Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/WJ749497amAcwcOeOxYthgATibo.roa
File: WJ749497amAcwcOeOxYthgATibo.roa (raw, json)
Hash identifier: +1e2pOM6Z+BgyzzSGLrW50vUhTiBhBvlLRAKDE1qQFo=
Subject key identifier: 58:9E:F8:F7:8F:7B:6A:60:1C:C1:C3:9E:3B:16:2D:86:00:13:89:BA
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018B10835359E30B6596B1709CC4F1383A76
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/WJ749497amAcwcOeOxYthgATibo.roa
Signing time: Sun 08 Oct 2023 18:18:43 +0000
ROA not before: Sun 08 Oct 2023 18:18:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
45.150.52.0/24 maxlen: 24
212.115.126.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 18 Oct 2023 21:46:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:10:83:53:59:e3:0b:65:96:b1:70:9c:c4:f1:38:3a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 8 18:18:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=589ef8f78f7b6a601cc1c39e3b162d86001389ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4d:e6:a2:82:7b:78:16:1a:a9:68:e2:46:d3:
98:3f:dc:a1:ee:4e:4e:f2:29:0a:0d:10:ea:c2:e3:
67:0c:a1:29:8a:45:45:3e:b2:c7:68:eb:8d:c3:46:
aa:a9:60:26:31:27:1e:b6:2a:63:f9:15:1d:65:03:
ab:35:89:8c:e6:47:d3:1b:b3:38:21:2d:6c:54:71:
e1:f6:19:d4:37:d7:59:f0:12:ee:d0:b3:07:b5:cf:
5e:2c:50:08:b3:b2:4f:43:f1:f0:e2:a5:24:96:2a:
34:9d:3a:b1:33:b1:b8:10:8f:59:45:e8:ff:57:2f:
8f:a9:44:f8:97:78:26:d5:18:e6:58:17:49:0c:81:
ea:7d:c0:8c:6d:80:19:1f:0d:95:06:9d:8e:a9:05:
00:80:b2:e2:32:e6:83:93:fb:d8:3d:e0:12:d0:8c:
b5:be:95:df:88:b6:a1:a7:11:cb:aa:6b:aa:d2:88:
41:56:79:44:33:70:6b:22:51:eb:3d:e4:7e:40:f5:
b7:09:4d:0a:1a:60:2d:45:b6:2d:49:77:e7:b3:39:
26:73:0f:83:82:08:5c:5c:7b:8e:b1:ee:34:e5:a8:
56:65:41:cc:80:b8:6e:39:b5:93:ee:06:2e:83:f6:
ee:1f:d2:cc:de:59:54:53:02:1b:8d:b3:ab:9d:fe:
9b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9E:F8:F7:8F:7B:6A:60:1C:C1:C3:9E:3B:16:2D:86:00:13:89:BA
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/WJ749497amAcwcOeOxYthgATibo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.52.0/24
45.150.55.0/24
212.115.126.0/23
Signature Algorithm: sha256WithRSAEncryption
89:9f:1d:45:2d:45:cd:55:d1:de:ef:0c:70:c7:f2:49:db:a9:
5c:cf:98:6f:32:9a:f6:a3:8f:4b:e8:6d:c5:70:df:b1:7d:7d:
f2:05:a6:0d:3b:79:4d:04:c4:64:be:a5:1c:4b:ec:34:d6:7b:
a2:4a:f8:d3:78:a3:ca:db:ca:64:e7:35:23:d2:03:b7:d2:c7:
1e:0b:98:22:f4:9d:fc:bf:8a:df:37:93:ab:13:25:9a:a7:ef:
66:6f:9e:13:cc:c7:66:9c:6e:60:c6:61:ef:74:71:a7:dc:70:
e1:c5:5b:6e:08:9f:d0:17:56:84:93:60:3a:d7:d3:e1:a4:17:
d1:aa:af:80:0c:ff:b2:25:28:e6:2c:8f:75:7a:eb:6a:e1:16:
4d:03:90:75:19:d2:74:23:1d:60:c0:5e:ca:30:51:93:a5:7b:
29:8b:70:59:cc:75:88:73:59:0b:7f:57:f3:06:a3:0a:b3:33:
bf:97:32:8b:fb:c6:a5:40:46:b9:42:79:30:d2:47:b1:f0:e9:
77:02:06:2c:c2:f0:d4:a0:e6:a8:5c:5a:9e:a0:93:a3:08:f0:
e7:56:bb:0e:cd:14:c3:7c:c7:25:1f:e3:d9:d5:93:2d:b1:af:
91:5c:f4:42:b5:58:4b:52:7f:c8:74:fd:7a:ab:05:0b:22:72:
4b:cc:b6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org