Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/5WJVwV3UYwvKPhMgNQP33x8xyjY.roa
File: 5WJVwV3UYwvKPhMgNQP33x8xyjY.roa (raw, json)
Hash identifier: njJhurOZZ1TVCGoQ2D9ZhoHiulY/t27OsObPKDX71CU=
Subject key identifier: E5:62:55:C1:5D:D4:63:0B:CA:3E:13:20:35:03:F7:DF:1F:31:CA:36
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018986C55599A2C754CA8638BB04B1F02557
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/5WJVwV3UYwvKPhMgNQP33x8xyjY.roa
Signing time: Mon 24 Jul 2023 07:20:26 +0000
ROA not before: Mon 24 Jul 2023 07:20:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.137.16.0/23 maxlen: 24
45.150.55.0/24 maxlen: 24
95.214.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Jul 2023 06:45:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:86:c5:55:99:a2:c7:54:ca:86:38:bb:04:b1:f0:25:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jul 24 07:20:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e56255c15dd4630bca3e13203503f7df1f31ca36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:81:70:33:30:0c:92:a8:d1:eb:7d:5a:50:d1:
ce:c8:11:36:21:27:db:a7:81:72:8f:fb:01:0f:70:
06:84:6c:e3:cc:6f:03:af:29:7f:74:02:7a:e5:c7:
c6:e6:b3:f8:f4:b0:5e:ba:7c:1f:36:05:e4:c1:f4:
e8:61:b1:32:b9:b5:9c:59:5a:16:32:3a:fe:b8:da:
e2:1a:9d:fa:a1:ac:fd:97:e1:51:aa:06:26:41:06:
27:4c:3c:7d:8f:37:ed:28:f3:6b:d2:98:04:ef:49:
4b:e2:a3:b3:0a:f0:d8:9b:3b:be:d5:a7:63:7f:67:
a1:25:b4:f2:c9:4f:62:9f:70:69:97:c4:ab:fe:b3:
f5:e9:14:be:3b:63:f5:01:84:be:f4:c7:cd:91:b1:
19:8b:2f:bd:3b:10:b6:56:45:05:df:46:dd:3b:7e:
00:78:c3:2c:5c:19:be:21:36:bf:0f:19:bb:69:93:
6d:c6:19:ee:cf:63:ad:38:7d:ab:f2:b7:fd:b7:cc:
e0:d3:2d:e4:a3:e1:c4:28:a6:8f:4e:a7:77:07:8f:
3d:ab:4e:f5:33:a1:55:26:38:8f:2a:1d:13:8f:bb:
d0:b6:48:0f:60:7d:88:87:40:9d:5a:50:96:8d:b9:
72:0f:af:63:03:38:2e:d4:f2:48:ed:a3:3e:1f:3a:
86:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:62:55:C1:5D:D4:63:0B:CA:3E:13:20:35:03:F7:DF:1F:31:CA:36
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/5WJVwV3UYwvKPhMgNQP33x8xyjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
45.150.55.0/24
95.214.177.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:e5:4e:08:31:4e:cd:cb:4a:a5:4e:55:04:14:5c:bf:97:4d:
6f:0f:03:93:42:6b:dc:46:23:0b:56:38:26:00:15:8f:ef:ac:
5c:9c:e2:14:b5:b1:78:64:28:0d:2a:7d:65:6d:2b:63:2f:5d:
27:a4:c1:b5:42:12:66:e9:35:19:af:80:96:85:14:c4:3a:53:
80:6f:ad:b5:48:b0:6c:f6:ab:12:92:a6:21:42:66:ef:cb:e1:
a0:f2:30:fc:89:dd:1e:9a:18:51:d7:4d:13:1c:81:0b:16:c5:
e3:af:80:b8:66:0b:70:6a:97:83:a5:0c:07:ad:b9:41:44:05:
c9:b0:8c:69:ee:9d:97:c3:b9:95:7d:a9:f2:35:27:90:c2:35:
7c:98:f4:e7:b6:5f:f4:0c:84:9f:22:8f:85:7d:85:d6:76:77:
ca:46:0a:1f:f2:4a:f6:63:43:5c:b0:dd:c5:ba:83:49:fc:54:
25:a8:26:af:64:e8:0c:8f:a3:0d:67:0b:d6:aa:8a:76:58:a9:
9d:65:6e:53:bf:c4:fa:d6:40:a0:c4:eb:3d:55:35:2c:a0:2d:
7d:6e:22:49:20:ce:da:64:0c:3e:43:43:36:46:51:62:1c:c7:
9c:f2:cf:23:19:d4:cc:1d:5c:23:38:0a:b6:14:8c:64:ad:6b:
ad:62:d5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org