Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/INh5p6w0bzJ3C722QhT-46kRlm8.roa
File: INh5p6w0bzJ3C722QhT-46kRlm8.roa (raw, json)
Hash identifier: aeqgzJ46PvHHmi4OQ2u7Ij8q1QSq63F75imslIa0uhU=
Subject key identifier: 20:D8:79:A7:AC:34:6F:32:77:0B:BD:B6:42:14:FE:E3:A9:11:96:6F
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0190B61C3AE3B3B2E7F3457DEAE49DE00D88
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/INh5p6w0bzJ3C722QhT-46kRlm8.roa
Signing time: Mon 15 Jul 2024 11:17:01 +0000
ROA not before: Mon 15 Jul 2024 11:17:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.137.16.0/24 maxlen: 24
45.137.17.0/24 maxlen: 24
45.137.19.0/24 maxlen: 24
45.150.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jul 2024 18:14:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b6:1c:3a:e3:b3:b2:e7:f3:45:7d:ea:e4:9d:e0:0d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jul 15 11:17:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=20d879a7ac346f32770bbdb64214fee3a911966f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:7a:3a:81:0e:e2:80:25:04:ea:44:e2:76:
6e:8c:ec:30:e9:92:09:34:b7:2a:bd:89:fd:0c:a0:
ca:15:d6:98:58:13:ee:e0:82:0d:61:7a:ab:4f:fb:
fd:d7:77:8e:a9:d7:14:03:4c:fe:80:80:ca:74:f1:
54:0d:ce:e5:86:81:c6:d8:ef:13:02:1e:4e:9f:0a:
e4:4a:a3:06:8e:09:b8:83:f2:6f:83:4d:92:d2:d6:
5f:48:74:4a:d7:b4:0d:2f:a2:4e:5e:54:c4:e9:d1:
7f:2e:9b:eb:e5:ee:53:cf:cc:e7:24:81:1f:a7:9d:
04:d6:17:6b:6a:8c:e6:b5:4a:3c:70:0d:a3:76:83:
17:79:69:8e:73:de:7e:a0:17:0b:74:e3:c8:c3:78:
de:3d:03:36:86:d0:1a:3f:8f:1c:06:2e:80:99:6f:
29:cf:6f:65:41:4c:db:ae:d7:cd:fc:5b:cf:87:8f:
28:2f:c3:42:33:01:a4:4f:65:20:ee:11:57:8f:90:
46:5d:4d:c9:99:3c:92:a4:af:55:e8:e4:35:b9:01:
8a:ea:66:9f:a4:1a:24:8c:4a:d7:8f:be:43:8e:67:
ca:9c:40:5b:05:9a:33:d8:72:a5:b1:84:d4:4b:c7:
eb:bd:c6:4a:3c:a1:b6:0c:4b:84:dd:4c:8a:a7:bc:
11:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D8:79:A7:AC:34:6F:32:77:0B:BD:B6:42:14:FE:E3:A9:11:96:6F
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/INh5p6w0bzJ3C722QhT-46kRlm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
45.137.19.0/24
45.150.53.0/24
Signature Algorithm: sha256WithRSAEncryption
41:86:34:b4:51:89:c0:21:26:e6:a3:a6:fb:9e:df:a8:f0:c7:
18:ab:b8:41:07:38:88:09:41:72:81:da:e0:02:c5:63:16:61:
74:a8:41:bf:82:76:7f:8b:ca:9b:73:2a:b4:de:b6:2a:c8:8b:
e4:16:76:75:6d:95:5e:ea:77:b9:b3:0f:07:68:31:7f:d5:b4:
dd:13:1d:05:cf:cc:73:44:ef:3f:ca:c4:ec:8a:01:1a:2d:33:
70:70:0f:a0:6f:a9:f7:54:f6:a5:11:96:db:92:54:94:8b:a3:
73:73:07:74:53:d9:aa:38:16:90:51:1f:9f:d8:3f:c5:5b:85:
74:43:35:cb:e2:54:68:1f:3d:5e:49:8b:1b:39:cc:76:6f:9a:
48:7e:00:f9:8a:e7:19:89:71:ea:93:c4:e9:80:08:b2:4d:99:
4c:a8:89:40:55:c4:80:cd:ca:f4:16:d7:44:38:f8:ce:b0:6b:
70:b6:9c:71:80:61:4e:29:17:ef:81:4d:1a:b4:7a:29:9c:36:
e7:c5:4b:49:a7:91:d5:8f:64:89:69:e7:7a:e5:14:c2:44:08:
0b:48:6b:bf:63:3e:02:f8:50:b9:d0:68:26:8b:a9:d3:06:ca:
6a:fb:88:c3:03:58:aa:a8:d0:e0:99:ce:2f:43:df:1d:2c:b8:
5b:78:e4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 17 22:48:31 2024 by rpki-client on console-ams.rpki-client.org