Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/qxU6AztqO8Bdozf4dlpg71jgpYk.roa
File: qxU6AztqO8Bdozf4dlpg71jgpYk.roa (raw, json)
Hash identifier: WORQkTLX7KrgZb+kXHcZO0/zzNpMsZfU4eE/SRqwYCM=
Subject key identifier: AB:15:3A:03:3B:6A:3B:C0:5D:A3:37:F8:76:5A:60:EF:58:E0:A5:89
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01856C785706C91F682A7A0BC6DC6789C20A
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/qxU6AztqO8Bdozf4dlpg71jgpYk.roa
Signing time: Sun 01 Jan 2023 08:35:04 +0000
ROA not before: Sun 01 Jan 2023 08:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 45.137.16.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 19 Jul 2023 17:56:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:57:06:c9:1f:68:2a:7a:0b:c6:dc:67:89:c2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 1 08:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab153a033b6a3bc05da337f8765a60ef58e0a589
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:69:05:90:0b:c4:e5:54:7a:81:fb:bd:16:9d:
c5:c5:b8:01:9a:77:1a:74:ab:29:c2:2f:09:b0:c4:
ee:97:b4:e2:68:78:79:38:e4:64:a4:8e:86:fe:cc:
d2:98:4d:c2:72:77:15:30:03:05:92:7f:f6:50:63:
e0:73:bb:1c:73:e6:05:e7:61:60:56:b4:27:66:1f:
82:95:81:2f:bc:9b:68:d1:3f:36:37:07:6c:61:d3:
99:4b:0f:41:d1:dc:48:5e:4d:b4:2d:65:f7:c7:e0:
5e:c9:94:75:06:f4:c9:aa:a3:2f:af:0e:79:65:e4:
6e:36:81:3e:84:eb:c9:c4:2c:a4:0e:4b:ae:d5:9c:
74:1b:d3:08:58:e1:27:57:bd:91:d2:08:ff:b8:0c:
94:dc:9a:d0:fc:a3:ff:15:66:8d:9d:49:a4:fb:53:
ac:65:e8:48:a8:22:58:90:9b:aa:8c:b7:01:1b:6b:
71:5a:bf:68:83:a4:a6:3e:23:df:fd:19:8c:9d:16:
37:2e:ee:d0:54:a6:71:cb:83:a1:eb:dd:76:25:e1:
23:42:63:c0:33:ba:5f:d4:ff:43:c6:b8:aa:fd:7b:
93:79:4e:98:27:c2:92:e0:63:61:42:56:a4:1d:84:
3c:76:f7:9b:c3:3b:eb:ec:a7:21:75:6f:64:61:66:
95:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:15:3A:03:3B:6A:3B:C0:5D:A3:37:F8:76:5A:60:EF:58:E0:A5:89
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/qxU6AztqO8Bdozf4dlpg71jgpYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
Signature Algorithm: sha256WithRSAEncryption
c0:fe:8c:8b:fe:77:3f:5e:75:25:b7:ff:02:0d:92:47:53:de:
48:67:52:9a:3e:f1:cf:e5:be:2d:8e:03:22:1d:fe:ff:ac:5b:
fe:d2:a1:65:8b:c9:fa:16:3c:a4:20:50:bf:44:76:b5:de:90:
eb:dd:53:67:95:8c:88:4b:7e:88:19:45:ec:d1:a3:c6:99:7d:
de:8f:51:06:a2:67:9d:a1:f6:da:e8:2e:46:76:62:0e:3e:11:
fb:52:57:14:c8:c2:6a:9a:81:d3:8c:bd:04:10:8f:20:d0:a7:
9a:9b:22:24:d5:3a:f2:b0:d6:79:c4:77:2f:d9:94:68:36:d7:
dc:af:ed:28:36:b8:7c:5e:33:7f:90:77:fb:8a:8e:ef:7c:a5:
78:31:0f:f0:99:b4:02:2c:8a:8e:e3:e2:30:6f:0d:3e:6e:c1:
ae:dc:74:4d:60:d8:f1:7d:bc:25:0a:ec:a9:ce:71:bc:e0:ad:
73:1e:94:1f:cd:7b:3c:6b:19:de:90:6f:ce:51:d6:5f:ab:cc:
f5:12:7c:88:c4:4e:fe:6c:55:87:bb:5d:86:f1:92:38:2c:5d:
fd:70:eb:fc:5f:42:cc:14:db:8c:62:54:f7:e9:a8:f0:9e:97:
e3:8f:b6:6f:1e:bf:1b:4d:7f:99:6c:67:34:24:20:02:c9:09:
2d:f7:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org