Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/l6I6qopfkFSP_Qw_pwxSeIMmNww.roa
File: l6I6qopfkFSP_Qw_pwxSeIMmNww.roa (raw, json)
Hash identifier: n0gEGByo9rItrXC3yNW5ALtkt7NQixiawCwuCuLLsaQ=
Subject key identifier: 97:A2:3A:AA:8A:5F:90:54:8F:FD:0C:3F:A7:0C:52:78:83:26:37:0C
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0189A6B417A8C373D2A4A45961B53B3D8E79
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/l6I6qopfkFSP_Qw_pwxSeIMmNww.roa
Signing time: Sun 30 Jul 2023 12:09:27 +0000
ROA not before: Sun 30 Jul 2023 12:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202673
IP address blocks: 45.137.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 01 Aug 2023 07:44:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a6:b4:17:a8:c3:73:d2:a4:a4:59:61:b5:3b:3d:8e:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jul 30 12:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97a23aaa8a5f90548ffd0c3fa70c52788326370c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e5:e7:44:d6:a0:d8:65:95:bf:26:d4:7b:ea:
a0:ab:59:72:6a:cf:de:28:f7:27:46:2a:45:e5:15:
88:a5:60:d7:6d:54:5d:08:68:d0:00:cf:5b:5d:7a:
93:a6:79:1b:ec:3d:6d:5b:8d:0a:f2:07:c6:8c:02:
20:dc:bd:9f:9d:38:3f:1a:e3:e3:9f:40:ec:d8:20:
5c:af:2c:dc:30:3a:23:f1:72:46:a0:b6:be:1b:16:
41:90:f8:1f:fb:91:8e:e3:ed:ed:a6:06:f2:22:f3:
79:07:14:7b:a0:24:8e:f0:f0:9d:30:97:93:7b:8e:
bf:3d:3e:8f:68:d4:f8:10:4b:71:ca:0f:0f:3a:a8:
e0:31:e5:78:53:9f:b0:cb:1c:50:d7:15:e5:f0:90:
01:65:0f:88:03:ce:41:62:02:64:99:ed:73:3c:f1:
67:c4:c6:ad:45:32:24:27:93:1f:6c:ea:66:a3:af:
e9:e3:0a:28:3b:31:fa:39:6e:10:fe:14:c8:a1:43:
c2:87:59:68:bc:14:da:1e:d4:d2:f7:10:d4:9a:2e:
c8:d2:09:75:95:31:be:90:e1:c3:d6:8a:46:13:22:
22:3f:a2:e6:64:9b:52:28:b1:9f:52:38:a7:bd:95:
e4:7e:f7:9a:70:36:53:c1:ab:dc:41:63:03:91:ea:
e2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A2:3A:AA:8A:5F:90:54:8F:FD:0C:3F:A7:0C:52:78:83:26:37:0C
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/l6I6qopfkFSP_Qw_pwxSeIMmNww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:d0:ca:fb:7b:cf:6c:04:22:8b:c6:eb:06:00:4e:54:bf:7b:
f2:f2:97:47:94:b5:79:52:9c:8e:8e:05:d9:71:88:dd:46:a2:
1f:a0:7a:44:e1:53:61:d1:d1:1b:3d:f5:4a:21:2c:c8:38:d3:
1a:c7:68:d5:e7:cc:d3:9b:cf:d2:3f:c4:bc:90:93:5a:9c:99:
f1:d9:56:91:8f:f5:d5:46:bf:1a:c4:ff:3f:f5:ed:dc:cd:81:
e8:ed:ed:8a:bd:dd:78:4e:1f:af:52:a6:f6:82:22:13:51:4e:
09:2f:ca:df:7e:15:b4:57:b8:72:99:5e:1b:f6:6d:06:52:e1:
d1:ba:db:da:83:df:87:81:c8:10:7a:c9:04:cd:73:d3:99:87:
62:94:b4:d2:23:82:51:77:f6:24:c0:9e:b8:03:65:fe:49:5e:
ff:e2:66:9f:86:09:6c:f2:9b:e7:c3:3c:ed:ce:8d:92:4d:1b:
27:99:46:94:e0:8f:57:cd:df:0a:af:f6:3d:a6:07:d2:3e:af:
0a:50:6e:f6:08:ea:18:2d:c8:38:c2:54:76:df:e0:6e:7f:27:
86:33:13:c4:df:b6:56:4c:e0:a9:fe:c4:53:0d:da:1f:9c:c5:
4a:a6:99:35:8f:d5:da:06:de:35:fb:a8:55:75:16:7a:8e:70:
a1:cf:23:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org