Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/OsV2-vS-v4w59-vGYB75TrZXgrU.roa
File: OsV2-vS-v4w59-vGYB75TrZXgrU.roa (raw, json)
Hash identifier: lPVkmA98+gw1RjOJXdLaoNK4vr9ujgtiLe5Tbd5M5hk=
Subject key identifier: 3A:C5:76:FA:F4:BE:BF:8C:39:F7:EB:C6:60:1E:F9:4E:B6:57:82:B5
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018ACD0BCD68663E3C53AD4D1997BF18BBF9
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/OsV2-vS-v4w59-vGYB75TrZXgrU.roa
Signing time: Mon 25 Sep 2023 15:53:37 +0000
ROA not before: Mon 25 Sep 2023 15:53:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207252
IP address blocks: 45.133.75.0/24 maxlen: 24
45.84.197.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:cd:0b:cd:68:66:3e:3c:53:ad:4d:19:97:bf:18:bb:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Sep 25 15:53:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ac576faf4bebf8c39f7ebc6601ef94eb65782b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:40:90:14:40:55:3f:80:ea:c8:33:4a:23:ab:
da:54:87:ce:82:e9:97:dc:9f:9f:a3:fc:5d:24:1e:
7b:99:b8:9f:a4:b6:28:92:11:e7:ad:c6:39:00:47:
35:90:6d:99:80:db:61:85:11:a4:c6:68:35:22:f6:
e1:93:5a:53:81:3a:d9:fd:64:c5:73:14:af:de:f5:
8e:7d:27:eb:46:45:b7:c7:a4:73:50:c6:04:3b:bf:
f6:80:86:34:24:ee:4a:2a:65:d7:d8:de:94:fb:7a:
c4:82:dd:29:a5:8b:31:ff:c8:37:b9:70:a0:bf:94:
b9:ba:ec:d6:8f:fc:55:b8:32:c8:5a:35:92:db:c3:
05:bc:08:a2:7c:3c:5e:ac:06:3a:4f:ed:0b:64:b4:
9b:71:8d:f5:b0:a1:41:70:7a:b0:0b:32:08:13:43:
39:cf:98:6f:b1:39:34:0a:47:d7:40:33:bf:b5:85:
5a:9f:16:10:75:db:d0:c8:b2:0f:aa:e0:7b:00:8c:
09:fe:39:c1:e5:ec:57:cf:28:73:be:b3:1e:af:9b:
03:96:f9:d4:7e:f8:f8:f5:ee:86:71:85:b5:d9:3e:
82:a8:1a:a3:33:3f:44:79:69:31:27:d9:0d:e3:91:
58:5d:61:8f:cf:09:75:83:32:2e:4c:9e:42:4e:f0:
27:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:76:FA:F4:BE:BF:8C:39:F7:EB:C6:60:1E:F9:4E:B6:57:82:B5
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/OsV2-vS-v4w59-vGYB75TrZXgrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.197.0/24
45.133.75.0/24
Signature Algorithm: sha256WithRSAEncryption
79:05:54:d0:b5:1d:50:72:42:30:99:51:d0:f0:08:be:92:6f:
f2:50:d8:4c:d9:e6:20:50:c2:0c:7e:61:3c:ea:4f:74:29:a3:
08:35:3a:5f:ad:be:fe:c9:39:35:48:06:86:c5:6b:a7:dc:10:
3a:c2:d3:51:c0:71:4d:fb:db:8f:d0:51:8e:fa:35:a9:dc:e7:
40:e0:f6:e3:0f:49:97:4c:45:fb:72:72:83:95:bd:eb:e6:40:
74:1b:7f:c1:69:25:7c:a2:ca:ca:a6:47:f3:c3:49:2f:b6:b0:
76:ec:8c:89:c8:cc:e4:54:4a:8a:35:ff:55:b2:97:72:6a:8b:
bf:e0:87:6c:12:aa:de:4e:be:29:e8:b1:e5:2c:18:bf:f6:b8:
b8:c3:4c:fd:15:c1:dd:e5:c9:7c:80:eb:10:e0:91:73:d2:1f:
c6:6f:d8:2f:94:52:27:04:bf:6c:8a:73:6d:2a:2a:24:cb:3e:
e1:ee:d8:a5:8b:2e:03:79:63:9c:37:28:ce:7d:1c:06:8e:71:
0d:26:b4:ad:f1:83:04:cd:33:0b:3c:d6:fa:75:4d:08:00:be:
79:05:98:04:f5:ef:55:6f:1b:69:61:77:94:90:65:ab:ae:33:
88:ad:0e:a9:54:4a:7a:8e:48:d2:fe:45:c0:3a:d8:cf:8b:9e:
c6:75:47:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:24 2024 by rpki-client on console-ams.rpki-client.org