Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/px46gmDtQd7NYSR-miSiocF73Cw.roa
File: px46gmDtQd7NYSR-miSiocF73Cw.roa (raw, json)
Hash identifier: SrSwtWhPbK7O/vAQAqQ6eFlRi77CWzJAvqBuE2QKNdI=
Subject key identifier: A7:1E:3A:82:60:ED:41:DE:CD:61:24:7E:9A:24:A2:A1:C1:7B:DC:2C
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018DC802C0853A0585BF740E6F39CC2CB54F
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/px46gmDtQd7NYSR-miSiocF73Cw.roa
Signing time: Tue 20 Feb 2024 19:34:00 +0000
ROA not before: Tue 20 Feb 2024 19:34:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.137.16.0/24 maxlen: 24
45.137.17.0/24 maxlen: 24
45.137.19.0/24 maxlen: 24
91.238.92.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 Feb 2024 16:35:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c8:02:c0:85:3a:05:85:bf:74:0e:6f:39:cc:2c:b5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Feb 20 19:34:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a71e3a8260ed41decd61247e9a24a2a1c17bdc2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:16:f0:77:24:c5:6f:9e:42:b5:47:bd:74:1f:
e3:5f:56:c8:ac:a8:3b:ad:22:ea:98:41:62:e9:08:
cc:83:08:e8:37:97:87:77:f7:f8:ad:ee:2b:78:4d:
d8:47:f7:9d:a2:fe:9b:6b:f8:e8:11:bb:18:00:96:
58:42:75:97:78:f3:cd:f4:0c:fe:35:b7:e9:d7:1f:
c4:36:6a:d4:6f:59:f1:6b:8a:e6:c9:a6:e6:f8:67:
7a:8a:fa:dd:3f:81:ab:91:74:51:bc:5d:2b:a9:b1:
8e:80:cf:25:94:4a:9d:14:fd:32:55:eb:40:8b:fb:
b4:a7:76:77:18:14:33:97:bc:43:c2:e2:73:18:6b:
33:e7:78:60:f9:ac:21:3d:5e:24:a3:6f:4f:3f:5e:
92:fb:db:74:fc:69:53:76:e0:b9:af:cf:fa:41:f9:
a8:f4:01:b1:10:0c:90:fc:82:86:c9:79:08:c0:98:
5e:3c:0e:3a:c5:8a:74:97:a9:f4:d4:8b:39:f5:6d:
aa:c2:d3:01:38:41:54:4e:16:0a:2b:66:8e:f0:2b:
d7:c2:5a:56:3c:d7:2e:8a:e1:7d:0b:b0:80:87:d7:
5b:a3:16:21:02:4a:24:ef:27:27:33:cd:2a:00:f7:
4a:44:95:1d:85:9b:c3:46:86:4e:79:d0:3d:8e:73:
61:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1E:3A:82:60:ED:41:DE:CD:61:24:7E:9A:24:A2:A1:C1:7B:DC:2C
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/px46gmDtQd7NYSR-miSiocF73Cw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
45.137.19.0/24
91.238.92.0/24
Signature Algorithm: sha256WithRSAEncryption
72:8c:03:6c:11:cd:5e:96:bf:39:e0:a8:95:eb:0a:be:06:a9:
08:a2:bc:48:b7:12:b0:06:fe:6b:3c:f2:7d:5c:b8:ce:c8:9e:
9e:e7:1a:e4:de:1e:33:d7:6b:25:7c:c1:e0:45:d9:97:be:f5:
e5:a0:6d:8e:3f:4c:33:d4:87:17:50:e6:cb:9e:56:29:db:1f:
b8:dd:3e:b9:d4:d6:1e:25:69:b5:24:67:60:2a:75:d9:52:41:
d7:1c:59:36:70:49:37:a3:b0:0d:f2:c3:41:fc:58:37:42:0a:
6d:6d:05:8a:06:30:ec:27:b0:8d:94:1b:7b:a6:20:ee:55:9e:
92:ea:47:90:fc:8f:9c:e7:ed:5d:ba:6c:c8:bf:82:d4:13:1a:
50:5e:a9:44:a7:1f:13:94:62:36:7f:c3:92:ea:df:d2:ed:65:
25:6d:1f:f5:1c:88:fb:73:9a:ab:2d:20:fd:61:f0:19:d7:41:
bb:dd:00:eb:9b:75:0d:d1:34:c4:ae:01:b5:df:ad:b8:11:b9:
a0:1f:77:e9:f1:71:f0:97:3d:e3:6e:c2:b6:a8:12:90:e3:83:
a4:cd:dc:8b:3e:f2:f4:e5:96:e3:56:8b:7e:bc:9a:4d:a1:f9:
25:4b:86:51:00:d0:32:80:ad:81:47:fb:b7:c0:dd:5a:a6:b4:
77:2f:57:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org