Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/_xWbVTooaaDBeUl2O17aeX4be_s.roa
File: _xWbVTooaaDBeUl2O17aeX4be_s.roa (raw, json)
Hash identifier: bdzuxMIWnoHKWLNaCLQ01sMrPdhhj6KhdhXbEoQvPQQ=
Subject key identifier: FF:15:9B:55:3A:28:69:A0:C1:79:49:76:3B:5E:DA:79:7E:1B:7B:FB
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0186C9FBE31C029A48E77D7FC9BFAA89D858
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/_xWbVTooaaDBeUl2O17aeX4be_s.roa
Signing time: Fri 10 Mar 2023 05:26:13 +0000
ROA not before: Fri 10 Mar 2023 05:26:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 45.150.54.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Mar 2023 14:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c9:fb:e3:1c:02:9a:48:e7:7d:7f:c9:bf:aa:89:d8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Mar 10 05:26:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ff159b553a2869a0c17949763b5eda797e1b7bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:af:04:38:fd:68:f0:dd:95:83:8b:4c:81:e1:
0e:3a:ed:31:dc:7b:ef:c9:d9:c9:a0:19:70:3e:9a:
d9:21:f6:02:a9:a2:af:26:bc:5d:e8:e4:7e:af:6f:
df:2e:02:58:50:70:a2:73:2d:52:ed:e7:a2:f4:9e:
8c:57:ef:d9:70:b0:e5:c1:73:b9:b9:9d:32:c7:c0:
88:06:10:8c:5e:50:a9:ec:8b:2f:4a:c3:27:a7:34:
4a:62:fd:b5:93:5c:06:63:07:aa:8b:51:fc:c0:9d:
fc:47:fa:dd:bf:23:1d:8e:84:cf:51:01:db:0f:2b:
95:ee:0a:08:fe:05:04:9c:9c:1d:bf:b3:25:b5:01:
12:35:82:eb:0b:b8:fb:a5:8a:87:2d:d4:01:18:71:
d3:c4:c9:ff:6e:8c:f1:db:d3:3a:fc:f7:af:66:20:
4e:e5:ce:73:7f:ac:5b:48:33:e4:9e:03:f0:07:8c:
4f:4d:0e:a2:8e:ea:eb:eb:ed:6f:92:7f:11:f8:44:
41:c3:a9:21:0e:6f:c5:d5:94:91:2e:bc:6a:db:b0:
bb:04:64:aa:9f:55:96:f6:c9:2d:d9:be:e7:cf:65:
b2:65:08:56:6b:e4:76:db:76:6e:d3:a0:cb:07:91:
9d:5d:17:63:b2:a1:cd:19:82:fe:d9:aa:54:81:ba:
eb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:15:9B:55:3A:28:69:A0:C1:79:49:76:3B:5E:DA:79:7E:1B:7B:FB
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/_xWbVTooaaDBeUl2O17aeX4be_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.54.0/23
Signature Algorithm: sha256WithRSAEncryption
64:67:df:36:19:e0:c1:f0:9d:f7:e5:b5:fe:6c:26:86:ed:6e:
3e:4c:e8:23:0b:7b:72:2d:0c:06:93:9d:f7:06:95:93:05:be:
73:f3:27:92:c3:0e:45:c0:ca:7f:25:c6:7d:0d:a1:f0:1d:4a:
60:02:3f:bc:02:7e:b3:99:5c:20:f5:5e:e7:ad:2b:4b:9d:c7:
9e:5f:46:23:0a:ca:8f:ea:7d:a4:6d:46:0c:37:e5:da:0b:65:
49:8d:27:22:0f:38:1c:77:18:55:3a:ef:73:97:03:2b:43:b9:
db:24:b2:8a:0a:d1:72:58:d7:dd:ed:3e:2f:61:46:34:07:8d:
84:24:7d:15:54:0e:cf:83:67:17:a4:15:41:3f:a6:f5:62:64:
b7:e5:c9:77:51:34:e0:34:be:7a:07:88:8c:f9:e0:74:b8:3d:
5e:03:38:55:03:71:1f:72:62:58:d4:7f:27:bb:fa:80:56:d7:
18:14:ec:3a:5f:df:02:ef:2f:3b:4c:2d:7e:46:a9:5c:55:9b:
ed:1f:0d:d9:bb:d8:dc:b0:14:76:2d:b9:60:a7:13:b6:63:3d:
e3:dd:8f:ec:3b:9a:ff:f4:ce:1c:93:dc:5b:18:aa:a7:62:17:
42:7d:3d:13:f4:49:bf:ef:d8:a2:44:0a:88:09:ce:b8:45:80:
65:0b:7b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:43 2024 by rpki-client on console-ams.rpki-client.org