Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/mb3yAdZXRNuPcwWE0JGzje23E9s.roa
File: mb3yAdZXRNuPcwWE0JGzje23E9s.roa (raw, json)
Hash identifier: PUnxZJam6q3Zt1ekYHUV11sDC2+00y0ihRdticfu9pY=
Subject key identifier: 99:BD:F2:01:D6:57:44:DB:8F:73:05:84:D0:91:B3:8D:ED:B7:13:DB
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 018CC6B78A1AA250BFD194A813AA625ADC24
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/mb3yAdZXRNuPcwWE0JGzje23E9s.roa
Signing time: Mon 01 Jan 2024 20:29:26 +0000
ROA not before: Mon 01 Jan 2024 20:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.95.226.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 00:04:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:8a:1a:a2:50:bf:d1:94:a8:13:aa:62:5a:dc:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 20:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99bdf201d65744db8f730584d091b38dedb713db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:ff:3a:33:f3:19:52:a7:33:9b:a6:e0:aa:
cc:f8:f4:a5:f9:2a:ef:99:20:3b:96:a7:dc:6d:01:
b6:7e:55:9b:4e:15:6f:24:bd:6d:d1:8f:95:c7:a3:
74:18:b3:fa:a4:54:51:7a:e6:d8:02:8c:19:86:5c:
1b:6f:62:70:25:b0:ca:c0:4b:24:ea:60:01:6b:80:
ce:80:45:6a:3e:b9:5c:00:b9:dd:72:c4:84:b5:7e:
f4:69:79:c3:d6:5e:b6:3f:2b:1d:52:27:f5:f6:b4:
37:c3:5f:66:42:31:d8:89:7c:1c:46:7e:48:68:8b:
4d:8c:d0:b9:59:09:9d:a6:e4:f6:ca:76:58:7a:a6:
0e:4f:15:f0:38:0d:04:c4:3e:92:35:b6:bf:0f:0e:
9d:31:ed:2c:9e:59:20:dd:a0:5f:1c:4e:a7:e1:b5:
1f:ce:f5:ae:36:21:4a:82:21:e1:83:76:c0:71:b8:
eb:8a:ef:07:54:87:d7:9a:7b:7e:3b:99:1e:90:49:
0c:39:86:bc:26:15:67:58:35:07:fb:8e:16:51:d3:
27:20:cc:b0:42:09:b4:9e:5c:4e:14:a3:6a:05:51:
6b:72:95:ce:59:24:2b:f6:4f:77:c4:71:35:50:d6:
ed:06:6b:a2:d3:2a:5e:d4:f8:d1:f3:34:21:ee:d5:
0b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:BD:F2:01:D6:57:44:DB:8F:73:05:84:D0:91:B3:8D:ED:B7:13:DB
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/mb3yAdZXRNuPcwWE0JGzje23E9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.226.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b9:25:0e:17:c7:c1:56:fc:ac:60:51:00:11:25:2b:02:ba:
88:77:ea:d6:7c:4a:41:5e:b3:3c:09:aa:7d:a7:54:71:4e:c4:
d5:74:29:8c:7f:1b:4f:6a:c3:be:9c:c4:b9:f2:88:11:89:a2:
d7:d8:a0:d2:28:21:ac:eb:a1:ed:13:42:58:d1:1d:e4:e1:da:
4a:9f:bf:b1:d9:a9:c3:bd:fd:bb:9b:bf:5d:5b:ad:8b:fb:c0:
da:08:a4:d3:cc:1b:1a:01:56:dc:62:d1:77:6f:cd:82:a7:39:
9d:d0:34:15:63:01:6d:52:c2:4f:e6:b0:34:d7:20:47:f0:8e:
ff:b1:ca:06:ba:b3:f1:cb:1e:56:e5:de:23:e7:5e:24:90:71:
30:f8:57:23:ba:60:f3:f6:99:cf:47:2f:b5:0e:14:ca:5f:05:
16:57:76:da:05:88:06:a1:f3:e0:aa:14:6e:fb:42:da:9d:51:
c9:2a:4f:a5:30:c1:fe:f4:3d:68:d0:0c:c3:6c:cf:3b:25:8a:
31:4c:f6:a5:65:07:90:d4:40:dd:dc:3b:8b:63:e0:99:7b:8d:
0c:30:a3:05:b6:4b:26:47:6e:05:69:c8:27:d3:9f:61:1f:25:
17:ff:e3:72:66:45:75:f9:24:6d:1f:ca:15:e6:a0:41:84:32:
75:e3:79:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:04 2024 by rpki-client on console-fra.rpki-client.org