Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/SS2d8RCsOT6hGDfsjq2BbKpY3l8.roa
File: SS2d8RCsOT6hGDfsjq2BbKpY3l8.roa (raw, json)
Hash identifier: qwcmr83I9F7xWzcjnWiu8jy7hOT7zBo4TaZs2ktn/ww=
Subject key identifier: 49:2D:9D:F1:10:AC:39:3E:A1:18:37:EC:8E:AD:81:6C:AA:58:DE:5F
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018AA16F245F58E2C2EB9D958F8AC084F445
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/SS2d8RCsOT6hGDfsjq2BbKpY3l8.roa
Signing time: Sun 17 Sep 2023 04:38:50 +0000
ROA not before: Sun 17 Sep 2023 04:38:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
91.244.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 19 Sep 2023 06:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a1:6f:24:5f:58:e2:c2:eb:9d:95:8f:8a:c0:84:f4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Sep 17 04:38:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=492d9df110ac393ea11837ec8ead816caa58de5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c4:15:68:4c:c6:71:31:01:15:eb:81:cd:60:
59:cf:3c:02:0d:ab:2c:42:87:ca:87:da:66:e5:05:
ce:1f:6b:0b:28:9d:98:61:3f:02:d2:ad:73:a3:19:
d5:9d:27:8e:0c:ae:c6:a5:fd:05:c4:c5:16:dc:b9:
ff:0c:40:88:70:ba:66:51:59:00:13:82:ed:6d:4c:
9a:27:b9:e1:d5:c5:23:eb:73:85:84:b2:44:76:0d:
a1:cf:91:a6:d3:2d:1b:40:51:6c:c0:da:a7:a7:80:
5a:95:e3:94:e1:07:97:55:19:14:a1:c6:a9:ad:e2:
82:6a:6e:5b:d9:4e:95:c3:82:6e:9b:db:d6:12:a0:
d4:c7:66:93:d2:99:e6:fd:48:68:ab:24:3e:46:93:
1d:26:1e:c6:71:ba:68:5b:02:4c:8f:2a:b0:ac:5b:
d2:61:45:d7:80:8f:42:0d:83:82:3a:26:95:b7:e2:
4e:e8:cc:ea:3c:29:1f:25:02:da:75:76:6b:55:bb:
ef:52:7a:d4:58:b1:e7:fa:e8:3d:5e:1b:b9:7f:6c:
a5:7e:a8:e2:32:83:15:a0:75:31:77:23:c4:b5:62:
f3:94:d3:fd:60:7c:38:64:d5:ff:3e:d3:73:e2:b0:
84:e8:64:49:8a:9f:7d:a2:f9:18:df:cb:b1:20:40:
12:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2D:9D:F1:10:AC:39:3E:A1:18:37:EC:8E:AD:81:6C:AA:58:DE:5F
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/SS2d8RCsOT6hGDfsjq2BbKpY3l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
91.244.199.0/24
Signature Algorithm: sha256WithRSAEncryption
38:c5:8c:f0:8e:95:f6:28:da:a7:42:97:7a:7c:75:37:93:a3:
73:39:50:d7:25:ce:7a:48:fb:4b:5a:45:cc:e4:93:41:88:55:
ad:81:b1:07:1f:ef:8d:bb:07:c5:8f:ba:cc:57:83:93:07:13:
ca:e7:7f:e1:26:85:8a:de:8b:5f:0c:51:31:fe:ee:8b:f4:76:
37:5d:43:c5:ee:df:f8:64:22:96:10:a8:70:81:4b:04:43:6b:
53:a4:ec:a9:98:97:2c:d4:1b:a0:00:d9:45:e9:71:10:86:a5:
78:0e:7d:b1:b5:dd:6e:df:5c:87:51:53:1b:69:87:52:89:af:
13:6f:af:63:e1:78:0f:02:2b:69:45:91:94:9c:26:49:65:07:
b5:db:c8:b6:8b:b5:16:3c:76:73:f7:6f:e3:9f:0e:a1:f6:49:
0c:d1:0d:36:ac:91:24:8a:bd:61:92:4b:4d:92:45:41:0c:16:
b9:d3:7b:f2:16:c0:d4:ad:eb:10:b4:7d:96:1a:67:47:00:6b:
fa:84:4a:36:14:c5:5c:fe:d9:ef:ba:6b:83:f5:90:2d:ca:08:
17:60:e4:8b:97:d1:68:7a:3b:a4:8c:a0:03:e5:07:62:b3:67:
4a:09:1c:a0:c5:a7:70:b3:c3:35:c6:5c:3c:61:0f:fc:a7:c2:
a6:29:38:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:43 2024 by rpki-client on console-ams.rpki-client.org