Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/g0s1aTSqceU9bq-X_UNzQsZhpag.roa
File: g0s1aTSqceU9bq-X_UNzQsZhpag.roa (raw, json)
Hash identifier: wfHmNsZDRs7dj5c4HPdkGlmgnGUh9pCimID1OZttYoY=
Subject key identifier: 83:4B:35:69:34:AA:71:E5:3D:6E:AF:97:FD:43:73:42:C6:61:A5:A8
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018C64A862D1771E61B07FBFF70E77AAA063
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/g0s1aTSqceU9bq-X_UNzQsZhpag.roa
Signing time: Wed 13 Dec 2023 19:30:06 +0000
ROA not before: Wed 13 Dec 2023 19:30:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
45.150.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 15 Dec 2023 22:27:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:64:a8:62:d1:77:1e:61:b0:7f:bf:f7:0e:77:aa:a0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Dec 13 19:30:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=834b356934aa71e53d6eaf97fd437342c661a5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:c9:e4:a7:64:00:57:03:b4:3a:f0:2d:5c:a9:
40:d8:6b:cc:e4:b3:eb:0b:c2:e0:a2:ee:8e:b4:b1:
ca:4b:24:cf:c7:da:2a:a2:a0:c1:5f:16:13:95:c6:
ea:52:b4:19:74:0a:28:c4:1e:8b:e5:f8:6e:75:34:
b6:90:75:61:63:74:49:24:45:52:07:10:ea:2b:ae:
d1:e9:33:99:c2:95:85:df:4d:d2:82:27:a2:23:a3:
29:61:ce:26:b8:3d:d9:a6:40:7b:9c:d3:36:45:d5:
38:e0:be:93:00:fd:9c:45:12:44:9e:16:a0:7a:51:
a2:dd:ac:2c:2f:61:06:75:e0:2b:dc:d5:f6:67:34:
69:4a:b8:a3:fb:11:b2:dc:8f:5d:b9:62:c4:42:ce:
5c:a3:0d:c9:f4:39:6c:ad:17:c5:7e:c6:b7:5a:68:
49:0e:ae:c7:d8:d0:cd:3b:8f:61:00:9b:e2:0f:06:
4d:6f:4d:2b:c2:69:8e:01:8d:14:b4:92:35:4f:c8:
9f:0c:63:80:7e:35:64:1c:2b:c3:a7:66:59:1c:a6:
25:63:06:72:a5:0c:c6:41:61:b5:b8:00:5a:19:17:
05:4d:03:8f:eb:05:ff:77:fb:44:8f:d1:76:0d:d8:
7f:fb:1d:9b:d8:ac:bc:1c:79:b6:ab:b6:89:59:a5:
a3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4B:35:69:34:AA:71:E5:3D:6E:AF:97:FD:43:73:42:C6:61:A5:A8
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/g0s1aTSqceU9bq-X_UNzQsZhpag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.53.0/24
45.150.55.0/24
Signature Algorithm: sha256WithRSAEncryption
62:96:68:37:1c:9f:a5:05:c2:6b:79:0a:88:fb:26:3e:20:8f:
4d:ac:1f:03:b7:47:6f:de:15:4b:fa:d7:90:d5:21:f0:88:47:
ce:63:c6:7f:fb:60:9c:b9:7a:4f:34:49:37:9e:f0:0c:93:2d:
ab:d7:76:e8:f7:88:92:84:93:32:11:72:c4:44:2a:ec:ef:22:
5f:bd:f3:42:d5:8d:5c:f7:08:09:d7:c4:12:54:b1:e9:b0:36:
89:8a:ba:fc:dc:df:75:97:ff:7e:f2:28:2a:79:f1:f3:98:fc:
60:c6:0b:8a:e7:bd:10:47:a5:ff:28:65:83:b4:25:8e:a6:e6:
df:24:9c:26:61:f3:26:16:fd:2b:ee:a9:39:bf:59:4e:95:10:
eb:4f:08:ba:bc:cb:91:71:9e:c0:e5:a0:5d:64:e1:9d:ae:dc:
a8:cb:1b:c0:86:ed:f5:7e:44:aa:35:32:c7:53:d2:ed:d7:47:
11:5d:ef:67:4b:33:d0:1d:46:7f:d0:97:43:a2:3b:82:00:bd:
09:f1:4d:31:68:f5:b5:e9:6b:dc:2c:5c:3a:f5:5f:fc:fe:76:
df:34:68:47:5e:ee:bc:61:1d:59:3c:1a:4a:a8:93:f3:36:81:
35:a3:c7:32:59:fd:7e:0b:c3:cc:cf:01:4a:b5:f3:bb:3c:da:
79:93:6c:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org