Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nzuyJwhRM7mXZmtSxH6w7ese9bo.roa
File: nzuyJwhRM7mXZmtSxH6w7ese9bo.roa (raw, json)
Hash identifier: o4oJ5rt7B68uqjFYJYsEQiaNKJijj6YIKRGHujFK/BY=
Subject key identifier: 9F:3B:B2:27:08:51:33:B9:97:66:6B:52:C4:7E:B0:ED:EB:1E:F5:BA
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018B58B8504404CB2CEE59FF129236D8DC73
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nzuyJwhRM7mXZmtSxH6w7ese9bo.roa
Signing time: Sun 22 Oct 2023 18:49:16 +0000
ROA not before: Sun 22 Oct 2023 18:49:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.8.191.0/24 maxlen: 24
45.8.187.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Oct 2023 07:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:58:b8:50:44:04:cb:2c:ee:59:ff:12:92:36:d8:dc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 22 18:49:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9f3bb227085133b997666b52c47eb0edeb1ef5ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d5:3a:02:1e:26:9b:06:cc:ed:03:99:51:72:
c2:c0:f5:9a:55:ea:19:08:6f:29:22:ee:ed:9f:cd:
20:a8:37:30:48:ff:74:ed:8d:67:18:7c:f9:e2:e7:
80:41:eb:50:87:c0:45:03:80:85:b7:6e:a2:08:18:
62:e7:b5:6b:19:dc:e4:82:56:f4:63:f4:6d:0d:93:
75:9c:39:5a:0c:58:4d:7c:97:04:79:59:4d:9a:ee:
6b:53:a6:38:96:2e:f2:a3:64:4c:19:6c:58:e7:d4:
8b:f8:f2:51:63:4d:25:b4:93:41:99:3a:14:7f:ec:
37:f2:fc:ef:66:f2:07:99:5f:6a:da:34:39:8d:40:
44:71:9e:ec:54:6c:0b:ea:d9:4e:b4:3d:3c:91:d2:
f9:87:a9:f0:ab:2c:02:f3:af:e8:fc:aa:4e:da:9e:
ab:49:b2:7c:8c:1e:56:d1:4f:a0:a3:45:13:31:d3:
fe:34:33:f1:5e:df:0e:dd:1d:7f:49:6a:04:5f:c1:
1e:42:88:33:11:46:af:f4:78:f1:0d:0a:ef:45:4a:
8f:71:11:67:46:a8:47:7d:18:5c:23:b2:62:54:1f:
7f:4a:05:5e:da:18:8e:62:a3:ec:2c:df:0b:3a:84:
45:db:c0:eb:09:e2:20:68:3c:59:0e:79:90:ac:3a:
f7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3B:B2:27:08:51:33:B9:97:66:6B:52:C4:7E:B0:ED:EB:1E:F5:BA
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/nzuyJwhRM7mXZmtSxH6w7ese9bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.187.0/24
45.8.191.0/24
Signature Algorithm: sha256WithRSAEncryption
28:d7:70:69:b9:11:11:76:42:75:c6:0e:6c:8d:36:f9:20:79:
01:2a:31:3f:1b:c1:e5:01:a8:5b:3f:78:7a:24:87:43:d2:e8:
57:04:98:bf:57:5d:e2:28:d4:13:3f:b1:d6:73:d6:d4:b7:1f:
9f:9a:93:41:70:fc:9b:4a:99:36:22:17:04:70:2a:e4:ce:15:
fe:77:63:59:c3:e2:74:72:91:b3:3c:64:9f:4d:6c:61:03:62:
58:72:73:5d:11:8c:8b:20:3d:94:0b:bc:82:17:fd:ad:9d:67:
df:d4:1a:0b:77:f4:6f:cf:7b:4e:e7:2d:cc:f0:20:b9:8f:4e:
95:e8:2b:6e:aa:1f:7f:99:96:e3:ad:68:b4:6b:7f:08:0d:94:
af:63:2a:2b:b1:6f:e6:42:25:34:81:4e:a9:a9:5a:bb:7f:4d:
94:9a:48:7a:7c:da:d0:00:2c:6e:ce:38:27:53:88:38:d1:48:
f9:ee:94:3e:dd:34:43:4d:95:89:18:99:9d:46:94:a9:c7:13:
fc:3e:95:81:09:73:a1:c6:f0:36:8d:41:b2:1e:b3:f1:13:f4:
75:f5:ba:08:d7:d4:f8:f0:34:97:ef:15:6f:d4:8a:f4:7e:e9:
c6:90:a1:6a:12:11:e5:1e:f2:3e:d5:a6:43:59:0c:1b:83:6a:
6b:59:79:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:25 2024 by rpki-client on console-fra.rpki-client.org