Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/OhbdoW_9Xq_KSihM3Z9T_K-xiTQ.roa
File: OhbdoW_9Xq_KSihM3Z9T_K-xiTQ.roa (raw, json)
Hash identifier: dGfi2aWaYwbdT5ZfyCI4mn1X5UKdeFrmk9GxdN/ZpcY=
Subject key identifier: 3A:16:DD:A1:6F:FD:5E:AF:CA:4A:28:4C:DD:9F:53:FC:AF:B1:89:34
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018571E88D836FFEBA69DDAB2F091575AB32
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/OhbdoW_9Xq_KSihM3Z9T_K-xiTQ.roa
Signing time: Mon 02 Jan 2023 09:55:44 +0000
ROA not before: Mon 02 Jan 2023 09:55:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203511
IP address blocks: 45.151.2.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jan 2023 22:28:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:e8:8d:83:6f:fe:ba:69:dd:ab:2f:09:15:75:ab:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 2 09:55:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a16dda16ffd5eafca4a284cdd9f53fcafb18934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8c:ab:3e:57:59:c1:23:1a:5d:d1:66:de:e5:
91:96:6d:25:c3:fe:05:39:a6:36:99:0f:48:eb:c1:
6c:c1:ad:3d:0f:14:dd:f6:e1:1d:2b:30:3e:65:f3:
be:60:a7:6c:92:b0:07:bd:b4:ee:d9:30:ea:54:da:
cc:b3:7c:70:54:41:d7:92:b2:b2:cd:3e:71:72:6c:
31:97:c5:9f:bd:de:4a:ed:aa:1f:17:00:19:1a:80:
ea:e1:96:21:5d:d1:15:2f:17:91:b5:13:83:df:56:
3b:19:70:f3:ec:c7:81:7d:9f:e1:d6:1a:27:0f:4e:
60:c1:2a:b2:d1:21:5a:20:e3:87:80:b6:f5:a8:63:
11:74:59:19:75:e8:8f:b4:ec:40:b1:ac:e6:05:a0:
98:41:08:d0:dd:b1:af:9f:88:d1:f8:6b:f6:c5:3d:
4d:71:ff:37:df:84:f5:3f:89:26:64:de:10:de:53:
c8:86:89:33:e2:ae:61:c6:82:93:a5:e5:0a:25:66:
81:c6:51:cf:4a:d3:07:30:63:09:17:42:12:a4:2d:
54:de:ad:ae:71:62:7c:90:65:4d:5d:77:d1:07:04:
dc:17:a8:d5:0a:30:37:23:69:62:d4:3d:15:49:99:
a3:9c:fc:e8:17:46:5f:a3:cb:68:e8:83:51:47:b4:
ac:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:16:DD:A1:6F:FD:5E:AF:CA:4A:28:4C:DD:9F:53:FC:AF:B1:89:34
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/OhbdoW_9Xq_KSihM3Z9T_K-xiTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.214.0/24
45.151.2.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c8:e7:30:34:92:07:70:80:d2:18:79:6b:c1:6c:fd:54:31:
1b:68:33:3e:af:8f:00:70:23:0e:b3:b4:55:d4:62:fb:38:60:
5d:ff:96:9a:e2:7e:b3:c0:27:65:01:7e:79:f9:d8:f8:d6:36:
e9:5a:4f:98:ad:90:c7:e5:07:8c:1e:2b:75:49:34:52:59:53:
8d:ab:7a:52:b9:5a:82:5f:95:b9:18:6d:8a:66:75:2a:a2:41:
15:82:f9:98:42:df:dd:8f:aa:9a:df:52:59:77:31:2d:98:79:
38:75:de:3c:9e:75:26:c2:7c:12:d3:e2:ed:7f:8b:6e:25:94:
cc:9f:3e:3e:a8:57:2b:42:56:78:11:22:5b:17:bd:07:81:a9:
3b:18:73:00:65:db:72:34:48:46:15:29:36:7c:e2:d9:65:90:
39:55:99:cf:2a:1e:9c:2b:30:bc:dc:bd:23:6a:3c:6d:cd:c6:
f6:c9:b8:df:ab:aa:5d:e9:98:31:90:58:6f:21:f5:2c:87:4c:
d8:27:3c:e7:f0:c2:13:95:61:1c:ab:79:05:dc:55:69:01:5f:
39:bf:2e:da:b1:95:4f:c8:4c:d7:f2:97:99:25:4e:9a:50:41:
46:c5:d2:28:48:07:5e:9a:ed:8b:7c:f0:4b:07:3e:4a:bf:6c:
49:2a:cd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org