Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/LROsdhXMLbzP_Ykrpl4xmTR30Fo.roa
File: LROsdhXMLbzP_Ykrpl4xmTR30Fo.roa (raw, json)
Hash identifier: uKwc3bfZiy4yG/3FECQd8CYJiU7s9FN0ExTopiDgXuU=
Subject key identifier: 2D:13:AC:76:15:CC:2D:BC:CF:FD:89:2B:A6:5E:31:99:34:77:D0:5A
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018A8AE3A897C6A2AD666335C6A06C68CFD9
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/LROsdhXMLbzP_Ykrpl4xmTR30Fo.roa
Signing time: Tue 12 Sep 2023 19:34:50 +0000
ROA not before: Tue 12 Sep 2023 19:34:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
45.150.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 13 Sep 2023 20:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8a:e3:a8:97:c6:a2:ad:66:63:35:c6:a0:6c:68:cf:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Sep 12 19:34:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2d13ac7615cc2dbccffd892ba65e31993477d05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c6:ce:59:60:11:79:8a:8f:8a:10:b7:fb:08:
d1:da:2e:46:23:d6:4c:98:d2:b2:ea:f9:91:9d:21:
a7:b2:6e:aa:b3:ac:01:ea:71:d3:e8:9e:e5:10:bf:
c8:9b:e1:18:30:5b:93:59:e3:da:a0:0d:16:b1:e8:
af:78:3c:1b:08:c4:b4:b4:34:50:54:89:f3:0e:05:
02:ca:84:76:a5:6a:63:67:61:4a:48:31:b6:d9:24:
74:29:68:1b:49:e9:b0:cd:98:bd:8b:9e:d5:a4:69:
59:c6:6a:c0:2a:22:b6:10:1c:40:a4:a1:e0:76:74:
0d:73:2f:31:65:61:c1:e6:17:de:07:48:21:93:ff:
34:7a:2b:76:79:2b:91:39:8b:d9:00:c4:b0:f7:f3:
60:08:8e:66:f7:03:45:d2:3a:38:d1:0c:e9:1c:6d:
f1:ff:67:10:59:8f:d7:69:0f:54:a3:6d:bf:94:8a:
ce:5a:c3:6b:a9:02:62:43:20:96:de:dd:fa:12:13:
1d:a2:60:1f:e6:0c:98:ff:11:a9:fd:9f:19:3b:5e:
da:c2:a4:d3:e7:8c:b3:58:dc:9b:ec:86:a2:3a:1c:
7b:b1:7e:05:0d:67:80:2c:63:6e:5e:1c:71:96:27:
c4:31:4d:0a:09:71:b8:31:de:d1:30:40:db:85:2b:
2a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:13:AC:76:15:CC:2D:BC:CF:FD:89:2B:A6:5E:31:99:34:77:D0:5A
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/LROsdhXMLbzP_Ykrpl4xmTR30Fo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.53.0/24
45.150.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:7d:39:19:2a:00:64:f0:ce:55:63:9c:e0:6a:94:b0:3e:0d:
45:d8:c8:5b:c9:07:d4:d9:13:e0:6d:58:50:fe:aa:4c:7d:9f:
9b:71:ff:68:aa:a6:1d:33:a7:97:e7:4f:72:57:d5:cb:71:f1:
7e:1e:14:07:2b:2d:ca:8e:30:5c:4a:18:29:bd:c2:3e:48:a1:
e3:2e:21:f4:df:c5:27:d4:b5:ab:de:c0:f3:69:1c:a2:dd:bf:
eb:ea:07:d3:3b:99:ef:43:ec:f3:b3:99:e5:dc:12:4b:4e:77:
52:0a:6a:40:04:29:c1:6e:22:00:6b:32:5b:46:19:af:99:e6:
0e:02:44:58:ed:a6:e4:b7:65:a7:aa:1b:88:2e:14:96:71:85:
3b:7a:0e:ac:cd:08:58:a7:b3:85:37:0d:be:50:3b:5b:3f:ce:
8f:59:49:66:71:19:65:7a:25:95:62:dc:f2:98:f2:19:28:68:
fc:15:50:58:c9:a2:7b:1b:00:2c:5a:4f:25:b3:a5:3d:e0:67:
57:f2:53:38:06:0e:89:47:a5:98:58:48:0c:23:fd:f4:5b:a8:
82:20:68:75:36:0f:84:56:f8:66:ec:ac:d6:a2:b0:2f:19:a5:
26:c4:90:90:be:b2:c2:fb:2a:3b:da:cf:78:64:79:44:31:d1:
6f:e0:86:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:42 2024 by rpki-client on console-ams.rpki-client.org