Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Bxu6Sq0oocCeaAyq_F2L9Zficto.roa
File: Bxu6Sq0oocCeaAyq_F2L9Zficto.roa (raw, json)
Hash identifier: cRtkDkI1h9YdXS+47hCOBm+qInYXX3X4GM9wTtJdJ5Q=
Subject key identifier: 07:1B:BA:4A:AD:28:A1:C0:9E:68:0C:AA:FC:5D:8B:F5:97:E2:72:DA
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018F9C20C605EEAC97A09C07C3DB1898BE65
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Bxu6Sq0oocCeaAyq_F2L9Zficto.roa
Signing time: Tue 21 May 2024 17:09:04 +0000
ROA not before: Tue 21 May 2024 17:09:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.137.16.0/24 maxlen: 24
45.137.17.0/24 maxlen: 24
45.137.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 26 May 2024 05:32:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9c:20:c6:05:ee:ac:97:a0:9c:07:c3:db:18:98:be:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: May 21 17:09:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=071bba4aad28a1c09e680caafc5d8bf597e272da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2e:ca:85:da:04:a5:70:0a:ee:04:4e:9e:f7:
ad:84:7a:fc:99:d2:de:89:71:6b:cc:d4:33:3b:b4:
42:45:ed:a1:90:3a:3d:0d:76:eb:7b:f6:a3:5f:27:
48:5d:49:29:e5:17:c3:b5:48:4b:d9:a2:f8:54:ae:
5a:87:8a:df:3b:d5:1f:b7:ea:ce:7e:27:59:0e:b8:
07:f1:c6:dc:25:c7:37:a7:a5:53:05:84:23:4d:ef:
99:56:8c:a7:a3:a9:c7:40:29:67:7e:c4:b3:3a:57:
74:c7:f8:45:c1:65:8a:fe:d1:a2:0a:bf:39:a5:fa:
40:7d:f4:6f:75:2a:65:e9:0a:e2:ce:7b:55:02:11:
3e:1e:b3:fd:3a:ae:8c:11:2c:66:ed:13:b6:b3:b6:
f3:5a:ab:5b:47:03:80:f3:96:ed:67:39:a8:53:26:
94:3e:f2:0a:b1:4a:b8:9a:cb:f3:14:0e:47:5c:a1:
14:48:98:ac:8d:9b:8a:33:1f:6b:00:94:a4:83:a8:
bb:ac:fa:36:1d:65:4a:29:7c:88:eb:d7:bb:e7:9f:
01:de:cf:6d:31:e6:ea:2f:1d:37:12:a6:e4:5c:58:
0a:34:da:ec:8f:b1:c9:17:9b:e8:7b:65:31:22:86:
27:8c:be:bc:87:c2:c8:b0:56:7b:9a:8b:f2:db:c7:
af:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:1B:BA:4A:AD:28:A1:C0:9E:68:0C:AA:FC:5D:8B:F5:97:E2:72:DA
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Bxu6Sq0oocCeaAyq_F2L9Zficto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
45.137.19.0/24
Signature Algorithm: sha256WithRSAEncryption
48:a4:00:7c:48:b6:35:a6:f0:f0:cb:ca:b8:b1:3e:2e:b0:eb:
ad:63:62:bc:51:06:a8:e2:91:b0:d9:87:cb:4d:f2:62:7c:1d:
69:8e:e6:01:fa:98:03:16:55:d6:22:50:de:fa:a0:23:01:02:
e5:d2:5f:7d:3d:09:68:a7:71:71:6e:4b:65:bf:cb:fd:d6:59:
37:58:13:46:8a:17:2f:df:03:11:e3:c7:d0:a5:be:59:6b:fe:
b9:64:ef:ce:a5:f3:e6:ad:01:ec:0f:ee:e3:e9:74:bb:88:84:
9c:b6:6c:27:5b:f3:d8:07:ab:ed:73:fa:6d:6a:8a:43:93:c1:
52:03:82:b7:e2:34:08:60:3c:70:ac:98:3c:00:84:8a:9a:89:
e7:d8:e7:68:7e:08:43:4c:2a:bd:8f:53:38:02:c8:26:d1:b4:
4f:55:d0:bf:81:1e:0e:14:f1:51:8b:6e:ca:bb:9a:00:95:e8:
04:a1:20:82:85:e4:95:e9:ad:e0:4c:b5:96:24:48:a3:7d:cf:
7d:56:94:c4:8b:b3:f4:53:41:99:b9:cf:fc:0f:74:03:56:b9:
db:54:05:3a:bd:2c:95:e3:40:a7:56:23:19:19:fb:cf:3c:7c:
25:85:39:3f:26:90:9f:d9:7b:45:7d:ab:78:fd:3f:d0:b9:e2:
d4:5a:6b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org