Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/oNyIlF4pq9Au9GSXrG27ZgF1row.roa
File: oNyIlF4pq9Au9GSXrG27ZgF1row.roa (raw, json)
Hash identifier: FTIcOq+eWAnT5+GbWBiu/GVEjb94P8MMVL3wVXATjDA=
Subject key identifier: A0:DC:88:94:5E:29:AB:D0:2E:F4:64:97:AC:6D:BB:66:01:75:AE:8C
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01892F5EB7598329F1E5B0D0575B5381C400
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/oNyIlF4pq9Au9GSXrG27ZgF1row.roa
Signing time: Fri 07 Jul 2023 08:01:23 +0000
ROA not before: Fri 07 Jul 2023 08:01:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
81.28.252.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jul 2023 07:15:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2f:5e:b7:59:83:29:f1:e5:b0:d0:57:5b:53:81:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jul 7 08:01:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0dc88945e29abd02ef46497ac6dbb660175ae8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ea:c6:19:9d:85:24:d7:15:10:23:f8:e7:55:
27:f1:dc:b0:1f:07:b2:d3:2b:b1:b1:e9:0a:ed:6b:
90:10:42:83:8a:42:81:65:1a:d7:c8:88:2d:8c:4e:
57:22:76:96:95:68:5a:3d:9a:27:39:00:61:da:ff:
44:fe:cd:b4:d6:47:97:34:fa:58:f9:1b:1e:1f:69:
df:1d:da:7c:48:24:b9:40:cb:cb:4e:7e:b5:f4:05:
af:54:fe:e0:1f:b4:ac:71:62:c4:18:99:9c:b4:86:
9d:f3:6f:bd:16:47:ac:1a:64:4a:ec:ab:1a:d7:a4:
b8:e5:f7:21:2d:db:75:29:69:13:1a:6c:d6:0c:2a:
c3:8d:ba:76:9c:0d:3e:05:56:89:78:22:de:9f:25:
98:a8:48:6d:c2:b2:73:44:f2:4e:ac:89:9f:a6:5a:
01:ee:fb:5c:a2:95:c5:67:93:ad:78:1c:7b:7c:46:
4c:ee:12:9d:4f:da:61:9d:ee:e7:82:6c:3e:6f:fa:
30:9f:12:c2:c9:b4:3d:e6:d8:c9:79:0c:ae:d1:e7:
2a:de:b7:60:d3:e8:05:5c:44:fa:29:7a:46:ce:9c:
b3:09:3c:3c:c8:aa:0b:f4:cc:40:45:53:d2:49:8a:
17:c1:17:ab:99:25:bc:82:14:5b:35:1d:c6:65:f4:
8b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:DC:88:94:5E:29:AB:D0:2E:F4:64:97:AC:6D:BB:66:01:75:AE:8C
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/oNyIlF4pq9Au9GSXrG27ZgF1row.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
81.28.252.0/24
Signature Algorithm: sha256WithRSAEncryption
84:99:64:6e:e9:84:b8:18:0e:41:54:51:9e:7a:75:1e:94:99:
fb:35:46:26:ad:d5:86:f3:78:c4:ea:4e:46:f6:b0:39:2a:10:
f2:65:22:0e:81:64:cc:54:2f:76:66:cc:c6:45:18:bc:b8:9f:
e2:8f:ff:be:7b:9e:cc:eb:26:00:a0:d2:12:12:cf:ba:ec:2c:
9a:a5:2c:1e:29:e2:72:71:c2:f7:e8:bd:a5:fb:57:73:98:c7:
7f:4f:2a:33:87:15:01:68:92:1a:1f:e6:fd:4c:31:a4:5a:51:
62:bc:53:da:21:38:f8:6c:c1:a7:84:de:d1:93:49:17:07:40:
41:1e:80:21:ff:a9:75:25:d7:76:d8:d1:9b:14:80:0b:b2:c1:
5d:1c:eb:b9:c6:68:af:22:ef:f3:8e:d3:7d:fc:b0:81:12:cf:
8c:44:f4:3d:fa:a5:78:c8:38:73:17:38:d6:89:13:e2:fc:c4:
16:3c:f2:51:cf:f3:9b:ca:28:fd:b3:39:f2:4a:78:17:2a:9c:
ea:bf:d7:26:86:87:be:07:14:54:14:ff:af:e5:93:ab:12:ae:
11:16:28:e5:3c:57:91:d9:8a:97:fc:4c:55:00:df:29:fc:52:
10:08:20:8f:1c:98:c0:ef:9e:b8:be:37:e4:f5:8f:79:2c:14:
e2:d3:c8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org