Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/0MJ6FQ_okBpqWVQSdDTAkLjeyu8.roa
File: 0MJ6FQ_okBpqWVQSdDTAkLjeyu8.roa (raw, json)
Hash identifier: /VYwllkMsLv/ezGv9VoscRFjbH2AGSQyRo+KiYfbNYs=
Subject key identifier: D0:C2:7A:15:0F:E8:90:1A:6A:59:54:12:74:34:C0:90:B8:DE:CA:EF
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 018F0C5BB8D95DD75CED0D2D44FC47768FB7
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/0MJ6FQ_okBpqWVQSdDTAkLjeyu8.roa
Signing time: Tue 23 Apr 2024 19:08:08 +0000
ROA not before: Tue 23 Apr 2024 19:08:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48780
IP address blocks: 45.142.46.0/24 maxlen: 24
45.142.47.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Apr 2024 08:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:0c:5b:b8:d9:5d:d7:5c:ed:0d:2d:44:fc:47:76:8f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Apr 23 19:08:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0c27a150fe8901a6a5954127434c090b8decaef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:3a:6d:c3:12:4d:98:8b:34:93:29:a8:b6:
4a:1e:6f:77:37:26:a0:6f:f9:35:03:b9:22:79:64:
d9:22:93:46:21:a9:7b:10:78:46:32:0f:9b:71:6a:
ed:71:04:a0:a0:dc:88:48:a6:13:cf:dc:d1:71:f0:
83:2c:5c:94:f1:82:d4:04:8b:fa:06:27:75:3d:77:
ee:a1:66:1a:12:b1:76:fd:0c:37:71:25:af:6e:a9:
8f:81:91:de:47:16:4d:fb:9a:a8:32:07:4f:30:d4:
87:39:27:70:ad:66:55:6c:40:63:12:32:f3:be:bb:
2b:4e:8f:63:4e:88:d2:a6:94:b4:39:9f:93:8b:05:
e3:c5:1d:37:aa:12:c3:ea:f3:f1:80:60:22:b8:6f:
ae:22:e0:af:51:5c:88:87:1a:0b:04:55:b6:da:3a:
bc:27:eb:e0:83:c1:34:aa:a3:2a:9d:16:50:b4:18:
1c:83:3e:8c:06:09:53:81:ad:3a:65:62:c8:ae:52:
cb:26:e1:f9:e1:99:98:2d:44:26:77:34:a0:04:87:
27:cd:9a:f6:ac:4d:62:0c:4f:be:40:d7:24:7d:33:
d9:60:40:f5:9d:21:a3:8a:89:79:50:ff:1f:3e:72:
05:7c:a7:b6:14:6a:5d:ce:86:1a:17:85:45:11:77:
49:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C2:7A:15:0F:E8:90:1A:6A:59:54:12:74:34:C0:90:B8:DE:CA:EF
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/0MJ6FQ_okBpqWVQSdDTAkLjeyu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.46.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:d5:c9:d8:c5:98:42:22:70:cb:86:f4:83:de:9a:bb:e3:80:
d8:5d:be:f3:de:56:f3:68:8e:05:23:cd:da:34:fc:c0:37:c4:
4e:c0:98:c4:d3:83:38:f1:70:6a:d4:48:62:a3:64:1c:59:94:
79:f7:b1:06:d1:dd:68:a0:ab:fd:08:27:86:8e:2e:f5:54:a2:
2a:d3:58:02:c9:1d:72:f4:af:6f:5e:02:e1:af:7c:b3:2f:d5:
b3:a0:1c:4d:c2:31:b3:ab:19:40:69:39:d1:9a:c0:f5:46:82:
b4:fc:a8:94:fc:d5:c5:f1:f0:3d:d3:85:8d:27:4f:45:b2:45:
52:8f:9a:3e:38:93:37:5a:42:08:5f:35:f2:bd:7e:50:d3:f9:
42:81:0c:6a:71:3d:ae:f8:11:7c:31:8f:b0:5d:b5:8e:52:39:
74:60:3c:e0:3b:27:2a:cf:d5:c1:f2:65:ed:2d:0f:f1:28:2c:
80:26:22:08:8b:68:be:b0:ba:0f:d7:73:3a:cf:ca:bf:db:6a:
ca:cf:dc:c9:11:c4:36:7a:88:4d:c8:42:c8:c1:b3:48:86:e9:
03:ed:7a:8f:ea:44:61:ff:e0:d9:aa:19:c9:dc:87:60:8c:33:
54:93:ec:09:d2:9a:0f:4d:3e:23:58:26:68:af:4a:f9:62:82:
d6:3a:a2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:50 2025 by rpki-client