Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/nOsIVVtjz-NJpO4L0glYBuLO4t8.roa
File: nOsIVVtjz-NJpO4L0glYBuLO4t8.roa (raw, json)
Hash identifier: p9S44kQPnW8M3dQjzerxSWybzMVfEPgiO9U0lHbyKDY=
Subject key identifier: 9C:EB:08:55:5B:63:CF:E3:49:A4:EE:0B:D2:09:58:06:E2:CE:E2:DF
Certificate issuer: /CN=df0f32e5f098b86a8794825c81122da953466284
Certificate serial: 018BD898E8A6CF6530958D4C62CEA621B2ED
Authority key identifier: DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/nOsIVVtjz-NJpO4L0glYBuLO4t8.roa
Signing time: Thu 16 Nov 2023 14:46:21 +0000
ROA not before: Thu 16 Nov 2023 14:46:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201902
IP address blocks: 45.141.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d8:98:e8:a6:cf:65:30:95:8d:4c:62:ce:a6:21:b2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df0f32e5f098b86a8794825c81122da953466284
Validity
Not Before: Nov 16 14:46:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ceb08555b63cfe349a4ee0bd2095806e2cee2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:58:12:f9:8c:32:a9:6c:d2:10:91:30:59:97:
87:73:0f:00:d1:61:77:99:51:96:dc:5b:c9:98:87:
b7:6e:06:84:8d:8e:32:a6:0e:1f:33:04:7f:ac:ef:
8c:28:24:d1:94:8a:15:13:69:ee:f7:9d:f1:cf:76:
7d:c8:8c:4a:be:fd:9d:a5:2b:fa:d5:94:dc:5f:89:
67:6f:db:6b:69:94:87:12:d2:f7:0b:2d:af:64:f8:
06:cb:6e:55:e9:5a:bd:a8:3d:24:a2:76:43:44:e6:
49:02:4d:9f:d8:9e:75:bf:e0:c2:13:c7:f4:3e:f2:
a0:61:61:6e:39:e6:33:d4:2d:d1:4c:b1:66:80:b5:
35:ba:56:7f:81:fc:d7:17:5a:6c:e7:85:5b:4a:b1:
d9:f7:8c:71:cf:75:07:c9:e5:0b:66:dd:57:8f:0e:
b2:81:43:1d:1d:5d:06:c8:2f:b2:35:17:93:28:e4:
93:f0:04:27:29:66:6a:84:24:66:96:69:a6:f2:09:
af:7e:b9:64:99:f7:8a:98:e2:3a:b2:5f:65:13:85:
44:b0:18:3d:c5:5d:fc:56:9d:46:8d:61:47:5c:d9:
08:8d:a9:d8:75:af:c5:f9:71:af:6f:6d:66:3a:3a:
c2:b0:c5:0a:3b:a9:88:c3:71:70:86:ac:71:95:99:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EB:08:55:5B:63:CF:E3:49:A4:EE:0B:D2:09:58:06:E2:CE:E2:DF
X509v3 Authority Key Identifier:
keyid:DF:0F:32:E5:F0:98:B8:6A:87:94:82:5C:81:12:2D:A9:53:46:62:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3w8y5fCYuGqHlIJcgRItqVNGYoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/nOsIVVtjz-NJpO4L0glYBuLO4t8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e1607-8ef0-4ed5-a68b-8b12b1f1b5ae/1/3w8y5fCYuGqHlIJcgRItqVNGYoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.164.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:32:2e:9c:0f:32:5b:2c:46:14:1c:a6:4a:97:97:66:05:e4:
6b:3d:33:68:4f:99:2d:34:da:e9:4f:f3:28:81:2e:a5:0d:f1:
ce:4c:0c:b1:bf:15:64:7c:5d:8b:c4:20:1b:e1:40:a3:c9:77:
98:52:08:33:09:e4:69:d4:e1:ae:6e:d9:3c:57:40:6a:90:07:
44:ce:7f:71:bb:9d:fa:30:48:00:bd:28:f6:30:dc:fa:c6:eb:
b9:0a:a8:e2:9c:de:64:7a:d2:ef:45:70:8e:10:df:fe:fe:35:
90:10:13:5f:47:39:2e:f5:e7:3a:63:32:95:a4:1d:75:bb:68:
d4:f8:d2:14:7c:ad:b4:24:77:bb:e7:50:0e:96:f8:95:26:7d:
08:b0:6f:5e:e0:87:72:ec:96:44:ca:ab:0a:07:8c:e2:97:45:
bd:fc:56:16:df:5e:87:bb:45:95:ec:e1:b1:72:2a:70:19:f9:
d3:bf:e9:f2:82:1e:80:f5:68:b0:b2:8b:dd:11:d7:44:2e:b0:
12:87:af:15:7a:71:dc:81:c8:2f:b5:1d:bf:42:8c:b3:a2:ef:
bf:5c:14:1b:86:8c:63:32:30:5d:be:53:9d:68:5c:e6:8b:be:
c8:cf:bd:8f:9b:b8:41:73:15:4f:e7:99:0b:15:1e:56:fc:fe:
f0:d0:78:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:34 2024 by rpki-client on console-fra.rpki-client.org