Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/yCyKvSRQ0RRNPgdU2KJCXPemvlQ.roa
File: yCyKvSRQ0RRNPgdU2KJCXPemvlQ.roa (raw, json)
Hash identifier: c2I6x3HTSAYvSJdJpStiwSq/85U+4lr+4YrzPY9Uu8Q=
Subject key identifier: C8:2C:8A:BD:24:50:D1:14:4D:3E:07:54:D8:A2:42:5C:F7:A6:BE:54
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01874EEAA9F017786A81E2D0829A404BE1A0
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/yCyKvSRQ0RRNPgdU2KJCXPemvlQ.roa
Signing time: Wed 05 Apr 2023 00:56:54 +0000
ROA not before: Wed 05 Apr 2023 00:56:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 45.150.54.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 May 2023 05:11:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4e:ea:a9:f0:17:78:6a:81:e2:d0:82:9a:40:4b:e1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Apr 5 00:56:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c82c8abd2450d1144d3e0754d8a2425cf7a6be54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:80:f3:71:d9:98:82:72:e8:56:80:65:de:1e:
5d:dd:99:30:ce:78:27:44:68:dd:92:d7:30:a0:2d:
ae:f5:5c:c5:cf:f3:85:e7:c9:bf:d4:49:82:c9:97:
3b:32:94:e7:6a:26:42:32:15:3f:97:41:f7:69:94:
f6:38:a7:c0:ca:90:2f:1a:52:1a:fc:3a:fe:57:03:
9e:ff:38:75:c1:e0:35:ca:35:55:a4:4f:29:d5:db:
41:c4:fe:61:e8:c4:4a:58:e4:0a:07:bd:95:37:9f:
f6:d2:d5:ec:63:bf:b5:33:4e:c8:61:1f:b3:a2:31:
22:a2:69:89:1b:ff:17:95:b5:34:01:75:71:16:7a:
7a:84:81:e4:44:d1:01:31:aa:55:2c:a3:5c:d8:f4:
4e:2f:31:ae:d6:f1:49:f2:aa:e5:50:cd:ce:74:2d:
cb:a4:6e:b5:41:96:ea:ac:55:76:6c:81:1d:87:53:
f2:51:59:3d:97:0e:e1:20:d7:6b:63:68:04:14:22:
00:b3:88:9b:2b:bc:53:ef:8a:d9:e8:75:75:fc:e7:
80:53:48:0a:c0:db:4c:de:38:4f:e5:54:46:e5:97:
10:af:ef:61:48:81:c4:a8:d4:3d:6c:52:d1:7d:b3:
87:c5:58:ff:57:27:e6:14:6e:ff:1b:a2:0f:e1:a9:
c0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2C:8A:BD:24:50:D1:14:4D:3E:07:54:D8:A2:42:5C:F7:A6:BE:54
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/yCyKvSRQ0RRNPgdU2KJCXPemvlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.54.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:12:3e:36:0e:69:82:ad:53:27:6a:de:19:6f:a4:db:63:fe:
3b:a4:67:1b:f5:85:a1:5c:4f:d8:c2:ab:48:1a:38:61:75:1a:
d9:1c:60:55:76:89:0f:4d:6d:7b:76:7d:3a:67:fa:69:d2:42:
2a:72:40:39:46:16:41:f1:db:20:9e:c6:22:a4:d5:66:69:f6:
3d:10:f8:00:34:0a:8d:78:d8:c6:99:0d:3a:63:0c:1c:69:ca:
95:fa:d7:e3:22:d5:58:25:46:0e:05:2c:24:e6:8a:91:c4:fd:
bd:58:0c:d2:21:fe:ef:4e:b2:70:90:87:2e:07:1d:a3:74:51:
4e:06:23:db:ab:ad:67:03:4f:5f:7f:f4:e1:44:19:fb:2b:46:
cd:4c:a1:d1:78:13:03:eb:5f:4c:55:16:f5:7c:81:f3:fc:05:
a0:e9:13:3f:d3:c6:8a:3b:23:f8:26:ce:25:d5:b0:a1:ed:f3:
25:9d:32:fe:eb:e9:70:d5:b2:fb:50:4a:96:ba:76:db:45:9c:
ed:de:61:48:0c:8c:02:b4:69:e9:54:36:a7:ef:5f:a7:b7:65:
04:ad:74:42:57:3f:4b:90:cc:4f:1d:af:c9:8c:90:66:24:3b:
75:df:b2:63:e9:df:69:ea:d1:fb:bf:49:2d:8f:84:a0:6c:03:
ae:d2:06:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:49 2024 by rpki-client on console-ams.rpki-client.org