Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mbCtLR2k00hzvdAfqG41h21zldU.roa
File: mbCtLR2k00hzvdAfqG41h21zldU.roa (raw, json)
Hash identifier: ZY+F4ElhP2aTcLGgXXrqHRPDizY8CZ03dxJva39ZzO4=
Subject key identifier: 99:B0:AD:2D:1D:A4:D3:48:73:BD:D0:1F:A8:6E:35:87:6D:73:95:D5
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018CC500AE26FF735F812C09896025078519
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mbCtLR2k00hzvdAfqG41h21zldU.roa
Signing time: Mon 01 Jan 2024 12:30:05 +0000
ROA not before: Mon 01 Jan 2024 12:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 Jan 2024 05:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ae:26:ff:73:5f:81:2c:09:89:60:25:07:85:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 12:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99b0ad2d1da4d34873bdd01fa86e35876d7395d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bc:c5:4d:9b:02:c5:c6:f2:05:c4:e2:52:53:
e0:29:29:2d:0b:dd:19:06:7d:55:5c:b3:de:25:ad:
81:84:dd:03:57:7e:4a:37:ba:5b:ac:b4:f3:a8:fd:
83:ae:52:e2:9c:f6:3f:eb:de:d1:29:7c:11:e7:8d:
39:6d:b2:9b:b9:13:23:c5:39:5d:50:87:6f:29:0a:
19:83:85:90:bb:ab:80:34:00:35:72:41:44:6f:2b:
9c:ea:24:3a:ae:50:70:2f:2b:90:31:c3:e0:68:e2:
6b:b2:b2:91:83:10:30:10:fe:dc:96:79:79:e6:f6:
d3:6a:96:81:d8:82:a1:c2:50:e7:79:14:69:c2:f2:
43:a5:f2:a6:72:df:9d:f9:2d:a8:bf:ac:38:19:0b:
8f:34:1c:81:e8:4b:96:dc:0e:03:bb:3f:a1:03:65:
89:20:18:78:91:6f:65:5f:21:c7:60:43:93:43:28:
9b:2c:a7:3a:23:49:3b:b8:8b:a0:11:46:9d:3e:9f:
20:e4:d9:35:13:4b:79:24:8c:67:f4:eb:62:92:8d:
c5:c9:bb:d7:3e:7c:34:b0:66:2e:aa:e2:77:80:e9:
54:07:66:67:8d:6d:b5:87:ba:10:93:65:10:f8:35:
8a:13:b7:04:9d:f9:e4:cf:1e:c4:b7:23:41:08:56:
cf:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B0:AD:2D:1D:A4:D3:48:73:BD:D0:1F:A8:6E:35:87:6D:73:95:D5
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mbCtLR2k00hzvdAfqG41h21zldU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:02:35:bf:ce:7b:44:f6:25:4a:eb:8d:0f:94:87:cd:b6:02:
9c:45:fa:42:5c:78:74:2f:e9:22:fe:85:aa:25:93:3c:ed:5c:
db:de:57:2d:95:61:14:0e:5b:fa:d9:27:9e:26:b7:dd:1d:fe:
37:83:8d:99:7c:f8:aa:84:db:c6:52:56:6c:9c:b4:12:32:8a:
42:99:23:91:4b:c6:79:ae:87:53:1c:87:f9:a6:e4:cc:f0:f4:
f7:07:91:60:2e:12:c0:0f:ee:73:ee:1d:9b:fc:88:f9:c0:20:
6c:bf:3a:c5:45:ca:a2:1b:a6:b9:05:0b:44:93:5f:66:fb:7a:
5f:f5:e7:a4:d5:3b:3e:ca:cf:ae:f7:d7:7c:71:96:02:e1:c4:
5b:1b:14:69:26:19:08:a8:58:12:0f:d2:dd:80:e5:42:9c:f7:
08:1e:09:28:72:82:a9:f4:97:9f:07:54:2a:74:1e:6c:75:c0:
8e:15:41:bb:91:19:c4:0b:d6:55:41:e6:9d:ed:4f:8b:e1:ee:
79:db:c0:37:4b:a4:8d:3c:04:a6:33:fa:ad:f1:1c:d4:dc:d4:
3b:79:a5:ef:d4:01:21:f9:a9:e0:29:c9:cd:b6:81:e3:bc:61:
b7:48:f3:a5:ac:70:cf:f8:ce:b8:be:33:59:ef:38:37:0f:ee:
52:95:aa:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org