Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/YpSnmsLdRaUMEXurtdszO43zRf4.roa
File: YpSnmsLdRaUMEXurtdszO43zRf4.roa (raw, json)
Hash identifier: c4oqP5f3LZGME0ktgoyMjGWf+W8W5G+vBTFx4slNFR8=
Subject key identifier: 62:94:A7:9A:C2:DD:45:A5:0C:11:7B:AB:B5:DB:33:3B:8D:F3:45:FE
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0189911EE1AEE578EF823EA939022DD95C7F
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/YpSnmsLdRaUMEXurtdszO43zRf4.roa
Signing time: Wed 26 Jul 2023 07:34:27 +0000
ROA not before: Wed 26 Jul 2023 07:34:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197842
IP address blocks: 45.137.16.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 29 Aug 2023 15:24:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:91:1e:e1:ae:e5:78:ef:82:3e:a9:39:02:2d:d9:5c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jul 26 07:34:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6294a79ac2dd45a50c117babb5db333b8df345fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cc:f5:eb:77:58:ca:f6:5c:0a:0c:44:c9:b3:
9b:d6:fc:b2:bf:48:c5:92:f3:4d:6f:80:c2:8e:c7:
d1:0f:62:0d:d7:9d:16:cb:e1:cf:82:1f:4e:6a:e0:
1a:89:94:c1:9c:2c:51:24:aa:e2:ad:c7:1c:46:c4:
01:41:03:ef:1a:f4:af:68:77:0b:50:40:8e:ec:d4:
15:ba:bd:0f:d6:1d:14:22:53:e6:27:54:ae:a8:6b:
63:66:94:f9:5e:44:23:99:42:0c:d1:2b:d6:2e:4b:
bf:ba:9e:a6:84:35:09:2b:44:fb:57:23:6c:d9:fb:
2e:2f:ca:6c:16:f2:26:02:3e:7b:d5:03:09:3e:c0:
49:3c:93:90:03:65:a0:f1:d4:af:14:40:82:e6:3d:
c3:f6:6b:8b:51:2d:3a:ec:0f:12:6e:02:ca:1d:ca:
14:e3:0c:37:d1:36:17:2d:6f:cd:59:b4:c6:50:40:
9d:04:fc:02:d9:70:24:6b:e6:08:20:85:68:d9:19:
11:dc:1c:2c:a9:b4:e6:be:20:e0:88:08:ff:c0:71:
1c:dd:66:d9:51:b0:16:2f:79:12:a6:3d:f5:1a:3e:
4e:da:64:44:c1:ec:b2:51:71:8d:48:b6:ba:87:2b:
0f:ac:79:f9:2f:6a:d6:0c:a7:69:a7:cf:7f:8a:85:
3c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:94:A7:9A:C2:DD:45:A5:0C:11:7B:AB:B5:DB:33:3B:8D:F3:45:FE
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/YpSnmsLdRaUMEXurtdszO43zRf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
Signature Algorithm: sha256WithRSAEncryption
b3:65:1c:8e:84:ec:00:84:0f:71:93:46:b2:8c:ea:c8:9e:4e:
b1:86:c4:31:9d:e1:94:15:23:f1:2a:53:d9:3e:20:00:8e:12:
75:11:23:bb:3d:e8:84:d0:e3:3d:a5:71:72:0e:7a:c0:50:b3:
2b:f3:4c:d3:03:06:de:f9:4f:c4:11:b0:f1:8d:53:8c:cb:43:
87:1c:22:bf:93:42:27:01:fb:66:08:fa:c2:fe:b0:76:e2:4d:
e6:08:19:35:9d:d5:f6:ad:b3:a9:16:76:11:a4:c9:7b:3f:48:
00:58:36:be:86:dd:f9:aa:70:e0:d7:c9:5d:5e:d5:35:d7:0b:
f3:48:36:cb:8a:a2:c2:32:5c:a6:78:1c:94:20:39:fe:3d:14:
2f:da:0d:ee:79:f8:4b:55:c3:d0:f4:b3:51:b1:c0:ba:5a:8a:
41:81:5d:91:92:ce:64:fd:ae:80:5f:19:b3:1a:bf:92:fb:dc:
7b:f9:26:cc:b2:91:00:98:50:5f:d3:99:61:19:70:ba:cc:65:
91:95:aa:a5:d6:eb:1d:ea:68:a3:a3:3d:89:29:23:f4:a0:a5:
20:3c:0d:72:91:dc:f3:bc:6b:5e:69:c8:d7:cc:3d:f2:40:93:
8b:e2:f7:6c:30:c9:5b:23:dc:4a:ce:57:2c:4f:1b:ef:20:85:
04:0a:51:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:43 2024 by rpki-client on console-ams.rpki-client.org