Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/9Ew5i70sTIOtjbIjXUAHNBIFIuA.roa
File: 9Ew5i70sTIOtjbIjXUAHNBIFIuA.roa (raw, json)
Hash identifier: 6qez/Rw0ryzZiYoz9oOEocq6BpwhP8kGcpVLStee+Eg=
Subject key identifier: F4:4C:39:8B:BD:2C:4C:83:AD:8D:B2:23:5D:40:07:34:12:05:22:E0
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018B44C1B2C134A2C6F3B626CAA7D2BEF804
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/9Ew5i70sTIOtjbIjXUAHNBIFIuA.roa
Signing time: Wed 18 Oct 2023 21:47:06 +0000
ROA not before: Wed 18 Oct 2023 21:47:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
45.150.52.0/24 maxlen: 24
91.239.149.0/24 maxlen: 24
212.115.126.0/23 maxlen: 24
91.244.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 19 Oct 2023 19:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:44:c1:b2:c1:34:a2:c6:f3:b6:26:ca:a7:d2:be:f8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 18 21:47:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f44c398bbd2c4c83ad8db2235d400734120522e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:57:a2:5a:7a:a9:af:52:96:ac:85:e1:a6:cc:
4c:08:d5:83:c0:bb:68:a1:90:1c:5b:5b:2b:16:27:
17:c0:5a:9f:f5:b4:31:12:cf:2a:9e:7c:95:6f:21:
1b:d7:8b:8c:e0:ad:c1:2b:9d:0d:01:2d:f4:ae:1d:
34:da:45:7c:45:e9:c6:24:df:42:f8:ed:9b:11:ad:
df:c8:5f:a3:64:b0:47:a6:ad:f6:f4:e8:97:66:57:
61:12:26:1d:cb:14:a4:f3:f3:da:d2:eb:b3:71:ee:
b6:27:eb:44:6a:fb:81:ed:00:63:67:e2:32:4a:48:
8a:85:79:ca:5c:71:d9:11:43:99:13:26:b7:31:97:
af:c6:e5:a1:5f:ec:99:ed:e8:3d:bf:73:c2:38:e9:
42:90:a2:2a:82:03:25:b7:0a:c4:4f:e1:57:51:e3:
93:66:0a:5b:95:ca:33:1e:8d:5f:18:fe:4f:f5:b6:
a2:e5:dc:51:56:04:ca:29:89:e4:7a:5b:ec:8d:d1:
13:34:57:c9:4d:e6:30:14:4d:5b:03:92:f8:16:83:
52:50:32:de:f6:60:a0:ae:12:a9:a7:ba:b7:50:c3:
32:98:ec:79:8e:55:e9:78:98:7b:49:54:85:20:61:
cd:0d:21:f6:c5:93:ce:1b:1e:b9:63:a6:a7:3c:d3:
1b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4C:39:8B:BD:2C:4C:83:AD:8D:B2:23:5D:40:07:34:12:05:22:E0
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/9Ew5i70sTIOtjbIjXUAHNBIFIuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.52.0/24
45.150.55.0/24
91.239.149.0/24
91.244.199.0/24
212.115.126.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:79:32:c6:e7:b1:de:75:c0:33:a2:18:88:ad:5d:62:f6:36:
98:31:6c:5f:3b:b4:62:4f:0e:e0:a7:65:00:33:68:c6:6b:74:
97:68:f4:ae:c3:9e:cf:65:3b:40:70:95:dd:48:87:9a:c1:b1:
1f:7d:a9:ab:9f:40:d2:af:16:af:35:f1:67:ad:cf:5b:13:83:
ba:7e:cb:59:0c:42:b5:c1:19:e1:43:e9:57:df:3a:08:22:de:
3a:6b:48:0a:c0:1a:ce:3d:d1:7e:33:8c:0e:7c:7c:e4:42:fd:
2b:dc:a9:c5:60:01:e4:4f:59:05:4b:e3:4f:df:a7:3d:4c:86:
9b:3b:e8:f7:7b:ad:f7:2a:86:ad:1e:d7:38:f3:2e:e2:09:ed:
6f:a9:8c:d6:cb:70:f1:e8:45:9f:80:a5:2f:f4:89:a0:f0:7d:
57:ad:e1:41:ed:54:45:ee:5f:06:c4:62:e8:17:aa:92:ef:59:
7e:da:8f:94:8f:91:8c:78:5a:d4:b0:8d:d0:ce:f0:59:d8:0e:
0e:14:92:f2:b3:b9:b8:d4:98:57:1b:ec:d3:42:6a:3f:ba:bf:
7e:83:a1:2b:32:72:59:76:17:03:cf:49:0f:17:35:2a:26:6b:
86:77:15:99:e6:9c:21:2d:de:cf:60:42:d7:f0:dd:41:fc:85:
2a:d2:c5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org