80:FD:25:E7:66:B6:96:8A:DD
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/2ymNhcSe1rxOmZqA_SXnZraWit0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.52.0/24
45.150.55.0/24
185.177.24.0/22
Signature Algorithm: sha256WithRSAEncryption
08:76:d4:2d:3b:77:1b:9c:f9:7a:77:c3:7c:96:0c:19:03:20:
d5:07:6a:65:9c:42:f2:33:b0:69:43:35:ec:c9:43:36:3e:7f:
30:c8:5d:25:65:4d:d0:15:b9:d6:6c:64:1d:32:ff:38:da:4e:
ca:0c:ff:71:6e:44:f7:55:94:bf:0d:a7:f5:6f:0f:51:03:b6:
d4:6a:c1:49:05:dd:9b:8e:11:a1:b5:15:b0:5d:0a:ef:33:60:
9c:8e:1a:44:6c:d6:59:60:a1:35:8b:a5:7f:41:a0:aa:a3:a1:
2b:a6:f5:d2:bf:3b:17:f0:cb:29:82:4a:3b:88:5c:f9:ed:92:
55:07:bc:09:4d:07:91:c4:da:54:59:5d:6c:0c:71:00:76:32:
92:c9:05:8b:13:c8:96:66:ca:cf:bf:4c:45:ec:ad:0a:87:aa:
10:46:a6:41:9e:81:b8:78:c4:fa:42:75:f1:83:d1:12:63:1e:
a7:de:a5:e3:a7:3d:07:14:e4:41:45:a4:0f:99:33:b5:ef:7d:
5c:1e:56:d2:46:e7:92:59:c0:9c:e2:ca:99:30:31:ba:be:04:
af:6d:22:47:c8:24:bf:f0:82:dc:6a:06:cc:9c:24:f6:1c:17:
ff:79:a1:ba:30:b4:d2:99:f4:1f:a7:87:93:f6:a7:2f:c6:93:
55:b3:88:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org