Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/9Rxdhdx_KFDkWgp5ASah1-Ns-iM.roa
File: 9Rxdhdx_KFDkWgp5ASah1-Ns-iM.roa (raw, json)
Hash identifier: N7GcBLjBffKAgDqabDDWvr2ioTYaQPJD6v83CKEAnZ8=
Subject key identifier: F5:1C:5D:85:DC:7F:28:50:E4:5A:0A:79:01:26:A1:D7:E3:6C:FA:23
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01904A0A68F3E29964C05D50E57E90786D86
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/9Rxdhdx_KFDkWgp5ASah1-Ns-iM.roa
Signing time: Mon 24 Jun 2024 11:38:34 +0000
ROA not before: Mon 24 Jun 2024 11:38:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152700
IP address blocks: 45.149.6.0/24 maxlen: 24
45.149.7.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 26 Jul 2024 12:28:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4a:0a:68:f3:e2:99:64:c0:5d:50:e5:7e:90:78:6d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jun 24 11:38:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f51c5d85dc7f2850e45a0a790126a1d7e36cfa23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:1e:9d:58:da:63:9a:64:53:92:e3:8d:b4:d8:
3b:06:10:80:1d:c3:f5:ce:0d:d6:db:1e:8d:a5:0f:
37:b5:3e:58:94:4d:0d:02:0e:52:dd:75:20:cf:cd:
57:5f:0a:9b:34:6d:dd:95:54:90:09:23:47:d5:08:
d9:58:32:8a:c5:df:d1:ce:30:7b:1f:cd:b3:be:e6:
33:16:38:4c:3a:e7:91:15:2b:88:53:b8:34:d2:e6:
2b:80:c2:fb:47:4f:2f:79:f3:34:58:cc:2d:98:12:
4a:9a:8f:46:f6:d9:e1:56:f5:8a:59:7e:2d:d9:ec:
57:be:a4:b6:ca:77:1e:84:6b:de:19:70:9d:9c:e9:
73:a0:9a:85:fd:ea:87:17:80:68:93:3e:54:38:3a:
16:7c:3f:df:d4:fd:91:42:dd:8b:c1:32:c0:f3:c0:
ee:7e:2a:9c:45:82:71:89:de:84:bf:d2:38:80:17:
4f:01:29:72:52:76:22:45:68:d4:f6:78:aa:49:b0:
31:e0:b5:e8:a0:58:4d:b4:a9:27:3c:fd:37:01:00:
2b:39:ec:7b:b0:09:4b:8d:4f:44:34:e7:83:45:6e:
49:c9:5e:f1:52:51:5c:54:a1:74:c1:e6:2c:8f:41:
ca:31:69:07:e0:66:a7:ad:03:98:2a:26:7b:0e:d3:
1d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1C:5D:85:DC:7F:28:50:E4:5A:0A:79:01:26:A1:D7:E3:6C:FA:23
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/9Rxdhdx_KFDkWgp5ASah1-Ns-iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.6.0/23
Signature Algorithm: sha256WithRSAEncryption
07:bf:02:15:44:92:4c:16:4e:fb:ae:26:05:ae:fb:a3:7b:17:
58:16:d5:16:18:58:c6:54:d1:f2:2c:b9:6e:a1:bf:05:cd:f6:
b3:15:d2:e2:cd:5f:ea:f4:d1:e4:93:59:ba:58:b0:51:08:f6:
3e:c8:6e:38:3d:eb:10:5f:9d:99:66:02:de:ef:ae:dd:ca:2c:
60:d6:c1:a5:71:af:6b:c5:02:c4:49:aa:90:5b:4c:36:42:a5:
44:3f:45:d0:e9:28:06:d4:28:96:ab:c6:04:79:14:13:96:8d:
b0:fe:c1:39:22:9f:8e:da:17:7b:3b:5a:a4:27:98:c9:70:da:
c1:1c:2b:76:56:06:72:93:a2:bb:bb:b0:70:1b:2b:c3:9e:ec:
d4:a9:76:3f:a7:95:ff:96:4c:3c:ca:51:5e:bc:fa:dd:a2:58:
37:f5:15:2a:1e:98:4f:08:78:c2:e2:12:9f:7d:f7:64:76:df:
76:3b:eb:18:4a:4f:ce:99:28:99:b8:17:23:4c:d7:0d:85:c6:
5a:73:7d:32:36:64:8f:77:e8:42:fb:6d:48:96:93:76:dc:39:
1d:69:e8:c1:51:a4:e8:b4:ff:83:f3:66:00:d9:3d:b1:04:e9:
b0:d7:30:ca:11:5c:4a:f2:ae:e3:1c:35:2d:d4:13:8a:5b:3c:
87:09:7b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 26 14:10:38 2024 by rpki-client on console-fra.rpki-client.org