Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ReJSq7-8b9uROW0Gmmh6Z-RMYjk.roa
File: ReJSq7-8b9uROW0Gmmh6Z-RMYjk.roa (raw, json)
Hash identifier: LT1e1sfOTlrCK7k3BEElZI4fKvNatObkaeesgb3fsGo=
Subject key identifier: 45:E2:52:AB:BF:BC:6F:DB:91:39:6D:06:9A:68:7A:67:E4:4C:62:39
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0187E52C10A723A30F464510DB6C1B3123BB
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ReJSq7-8b9uROW0Gmmh6Z-RMYjk.roa
Signing time: Thu 04 May 2023 05:11:22 +0000
ROA not before: Thu 04 May 2023 05:11:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.54.0/24 maxlen: 24
212.115.124.0/23 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 May 2023 21:16:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e5:2c:10:a7:23:a3:0f:46:45:10:db:6c:1b:31:23:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: May 4 05:11:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45e252abbfbc6fdb91396d069a687a67e44c6239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:68:68:f2:9c:d9:48:7f:18:9e:df:e7:95:
d3:f2:b8:0f:7c:b5:b1:92:2c:a5:42:f5:38:91:e5:
81:e8:2d:b0:4c:11:fb:3b:89:15:6f:8e:fe:3f:57:
0b:82:88:c3:df:03:c6:dd:56:24:1d:fc:07:88:e2:
0c:67:96:01:e5:48:95:91:06:f5:6f:32:e9:b1:d0:
4f:f2:e6:49:c0:a1:b1:86:3c:04:89:2d:47:84:e5:
ff:31:83:7b:2f:e1:43:6b:ea:ec:f9:12:e5:e7:34:
46:f3:04:74:11:b5:8c:2d:e2:eb:d1:3c:ab:43:25:
ea:08:69:72:e5:7b:5d:16:ef:dc:e1:52:9d:18:6b:
85:15:94:eb:2d:2a:bc:5f:44:df:f9:a2:e6:e5:23:
2c:5f:31:eb:c8:f3:58:f8:41:2b:0c:bf:a9:5d:65:
28:15:a6:a3:ba:0e:d2:d0:1e:00:64:40:96:4b:62:
cf:da:01:3c:98:d2:8c:01:f1:f0:b7:95:5d:40:e1:
b9:4e:79:42:6e:8d:63:e1:bc:c7:70:bd:44:f3:3f:
ef:65:30:b7:76:c3:fd:4f:d1:0e:1c:a1:65:f9:ed:
92:11:a9:ac:9e:18:16:ea:77:dd:87:fe:41:a2:e9:
14:c6:bd:23:42:5c:2b:be:b3:1c:b0:6e:df:c0:85:
a9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E2:52:AB:BF:BC:6F:DB:91:39:6D:06:9A:68:7A:67:E4:4C:62:39
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ReJSq7-8b9uROW0Gmmh6Z-RMYjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.54.0/24
212.115.124.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:76:ab:9b:45:2e:dd:ec:e6:6d:7f:fb:d4:36:14:a8:17:cf:
39:b1:27:3a:2b:e3:ca:cc:f3:0d:96:8b:8a:93:5e:2d:57:d4:
56:81:70:11:e0:c8:7a:65:8a:c4:4c:7c:0c:6d:65:53:af:b0:
6d:c8:08:42:44:9a:c3:da:cb:e1:f7:11:4b:88:13:2a:a6:94:
7b:68:04:14:cb:b7:cf:89:b2:83:55:a0:56:19:aa:bc:b0:ce:
06:7c:bc:99:97:e7:88:5b:0f:29:e2:51:ff:08:09:ee:c3:3c:
20:6f:3b:e2:5b:09:42:de:f6:b0:64:c2:30:4a:53:cb:f1:9f:
70:2e:e9:b0:ae:39:45:a4:50:21:71:3f:e1:7c:58:5f:f5:6d:
b6:d6:99:40:81:e1:63:b1:d3:1a:59:8a:f2:eb:88:12:2f:c4:
bb:b8:de:50:b6:45:1e:5e:00:00:1c:d5:13:61:b9:dd:b9:9a:
ee:84:0f:25:e9:74:ac:ca:25:78:cf:3d:d5:a0:db:9b:07:2a:
63:a1:24:28:c6:c1:9f:f1:1a:32:01:fe:e2:94:cf:93:43:5d:
60:d6:ce:be:04:44:a7:77:66:45:59:d3:99:80:3c:bc:c3:02:
3c:fe:ea:3f:6e:29:c2:74:69:ca:09:70:2e:a3:97:f7:fb:70:
b5:b0:a1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org