Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/rvzSLcFn6IINQ_xnZzaBf4iT33I.roa
File: rvzSLcFn6IINQ_xnZzaBf4iT33I.roa (raw, json)
Hash identifier: +r95SLOSFyzoAK39DzWGrwZUoJpaqJPQLCooGtIV7ds=
Subject key identifier: AE:FC:D2:2D:C1:67:E8:82:0D:43:FC:67:67:36:81:7F:88:93:DF:72
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018F208967BE76C444B7158457D260F013AE
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/rvzSLcFn6IINQ_xnZzaBf4iT33I.roa
Signing time: Sat 27 Apr 2024 17:10:26 +0000
ROA not before: Sat 27 Apr 2024 17:10:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.137.16.0/24 maxlen: 24
45.137.17.0/24 maxlen: 24
45.137.19.0/24 maxlen: 24
176.105.229.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 29 Apr 2024 05:21:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:20:89:67:be:76:c4:44:b7:15:84:57:d2:60:f0:13:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Apr 27 17:10:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aefcd22dc167e8820d43fc676736817f8893df72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d6:c4:39:37:ee:ce:d1:c4:3c:20:df:52:b2:
3d:7d:0a:3e:8b:0d:94:82:55:7c:54:5b:82:51:f9:
a4:16:a1:86:06:11:db:de:ee:d8:2e:44:cf:ac:cb:
33:3d:6b:b2:0f:f0:1d:2e:0a:03:af:ae:16:5f:a2:
08:b6:63:26:30:0b:5c:44:18:89:53:89:09:83:bd:
45:fa:17:d5:1d:b7:3e:6c:e4:24:ce:57:a7:f9:91:
e3:c3:ef:3e:90:1d:06:f4:a3:4f:84:60:75:d5:24:
05:49:2c:5a:19:3a:6f:39:dd:c2:3d:76:64:7a:df:
72:3c:64:dd:ea:59:b3:d9:be:13:74:4a:3b:f2:71:
33:c3:61:11:39:38:ef:9b:7c:f5:cf:76:64:cb:8d:
e3:4d:c0:88:29:54:c3:e5:a1:a7:1f:9d:35:2e:f1:
52:19:6b:10:3a:04:1c:58:3f:c0:74:f4:b2:7f:db:
a5:3f:6a:19:ca:e4:65:e5:74:b3:9a:91:68:c3:d6:
81:3a:2f:cd:84:f4:ac:79:2d:9f:3d:e2:b3:f0:fe:
dd:b7:5d:b8:5e:94:eb:d3:c4:e5:d7:12:4d:f8:ce:
ac:23:ba:f2:9f:96:a5:51:68:3c:8d:0d:40:0a:99:
58:07:80:4b:d0:7f:21:17:dd:73:e7:99:ba:10:6e:
5e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:FC:D2:2D:C1:67:E8:82:0D:43:FC:67:67:36:81:7F:88:93:DF:72
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/rvzSLcFn6IINQ_xnZzaBf4iT33I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
45.137.19.0/24
176.105.229.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:24:a5:9f:b1:5a:a8:be:fa:63:00:d6:31:78:c0:e3:14:75:
62:7e:d8:4e:d5:89:4e:29:d6:ad:9d:be:53:61:35:f6:d5:84:
33:84:06:c3:5c:7c:2f:6b:3b:ab:95:c5:8d:9b:88:f2:03:5a:
91:a2:b1:5b:55:6b:40:34:46:a9:e3:51:af:b2:81:cf:d0:0f:
1d:fb:82:00:d4:2a:9b:d5:8c:a5:ac:08:7e:d8:10:10:68:1b:
6a:8e:2e:d7:84:84:ca:61:70:d9:a8:53:10:9f:0b:e7:34:42:
17:7c:95:43:2f:d6:22:ca:6e:8d:91:b2:f0:f8:4f:ff:67:d2:
a5:79:69:b3:1b:f3:c2:26:6b:2f:91:6e:06:06:4f:e1:0a:3a:
04:f5:b2:2a:0c:f9:5e:03:0a:99:3d:3c:30:56:8d:d1:14:1a:
f4:80:b7:52:98:f1:d0:03:36:6e:2d:81:4a:f3:8a:ee:6d:bc:
c5:d4:32:ac:17:ca:31:9a:a5:f3:cc:cd:7f:8e:e0:aa:6a:97:
6f:8a:9c:8a:d8:89:18:a8:63:22:64:22:c7:85:cb:17:8e:99:
71:e9:63:71:b3:8e:d3:11:9e:7c:ee:08:7a:cc:a3:75:a0:d7:
5f:d8:72:72:fa:d7:54:81:b9:11:e1:e1:f2:56:88:bb:90:3b:
c9:cc:3e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org