Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ohG07RL2k9LWvPBGXu48pqgkqWw.roa
File: ohG07RL2k9LWvPBGXu48pqgkqWw.roa (raw, json)
Hash identifier: 5527ZC3HqKS5bd4rK6e8k3QNbxpB5Qp9LT19Yg6Zvww=
Subject key identifier: A2:11:B4:ED:12:F6:93:D2:D6:BC:F0:46:5E:EE:3C:A6:A8:24:A9:6C
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018BB9BF348E5B59588BEC0343D04122DB6F
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ohG07RL2k9LWvPBGXu48pqgkqWw.roa
Signing time: Fri 10 Nov 2023 14:59:57 +0000
ROA not before: Fri 10 Nov 2023 14:59:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216183
IP address blocks: 45.150.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b9:bf:34:8e:5b:59:58:8b:ec:03:43:d0:41:22:db:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Nov 10 14:59:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a211b4ed12f693d2d6bcf0465eee3ca6a824a96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:5a:6a:cb:17:1c:ac:89:3d:97:63:63:e3:
71:ca:f3:35:a0:d5:b4:36:46:88:41:0d:e3:85:60:
07:78:ff:46:8f:23:9d:fe:72:14:e3:3e:0b:d4:1f:
ea:9c:2f:11:0c:bc:52:2f:41:54:17:33:e4:cd:a6:
6d:90:09:30:e0:6a:c2:48:88:d1:c4:d8:25:7d:15:
21:41:7e:00:55:e5:e5:11:7f:06:d1:0d:2a:ee:d7:
83:08:61:52:b1:7a:4b:eb:03:ef:52:fb:a1:7a:e5:
1e:b6:72:df:55:9f:b6:dd:3e:d8:31:bf:74:ee:79:
81:03:d5:a0:5f:14:0f:9f:c5:29:f0:a4:f0:5c:bb:
c0:69:16:38:dd:aa:16:5b:61:87:db:aa:8d:ce:8f:
34:4d:7a:f1:84:33:63:11:31:86:23:c9:ca:0d:c0:
ca:0c:59:80:4f:f9:9b:f9:fc:85:39:df:54:42:20:
f0:fa:46:72:c3:be:b6:0a:cf:86:be:5d:f1:e5:58:
6e:e0:38:82:2e:0e:5c:d1:e3:13:c4:71:ab:dc:43:
a0:1f:20:33:1a:44:b3:cb:bd:66:b6:f9:0e:3a:13:
3c:04:db:b8:9f:4a:7c:47:53:d2:53:a0:99:28:f1:
65:d0:99:3b:cc:04:cf:b5:b6:22:00:53:5c:d8:cf:
82:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:11:B4:ED:12:F6:93:D2:D6:BC:F0:46:5E:EE:3C:A6:A8:24:A9:6C
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ohG07RL2k9LWvPBGXu48pqgkqWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.52.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:9b:53:4a:cb:28:16:1a:de:4d:24:cd:25:66:8d:cc:80:7d:
8c:1a:64:4d:ba:22:7f:fa:54:17:d1:cd:21:87:1b:c7:ba:03:
39:f1:4c:57:dd:8e:c6:56:e7:70:92:44:e7:92:67:02:38:15:
7c:4e:ab:63:24:69:1f:64:37:37:c8:a4:33:c0:ac:78:99:93:
44:47:ff:c7:d9:bb:f5:48:5e:e4:a9:53:0d:c2:cc:0a:4e:ad:
0b:94:96:ae:ee:e7:ec:50:37:c5:50:eb:70:09:fe:44:84:2b:
69:e5:3d:9b:88:75:56:eb:71:2e:13:f6:b2:4f:ef:37:e4:15:
59:39:47:a2:49:3c:aa:67:28:a4:19:9f:9f:cd:8e:0f:54:9a:
3f:65:b1:0f:04:7b:31:87:ea:7c:b4:1d:6c:0f:40:ae:87:a7:
6e:77:69:5f:c0:97:fb:9a:91:13:09:6d:ee:25:0b:dd:aa:bd:
53:d8:eb:7d:95:39:1c:1d:4f:25:ad:5d:35:b4:65:e6:49:c9:
b2:9e:b3:a5:4c:78:87:0f:72:c1:ff:b3:b2:e6:7c:e3:6a:08:
4d:df:8a:69:65:bd:83:42:c9:7e:c6:f2:c2:bb:dc:09:52:b3:
3a:4a:4e:ca:a9:0b:58:d5:1d:93:c8:2b:b9:df:a5:22:20:51:
f9:87:7f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org