Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/xuPD8nWAEkB_SUhNAf2vztNly-4.roa
File: xuPD8nWAEkB_SUhNAf2vztNly-4.roa (raw, json)
Hash identifier: 35tmzyUF0CIVtKZ690HX8zlihLgEXjENnlt7LCoMsC4=
Subject key identifier: C6:E3:C3:F2:75:80:12:40:7F:49:48:4D:01:FD:AF:CE:D3:65:CB:EE
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018BFABE5CCF1B7DE91AC863E30AF063402C
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/xuPD8nWAEkB_SUhNAf2vztNly-4.roa
Signing time: Thu 23 Nov 2023 05:54:21 +0000
ROA not before: Thu 23 Nov 2023 05:54:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Dec 2023 01:21:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:fa:be:5c:cf:1b:7d:e9:1a:c8:63:e3:0a:f0:63:40:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Nov 23 05:54:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6e3c3f2758012407f49484d01fdafced365cbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:11:0b:af:73:18:78:e2:04:bb:51:49:74:
7f:fe:32:10:17:90:21:a0:c2:ec:bd:00:08:9b:25:
70:e1:18:20:42:27:62:89:79:1d:e3:d2:f9:36:6c:
e1:df:13:c6:2c:46:0d:bd:47:09:a7:b0:bd:e6:bc:
fd:3c:44:a4:6d:01:c6:c7:fc:f7:44:5c:90:55:2c:
08:f3:9b:2c:b5:5c:63:e3:a8:77:a5:24:2b:88:95:
8b:3f:d4:87:40:db:1b:63:86:bf:3e:88:e8:73:69:
c3:22:a7:22:4f:78:e4:dc:eb:f3:39:8d:8b:70:39:
50:dc:39:af:3f:c6:41:91:81:5a:ae:3f:3e:43:88:
f6:44:2c:aa:1f:16:42:f4:d0:db:6e:30:3c:4b:76:
fa:9c:98:f9:6a:10:5c:95:1c:a2:24:a3:66:73:a6:
b3:ce:23:41:36:d8:ae:d2:a2:8e:df:5a:62:cd:cf:
a0:7a:90:23:49:c6:9d:b1:82:f9:da:4f:26:dd:9f:
1c:8c:49:b2:2e:53:49:8e:29:32:4b:49:cf:f4:95:
45:f7:93:6c:35:ec:50:76:e0:ff:9d:96:c4:6c:e2:
d8:1d:f8:39:d8:a7:bc:cb:5b:d9:8b:72:28:be:75:
63:51:3a:1f:01:90:4b:09:54:98:9a:42:97:83:3d:
e8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E3:C3:F2:75:80:12:40:7F:49:48:4D:01:FD:AF:CE:D3:65:CB:EE
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/xuPD8nWAEkB_SUhNAf2vztNly-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:eb:7e:1c:e3:8a:be:58:ab:69:e1:42:e6:68:9f:fb:33:75:
07:5c:91:c5:ca:ba:67:53:36:56:1d:85:e5:21:bc:34:73:1d:
eb:e6:8a:ee:f9:bf:67:7d:a9:2e:88:58:8c:2b:d4:19:e7:ea:
9d:92:01:5d:80:38:95:66:c5:97:47:9c:8e:25:85:4b:54:24:
1b:89:d0:05:04:87:ca:ee:94:9f:e3:4f:9f:be:c8:7d:0d:cf:
1c:cb:85:0d:1d:e5:a0:4b:21:f5:f6:43:1e:51:6c:db:27:a7:
d0:9a:1e:1e:a6:fb:23:67:23:6f:bf:a6:35:10:30:0e:03:b2:
5c:89:c5:58:67:99:a9:de:7a:ce:ad:2f:5f:67:94:03:d8:5e:
db:16:dc:41:c2:11:da:db:7d:76:15:6d:a8:4a:21:45:b2:c2:
7d:74:a8:d6:08:b8:8f:13:a9:ae:d3:87:d6:33:d0:f6:81:e9:
04:bf:9c:d3:94:5e:f5:b5:59:25:f8:57:24:76:b0:f5:95:9c:
ee:73:78:00:92:48:e9:b8:ad:ce:88:d7:bd:c2:f4:ac:03:d7:
a0:86:26:cb:ab:1c:99:e4:51:11:28:37:3e:13:fe:30:f9:96:
17:4d:ce:bb:32:15:78:73:ab:fc:84:68:5b:71:55:67:27:45:
37:92:b9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org