Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/_lalvOHCvQ3tYNyC-UzkSW4cAF8.roa
File: _lalvOHCvQ3tYNyC-UzkSW4cAF8.roa (raw, json)
Hash identifier: L+EcKkdzturraXvT6dchbzx/ZDNgE1MSg1PoFwcdLgA=
Subject key identifier: FE:56:A5:BC:E1:C2:BD:0D:ED:60:DC:82:F9:4C:E4:49:6E:1C:00:5F
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018A7167AC60C8E26D2E7F033A1AC34B7417
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/_lalvOHCvQ3tYNyC-UzkSW4cAF8.roa
Signing time: Thu 07 Sep 2023 20:48:54 +0000
ROA not before: Thu 07 Sep 2023 20:48:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
45.150.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Sep 2023 02:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:71:67:ac:60:c8:e2:6d:2e:7f:03:3a:1a:c3:4b:74:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Sep 7 20:48:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe56a5bce1c2bd0ded60dc82f94ce4496e1c005f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2e:dd:ba:73:29:70:16:4e:72:62:e5:07:b2:
36:92:94:ed:f1:af:68:12:f6:3f:f4:b8:29:38:aa:
cd:ef:3b:48:11:c5:33:c3:5f:c6:03:c7:be:d3:57:
81:e2:61:06:c0:09:f5:89:b2:e1:4f:27:8b:c7:ed:
4c:cc:b5:46:f9:a1:89:d3:02:99:d4:8c:8b:b9:fb:
2f:e1:1c:4b:09:da:4e:ab:1f:69:93:88:a5:32:21:
27:5f:96:c6:03:a3:61:aa:d3:af:10:16:05:2a:e5:
3d:93:0b:f8:91:e0:e4:03:25:12:8a:96:6d:81:95:
90:b4:9a:6e:8f:70:da:13:46:59:42:51:8f:4f:2a:
50:41:80:d0:bb:05:15:d9:17:4c:3e:1c:31:6b:18:
bc:11:b4:84:2a:34:cc:3b:34:9d:65:d3:6c:93:50:
d7:71:de:39:c8:b3:b1:7d:f6:65:3a:e2:10:ae:93:
66:58:24:9d:1f:a0:72:f4:cd:49:d7:2e:fc:39:d7:
58:88:bb:f5:7a:b4:6a:7a:c4:e9:09:77:fb:88:31:
50:95:fc:a7:72:c2:4c:f7:35:3a:8c:d8:9f:25:c4:
bc:10:bb:74:5e:11:e7:ae:f7:ef:97:a3:c0:46:37:
3e:e5:43:f4:12:d7:17:cb:24:2b:e9:90:8f:91:b7:
01:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:56:A5:BC:E1:C2:BD:0D:ED:60:DC:82:F9:4C:E4:49:6E:1C:00:5F
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/_lalvOHCvQ3tYNyC-UzkSW4cAF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.52.0/24
45.150.55.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:05:74:b9:7b:16:c0:cc:c9:68:7c:95:59:ac:b9:4d:de:ce:
2e:09:69:51:c8:7b:0e:42:a2:d4:ab:2f:9c:05:f9:1c:20:be:
9d:97:3a:9e:ba:b3:68:ff:01:fd:fd:df:19:e5:95:67:89:ef:
58:fd:2f:61:df:bf:f2:68:fb:b0:00:c4:a3:ec:fc:fd:55:21:
af:a8:bc:e7:c7:5c:15:63:01:e1:6e:a1:ce:f7:1c:20:bb:6a:
7f:e5:b4:d7:70:04:10:d0:89:ff:f5:b1:cc:8a:28:94:fb:0d:
af:bd:9e:69:3e:02:8b:ec:7a:73:71:34:ab:50:55:1b:57:04:
52:fe:11:87:bc:71:7c:d3:66:94:f8:71:a4:42:e3:b1:ec:bd:
02:f9:d5:fc:cc:98:34:42:9d:2e:cb:f4:dd:d2:b7:08:33:c2:
c9:e3:00:3c:67:4b:a7:53:70:41:3d:24:f8:8f:cf:1f:7c:a7:
ae:df:ae:aa:ca:58:de:1d:85:ec:5a:75:7a:6f:bb:a4:1c:71:
7b:76:9c:84:1d:33:2c:2a:cc:07:77:7c:1e:2b:d2:86:d6:e0:
5f:0c:7c:85:ea:d2:d8:cf:9a:f1:f5:5d:a7:c1:53:87:98:dc:
69:3d:1b:e6:62:89:a1:51:4d:32:50:ee:83:a7:04:ce:c2:50:
60:70:4d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org