Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/lOIk8yn8CZzWJCjX_xw0aHjtzFI.roa
File: lOIk8yn8CZzWJCjX_xw0aHjtzFI.roa (raw, json)
Hash identifier: xHkawuWKCGH/HElOjLo17DumaWu7jBwMm5frNIDtiQ4=
Subject key identifier: 94:E2:24:F3:29:FC:09:9C:D6:24:28:D7:FF:1C:34:68:78:ED:CC:52
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01856C78658E3511EDD463B424048094B4FE
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/lOIk8yn8CZzWJCjX_xw0aHjtzFI.roa
Signing time: Sun 01 Jan 2023 08:35:07 +0000
ROA not before: Sun 01 Jan 2023 08:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398465
IP address blocks: 45.137.16.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jul 2023 17:56:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:65:8e:35:11:ed:d4:63:b4:24:04:80:94:b4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 08:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=94e224f329fc099cd62428d7ff1c346878edcc52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9d:17:cf:2c:b6:48:86:1c:6a:ca:eb:5a:c4:
5a:b2:17:4c:73:48:05:00:51:d2:97:25:8c:61:49:
99:1b:60:3c:20:24:b3:b3:65:38:50:4a:9e:b4:17:
1b:01:1a:c0:24:e3:97:77:a5:cf:67:3b:05:74:6b:
eb:75:d9:4d:9c:35:e8:a7:08:12:e1:ae:74:82:fa:
b2:2c:34:f2:c6:5a:9d:68:8a:b2:58:28:8f:f1:56:
98:56:c1:3e:8c:c5:75:8f:d7:05:45:2d:ec:03:62:
ab:db:e1:e9:f2:3f:95:d9:c0:ad:52:07:aa:f5:1e:
d9:a4:6a:34:2d:9c:ab:7e:2c:13:30:d0:e3:70:c8:
47:89:51:66:29:05:8d:97:6f:0d:97:2c:d5:3d:b9:
50:ad:6c:f9:9e:29:21:68:8a:fe:f8:56:1c:50:36:
db:cc:39:ef:39:35:14:1c:30:25:92:18:2e:62:a7:
42:09:90:0c:92:bc:4b:44:ba:b4:0e:37:8a:d6:b7:
fc:0a:71:e4:4c:c9:a8:d2:17:79:61:92:76:80:77:
5d:2e:b6:fd:eb:15:b2:a0:c2:f8:a6:a3:8d:08:7f:
80:49:b7:c5:88:db:e5:04:5e:57:d4:79:66:65:dc:
47:39:98:70:6a:4e:db:d6:6d:f9:71:33:ee:d9:17:
f5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E2:24:F3:29:FC:09:9C:D6:24:28:D7:FF:1C:34:68:78:ED:CC:52
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/lOIk8yn8CZzWJCjX_xw0aHjtzFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
Signature Algorithm: sha256WithRSAEncryption
ab:c4:c6:43:8d:e5:44:b4:9f:c3:7e:b0:8c:19:b1:70:16:bd:
5e:ff:29:ec:2a:9c:2c:a8:21:45:3d:87:b3:bb:c6:6b:cd:38:
06:16:eb:0e:d0:e9:a8:13:0b:77:f1:e4:e5:02:63:7b:d2:aa:
f0:f7:7d:9f:2e:ca:4f:5e:a5:84:dc:ac:f3:f2:95:80:01:c6:
d3:13:1c:7c:84:cb:b2:9a:84:0b:1f:03:22:56:89:8a:76:04:
81:8b:30:fa:50:bd:5b:3c:b6:91:e5:f5:e1:6c:48:06:b7:a5:
81:88:43:5e:4f:e5:08:47:d1:52:62:d3:71:1c:92:ad:d1:01:
4f:a3:f2:c2:67:21:5a:51:cd:6c:42:c5:92:bf:98:e4:8d:da:
7c:31:ec:6e:ca:36:72:8c:f7:6b:3d:4e:23:2e:f3:1d:36:6c:
a7:75:92:c9:a4:0d:a0:3f:d8:32:09:fd:c4:ab:3e:41:64:84:
44:e2:ba:21:7b:34:84:1e:30:fc:9b:4b:5e:bf:70:94:8c:8a:
6a:62:e3:53:d8:9e:a5:33:9a:3a:dd:c1:07:f9:9e:d8:31:ab:
d5:2d:6b:fa:9f:a7:d5:92:29:a0:84:c6:da:11:b9:ec:a2:8c:
a6:30:1b:28:58:65:88:90:41:7f:22:ec:17:d4:d0:9a:c7:11:
9e:0c:14:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org