Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/9oGORfxo7BvVzkduAr1OgHUVDRA.roa
File: 9oGORfxo7BvVzkduAr1OgHUVDRA.roa (raw, json)
Hash identifier: /ZSkG0pAX86/Y5yIgqxIhPqlFhlLYdZzfk3tHGqOQTg=
Subject key identifier: F6:81:8E:45:FC:68:EC:1B:D5:CE:47:6E:02:BD:4E:80:75:15:0D:10
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018CD308F2D1EE2890DD70F7A4292DC8AF9C
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/9oGORfxo7BvVzkduAr1OgHUVDRA.roa
Signing time: Thu 04 Jan 2024 05:53:48 +0000
ROA not before: Thu 04 Jan 2024 05:53:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.137.17.0/24 maxlen: 24
45.150.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Jan 2024 04:59:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d3:08:f2:d1:ee:28:90:dd:70:f7:a4:29:2d:c8:af:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 4 05:53:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6818e45fc68ec1bd5ce476e02bd4e8075150d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:2e:88:f7:64:0a:28:b0:77:b2:c3:7d:3b:
7f:63:42:f4:fb:e7:e9:af:49:5a:b9:47:52:0f:2b:
1a:5a:e5:84:51:61:17:50:da:59:22:72:a5:85:6d:
c2:3b:31:dd:c0:d6:4f:2e:31:4c:26:11:d0:1d:b2:
36:41:af:98:e9:4b:de:49:dc:c8:07:24:e5:da:1a:
2c:43:17:09:e5:77:bb:6f:eb:d1:74:03:e5:94:96:
94:6e:f1:c5:db:4e:76:9e:fa:ef:87:64:4b:bd:3a:
8f:b5:9e:ce:8b:d1:dc:99:48:c5:4f:6c:74:a9:c1:
6d:f6:0b:7f:4e:94:55:8d:ed:99:9b:e3:a2:d8:ae:
96:5e:82:dc:89:db:e7:9a:ca:c5:7c:3b:96:4f:e0:
f7:68:94:70:ce:bf:2b:6f:8f:49:1c:9f:41:b8:32:
47:40:84:2c:52:4f:56:33:b0:09:a2:dc:93:94:1f:
68:d8:5d:8c:63:7e:a3:5d:28:95:cb:35:b9:d5:2a:
18:12:e4:7d:47:9e:e1:88:f5:2c:26:1a:cc:da:32:
75:25:df:e1:a7:bc:49:eb:15:a8:06:1d:c0:06:a4:
0f:95:a2:c6:2e:51:2f:0f:de:89:d9:d1:69:4f:5c:
c3:3e:0e:ca:5e:24:e8:19:54:71:f1:e9:de:60:8b:
d6:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:81:8E:45:FC:68:EC:1B:D5:CE:47:6E:02:BD:4E:80:75:15:0D:10
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/9oGORfxo7BvVzkduAr1OgHUVDRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.17.0/24
45.150.55.0/24
Signature Algorithm: sha256WithRSAEncryption
06:70:ce:69:8e:29:06:c8:1f:5c:82:3d:54:2d:10:3e:29:4d:
96:4c:37:34:8d:01:1d:8c:1d:46:14:ac:20:01:d2:79:43:25:
46:8e:78:34:43:4b:00:f0:80:ab:86:c3:cd:ae:f7:49:9a:d3:
57:1a:f3:3d:09:54:29:e8:8b:73:6f:d2:69:c5:71:d9:08:86:
0e:b4:dd:54:3c:3f:01:aa:06:45:15:4c:6c:6a:9e:94:bb:a9:
ea:eb:48:56:2b:6d:2d:2e:76:cf:26:57:9f:3e:4b:a0:7d:7d:
9a:e7:79:c1:71:d7:4e:0b:ed:b9:bc:84:dc:c8:43:aa:8c:fb:
ed:8f:a3:c6:78:ce:cd:40:03:44:f1:68:b7:b4:f0:7d:06:dd:
77:1b:e8:b6:b3:9d:1a:93:93:67:f8:bd:f4:24:bb:d4:11:e3:
0e:07:98:5f:e7:c2:70:97:f8:40:ef:c1:17:aa:7d:47:e6:44:
e7:c8:cc:5c:27:61:28:60:3b:86:2e:ee:0a:f0:38:91:d0:2e:
17:ee:c7:76:b2:f3:a6:06:70:1c:e6:bb:cc:d7:f4:d8:a0:7d:
61:6a:a4:fe:9e:d9:12:47:e6:0f:b8:aa:d2:66:4f:7a:c4:0f:
3e:a8:05:54:48:4d:00:01:91:e4:5e:89:f6:9e:08:eb:29:b1:
93:5e:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org