Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/n5V86dkkdeaf2i6MfyGnoSe1w9I.roa
File: n5V86dkkdeaf2i6MfyGnoSe1w9I.roa (raw, json)
Hash identifier: dtQWO5n6q3pW4KfBNIH6oqkecCJ1le7bJeijVnEQ5O4=
Subject key identifier: 9F:95:7C:E9:D9:24:75:E6:9F:DA:2E:8C:7F:21:A7:A1:27:B5:C3:D2
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018A54A43EB2B51D03FB513D37986959D27F
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/n5V86dkkdeaf2i6MfyGnoSe1w9I.roa
Signing time: Sat 02 Sep 2023 06:46:04 +0000
ROA not before: Sat 02 Sep 2023 06:46:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198767
IP address blocks: 45.137.16.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Oct 2023 01:24:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:54:a4:3e:b2:b5:1d:03:fb:51:3d:37:98:69:59:d2:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Sep 2 06:46:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f957ce9d92475e69fda2e8c7f21a7a127b5c3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7e:7a:4c:69:a1:07:60:34:79:51:27:e9:23:
10:ef:d8:e1:b0:bd:eb:8d:38:11:5c:4e:80:07:78:
46:17:fb:9f:41:62:d4:99:02:97:38:fd:f1:23:b8:
1a:02:61:57:b6:b0:66:e5:d1:2f:ce:40:aa:4a:f2:
c0:7b:56:a1:24:8c:3d:55:30:41:3c:47:35:d7:88:
c8:9a:86:d0:f2:73:cc:7c:78:64:e0:dc:3d:76:ac:
3d:a5:09:20:3f:e6:9c:af:cf:c2:50:f2:b6:23:7d:
b3:68:4c:fc:27:56:b0:fc:ad:49:5a:51:29:20:fe:
91:84:c2:14:40:53:7f:e1:fe:b0:77:f9:50:53:96:
42:16:04:f3:29:b1:c8:37:18:83:2f:8d:1c:d1:db:
b8:2b:ae:62:ce:61:a9:2a:62:11:fd:37:3b:5f:f7:
97:6e:c8:b8:e2:bf:a6:3d:ca:43:6b:14:75:67:0c:
1c:72:26:d7:d7:4a:d2:11:de:08:37:92:11:f0:b9:
08:ae:d2:a0:43:0b:b3:0e:68:db:d7:9b:c7:5e:36:
b4:40:f2:c8:cd:f2:27:e1:c3:44:84:2c:9e:c9:8d:
18:3a:f3:68:4b:bb:66:1f:43:cf:5e:71:ec:fc:c3:
d0:2b:be:4e:ef:88:49:27:59:7e:0c:ca:81:b2:cf:
e3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:95:7C:E9:D9:24:75:E6:9F:DA:2E:8C:7F:21:A7:A1:27:B5:C3:D2
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/n5V86dkkdeaf2i6MfyGnoSe1w9I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:3b:86:d4:cd:bc:b2:13:43:ec:de:00:99:af:38:cb:9c:f1:
d5:71:ae:3c:2f:20:23:a8:7f:9f:20:fe:4c:63:1c:b8:c7:24:
19:a8:16:07:e9:53:c9:15:dd:80:66:6b:6c:39:44:18:24:93:
d8:07:e0:bd:46:22:7d:07:87:32:69:b9:20:ef:44:d8:e7:d7:
be:75:8f:54:f3:b4:26:08:5f:31:98:57:5e:bd:9c:53:31:0e:
86:fc:89:62:14:94:d2:67:01:4b:7c:fd:81:40:2c:20:50:f0:
0d:96:e5:8f:b5:31:43:3a:62:b3:e2:8c:1e:14:4f:1f:34:eb:
11:e4:9b:0a:0b:34:07:ea:1f:99:ca:02:ff:08:7e:25:8b:5f:
19:60:6c:62:91:12:89:4e:6d:c0:88:0c:b5:d8:37:30:0d:c7:
93:82:ba:53:d4:d3:3c:c1:51:99:fc:82:01:e0:15:51:53:c6:
52:a8:f8:4c:91:9e:41:9f:ec:08:93:81:87:e3:9b:06:a2:36:
c9:0b:d8:3b:8f:52:5a:6e:34:b0:04:a6:b8:66:98:c7:7b:29:
fc:c3:1a:4f:6e:0e:c1:a3:55:6d:11:a5:85:a2:a8:a6:d3:3b:
f1:e0:e0:e1:68:6f:61:93:fb:2d:7c:25:9a:c8:2e:66:d6:4a:
e1:9c:f2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org