Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/eYmALf83_aSgnVXM2v7GdZNPVxU.roa
File: eYmALf83_aSgnVXM2v7GdZNPVxU.roa (raw, json)
Hash identifier: 8RT0SS5s9fgd1/4kmrOEQhsaH1gDF2+UnKzYti1DdYc=
Subject key identifier: 79:89:80:2D:FF:37:FD:A4:A0:9D:55:CC:DA:FE:C6:75:93:4F:57:15
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018A9CCE72E305805280A6B646EA790CA99E
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/eYmALf83_aSgnVXM2v7GdZNPVxU.roa
Signing time: Sat 16 Sep 2023 07:04:50 +0000
ROA not before: Sat 16 Sep 2023 07:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
91.239.149.0/24 maxlen: 24
91.244.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Sep 2023 04:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:9c:ce:72:e3:05:80:52:80:a6:b6:46:ea:79:0c:a9:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Sep 16 07:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7989802dff37fda4a09d55ccdafec675934f5715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bb:8f:4e:01:4a:c5:b3:c0:0f:b3:0d:39:2f:
42:e6:e8:2c:f2:3f:0f:46:4f:f0:93:1e:6f:1c:20:
df:80:3e:4b:43:ec:ee:09:ce:0b:df:03:a5:74:9a:
1b:77:35:5d:a5:65:cf:f4:98:d7:0b:33:a4:20:d8:
e6:ed:78:2a:c5:b7:49:7d:2a:09:f9:67:9e:55:4b:
91:7b:1d:88:61:0e:75:de:1d:64:a4:9b:d8:74:21:
0f:65:76:2b:c3:98:e7:26:3c:4e:9a:de:30:0e:8d:
95:d7:7f:dc:8c:b9:17:42:a0:b5:6e:dd:22:e4:ac:
94:73:49:ca:38:48:9a:86:95:8f:d1:0a:d7:b2:44:
7c:96:1e:01:00:2b:b9:c0:5f:31:d6:1b:fa:88:4f:
52:21:8e:fc:bb:42:6b:46:45:28:22:1c:3a:fd:de:
3f:29:b2:fa:ce:08:48:33:14:9e:2e:83:bd:76:87:
99:79:e7:30:76:b8:88:7a:70:be:7e:97:05:7f:c7:
c5:eb:ae:ca:c8:97:da:cb:6e:65:1c:5a:f6:2c:c1:
92:2b:c0:30:f9:58:de:10:e5:3b:c7:d4:24:f6:a9:
54:c3:dd:25:ee:ee:b0:91:51:a9:ce:79:fb:c3:d6:
ca:36:0d:43:f2:4e:db:56:3e:fa:dc:34:6d:c7:4f:
4a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:89:80:2D:FF:37:FD:A4:A0:9D:55:CC:DA:FE:C6:75:93:4F:57:15
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/eYmALf83_aSgnVXM2v7GdZNPVxU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
91.239.149.0/24
91.244.199.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:7c:a3:47:81:fe:03:b8:ed:96:70:c4:16:15:56:00:8c:c7:
c9:11:ca:a4:ea:79:80:da:de:0d:19:0a:90:a3:9c:33:c7:5c:
5d:3c:57:1e:91:94:7b:6d:89:8d:ae:32:af:78:dd:b3:4a:56:
22:79:e8:34:1e:83:bc:f7:47:f9:1d:35:d2:f9:3f:2a:e8:1f:
ad:03:a2:d1:7d:cf:4e:22:79:43:55:d7:19:61:d4:f6:55:3f:
25:4e:ca:93:e1:a3:b6:d4:79:df:52:82:55:3d:bb:fd:b4:11:
46:08:24:18:52:04:37:e2:8b:c3:60:11:f2:75:3f:24:f5:2c:
16:39:bf:10:b9:38:be:ea:0d:82:b2:8a:2e:0f:b6:3a:9a:18:
2d:8e:67:9c:de:7b:d1:31:1b:bc:21:3f:63:32:8a:e3:d3:c9:
be:79:e2:4e:07:0f:b7:0a:dc:ac:21:0a:f4:92:18:7b:07:7d:
0d:69:af:6d:04:cb:b3:27:2a:df:c8:e9:09:ac:f4:bb:18:06:
bc:d1:90:b3:bc:e5:f2:da:79:41:44:06:db:66:49:e9:e8:1e:
f5:a4:ac:fc:13:cb:7b:4c:ad:e6:0b:7c:89:93:40:8f:67:cc:
7d:57:14:82:52:7f:5c:0f:58:b3:a8:b5:1d:49:48:cf:29:c2:
2a:56:bb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:43 2024 by rpki-client on console-ams.rpki-client.org