Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/sNBVCCsPGaoVr49xlM0z6-Hcd5k.roa
File: sNBVCCsPGaoVr49xlM0z6-Hcd5k.roa (raw, json)
Hash identifier: POcTGHAdT9j7hdwzMoUBucYweKCG0B9rmI0P3Q2XfGY=
Subject key identifier: B0:D0:55:08:2B:0F:19:AA:15:AF:8F:71:94:CD:33:EB:E1:DC:77:99
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018986C55652812685ABD4E148EA951C2BBE
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/sNBVCCsPGaoVr49xlM0z6-Hcd5k.roa
Signing time: Mon 24 Jul 2023 07:20:26 +0000
ROA not before: Mon 24 Jul 2023 07:20:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 176.105.228.0/24 maxlen: 24
81.28.253.0/24 maxlen: 24
45.132.80.0/22 maxlen: 24
91.244.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Aug 2023 18:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:86:c5:56:52:81:26:85:ab:d4:e1:48:ea:95:1c:2b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jul 24 07:20:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b0d055082b0f19aa15af8f7194cd33ebe1dc7799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:2d:f4:54:a1:77:7f:e9:3a:ba:45:51:91:
0d:14:d2:ad:1a:f7:83:02:09:5c:ab:14:e5:5b:ac:
c6:a5:e5:1b:99:65:d5:a4:7b:a6:b0:42:6d:98:c7:
25:a8:0f:1a:31:44:54:b6:15:36:0f:c4:80:d3:a5:
e9:48:6d:01:eb:9a:a1:de:a7:fd:db:6e:78:01:59:
fe:d3:d8:45:30:b1:ef:4a:d7:19:19:bc:38:58:ac:
3c:0c:c3:e1:ad:b3:76:db:e3:be:ae:90:19:2c:96:
6b:e4:bb:c6:a1:67:06:e9:b6:19:3e:8b:93:0e:70:
57:ea:41:a9:c9:4c:c2:fb:d7:2b:6e:9a:78:a4:24:
4c:20:33:bf:e8:5c:64:91:35:28:2a:f3:09:d6:e0:
2c:77:0b:bc:5c:01:ae:d8:f3:10:ed:b8:47:6b:66:
6c:ab:51:fd:4e:83:8d:a3:b7:57:2c:e1:52:94:7d:
71:cf:10:16:70:c8:c0:ca:0a:e3:03:4b:b5:9b:e7:
fb:ad:af:40:c3:9d:7f:c5:63:de:d4:54:b1:2c:47:
ac:b1:af:d7:db:e2:b9:b8:42:b0:7e:b2:68:c8:7a:
de:6f:5a:7a:03:a6:0a:c7:53:39:5c:d0:fe:be:f5:
29:ae:bd:d1:a3:7c:fb:57:85:29:70:6c:ef:d9:da:
5a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D0:55:08:2B:0F:19:AA:15:AF:8F:71:94:CD:33:EB:E1:DC:77:99
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/sNBVCCsPGaoVr49xlM0z6-Hcd5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
81.28.253.0/24
91.244.198.0/24
176.105.228.0/24
Signature Algorithm: sha256WithRSAEncryption
50:76:ec:1c:97:23:5d:b0:6a:b8:a5:2a:44:a8:45:28:36:67:
a7:f8:f6:97:6e:da:aa:2a:6f:87:4f:bd:2e:34:69:23:d5:6c:
2a:fe:33:fc:ae:05:03:e3:23:d0:7e:84:f8:91:ec:ce:e1:82:
99:c3:49:b2:3e:e7:dd:74:9f:0f:6a:6f:30:db:31:ab:49:63:
33:28:dd:37:4e:44:f3:ec:65:92:dd:a3:9c:32:a3:c7:ea:f7:
78:f3:0e:34:fd:87:85:11:e2:8b:20:6d:2f:8e:8f:f8:44:89:
c4:b2:f4:aa:0c:cf:5f:58:e7:58:5b:59:d7:72:f9:f0:4a:43:
c0:29:56:44:b4:5c:d3:3e:42:58:2b:08:86:26:24:4c:3d:09:
5f:94:b0:9a:4a:37:59:72:68:93:cd:74:1b:1f:a2:14:23:2d:
7a:35:de:56:e9:03:45:3b:81:98:a7:93:c8:b3:63:ad:27:98:
f8:66:47:d7:2f:74:d7:cc:30:39:25:b4:ae:c5:49:6f:01:63:
8a:4a:a4:48:d3:0b:62:5c:c7:d0:5b:30:5a:91:14:0b:aa:a4:
83:75:ee:2d:df:63:4c:62:77:be:ac:64:bd:87:fd:59:99:bc:
f8:0a:1d:be:83:0c:df:93:73:4d:5a:c0:73:6a:a6:cd:63:62:
3b:2c:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org