Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/OEJHMejXhbPNLz93HnmnxpfD_n4.roa
File: OEJHMejXhbPNLz93HnmnxpfD_n4.roa (raw, json)
Hash identifier: wk1gfk0zD90Mz72EzO0701SjboGanLQGBNo+GEMYAhU=
Subject key identifier: 38:42:47:31:E8:D7:85:B3:CD:2F:3F:77:1E:79:A7:C6:97:C3:FE:7E
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 01856C2EC995D494DD21DB44AC8CD02CCC54
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/OEJHMejXhbPNLz93HnmnxpfD_n4.roa
Signing time: Sun 01 Jan 2023 07:14:43 +0000
ROA not before: Sun 01 Jan 2023 07:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24961
IP address blocks: 45.133.156.0/23 maxlen: 24
45.133.156.0/24 maxlen: 24
45.133.157.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 04 Apr 2023 13:53:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:2e:c9:95:d4:94:dd:21:db:44:ac:8c:d0:2c:cc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 07:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=38424731e8d785b3cd2f3f771e79a7c697c3fe7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:f2:1a:5f:b2:13:2d:97:f3:79:fc:c3:03:
33:5a:73:a0:b7:1f:b3:d6:0d:8a:c2:85:44:ee:97:
e0:ef:31:7d:fc:88:2c:49:ad:78:60:af:c6:f2:35:
86:0b:45:6f:da:54:5f:f3:7e:6f:a9:75:df:28:a3:
96:e8:ed:f8:8f:68:7f:4b:dc:40:58:94:b8:96:d9:
44:a8:70:56:b9:fd:d9:5e:8f:ce:d2:95:d1:88:49:
65:fd:c1:33:bb:e2:2c:63:95:76:c7:5f:6d:d1:4e:
22:db:fa:d3:4d:e9:7b:bd:4e:ad:19:69:dd:e1:6e:
01:17:61:c0:2d:6c:7e:74:2a:98:88:ac:40:39:09:
6d:99:50:f1:7d:ee:e5:a1:01:fc:6a:5b:04:0c:0b:
f7:2c:e2:5c:64:f6:87:01:46:76:96:0b:86:02:6d:
25:5e:78:f5:27:f3:c4:a3:fc:65:1a:07:4a:ca:9c:
95:1c:a8:a2:a4:eb:92:64:e9:1d:f7:b9:3c:0f:bb:
d7:1a:8a:95:48:f7:db:15:20:1e:43:b7:9b:b0:94:
39:34:1b:33:59:28:80:7e:c3:80:3b:6f:6f:cd:a2:
53:02:8c:f6:80:1f:a9:17:27:ff:d8:91:0b:25:c7:
bf:7e:db:7f:ba:d0:76:4a:01:6b:00:83:4d:72:7c:
c5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:42:47:31:E8:D7:85:B3:CD:2F:3F:77:1E:79:A7:C6:97:C3:FE:7E
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/OEJHMejXhbPNLz93HnmnxpfD_n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.156.0/23
Signature Algorithm: sha256WithRSAEncryption
35:93:c3:d5:26:c9:26:c0:e6:62:f1:02:05:d1:1a:43:db:d2:
d6:57:ac:92:51:55:18:17:ff:8e:51:e9:96:e5:ed:2e:ba:41:
f1:4d:ed:03:93:41:3d:44:fe:50:b3:a9:cf:49:88:9e:56:ee:
e9:ff:76:fe:1a:5b:ac:d9:8b:ff:cf:3b:6c:bc:06:22:02:56:
3b:c2:37:db:c7:ad:71:3d:41:c9:b1:63:c4:59:78:72:39:e9:
c9:ca:42:16:bd:c6:18:d4:bf:bc:a1:e5:a8:75:5b:aa:01:83:
c2:6d:46:4b:39:fa:37:38:ff:da:41:2c:c4:ef:5e:67:17:65:
ec:fe:10:f1:11:ce:a4:d1:53:99:22:96:28:1f:74:64:59:c2:
ac:27:ea:bd:69:24:82:6b:95:20:02:3d:66:31:11:05:5c:cc:
4c:ad:d8:1c:44:c8:fe:fc:6d:e6:e2:fa:bc:70:00:74:16:94:
2a:46:62:ce:f1:38:0e:37:0b:64:89:52:b2:8c:9b:27:94:52:
c7:ed:a7:5d:c9:18:89:bc:09:1e:38:b0:64:53:cb:60:f9:e8:
d4:dd:61:7a:1c:28:6c:9e:17:55:94:88:ee:ad:6f:79:ae:1e:
9c:c1:c3:09:a2:17:23:8c:c1:f4:7d:b9:b8:59:bb:33:6b:ff:
0b:95:01:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org