Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/HagWFZcSYiZ1WYgNUwWVZvVVRZs.roa
File: HagWFZcSYiZ1WYgNUwWVZvVVRZs.roa (raw, json)
Hash identifier: RV3o25JZclydWgAM99d4bTTgOhRmYgpZWEu2SnZaVaU=
Subject key identifier: 1D:A8:16:15:97:12:62:26:75:59:88:0D:53:05:95:66:F5:55:45:9B
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018B7CD0BB78EEBE6ECF20471B20425ACDC7
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/HagWFZcSYiZ1WYgNUwWVZvVVRZs.roa
Signing time: Sun 29 Oct 2023 19:02:16 +0000
ROA not before: Sun 29 Oct 2023 19:02:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
45.150.52.0/24 maxlen: 24
95.214.177.0/24 maxlen: 24
212.115.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Nov 2023 03:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:7c:d0:bb:78:ee:be:6e:cf:20:47:1b:20:42:5a:cd:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 29 19:02:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1da81615971262267559880d53059566f555459b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c5:4f:c5:8b:a9:db:b6:eb:f8:eb:c8:e3:89:
10:db:be:ea:d0:e1:8b:99:53:0c:44:32:ea:29:1e:
7a:36:01:b8:c2:52:54:0f:ae:91:f5:bc:7b:28:de:
33:e1:b1:6e:1c:a4:61:62:da:df:fc:42:10:02:f0:
01:a3:99:f0:24:e7:fe:77:12:6d:eb:46:7f:32:b8:
be:a3:70:1d:2e:e6:97:be:83:ec:78:5d:0f:05:e6:
9d:8c:ba:9b:a0:95:ce:f0:ee:40:6e:66:68:af:08:
98:7b:2a:9c:e3:9e:f4:88:75:e0:32:e7:5a:8d:7f:
ee:aa:84:a5:5e:4a:51:76:31:15:d0:e2:ae:08:42:
95:ec:29:4d:a3:bb:a4:ef:ec:54:14:92:4e:67:f6:
e4:17:47:54:a6:3d:0f:48:50:1a:93:4e:07:a2:7f:
93:67:11:00:97:6f:0a:3f:04:e4:52:cd:db:2d:8b:
e2:12:58:bb:15:80:08:21:39:fa:f8:59:d9:d5:18:
fa:9f:37:e2:55:59:b8:01:7b:ef:71:1b:f6:d2:59:
9a:bd:28:57:0b:64:db:83:b3:7b:f7:46:4e:ab:ed:
27:34:fc:f5:9c:67:7d:06:96:81:e8:ee:bd:68:62:
24:f2:7c:bf:35:e2:fb:41:dc:4c:ca:44:7b:21:3e:
82:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A8:16:15:97:12:62:26:75:59:88:0D:53:05:95:66:F5:55:45:9B
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/HagWFZcSYiZ1WYgNUwWVZvVVRZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.52.0/24
45.150.55.0/24
95.214.177.0/24
212.115.126.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:2d:01:e9:6a:1d:30:1f:b0:89:29:3a:7b:66:1c:f4:f4:4d:
2d:97:82:6f:02:4f:3f:85:a5:1b:3a:e8:20:45:4d:86:b4:94:
3d:7f:0c:79:59:50:4f:4b:68:c8:ee:b5:33:67:35:95:8f:5d:
8d:f6:31:4a:e2:15:e8:39:10:ab:1d:90:a9:4b:83:40:d9:f3:
ef:0a:6b:01:60:f8:7d:b6:0b:e8:90:0d:bd:2d:f4:77:ec:24:
fc:05:29:ed:9a:66:4a:8b:cd:ef:88:89:f2:dd:8c:68:e5:c4:
59:04:f8:ae:c1:a3:4f:f5:d6:ed:5d:3c:a6:ce:42:97:0d:59:
c5:0e:68:24:ba:c8:67:76:ad:30:fb:db:55:68:7e:0f:86:c8:
2c:c7:d9:ba:b1:24:39:19:14:6b:09:02:88:f4:09:3f:03:f5:
80:3b:6f:7d:5a:7b:4e:7f:5a:56:bc:f5:ea:a1:39:71:e6:8a:
5f:a7:e6:ed:f7:f0:39:02:59:3b:92:f5:3d:4b:fc:9a:6c:ec:
8c:57:a8:77:96:de:d8:b8:80:96:0d:4e:bf:83:7b:4f:6c:23:
29:16:4e:70:e9:0b:67:b5:32:e9:61:ec:c8:e4:8a:59:57:04:
e2:56:5b:63:00:70:a3:a4:c9:65:9b:2e:fa:ee:a1:f6:4a:2d:
30:44:e5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org