Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Wrno2XFSmJcRLOOltZS14u-fC2M.roa
File: Wrno2XFSmJcRLOOltZS14u-fC2M.roa (raw, json)
Hash identifier: HNv/Kdns9srxbHFJDIvxAkYoOheVswzptKyJYeqRZaM=
Subject key identifier: 5A:B9:E8:D9:71:52:98:97:11:2C:E3:A5:B5:94:B5:E2:EF:9F:0B:63
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01856C785A6C3A003EE2F46C2995B9859444
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Wrno2XFSmJcRLOOltZS14u-fC2M.roa
Signing time: Sun 01 Jan 2023 08:35:04 +0000
ROA not before: Sun 01 Jan 2023 08:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 27027
IP address blocks: 45.150.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Apr 2023 15:03:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:5a:6c:3a:00:3e:e2:f4:6c:29:95:b9:85:94:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 08:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ab9e8d971529897112ce3a5b594b5e2ef9f0b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:45:85:bc:d1:03:7f:d5:90:54:48:02:19:35:
9e:bd:f1:1b:eb:d5:68:22:3e:95:07:e9:5b:68:fc:
5b:23:7b:be:12:12:04:a6:90:88:2c:bb:a6:65:0a:
7e:ac:d6:ba:f6:cb:83:97:c2:32:54:05:ec:e7:63:
fd:7c:8a:41:69:98:b0:e9:a0:55:f2:fd:14:a0:c9:
c7:4d:6b:48:bc:43:f0:cc:0f:3e:61:b9:07:05:5d:
ab:11:c4:42:fe:55:f4:e1:9f:b4:13:ec:41:6d:c1:
4f:0c:97:63:b8:9b:78:0f:f4:92:61:fc:57:38:6b:
50:4c:3c:83:24:b0:89:56:be:10:05:5b:aa:fd:bb:
4f:f4:43:d8:1c:2c:cf:99:80:48:12:00:39:bd:6d:
fa:22:64:51:d6:f3:64:93:e4:80:05:98:b5:6f:89:
4e:f8:41:d8:fc:f1:b9:24:a7:ce:e4:6d:9c:b8:61:
fd:2b:c1:6a:13:ed:d8:6c:fa:87:32:b8:a5:29:92:
62:31:85:b8:e1:1d:b1:49:c4:df:96:9e:4b:63:ee:
fe:da:56:ac:8b:91:61:03:c4:17:f0:b8:ed:46:a1:
4e:6c:4d:bb:a5:9a:f1:95:0b:79:50:48:41:38:04:
41:f6:b2:01:b8:8e:5d:2a:f8:dc:ab:e0:15:67:c3:
02:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:B9:E8:D9:71:52:98:97:11:2C:E3:A5:B5:94:B5:E2:EF:9F:0B:63
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Wrno2XFSmJcRLOOltZS14u-fC2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.52.0/24
Signature Algorithm: sha256WithRSAEncryption
94:0c:3c:a3:34:35:66:6d:ab:c5:14:63:6f:bf:45:95:be:05:
7d:dc:4d:1b:26:b1:41:20:f8:f7:08:2d:cd:c3:56:e0:a5:e3:
6b:e7:94:76:5a:1c:02:1b:24:60:56:40:ec:8b:0a:1d:9f:57:
a1:cd:79:af:d6:ea:2e:e1:8f:96:72:c6:73:50:68:50:d7:78:
2b:6f:c4:29:82:74:f1:f8:54:0a:fd:e0:1b:3c:f9:e0:1f:00:
f3:dd:29:e0:9e:05:02:52:88:c7:df:11:51:a5:67:fb:ca:23:
66:a2:34:72:7e:12:6c:14:f8:64:12:14:8d:7e:d2:87:0d:9b:
31:f5:96:4d:7d:8a:db:3c:17:0b:33:c5:9e:8e:4b:e4:96:bf:
36:20:6b:cd:4c:c4:9f:6a:ea:6a:de:f1:16:fb:e2:f4:c4:c4:
12:84:f1:36:9e:1f:cc:e2:b2:65:8c:9b:13:cc:be:ed:5e:a3:
fd:5a:07:e8:89:76:86:a6:61:03:c3:80:3c:f4:60:41:ce:d9:
56:09:b6:db:9c:be:6a:7f:50:e9:d5:e5:de:4e:e1:dc:57:7f:
05:6d:45:60:e0:51:aa:d9:f9:56:cd:14:54:1e:4a:5c:90:68:
0f:70:a3:91:ba:8c:83:47:32:9a:57:04:09:d9:00:90:60:62:
e2:b3:9e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org