Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/k4IABWg9d0ADvLMvaw8PkkZHsjQ.roa
File: k4IABWg9d0ADvLMvaw8PkkZHsjQ.roa (raw, json)
Hash identifier: IOMLWxiv+tiYGd7fYs7fxp07q1vUBZLn7MioeUAD3lQ=
Subject key identifier: 93:82:00:05:68:3D:77:40:03:BC:B3:2F:6B:0F:0F:92:46:47:B2:34
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018671A92BF0051458F5E9BD65872227CE57
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/k4IABWg9d0ADvLMvaw8PkkZHsjQ.roa
Signing time: Tue 21 Feb 2023 01:49:17 +0000
ROA not before: Tue 21 Feb 2023 01:49:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 45.132.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Feb 2023 04:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:71:a9:2b:f0:05:14:58:f5:e9:bd:65:87:22:27:ce:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Feb 21 01:49:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93820005683d774003bcb32f6b0f0f924647b234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:bc:5b:01:ef:17:d0:9e:7b:33:03:37:92:60:
8b:fd:24:25:c9:74:19:60:96:c6:7e:bc:69:88:42:
2b:ea:18:d6:b8:06:b1:4d:75:d7:89:ea:33:e4:35:
ec:49:40:f4:23:9f:32:4e:00:65:76:35:01:01:06:
7c:e5:f6:14:da:78:fb:9d:2a:51:90:6b:5c:fc:b6:
78:16:e1:48:a4:b3:c0:b7:b7:5f:5f:ad:c9:6e:a8:
11:87:f9:d4:83:43:d1:dc:1d:46:92:dd:39:fe:91:
7d:a7:1a:4f:dd:64:bf:87:df:67:f1:5d:30:d3:86:
bb:32:76:42:a2:0b:bb:32:13:20:63:9e:88:d4:f4:
29:2c:e4:b9:52:38:de:ec:6f:92:d1:46:36:13:68:
aa:95:c1:83:58:cd:09:55:d0:a7:33:94:35:1e:09:
b9:53:56:03:00:8c:b3:15:ae:ca:58:5e:d5:09:9b:
c3:a8:2f:20:97:67:eb:f9:fa:7f:b2:56:f7:2c:e8:
dc:fd:20:fc:a0:be:7e:b5:cf:a4:d0:18:97:5c:18:
a3:e3:14:e8:07:6c:d9:a5:de:32:79:c2:ec:8b:fa:
9c:ab:ca:b1:2b:6e:85:5d:b0:c1:ad:d6:48:2d:68:
5c:7d:91:5d:52:54:20:a0:5f:d9:bb:d1:4c:ed:7f:
65:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:82:00:05:68:3D:77:40:03:BC:B3:2F:6B:0F:0F:92:46:47:B2:34
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/k4IABWg9d0ADvLMvaw8PkkZHsjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
Signature Algorithm: sha256WithRSAEncryption
74:24:5d:59:ff:43:fc:32:f1:e2:69:26:14:1a:44:4e:62:80:
2f:ee:a0:1e:be:71:c3:e8:b1:4a:0d:80:be:e3:d5:dd:90:90:
bc:cb:c2:6f:03:a5:82:83:31:27:17:cf:a7:61:88:5b:af:45:
1b:a4:de:60:1e:cb:1a:27:62:ed:ea:d8:65:50:7f:22:83:f4:
4a:67:23:3c:b4:c7:3c:67:e5:5d:09:b7:c6:41:ed:f4:7f:ca:
2e:c3:1c:e8:1f:40:d8:33:44:ab:b2:05:59:3f:00:75:12:88:
66:07:29:1f:a2:77:f6:42:3f:0c:fb:2d:b1:ea:de:88:33:9f:
ce:11:4e:95:9a:b9:25:23:c7:2a:4d:62:fa:c7:83:5e:09:08:
fc:60:5b:62:f4:ce:28:9c:b4:f0:06:82:6c:fa:7e:d5:17:f8:
45:27:7c:85:48:db:98:f0:11:83:61:ca:55:a7:66:2e:b8:24:
d9:22:b7:7a:c7:c1:f6:f3:1b:5e:2a:7d:34:7e:47:f2:13:95:
3a:51:09:cc:3d:98:fa:19:d2:aa:c8:f6:ac:81:5f:09:80:e9:
d3:0b:c4:7b:d4:c6:38:d3:cd:54:ba:bd:1c:c8:ca:d0:2c:86:
7b:54:c6:14:54:a9:61:53:17:1a:3b:80:8f:eb:63:23:de:5e:
6c:19:f3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org