Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/6DAGZUaXGMF5yHuQ_781T9EW5BA.roa
File: 6DAGZUaXGMF5yHuQ_781T9EW5BA.roa (raw, json)
Hash identifier: o95efQ84w654zKbcD/8oLp2HvMRjWv2Jmto/NHx6iRY=
Subject key identifier: E8:30:06:65:46:97:18:C1:79:C8:7B:90:FF:BF:35:4F:D1:16:E4:10
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018B082412E948DE2A0C36DFA0D3F777E6FA
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/6DAGZUaXGMF5yHuQ_781T9EW5BA.roa
Signing time: Sat 07 Oct 2023 03:17:43 +0000
ROA not before: Sat 07 Oct 2023 03:17:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 176.105.231.0/24 maxlen: 24
45.150.55.0/24 maxlen: 24
212.115.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Oct 2023 18:16:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:08:24:12:e9:48:de:2a:0c:36:df:a0:d3:f7:77:e6:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 7 03:17:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8300665469718c179c87b90ffbf354fd116e410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5a:e8:29:a9:61:fc:cb:b0:ae:e5:7a:21:b3:
1e:70:df:ff:45:c8:d1:39:4e:b3:60:af:10:63:f8:
ba:c6:ed:56:59:ac:86:4d:b7:12:30:79:14:c1:38:
48:fe:38:7b:36:26:9c:bc:87:0b:e6:96:39:ac:02:
e2:d8:e6:98:f4:0f:e0:84:c7:8e:6f:64:c8:2a:e9:
db:e7:dd:ea:1c:23:64:a4:62:a5:9e:30:cc:8e:6a:
0c:ca:1c:34:04:15:cc:74:6e:f0:e4:bd:1a:48:5f:
77:d6:71:79:d4:a2:96:04:ba:32:99:c8:d3:8e:29:
3a:0f:36:86:49:0d:0e:b1:bc:5b:0c:44:0d:70:52:
b8:a2:48:3a:58:aa:4f:df:82:fb:da:af:a2:8f:24:
21:20:23:e2:09:3a:d3:58:52:4f:6b:07:f5:64:ab:
3d:73:f8:28:7c:db:fe:44:97:4e:8f:93:60:ec:e7:
c8:51:59:8b:04:7d:b6:c9:87:a7:a9:15:e1:67:ce:
22:45:cf:e1:6f:44:9d:25:4e:ff:13:de:34:1c:71:
ab:82:f5:6b:cf:e4:7b:a1:19:8a:56:fb:6c:37:5e:
08:c4:ba:a7:3d:ff:5d:97:6f:5e:c6:5e:62:e4:58:
7b:cc:7c:2f:45:0d:4b:21:e6:be:26:98:60:6a:02:
f1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:30:06:65:46:97:18:C1:79:C8:7B:90:FF:BF:35:4F:D1:16:E4:10
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/6DAGZUaXGMF5yHuQ_781T9EW5BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
176.105.231.0/24
212.115.126.0/23
Signature Algorithm: sha256WithRSAEncryption
52:52:d3:7b:55:c7:58:4a:39:af:d6:c2:44:fa:3f:4f:33:38:
a1:73:00:e2:57:62:0b:ab:60:19:39:75:60:c1:b3:c0:51:b0:
2f:d8:13:bd:3d:84:09:5a:b4:9b:00:c1:6c:f9:3a:63:58:d9:
74:3d:ce:99:b1:d4:f1:58:25:2a:44:b6:99:88:e8:3b:35:13:
9e:b2:17:e5:fb:94:ca:33:24:3d:d7:11:25:94:43:37:35:4a:
74:56:c3:92:cb:99:42:2c:3f:28:1a:47:26:ec:4b:29:5a:bf:
a3:58:34:1b:63:03:c7:49:52:23:5e:21:0b:3d:10:44:ce:dd:
24:3f:d5:3b:2d:00:fd:4b:c2:95:6a:8d:9c:24:7c:ec:b4:49:
a2:6e:6f:1a:34:fd:bb:67:3b:ca:b3:e7:d3:11:1e:8c:79:11:
af:2e:00:98:87:02:07:04:99:19:80:ba:cd:3b:65:f1:af:5c:
fb:17:da:10:bf:24:ab:00:50:78:ff:38:77:d2:1d:13:42:92:
56:08:48:78:61:8f:dc:8e:d2:f8:af:7b:2f:e0:f7:ab:71:07:
f7:8e:50:83:10:da:63:a5:d0:67:4c:f8:ad:eb:8e:1e:02:78:
5d:99:ed:04:e4:17:fe:e6:21:ee:d1:16:d9:8f:b2:4f:f9:fb:
69:b7:eb:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org