Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/7IUDoHNGeAUrUYV9hxEB5Fu8eHQ.roa
File: 7IUDoHNGeAUrUYV9hxEB5Fu8eHQ.roa (raw, json)
Hash identifier: 9+H5HeJ43d55FL4bGnVtFozEnz7kwuxWHYhgihfNGeo=
Subject key identifier: EC:85:03:A0:73:46:78:05:2B:51:85:7D:87:11:01:E4:5B:BC:78:74
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0189911EE1510009ABDB137514A5FD1FB221
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/7IUDoHNGeAUrUYV9hxEB5Fu8eHQ.roa
Signing time: Wed 26 Jul 2023 07:34:27 +0000
ROA not before: Wed 26 Jul 2023 07:34:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 176.105.230.0/24 maxlen: 24
45.150.55.0/24 maxlen: 24
95.214.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Jul 2023 20:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:1e:e1:51:00:09:ab:db:13:75:14:a5:fd:1f:b2:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jul 26 07:34:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec8503a0734678052b51857d871101e45bbc7874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:ed:ef:eb:f9:08:6b:90:60:07:d0:c2:bf:
3e:6a:92:de:1c:15:e4:1f:5d:e5:cc:f6:6e:8f:2d:
2f:7c:e6:37:65:ce:85:46:79:4c:5b:8b:75:6a:86:
4e:a5:e4:ef:f9:e6:d5:e6:8a:ad:df:73:c8:1c:c4:
ff:c5:f6:1b:e3:eb:10:5d:ae:82:78:70:8e:9e:5b:
1e:2a:0b:fd:e1:4e:8d:57:23:81:d6:9f:c0:23:92:
3b:1d:33:a9:1d:fa:c8:16:16:99:8c:a7:1c:2a:1d:
ab:27:7d:42:5d:44:d7:ca:2b:14:2d:83:4e:3e:6a:
02:50:27:06:d8:1b:22:75:d7:8e:68:a6:b7:33:cf:
90:30:66:f8:9c:7a:c1:cc:cd:c8:ac:4e:df:94:13:
44:58:61:ec:d9:4c:1c:1b:fe:f9:d8:a0:31:b4:22:
38:b0:d1:6a:f7:1e:da:35:be:f9:ce:94:b3:5f:fb:
58:0c:79:8a:62:99:2a:fd:a7:63:c9:9a:01:42:1d:
a6:06:9d:0a:88:de:01:3a:0b:69:fe:a7:ae:b4:62:
d1:f4:7b:a3:b9:f5:9c:66:66:16:f4:b8:70:a7:fd:
48:21:92:28:a0:d1:f0:6b:30:50:1f:53:1c:af:71:
98:bf:a4:8d:d9:2e:fe:93:e4:9b:63:45:60:9e:bb:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:85:03:A0:73:46:78:05:2B:51:85:7D:87:11:01:E4:5B:BC:78:74
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/7IUDoHNGeAUrUYV9hxEB5Fu8eHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
95.214.177.0/24
176.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:bc:8a:c3:8e:9a:f0:90:c4:b0:79:52:e5:96:18:5b:6a:23:
5c:2d:7a:e4:c0:0e:7b:74:aa:8f:e0:55:d9:90:55:5e:eb:c1:
de:b5:dd:c1:fe:3f:f2:6d:39:e8:74:2a:c5:37:76:d3:88:8d:
6c:f7:1c:75:a1:2b:7e:7a:08:37:3d:34:8b:f7:be:1f:62:45:
f0:8f:53:ff:64:72:42:dc:4d:5b:bb:24:c1:4a:44:99:46:a9:
f8:68:ac:76:e3:ae:cd:bd:cb:56:08:90:93:f2:79:40:c3:50:
6f:a7:a9:75:1f:7b:6e:57:a3:f0:50:6d:ad:41:34:bd:62:f1:
e5:20:27:1b:5a:9b:56:71:a1:bb:75:78:1f:a0:16:f0:4a:24:
ff:45:74:a8:2f:2a:93:00:ee:29:2f:5e:03:04:d6:b2:ed:ca:
d6:c2:47:36:98:f4:cf:ca:52:5b:e4:56:13:a2:a3:32:0c:f0:
52:e3:f1:47:f5:34:f2:86:0c:69:a3:58:39:25:a7:68:ec:9c:
67:70:fd:24:0e:22:fe:7f:73:da:19:aa:b9:2d:18:a4:c1:cd:
93:b0:fd:2d:b4:85:32:1f:00:7b:f9:e0:80:d3:72:ec:5a:89:
c0:cb:98:48:72:b8:2f:8b:cb:1a:99:b9:60:20:13:1f:fd:1c:
1d:6c:23:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org