Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9O_6YTxU2NsENsvGHGXI6JyP-8E.roa
File: 9O_6YTxU2NsENsvGHGXI6JyP-8E.roa (raw, json)
Hash identifier: kw1K5lTbxKidyswOYSsKaoNELoZYxkOKW+9lmQX6KaI=
Subject key identifier: F4:EF:FA:61:3C:54:D8:DB:04:36:CB:C6:1C:65:C8:E8:9C:8F:FB:C1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8026EA2C5169C8AE6C9F00BAE03B273
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9O_6YTxU2NsENsvGHGXI6JyP-8E.roa
Signing time: Tue 02 Jan 2024 02:30:51 +0000
ROA not before: Tue 02 Jan 2024 02:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 45.131.134.0/24 maxlen: 24
185.225.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 12:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:6e:a2:c5:16:9c:8a:e6:c9:f0:0b:ae:03:b2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4effa613c54d8db0436cbc61c65c8e89c8ffbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2e:9e:ce:23:e1:e5:1e:af:69:69:72:e5:7d:
29:de:17:f7:44:17:33:78:df:dd:7b:49:f7:69:2c:
6e:8c:01:ba:0e:4d:d4:85:00:79:e8:98:7e:20:b1:
4c:40:75:c7:db:71:7a:d8:94:0f:0d:69:16:db:68:
93:3f:aa:38:96:08:b8:11:42:31:6e:30:cb:a2:42:
2c:82:a0:20:db:86:5c:b4:cf:86:13:a1:c7:1b:57:
9b:75:a8:02:30:9d:e1:45:b1:19:05:5c:de:a1:5e:
2c:54:c8:79:05:55:12:f9:ca:c2:96:30:88:b2:ce:
f2:f8:66:f9:c0:33:ad:40:e4:da:a9:e2:85:96:6e:
42:94:b1:04:82:18:95:70:ab:82:d6:7b:b2:f6:81:
de:0c:18:61:64:97:74:6f:3d:a3:a7:33:4f:a0:5b:
3f:1a:f1:70:46:88:6f:f7:34:8b:d7:26:5e:bb:c1:
fa:93:0e:62:a1:46:71:4a:0a:cd:31:9b:97:29:6f:
9a:c5:4e:e3:f5:a0:e4:9c:5d:aa:f2:ae:6d:f1:8f:
8e:d5:ea:c0:0a:82:ad:02:6f:5c:49:7f:2b:cc:17:
07:eb:ec:7a:cd:52:bc:d8:81:76:87:ca:2f:02:24:
08:11:c8:fb:81:c7:1b:e4:a8:08:65:61:55:e8:aa:
1e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EF:FA:61:3C:54:D8:DB:04:36:CB:C6:1C:65:C8:E8:9C:8F:FB:C1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/9O_6YTxU2NsENsvGHGXI6JyP-8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.134.0/24
185.225.1.0/24
Signature Algorithm: sha256WithRSAEncryption
72:f1:10:d2:1b:bf:81:09:a3:fb:86:32:3e:39:17:31:da:10:
df:ad:ad:20:ab:ae:7a:0d:89:86:e9:f6:f1:c9:d9:9f:d2:98:
16:b6:0f:16:ae:5f:e8:a6:70:60:77:bc:af:26:15:28:99:cd:
53:f2:01:09:b1:b7:2e:07:78:45:c3:be:50:ab:68:0e:96:bd:
e0:d6:d7:e0:3b:a9:08:8e:bd:24:9d:db:6c:95:5d:3c:5c:04:
f1:91:e2:39:b7:38:99:05:d5:17:50:b7:dd:8a:41:7f:17:19:
04:57:62:5c:ae:0f:e6:e6:40:b8:47:91:e8:21:6c:cb:dc:e1:
58:2b:ed:99:28:14:51:4f:56:6d:5e:09:53:40:ea:1a:78:7c:
31:f1:19:f4:6e:a9:e9:93:f8:cc:01:90:93:b1:28:c2:33:39:
35:98:11:6f:a5:b8:f4:85:c7:e9:8a:f1:5d:42:f9:43:af:3d:
36:78:9e:d1:ea:cd:56:14:02:c8:19:28:39:7c:e2:75:65:52:
ff:f8:6f:b6:a6:24:84:b2:e8:2d:29:32:af:cf:0b:ea:05:d9:
bb:75:a4:92:e4:a6:0f:92:af:c8:13:38:59:78:97:92:0b:b9:
75:4e:a5:97:b6:2b:36:97:21:a0:ab:ba:63:b3:de:c4:0f:2f:
3e:b6:98:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:20 2024 by rpki-client on console-ams.rpki-client.org