Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/y5_TqQYIx3qLAuz-A2gcs2Tt7GY.roa
File: y5_TqQYIx3qLAuz-A2gcs2Tt7GY.roa (raw, json)
Hash identifier: tCzL5BpaaiizeXNEZVNlzTpiWk/9NitHHrNSTfyWCG4=
Subject key identifier: CB:9F:D3:A9:06:08:C7:7A:8B:02:EC:FE:03:68:1C:B3:64:ED:EC:66
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0188202B5041E9F27DE3A28B58225C85D651
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/y5_TqQYIx3qLAuz-A2gcs2Tt7GY.roa
Signing time: Mon 15 May 2023 16:08:09 +0000
ROA not before: Mon 15 May 2023 16:08:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.150.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 May 2023 02:49:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:2b:50:41:e9:f2:7d:e3:a2:8b:58:22:5c:85:d6:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: May 15 16:08:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb9fd3a90608c77a8b02ecfe03681cb364edec66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:89:ae:58:cc:51:0a:6d:2b:f1:e4:9b:66:ea:
c4:07:74:0f:4e:94:77:a6:39:0a:2b:d4:7b:f2:af:
b8:04:4d:7c:bf:be:26:9d:bb:24:cf:4a:e0:d4:63:
8e:80:ed:76:d8:6d:f3:2f:20:05:7d:a4:a1:2a:dd:
56:f1:3e:bb:c9:90:8f:e8:f8:d3:c4:40:55:87:86:
b5:13:8f:08:82:a3:70:46:81:ba:e9:1e:f0:f9:be:
1f:6e:4a:11:1c:6e:c1:1d:65:26:e7:e4:c7:91:21:
97:18:b3:c5:e3:ee:7c:c8:5c:22:9d:7d:2e:ee:40:
b4:ab:46:3d:6b:55:b3:72:bd:dd:e7:9d:f0:77:f9:
c8:b2:01:5b:1d:87:8c:2c:68:27:de:fe:a9:ae:ee:
d8:27:cb:ea:56:3d:39:71:43:23:3c:8b:8b:1f:b6:
c2:f4:4c:9b:8b:7c:0e:65:8c:c8:60:65:bf:53:c4:
7b:0c:ae:e5:32:d4:a3:09:d9:50:a3:93:a6:eb:5c:
48:33:cc:86:e0:8e:b3:81:2d:26:47:13:40:9f:88:
46:3f:6b:b0:bb:a3:ec:6a:7f:25:74:02:88:98:60:
6e:78:71:2f:21:e5:4b:e5:6e:8f:c6:f4:a8:be:00:
52:b5:0f:05:3b:3c:f4:ac:ec:db:8c:56:3a:27:ef:
e6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9F:D3:A9:06:08:C7:7A:8B:02:EC:FE:03:68:1C:B3:64:ED:EC:66
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/y5_TqQYIx3qLAuz-A2gcs2Tt7GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:95:b4:ef:6f:a2:6a:ea:0a:69:30:29:b2:28:c2:56:df:86:
8e:65:39:df:ed:df:cc:2b:8d:3f:64:d0:4a:92:75:5f:25:5a:
d0:34:77:e9:01:e1:7a:3f:61:d4:b9:6e:07:3f:77:57:2a:13:
a8:8d:ba:e0:2b:a5:6e:63:14:c4:ff:bd:b5:72:b0:ba:f0:7f:
b8:f8:64:ae:11:b1:7b:24:0c:b1:e5:f5:2b:d9:03:00:ed:f7:
02:28:48:39:ad:c0:d9:ce:27:1b:77:0b:39:76:47:5f:5c:e0:
d9:ef:ad:81:87:cb:5a:62:bc:c0:37:e3:16:e6:68:bc:30:39:
6c:5b:9f:77:1a:34:52:4c:8d:d5:f4:25:b6:d8:1b:f2:f6:f4:
c9:ec:90:c5:fd:66:4c:42:9c:22:3b:6a:f4:8e:a9:e3:c3:26:
14:95:d0:d3:4b:21:83:f5:dc:e2:a6:14:86:26:6a:eb:7c:aa:
78:67:a1:02:aa:1c:2f:c5:83:3b:ab:80:74:9b:0f:22:9d:7d:
79:2d:89:45:60:92:ef:ca:35:ee:66:bf:c0:42:cb:98:30:22:
9f:31:bf:40:53:c5:da:10:b6:0a:ac:d8:f2:71:bf:90:4a:57:
9d:a6:92:f9:23:b8:e5:42:cf:6c:56:3a:2b:32:bc:e6:13:82:
f9:2c:17:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org