Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/X22XpHqpj9w0z1xGEVQRNPcoq-8.roa
File: X22XpHqpj9w0z1xGEVQRNPcoq-8.roa (raw, json)
Hash identifier: 0Gu65v/5L7c0/JWixNxgtBM/8HdXaY9vK225J+V8zMU=
Subject key identifier: 5F:6D:97:A4:7A:A9:8F:DC:34:CF:5C:46:11:54:11:34:F7:28:AB:EF
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0189A6B416FBDC355F892929E5DC19397F9F
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/X22XpHqpj9w0z1xGEVQRNPcoq-8.roa
Signing time: Sun 30 Jul 2023 12:09:27 +0000
ROA not before: Sun 30 Jul 2023 12:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 176.105.230.0/24 maxlen: 24
45.150.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 07:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a6:b4:16:fb:dc:35:5f:89:29:29:e5:dc:19:39:7f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jul 30 12:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5f6d97a47aa98fdc34cf5c4611541134f728abef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:de:51:6d:b7:5e:4e:85:e4:47:78:6b:3e:cc:
44:1b:c8:a5:37:9c:ac:18:42:b8:e5:9f:a2:bf:d0:
1b:8e:bb:df:74:e8:9d:64:01:34:48:92:c6:82:c1:
9f:52:5d:f0:b6:1e:2f:94:5f:a4:33:a8:7d:20:ab:
89:25:4f:7f:5a:42:6e:11:6d:fd:8b:6f:98:fa:7b:
a3:67:a7:f1:e1:78:d5:2c:c9:46:f8:4b:6d:9b:eb:
f2:0f:a2:55:7f:d6:22:43:65:4d:6b:ea:df:15:6a:
fe:66:86:44:d4:a5:5a:15:92:db:57:91:8a:ed:89:
51:89:f8:43:15:16:42:0a:21:4b:5d:04:2c:41:bf:
b2:a6:4b:00:73:5a:ef:7c:20:98:81:a1:40:6b:c2:
91:e7:ff:cb:68:af:fa:f9:12:2b:08:e4:b6:48:46:
68:f8:d3:ef:09:91:b5:c5:6f:5c:6b:51:55:d1:20:
30:bc:56:74:ed:dd:2d:34:b9:72:3b:76:68:d9:8b:
58:a0:a8:50:50:99:23:81:5d:ba:95:b6:36:41:d5:
d4:57:d4:5d:37:7e:86:ca:ee:fb:4f:53:9d:65:1e:
4f:a2:44:cf:9f:80:2b:09:ee:8a:d2:87:6a:55:5c:
be:4b:0e:27:4b:26:be:1d:ad:9e:89:a1:b8:74:9c:
33:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6D:97:A4:7A:A9:8F:DC:34:CF:5C:46:11:54:11:34:F7:28:AB:EF
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/X22XpHqpj9w0z1xGEVQRNPcoq-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
176.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:a6:4a:e5:2c:53:44:f8:71:45:a0:41:be:52:63:26:53:b5:
2d:4e:eb:d2:6d:62:6a:f5:77:13:51:27:86:a3:b8:23:3a:69:
45:b6:81:09:a9:5e:09:93:ed:e2:06:b3:78:ef:c6:0b:fa:b2:
f5:37:dd:92:6c:ef:24:07:62:80:22:fa:53:14:7b:cb:9f:9e:
90:f6:56:b3:19:79:d4:27:b5:45:17:96:36:ac:9b:88:89:af:
c7:5b:bd:51:6c:13:99:78:bd:03:4f:a4:32:a8:36:39:88:fa:
6d:50:28:3a:35:76:8e:b1:91:1f:9f:ff:f5:ee:bb:25:12:19:
f3:5b:40:b9:8f:56:c8:8e:6b:d5:82:fb:f4:f1:b9:2f:95:b9:
46:d8:03:47:6d:e0:1b:2a:da:15:45:fd:7d:e7:21:fe:23:24:
dc:4a:3a:35:57:09:91:46:ed:f5:6e:15:dc:36:3d:33:d8:31:
36:68:5b:70:03:5c:ea:de:88:c6:fa:44:48:77:6b:ec:82:31:
77:3b:49:f1:18:dd:5b:41:e6:16:04:b7:69:dc:5a:a9:e0:df:
bf:45:40:38:b3:61:e7:9a:5e:cf:9f:b6:67:d0:9c:63:8b:de:
b7:93:b8:6e:0f:0f:82:2a:e2:61:85:4a:07:f1:59:08:83:72:
60:fd:b3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org