Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/wxrfMTNyB5jSqs9TD6PvoxLD_C0.roa
File: wxrfMTNyB5jSqs9TD6PvoxLD_C0.roa (raw, json)
Hash identifier: MDfMnMVUbyAf4AiMZh9EOCIQGSGO8zJ8ondFYYp53Wg=
Subject key identifier: C3:1A:DF:31:33:72:07:98:D2:AA:CF:53:0F:A3:EF:A3:12:C3:FC:2D
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0188279CA8C3D99C0A65D5179CF8B4DCC8CE
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/wxrfMTNyB5jSqs9TD6PvoxLD_C0.roa
Signing time: Wed 17 May 2023 02:49:18 +0000
ROA not before: Wed 17 May 2023 02:49:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
91.244.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 May 2023 16:08:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:27:9c:a8:c3:d9:9c:0a:65:d5:17:9c:f8:b4:dc:c8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: May 17 02:49:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c31adf3133720798d2aacf530fa3efa312c3fc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:c4:79:95:40:f9:55:12:32:0b:2a:80:c2:
26:39:18:be:8f:05:86:ca:6a:d5:3b:3b:6b:b8:54:
c4:80:19:24:2a:66:2d:01:43:84:c7:a9:bc:1f:aa:
db:f5:3b:f2:40:0e:d9:5d:43:25:e3:f5:53:34:a8:
b5:0c:ed:62:6a:08:8b:66:98:66:b7:f0:9d:8a:c0:
f2:d7:b3:81:3d:76:cb:cb:e2:dd:16:39:3a:ff:ac:
14:da:eb:15:ac:67:93:0b:ba:af:cc:9a:37:f1:eb:
48:f1:ed:b5:c9:69:11:4b:31:61:9a:72:47:dd:65:
5b:51:31:67:0a:6b:7c:04:60:e6:e7:cf:21:7b:e5:
f8:3f:5b:0c:11:09:07:a4:c5:22:2c:7a:22:56:fa:
23:17:7c:68:2f:bd:20:be:87:87:35:79:6d:c9:c2:
fe:bd:17:98:27:85:cc:fe:6a:b9:c0:db:02:6a:4d:
5e:5c:1d:be:f4:01:7d:97:b9:80:cc:fb:71:84:62:
77:f6:8d:83:66:4c:4f:f5:58:26:fe:7a:ab:3b:82:
85:da:2f:44:bd:d2:99:12:c0:39:4f:3d:c5:49:0c:
34:9a:cd:30:b4:d7:80:d8:62:cd:9b:fe:96:fe:7b:
00:1b:a0:93:2b:ba:57:2b:d7:a9:0f:33:4a:05:ac:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1A:DF:31:33:72:07:98:D2:AA:CF:53:0F:A3:EF:A3:12:C3:FC:2D
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/wxrfMTNyB5jSqs9TD6PvoxLD_C0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
91.244.198.0/24
Signature Algorithm: sha256WithRSAEncryption
06:86:08:df:50:9d:9e:9a:20:12:03:3d:82:96:65:ac:e8:53:
b9:b3:36:f7:4d:36:6c:81:ff:ce:d9:ea:3d:b4:25:93:6b:80:
4c:ee:ee:29:8e:60:1d:54:6a:a5:cd:db:dd:df:e7:c1:c1:10:
b8:71:7b:01:16:71:a1:7a:22:95:dc:ef:6a:72:1c:70:cd:d2:
8d:71:1e:d6:92:f2:a9:95:50:b0:6f:be:c1:81:ed:b3:d8:1e:
98:57:ab:b3:af:a9:da:c6:c5:80:18:2f:67:ab:42:9c:ca:c9:
bd:49:60:9a:07:1c:3e:51:7c:f0:6b:a1:42:49:3a:00:6e:b7:
f7:81:94:e9:27:db:e8:5a:9c:f5:f8:42:50:66:58:e1:5c:13:
50:16:a1:0f:40:5a:2c:ee:0b:c0:ef:82:3c:f7:fa:ad:29:c5:
1f:99:0e:27:2a:11:b8:06:17:b9:49:1e:d6:a0:45:13:28:84:
74:b1:9c:10:a8:db:b5:b9:89:a1:c7:2d:7f:3c:b8:61:eb:68:
65:78:45:da:44:2d:1f:e1:9b:fa:ee:22:61:a3:37:5c:f9:78:
03:a3:1e:49:42:dc:aa:b5:87:06:2c:71:48:42:d1:7d:fa:ec:
50:94:44:23:40:87:e4:07:c4:40:32:2a:ee:5e:8d:36:0f:36:
41:c5:34:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org