Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/oMmULfp8Qv37zVvD3w9hurAfCNo.roa
File: oMmULfp8Qv37zVvD3w9hurAfCNo.roa (raw, json)
Hash identifier: SFHkz5lGUl8AdH00eioXwNU4UWEQZ/p6b3vIGmj31oA=
Subject key identifier: A0:C9:94:2D:FA:7C:42:FD:FB:CD:5B:C3:DF:0F:61:BA:B0:1F:08:DA
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018D6596C5B0CC0FD8816809E4B9C1C5A5FB
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/oMmULfp8Qv37zVvD3w9hurAfCNo.roa
Signing time: Thu 01 Feb 2024 16:53:16 +0000
ROA not before: Thu 01 Feb 2024 16:53:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.137.16.0/24 maxlen: 24
45.137.17.0/24 maxlen: 24
45.137.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Feb 2024 19:34:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:65:96:c5:b0:cc:0f:d8:81:68:09:e4:b9:c1:c5:a5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Feb 1 16:53:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0c9942dfa7c42fdfbcd5bc3df0f61bab01f08da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:88:85:6c:fb:27:a8:1c:8e:d4:00:b5:c5:ea:
4b:89:b8:41:3c:d1:4e:e7:0d:2e:40:8e:08:9e:e1:
b3:49:a7:61:69:12:31:29:9d:98:ea:49:1e:8c:3d:
62:6d:34:8e:46:9c:9f:58:cd:74:cb:67:b5:29:12:
87:f3:c7:c0:23:e0:25:f1:80:3d:0c:c6:ce:e8:42:
62:61:6e:96:84:83:10:22:a2:3b:cb:80:d0:f6:04:
29:4b:12:e8:cc:e6:f2:32:c2:f8:f5:91:5a:80:cf:
76:73:b1:d6:fa:03:cc:d6:f5:56:08:fb:60:ff:71:
09:d2:31:93:a9:a3:41:1f:fc:34:a1:d8:b4:85:8a:
f4:3a:cb:07:ff:11:96:69:77:77:24:fa:ab:07:3b:
32:76:25:a3:f2:35:68:d4:9b:ad:36:ec:24:72:6f:
82:58:08:3c:a0:76:83:c8:95:a0:0f:4c:6b:a1:b3:
e8:5f:6a:a3:79:da:3a:10:2d:87:35:95:50:5c:b3:
14:f3:88:4a:bc:da:df:af:82:ec:07:42:0d:10:0b:
9c:83:11:be:b4:cf:95:d6:4c:71:0b:97:25:0d:95:
a9:3c:85:c4:27:1a:c0:2a:a6:81:4f:63:b0:61:94:
7b:5d:8a:00:2f:66:38:14:89:32:78:c1:0a:bf:41:
43:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C9:94:2D:FA:7C:42:FD:FB:CD:5B:C3:DF:0F:61:BA:B0:1F:08:DA
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/oMmULfp8Qv37zVvD3w9hurAfCNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
45.137.19.0/24
Signature Algorithm: sha256WithRSAEncryption
37:e5:53:e7:f0:ab:71:c4:cb:2c:3b:96:58:5a:af:d5:86:1a:
d7:94:d7:ac:61:97:72:33:96:1f:26:69:a4:dd:b0:41:9e:2a:
c9:ea:78:bc:19:02:c5:9e:b2:07:26:46:47:39:94:26:7e:3b:
9c:45:ef:9c:9d:81:4c:b6:f0:e9:a2:57:a7:25:72:57:05:04:
66:f6:c4:9c:0e:7a:69:74:dc:d4:b8:07:c0:cf:82:27:1f:7b:
53:d8:4f:92:1c:01:7e:ad:7d:bc:2f:93:41:dd:0d:3a:25:91:
d5:56:fe:01:a3:44:76:9f:4f:b3:1f:b4:6b:06:11:05:cf:3f:
ac:fc:54:f7:d6:e9:38:c1:04:84:17:8b:8c:e5:78:d5:5f:1b:
58:b8:60:f4:c2:16:b4:74:37:ec:57:43:7b:59:98:6f:a3:95:
12:8f:72:44:93:a4:fd:9b:f7:64:6b:43:66:26:d3:85:e3:70:
83:0e:86:ce:c4:23:48:4e:da:02:da:89:b5:e9:8f:75:22:d3:
29:f1:74:dc:60:19:ea:c5:18:b2:d7:67:b9:6f:d8:56:69:02:
f8:93:ac:db:02:fe:09:14:3f:9e:03:70:5d:79:30:72:97:2a:
21:85:c9:66:80:00:58:72:e3:dd:29:24:5c:be:a9:f5:27:c5:
19:5c:f7:18
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY1llsWwzA/YgWgJ5LnBxaX7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjQwMjAxMTY1MzE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGM5OTQyZGZhN2M0MmZkZmJjZDViYzNkZjBmNjFiYWIwMWYwOGRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYiFbPsnqByO1AC1xepLibhBPNFO
5w0uQI4InuGzSadhaRIxKZ2Y6kkejD1ibTSORpyfWM10y2e1KRKH88fAI+Al8YA9
DMbO6EJiYW6WhIMQIqI7y4DQ9gQpSxLozObyMsL49ZFagM92c7HW+gPM1vVWCPtg
/3EJ0jGTqaNBH/w0odi0hYr0OssH/xGWaXd3JPqrBzsydiWj8jVo1JutNuwkcm+C
WAg8oHaDyJWgD0xrobPoX2qjedo6EC2HNZVQXLMU84hKvNrfr4LsB0INEAucgxG+
tM+V1kxxC5clDZWpPIXEJxrAKqaBT2OwYZR7XYoAL2Y4FIkyeMEKv0FDCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKDJlC36fEL9+81bw98PYbqwHwjaMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvb01tVUxmcDhRdjM3elZ2RDN3OWh1ckFmQ05vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLYkQAwQA
LYkTMA0GCSqGSIb3DQEBCwUAA4IBAQA35VPn8KtxxMssO5ZYWq/VhhrXlNesYZdy
M5YfJmmk3bBBnirJ6ni8GQLFnrIHJkZHOZQmfjucRe+cnYFMtvDpolenJXJXBQRm
9sScDnppdNzUuAfAz4InH3tT2E+SHAF+rX28L5NB3Q06JZHVVv4Bo0R2n0+zH7Rr
BhEFzz+s/FT31uk4wQSEF4uM5XjVXxtYuGD0wha0dDfsV0N7WZhvo5USj3JEk6T9
m/dka0NmJtOF43CDDobOxCNITtoC2om16Y91ItMp8XTcYBnqxRiy12e5b9hWaQL4
k6zbAv4JFD+eA3BdeTBylyohhclmgABYcuPdKSRcvqn1J8UZXPcY
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org