Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/yan0MmVfXWRIWdHKAB3V7dsjqbw.roa
File: yan0MmVfXWRIWdHKAB3V7dsjqbw.roa (raw, json)
Hash identifier: 052idQBbjbGVnA6o/HyLu8BaSl/xkmWfP5AhkmyK3uE=
Subject key identifier: C9:A9:F4:32:65:5F:5D:64:48:59:D1:CA:00:1D:D5:ED:DB:23:A9:BC
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 01887A4B8E70FE216E3B64E607424AB4C63A
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/yan0MmVfXWRIWdHKAB3V7dsjqbw.roa
Signing time: Fri 02 Jun 2023 04:09:11 +0000
ROA not before: Fri 02 Jun 2023 04:09:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 176.105.228.0/24 maxlen: 24
45.150.55.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Jun 2023 06:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:7a:4b:8e:70:fe:21:6e:3b:64:e6:07:42:4a:b4:c6:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jun 2 04:09:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c9a9f432655f5d644859d1ca001dd5eddb23a9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:42:c4:52:99:62:4c:51:8e:ef:3d:7c:26:dd:
2d:2b:17:65:9f:1c:16:09:83:c8:06:08:c6:46:5b:
a2:79:9f:02:8f:e8:0b:44:bf:6c:9c:21:8d:81:f6:
01:e2:7e:9e:e5:b6:9a:d6:c0:8a:f1:6a:92:0d:dc:
30:4f:4f:90:b4:f6:c3:6d:6c:bf:49:e2:2a:7c:28:
8f:b4:f9:a0:6c:b5:0e:23:60:0a:d2:a0:d4:eb:03:
05:30:3c:8b:41:11:67:5e:94:5b:55:bf:0d:c6:1d:
3b:bc:93:65:36:4e:86:95:c0:64:89:6d:6e:f5:13:
47:35:86:f5:07:e9:9e:ca:36:a8:5f:71:30:e6:e3:
8c:25:06:cb:b2:17:83:28:14:44:01:6f:8a:22:19:
a2:ac:c2:ba:6a:2e:dd:5c:f1:18:1f:cb:2d:40:ad:
b6:e0:5f:24:ad:54:62:61:92:74:3a:39:43:15:d3:
dd:ef:27:4f:6c:dc:49:68:cb:56:ab:7c:be:b2:53:
cd:88:ec:99:e4:45:91:00:ec:ef:5e:a4:b3:de:c6:
75:8e:e4:28:8f:f8:b7:6c:f6:cb:fa:2a:f3:45:b6:
85:9c:bc:89:e1:ab:62:c7:10:1e:b1:1b:17:f4:3f:
53:ad:74:d5:7c:79:b9:f8:7f:2e:53:0c:61:92:81:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A9:F4:32:65:5F:5D:64:48:59:D1:CA:00:1D:D5:ED:DB:23:A9:BC
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/yan0MmVfXWRIWdHKAB3V7dsjqbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.55.0/24
176.105.228.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:bd:e2:41:1c:bb:af:51:83:c3:a0:ca:b2:1a:4c:43:f4:bd:
c7:55:57:55:58:c2:c5:98:d2:1d:fd:8e:b6:16:6a:46:18:59:
1f:52:e0:21:50:6a:bc:2f:40:c9:a2:da:a0:41:41:9c:df:fb:
f4:1a:b0:b7:34:52:98:92:dc:f7:7a:0c:78:7a:66:d7:b5:1a:
b7:28:08:0c:01:31:f3:09:cd:dd:88:dd:fb:97:a1:ed:44:e4:
14:5f:7c:81:a6:da:34:6b:e9:08:92:ac:da:cf:95:69:43:a9:
0d:1b:ea:bc:b7:43:b2:bc:ce:36:13:5d:8c:d7:11:23:b5:b1:
44:c0:f2:17:fd:bf:d1:f2:23:a2:dc:67:2a:16:f0:0e:c6:df:
9f:f4:13:47:35:2f:7d:43:dc:d4:cd:d6:2f:02:fa:43:bf:53:
d3:13:d7:02:01:3c:59:52:66:48:31:6e:a9:c0:84:a3:37:87:
09:86:87:94:cd:14:0c:71:06:fa:3f:43:4c:4f:d3:7e:16:d4:
7a:8c:a6:99:b4:a7:72:b3:cd:01:84:97:b9:b8:e3:87:8e:14:
16:7f:81:32:be:9b:03:ee:b1:07:3d:a7:7f:e2:41:aa:13:5b:
f1:8b:9d:78:9d:ea:23:b0:e1:5e:b5:d2:ff:90:2e:46:33:63:
94:58:18:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:01 2024 by rpki-client on console-fra.rpki-client.org