Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/9RO-JsnKBxw4QvhVU7cQ6qEYNuw.roa
File: 9RO-JsnKBxw4QvhVU7cQ6qEYNuw.roa (raw, json)
Hash identifier: ob+RjOwyWWJYiPxyhujGHYRU1ZWo8h/XibI82XIuNjQ=
Subject key identifier: F5:13:BE:26:C9:CA:07:1C:38:42:F8:55:53:B7:10:EA:A1:18:36:EC
Certificate issuer: /CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Certificate serial: 018E720E044C3F3A0366E1529147EA5776F0
Authority key identifier: 64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/9RO-JsnKBxw4QvhVU7cQ6qEYNuw.roa
Signing time: Sun 24 Mar 2024 20:01:45 +0000
ROA not before: Sun 24 Mar 2024 20:01:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 45.147.156.0/24 maxlen: 24
45.147.158.0/24 maxlen: 24
91.190.185.0/24 maxlen: 24
92.61.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 May 2024 10:43:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:72:0e:04:4c:3f:3a:03:66:e1:52:91:47:ea:57:76:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=641975583b250362c8150f63adb30a0f6a0c6fc3
Validity
Not Before: Mar 24 20:01:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f513be26c9ca071c3842f85553b710eaa11836ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:67:e0:f0:91:87:20:9e:91:f9:3d:f7:c9:5a:
b9:9a:18:0d:91:73:91:f5:6c:78:a5:d3:e8:e8:e5:
98:cb:9a:72:b0:92:36:7f:aa:dc:da:6e:d3:26:e3:
fd:da:74:bf:27:3f:70:80:68:7d:2a:74:c7:84:dc:
dc:c6:41:bf:86:13:89:2a:95:84:4c:4d:17:52:6e:
fc:d2:44:3a:e0:56:29:be:e8:e8:b8:b6:82:50:8f:
7f:e1:32:99:21:6a:36:c3:5e:72:7e:18:ef:f6:2b:
5b:b2:dd:81:73:6e:57:7c:8b:cf:09:4a:2b:f4:74:
f3:60:12:96:82:21:49:a6:da:2b:ee:fb:d4:39:95:
4b:0e:0e:d8:3e:d3:d2:a6:5b:78:52:e2:4c:81:1e:
23:99:5a:7c:ea:05:a4:f1:e2:e3:14:f6:72:14:21:
2c:45:74:24:29:41:a2:3f:90:d1:8b:66:e1:65:cf:
e9:9e:e0:54:77:64:22:03:a0:74:fb:95:4e:c1:db:
8a:3d:31:25:ca:fc:22:97:21:89:e2:83:88:64:02:
9e:59:6e:ab:9d:f2:54:72:27:69:b7:48:50:11:7f:
af:98:12:2e:4e:23:2e:a8:59:ab:f5:dd:8b:6a:09:
d2:cd:53:91:80:ea:c3:d5:32:90:3e:bc:60:52:aa:
eb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:13:BE:26:C9:CA:07:1C:38:42:F8:55:53:B7:10:EA:A1:18:36:EC
X509v3 Authority Key Identifier:
keyid:64:19:75:58:3B:25:03:62:C8:15:0F:63:AD:B3:0A:0F:6A:0C:6F:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/9RO-JsnKBxw4QvhVU7cQ6qEYNuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/98a5ed-905e-4bfa-9154-f1c33aa2fd50/1/ZBl1WDslA2LIFQ9jrbMKD2oMb8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.156.0/24
45.147.158.0/24
91.190.185.0/24
92.61.102.0/24
Signature Algorithm: sha256WithRSAEncryption
13:e9:8d:0b:a2:bd:de:7c:5e:ae:6c:a8:e0:61:04:fa:97:c3:
af:c8:5f:6f:13:85:88:a5:59:d0:e9:5e:dc:c6:57:14:59:0c:
59:ec:d2:47:6c:10:6d:f1:91:d3:a2:23:82:f7:b3:ee:b4:2c:
57:62:0b:a9:a4:f6:e3:0f:c4:11:58:3b:65:66:bf:ca:1d:e4:
35:18:0c:14:10:91:59:c7:0b:2c:da:00:d8:5d:05:46:a4:f1:
28:4f:3d:ae:bd:ef:c6:92:ff:36:93:c3:71:ab:19:d0:ec:2b:
6f:d8:4f:5b:85:1c:57:a3:07:f0:ff:54:8e:d5:38:eb:27:d1:
f4:52:64:e9:ad:1a:7d:ae:14:f7:49:5a:c6:80:34:db:9c:f8:
b1:7b:e3:da:0b:a8:5d:c1:d9:c6:20:c9:de:73:2d:38:19:0a:
bc:0b:ab:36:80:b2:ef:1e:2a:d1:6d:70:6a:c9:ca:72:02:12:
58:30:67:5b:d4:09:6b:2f:2b:56:04:fc:2c:6d:71:b2:21:75:
a1:00:9c:d4:7a:ef:20:d9:6b:e9:c9:c3:4b:20:02:bd:de:ba:
27:0f:ee:fa:eb:a0:a4:a5:f3:d7:85:3b:a6:77:8d:03:01:81:
7e:92:23:b0:1f:ef:db:35:06:66:92:d2:6b:3b:76:d3:f8:0b:
c9:3c:77:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 11 11:26:36 2024 by rpki-client on console-fra.rpki-client.org