Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/aEto5EH8sAqp8faOd8Dsx0798Lo.roa
File: aEto5EH8sAqp8faOd8Dsx0798Lo.roa (raw, json)
Hash identifier: WnfCd2OqBc1np8JLbE7FSg7ZIpqbxUn33PaXUZnR5ew=
Subject key identifier: 68:4B:68:E4:41:FC:B0:0A:A9:F1:F6:8E:77:C0:EC:C7:4E:FD:F0:BA
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01898BCBA631620EB991CB56C2B67F025752
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/aEto5EH8sAqp8faOd8Dsx0798Lo.roa
Signing time: Tue 25 Jul 2023 06:45:26 +0000
ROA not before: Tue 25 Jul 2023 06:45:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.137.16.0/23 maxlen: 24
176.105.230.0/24 maxlen: 24
45.150.55.0/24 maxlen: 24
95.214.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 26 Jul 2023 07:34:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8b:cb:a6:31:62:0e:b9:91:cb:56:c2:b6:7f:02:57:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jul 25 06:45:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=684b68e441fcb00aa9f1f68e77c0ecc74efdf0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e9:05:38:77:72:74:04:94:8f:14:c5:af:83:
65:98:b2:7e:9d:11:ee:57:9a:ba:da:5b:55:4e:85:
52:94:f5:7e:94:bf:5f:00:b9:d1:60:cd:d0:29:69:
da:b2:eb:6e:ba:3c:97:a0:47:5b:97:2a:c3:49:32:
40:b2:00:92:da:71:de:10:fd:66:47:37:f4:e9:8c:
cd:3a:97:fb:9b:79:9c:b9:6c:65:c3:5c:5c:c5:0f:
af:71:b2:94:6f:e4:ed:ad:e3:2b:92:0d:45:ce:e5:
4e:9f:4e:08:93:91:e7:a5:77:99:77:66:51:d2:0f:
ee:83:f9:34:be:9b:fd:ea:b6:1b:1c:1b:7a:ec:ed:
a7:67:40:00:8d:44:76:7a:4b:82:4c:1d:1e:de:d9:
9e:38:d1:ee:d7:8e:60:23:d9:cc:5a:11:0f:9c:64:
ba:41:42:9f:6b:98:53:bf:e9:22:b3:a7:a6:66:81:
fe:2d:01:5f:2d:47:68:ed:13:47:e7:10:2f:b9:c0:
60:40:f8:79:2f:44:68:98:51:cd:11:14:e4:9e:38:
b9:1e:5d:4d:51:6f:18:f9:fb:00:e2:e9:95:80:bf:
7b:de:f8:ad:e7:43:de:4b:b1:f9:18:4e:21:02:19:
1f:29:f3:db:b0:77:b2:d0:ce:75:7d:3d:80:f2:28:
83:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4B:68:E4:41:FC:B0:0A:A9:F1:F6:8E:77:C0:EC:C7:4E:FD:F0:BA
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/aEto5EH8sAqp8faOd8Dsx0798Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
45.150.55.0/24
95.214.177.0/24
176.105.230.0/24
Signature Algorithm: sha256WithRSAEncryption
43:7f:42:a0:d1:76:76:19:a3:4d:d3:c9:3b:8f:76:bf:9b:35:
00:8a:da:ae:5e:d8:4c:af:86:c3:aa:64:12:85:5e:73:f3:09:
52:32:df:66:be:e2:0e:25:be:34:f1:4c:19:b8:00:3f:0a:10:
f1:d2:f9:3b:17:86:b9:2b:eb:c1:cb:30:72:d4:8c:72:23:4d:
04:46:d4:ba:aa:7f:4f:e3:12:d3:38:0f:39:26:d1:c4:bb:9c:
46:03:2c:f8:50:64:be:50:c0:3d:e0:b4:18:6f:a0:86:8d:63:
5f:26:f3:e8:38:a2:00:97:7f:5c:9c:30:92:bc:dd:5e:16:18:
26:cc:58:22:fd:4e:c7:a3:2b:b5:32:99:f1:aa:85:0b:cb:a0:
e9:35:1e:15:6a:e4:f1:63:c5:bc:70:49:a5:cd:c2:ad:ea:fd:
5e:b8:6c:80:07:be:60:c0:30:59:4f:4e:8b:e7:f8:06:41:4d:
90:f8:3f:8b:10:15:76:4e:0b:f2:46:dc:64:7e:a2:09:fa:c0:
a4:35:54:a9:04:32:db:49:ba:7c:15:fa:c2:71:8e:11:ed:57:
f3:6b:3a:6d:e8:89:18:e1:37:ab:0c:08:2c:c6:a7:20:e6:06:
81:83:b4:b1:13:d0:a0:a8:ce:0b:5d:0f:da:60:b7:68:f6:b0:
8e:b9:84:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org