Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Yx_E-9cN84ywFR7dFgLUdYC_uDk.roa
File: Yx_E-9cN84ywFR7dFgLUdYC_uDk.roa (raw, json)
Hash identifier: 2wHHVN9LlPqQxBqQSVnJwdK2r/rxsK+nrXvCgth07Tk=
Subject key identifier: 63:1F:C4:FB:D7:0D:F3:8C:B0:15:1E:DD:16:02:D4:75:80:BF:B8:39
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018C7457E4E857BD02BBB9272A8F8D87C088
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Yx_E-9cN84ywFR7dFgLUdYC_uDk.roa
Signing time: Sat 16 Dec 2023 20:36:06 +0000
ROA not before: Sat 16 Dec 2023 20:36:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.177.24.0/24 maxlen: 24
45.150.55.0/24 maxlen: 24
45.150.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 16 Dec 2023 21:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:74:57:e4:e8:57:bd:02:bb:b9:27:2a:8f:8d:87:c0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Dec 16 20:36:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=631fc4fbd70df38cb0151edd1602d47580bfb839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:28:2a:74:af:e5:1e:44:c0:0c:84:f1:c6:4e:
a2:13:40:f3:b2:87:a8:76:39:40:49:3c:78:f5:48:
91:dc:44:31:3a:82:83:13:f3:3a:e1:ea:ea:98:11:
44:37:c1:2e:bd:f2:6a:3b:1f:89:83:54:14:62:d4:
c1:d6:0d:44:6f:06:c7:0b:f2:c8:45:35:01:77:62:
42:52:79:56:13:85:b6:9b:ad:57:ed:12:8a:09:0d:
8b:7b:89:17:87:c6:15:c8:86:47:5e:a1:88:35:19:
0e:1b:27:b5:e5:ac:e2:b0:1a:52:5d:72:60:a8:42:
cb:01:78:de:0b:61:35:f7:b5:53:48:5e:2c:d7:d6:
9e:92:e1:1d:eb:1a:0c:3d:62:35:dc:11:17:30:ad:
4b:78:e4:a7:db:cb:57:3d:25:47:52:ce:0f:ed:21:
31:78:18:2a:45:df:01:ad:ad:a2:42:94:d5:fa:57:
2d:11:10:20:84:c9:e9:3b:18:59:a0:88:d4:35:8f:
07:8b:e6:35:81:c2:75:0d:48:18:47:c6:95:84:65:
b3:9d:5f:d7:0e:be:a8:96:2a:43:95:5d:a4:88:62:
41:67:6a:53:2c:a9:b6:bd:3c:b5:9d:f0:41:2a:b2:
2a:07:d8:fd:2d:59:8c:75:94:8d:e4:2f:72:db:5c:
bf:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1F:C4:FB:D7:0D:F3:8C:B0:15:1E:DD:16:02:D4:75:80:BF:B8:39
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Yx_E-9cN84ywFR7dFgLUdYC_uDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.53.0/24
45.150.55.0/24
185.177.24.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:fe:6b:e2:f9:e6:08:9f:58:63:21:bb:83:73:31:d3:82:7f:
4f:ca:05:ff:e5:70:4a:ae:01:6c:43:eb:b1:2f:95:5b:f1:89:
4b:57:2b:d1:cf:b9:b4:e6:8f:6d:f3:10:04:6f:05:37:dc:9f:
27:84:47:21:18:c7:9c:d0:ff:c0:9d:82:94:0d:42:f8:0f:89:
5a:ec:5e:f4:bc:e7:b5:09:28:ca:c1:c4:dd:df:96:d6:e9:56:
27:d3:1f:a5:a4:eb:b8:17:7e:c5:13:f7:8a:a0:47:2a:34:52:
d0:4b:45:28:9f:cc:0f:24:c1:84:54:07:87:77:f9:4f:65:48:
39:7a:e5:5a:1b:b8:1b:c6:a2:81:32:2d:58:d9:42:85:5a:6d:
30:e0:bc:78:77:a8:8a:3a:11:e7:c9:a9:fa:7e:4c:4e:74:1a:
a2:fb:01:3f:1a:95:42:3d:96:86:b4:52:d3:74:b2:74:83:41:
84:bd:8c:27:20:05:50:d4:7d:76:49:97:01:0c:77:e0:13:16:
1a:a3:40:db:a8:9a:d4:8d:9e:b4:36:6b:3e:c7:92:e4:a4:b6:
fd:c3:d8:bd:af:ee:33:35:17:6c:af:32:04:8d:4d:f0:20:50:
02:56:47:eb:ac:4d:01:c2:c9:2f:89:5b:44:19:5b:f6:33:d1:
e6:9d:22:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org