Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/66GN8-Idd5uVqisZGOkhpOLHfK0.roa
File: 66GN8-Idd5uVqisZGOkhpOLHfK0.roa (raw, json)
Hash identifier: p3Q46zeiDnr2pqZLQO5FDme2POWFYMG/62qkB/a94nQ=
Subject key identifier: EB:A1:8D:F3:E2:1D:77:9B:95:AA:2B:19:18:E9:21:A4:E2:C7:7C:AD
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01896F4BE99FE4EB9C314EFE267113F8AF20
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/66GN8-Idd5uVqisZGOkhpOLHfK0.roa
Signing time: Wed 19 Jul 2023 17:56:33 +0000
ROA not before: Wed 19 Jul 2023 17:56:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.137.16.0/23 maxlen: 24
45.150.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jul 2023 07:20:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6f:4b:e9:9f:e4:eb:9c:31:4e:fe:26:71:13:f8:af:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jul 19 17:56:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eba18df3e21d779b95aa2b1918e921a4e2c77cad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:24:bc:d7:90:c6:dd:22:14:c1:36:61:c1:a0:
bc:20:bf:53:11:21:72:4b:98:cf:2c:71:4d:7a:84:
b5:3b:28:7f:e1:a4:c6:02:99:de:43:da:ce:a0:89:
66:c6:21:b9:32:47:0d:b3:8e:32:f6:39:22:8a:90:
50:55:47:d7:ef:cc:1f:a8:31:dd:89:7e:dc:f9:24:
31:cb:c1:0a:26:a7:29:1e:d0:6c:48:88:88:4f:f3:
e7:3c:c2:5e:48:18:74:47:c0:99:17:27:07:b8:72:
48:1f:65:0d:42:7b:37:4e:b5:14:1c:9f:90:89:f1:
68:e3:eb:0e:7c:fa:21:04:6a:20:44:5a:ef:7d:f5:
28:10:6d:be:f0:93:8f:a4:94:1b:0c:f6:fe:30:f9:
bd:da:d6:e9:96:77:dd:8d:7b:5f:d2:cf:c8:5a:d2:
10:5d:cc:11:14:ed:10:e4:a6:fa:f5:cd:e0:2c:80:
4f:6d:ab:c5:de:ca:1f:7c:d8:75:85:d1:74:e1:84:
82:2a:de:a1:6d:8c:34:47:d3:34:66:7a:8d:1b:b4:
ed:a3:86:4e:f9:6e:01:bd:36:29:29:4b:e3:5c:43:
d1:82:57:25:95:87:70:23:de:ea:20:ed:e5:d3:77:
9e:41:e4:a5:df:0b:8c:e5:23:bf:e0:e4:03:2e:0a:
86:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A1:8D:F3:E2:1D:77:9B:95:AA:2B:19:18:E9:21:A4:E2:C7:7C:AD
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/66GN8-Idd5uVqisZGOkhpOLHfK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
45.150.55.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d3:13:db:9d:f5:13:aa:81:f7:3c:a4:cd:4e:5a:ee:55:15:
6f:60:3b:74:1d:53:61:c7:af:d5:ee:4f:e9:d3:79:8e:d6:96:
5a:12:40:a5:9c:a2:fa:5e:ed:49:66:d8:70:93:27:f0:90:cb:
57:f2:d9:aa:8a:ae:7f:4c:59:5e:9a:d6:d6:3d:bd:91:2b:04:
48:67:29:98:00:c7:12:2a:e3:d7:36:9c:f5:32:42:1a:a1:5a:
3a:1a:c7:28:d4:db:81:40:49:a2:21:6c:fb:2c:33:c8:c0:e5:
e4:60:ce:28:fd:cd:4a:8f:df:7d:c9:90:f0:d1:b6:c7:52:e7:
b9:7a:9a:1b:80:e8:06:64:81:92:98:64:97:8b:cc:20:67:78:
e7:fd:e6:9c:af:df:51:30:94:78:6c:ad:c0:d3:54:51:18:1f:
a3:ff:a2:5e:8e:e2:3b:eb:1d:11:25:94:46:2e:94:c7:f2:60:
66:88:98:65:e1:fe:ab:17:a6:4c:11:ce:7f:63:f6:9f:43:fa:
cd:de:6b:4c:f0:c7:ce:20:fa:97:3c:56:18:f4:e4:21:2e:41:
35:eb:62:6d:46:0c:66:c6:13:fb:db:a9:43:30:e5:bc:7a:6f:
18:87:ef:1e:e5:35:77:15:a1:a9:68:ca:e8:6b:26:e4:57:f3:
e1:50:57:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org