Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/RwMozY4E0vzshcxkRxEPVdKM8_I.roa
File: RwMozY4E0vzshcxkRxEPVdKM8_I.roa (raw, json)
Hash identifier: 9Gl+KUoJQm9w9WQ/eiJjr/rHo1yknzDsgDSD77A4qLk=
Subject key identifier: 47:03:28:CD:8E:04:D2:FC:EC:85:CC:64:47:11:0F:55:D2:8C:F3:F2
Certificate issuer: /CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Certificate serial: 0188DC9A5F9FD79BBF77D66D2D3FDD882D83
Authority key identifier: 06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/RwMozY4E0vzshcxkRxEPVdKM8_I.roa
Signing time: Wed 21 Jun 2023 06:18:04 +0000
ROA not before: Wed 21 Jun 2023 06:18:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.143.223.0/24 maxlen: 24
45.155.242.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 28 Jun 2023 14:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dc:9a:5f:9f:d7:9b:bf:77:d6:6d:2d:3f:dd:88:2d:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0671dcc7a9ac7351c71e0bc2278cf45fd020ae2e
Validity
Not Before: Jun 21 06:18:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=470328cd8e04d2fcec85cc6447110f55d28cf3f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:eb:5d:2d:b4:e9:df:31:bc:00:cb:c5:e9:02:
6e:78:d9:db:88:f3:9c:03:12:94:8c:97:38:26:e6:
6d:8e:11:73:30:61:89:db:4c:57:eb:cd:1d:ec:ea:
70:5e:35:98:45:4c:f0:f0:8b:67:26:26:0c:f2:e3:
a9:02:53:ab:e8:cb:73:9b:64:9f:cb:38:5b:f9:c9:
a7:c7:8c:0a:b7:02:19:68:23:ce:b5:e0:de:18:3b:
f3:e0:23:3c:82:b1:70:4d:87:65:01:96:31:09:f1:
31:9c:98:12:00:2a:0b:fb:59:be:c5:40:b5:9f:34:
4e:e2:99:0c:29:b4:aa:cb:82:c4:af:a3:9d:fb:31:
76:a3:ff:63:5b:ab:bb:0d:c9:36:c6:16:4c:17:a5:
75:68:30:ab:aa:ec:f0:aa:cb:c1:e7:51:ca:d4:54:
87:16:49:ab:d4:7c:19:a4:20:7b:e6:32:4e:4f:01:
ab:a2:e8:82:69:fc:23:65:c2:3d:1d:6d:c5:61:d6:
16:99:03:d9:82:ab:2d:52:86:22:27:1c:a7:2c:44:
8d:75:db:fe:4d:d0:f6:d6:f6:04:cc:1a:06:64:54:
33:7f:69:73:7d:84:fe:18:f8:be:db:c7:ec:34:14:
db:f2:a8:f3:f5:72:20:22:3a:12:72:ed:61:44:13:
4f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:03:28:CD:8E:04:D2:FC:EC:85:CC:64:47:11:0F:55:D2:8C:F3:F2
X509v3 Authority Key Identifier:
keyid:06:71:DC:C7:A9:AC:73:51:C7:1E:0B:C2:27:8C:F4:5F:D0:20:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BnHcx6msc1HHHgvCJ4z0X9Agri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/RwMozY4E0vzshcxkRxEPVdKM8_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1f9493-d468-4a7c-8c4b-1ddec4cce24c/1/BnHcx6msc1HHHgvCJ4z0X9Agri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.242.0/23
194.143.223.0/24
Signature Algorithm: sha256WithRSAEncryption
77:0b:3a:e3:66:21:49:09:e8:a0:2a:ff:3b:66:f0:0b:31:37:
62:90:cf:14:e6:0f:50:21:8c:87:4c:6a:c4:c7:bf:ae:0e:0f:
74:37:b6:b4:41:4c:7b:f3:07:86:6c:68:b5:4f:38:6a:09:77:
b0:0f:51:6a:ce:e0:b0:93:d4:51:16:7b:1a:80:42:47:62:c9:
7e:c0:d9:74:60:0b:a8:f7:4d:7a:93:e0:0e:ed:91:e0:79:6b:
6a:15:52:6e:2d:87:77:a6:4d:90:e6:62:3f:aa:ad:b4:df:4f:
3a:dd:bd:8c:ed:0a:08:b1:20:8c:cd:98:61:64:2b:c9:35:a3:
aa:a6:72:ce:2c:9f:89:77:27:8e:80:6a:5c:01:b6:ed:47:ff:
57:d7:a4:9a:8c:47:11:d5:9b:be:8b:fd:4e:49:e2:eb:c3:38:
00:38:af:c6:74:f7:09:70:55:2e:bf:f6:c8:da:65:dc:80:c0:
d6:a7:c1:e9:fc:92:c7:21:97:8e:b2:f7:d4:fb:39:f6:2f:b6:
66:38:d1:ed:33:45:80:f3:85:66:08:1b:06:d5:97:16:c8:40:
e2:e0:c4:72:a8:02:e6:93:ec:d9:74:6f:c5:7d:69:14:32:ea:
de:6a:2c:26:0b:ba:93:f6:45:57:d7:f8:f2:63:c0:b6:3d:08:
be:29:ee:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:40 2024 by rpki-client on console-ams.rpki-client.org