Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/cBgp5wLBr7YWwEbh0aCxfq1FsRQ.roa
File: cBgp5wLBr7YWwEbh0aCxfq1FsRQ.roa (raw, json)
Hash identifier: 9zRJH2ckNIdf3V3hMsgv5MAWehbwDDDVH7tOJbG0k9c=
Subject key identifier: 70:18:29:E7:02:C1:AF:B6:16:C0:46:E1:D1:A0:B1:7E:AD:45:B1:14
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018AF8E1367A8CABD0C4159EE981C04E06B4
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/cBgp5wLBr7YWwEbh0aCxfq1FsRQ.roa
Signing time: Wed 04 Oct 2023 04:10:23 +0000
ROA not before: Wed 04 Oct 2023 04:10:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 05 Oct 2023 18:56:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f8:e1:36:7a:8c:ab:d0:c4:15:9e:e9:81:c0:4e:06:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Oct 4 04:10:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=701829e702c1afb616c046e1d1a0b17ead45b114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d1:b9:30:80:b0:ad:f5:bd:cb:5f:dd:67:ba:
0e:ac:95:e6:e2:ac:6b:3b:d5:9f:9a:7f:90:7a:f1:
1c:a1:db:af:cd:22:e5:af:67:43:bb:49:6d:b0:68:
8c:b6:50:65:ac:9e:44:b4:4d:28:92:b7:e8:73:df:
7b:67:99:f3:18:b0:f1:1f:ff:40:d3:07:1c:5f:97:
bc:8f:2c:fd:af:e5:c6:60:9e:6a:7a:a3:49:f4:e0:
c0:f4:a1:b1:3f:ac:82:1c:9f:4f:83:a6:ce:d5:7f:
9f:20:22:ec:57:76:46:e3:29:0b:76:5d:02:18:2b:
ee:f2:b1:45:c6:e7:6b:6d:44:38:6f:61:64:5e:5f:
03:7a:75:11:93:84:e4:72:f3:d5:d1:d7:98:e9:69:
b9:4a:b1:d0:79:73:6f:05:9d:1b:1a:ff:5a:a9:3d:
9a:74:37:c2:1d:3a:3d:a0:a3:75:68:a9:ea:16:85:
22:f4:9f:ca:40:e8:b1:1c:ba:db:c7:35:05:b7:af:
7b:fe:44:ed:ff:34:c5:72:90:30:32:dc:72:34:8e:
a8:60:bd:a3:e9:76:3f:bc:80:2d:e0:35:dd:93:5e:
c5:57:af:b4:8c:a1:76:45:66:ea:a9:2d:54:cd:32:
64:e7:63:f2:f4:62:ec:ae:5f:cc:9e:36:f5:6b:75:
b2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:18:29:E7:02:C1:AF:B6:16:C0:46:E1:D1:A0:B1:7E:AD:45:B1:14
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/cBgp5wLBr7YWwEbh0aCxfq1FsRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
Signature Algorithm: sha256WithRSAEncryption
26:f4:58:fe:86:c5:3a:d7:bc:1a:94:8e:b5:5c:55:44:97:ab:
57:32:fc:74:aa:64:10:3f:60:b2:7e:a0:d6:8c:3b:b6:bc:b0:
79:fc:d3:2c:7c:60:24:44:e0:4e:6a:b8:0c:50:2a:f2:70:c5:
d7:d1:58:5d:5d:1b:7c:a0:59:6e:d6:5e:47:a4:19:d4:4f:b5:
23:27:db:ac:cb:69:84:ea:56:db:ca:44:de:09:93:dc:73:c4:
f3:bc:96:c1:3c:fa:31:09:83:e8:c4:52:d5:39:88:1e:3b:a3:
d8:eb:4c:b0:14:52:af:bf:d9:fc:60:89:d5:62:9b:f3:66:1c:
93:30:f0:2b:7c:d6:72:82:bb:82:e3:bd:f2:ec:ad:69:c9:96:
26:5a:ab:0f:fe:d3:3b:9e:e0:ea:32:dd:4b:29:91:2a:31:a8:
16:18:c2:95:9d:47:35:e4:95:56:05:0a:9f:21:15:2b:dd:19:
10:d0:5d:df:95:31:2c:96:13:e0:b8:89:47:73:9a:b4:9b:52:
05:e7:6b:d0:52:63:24:00:d0:9a:62:28:12:64:d9:61:23:bf:
d3:8a:5d:3f:58:a9:94:fa:cc:87:dc:34:bb:9f:b3:66:94:a1:
bc:a8:48:44:bf:07:70:4c:41:ec:0d:d6:e4:98:e8:8b:f3:37:
88:48:0f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org