Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/ObBONReLv8EpSChR5zP7ykYVfG4.roa
File: ObBONReLv8EpSChR5zP7ykYVfG4.roa (raw, json)
Hash identifier: m8MXfxXqhDxF4mjNA3HF8Oac4XYexqtiI5O4FCGyq/A=
Subject key identifier: 39:B0:4E:35:17:8B:BF:C1:29:48:28:51:E7:33:FB:CA:46:15:7C:6E
Certificate issuer: /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial: 018B1E2928635B75B219726A876D3334B3CD
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/ObBONReLv8EpSChR5zP7ykYVfG4.roa
Signing time: Wed 11 Oct 2023 09:54:55 +0000
ROA not before: Wed 11 Oct 2023 09:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200639
IP address blocks: 45.92.42.0/24 maxlen: 24
2a0e:1cc0:12::/48 maxlen: 48
2a0e:1cc0:11::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1e:29:28:63:5b:75:b2:19:72:6a:87:6d:33:34:b3:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
Validity
Not Before: Oct 11 09:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39b04e35178bbfc129482851e733fbca46157c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:51:fd:2a:bc:c4:28:01:ec:13:50:10:50:
2e:05:02:b7:06:bf:44:0d:d1:7b:c3:a7:a4:2a:03:
80:28:e8:e3:de:3e:94:36:36:bf:49:ae:1d:ac:67:
d9:14:d0:9e:d0:40:6f:3a:be:e4:6c:b2:cc:d1:9a:
e6:76:f5:8c:ff:e1:df:4f:fc:d0:e6:b0:78:c2:47:
f2:fa:7c:0d:6c:ba:af:12:f1:75:38:d5:5f:1a:c3:
ed:2c:0f:4d:a9:e4:e1:ef:ad:41:de:34:e1:f5:fd:
61:b5:32:70:b6:6d:f7:0a:b3:5a:ab:60:09:d3:34:
d3:36:54:b9:85:a3:9e:b4:d6:88:ef:4e:e6:1d:bf:
91:2c:d4:f5:64:78:44:ff:bf:63:a7:88:82:37:22:
3c:b9:0a:e1:d4:a7:32:24:ee:e1:89:97:b8:d8:ec:
ae:24:3f:80:63:32:64:9f:f3:1b:36:1e:e7:71:d0:
bc:6b:b4:f0:83:7a:c1:33:19:dd:ec:72:f9:10:32:
9f:25:d4:2c:a8:ed:05:f5:b1:62:46:18:25:3f:86:
8c:77:e1:3b:51:51:a8:74:62:57:6b:03:7a:55:dc:
9e:88:e7:85:34:3c:29:0f:1b:16:76:2e:9d:1a:28:
e6:54:0a:ac:5a:fd:60:97:b8:f6:e4:a9:fb:0e:ff:
74:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B0:4E:35:17:8B:BF:C1:29:48:28:51:E7:33:FB:CA:46:15:7C:6E
X509v3 Authority Key Identifier:
keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/ObBONReLv8EpSChR5zP7ykYVfG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.42.0/24
IPv6:
2a0e:1cc0:11::-2a0e:1cc0:12:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
0b:28:24:4f:37:7a:b5:3c:59:f1:48:de:62:2d:3e:ae:63:44:
d7:97:42:2c:2d:49:93:eb:38:65:0a:ea:92:9e:53:c9:89:4b:
94:b3:58:75:15:e0:69:17:06:97:f6:aa:40:4f:b9:f6:f6:10:
0b:21:32:b4:3d:35:18:2d:ed:90:1f:f0:09:83:f3:63:4e:70:
9e:0d:0d:6c:08:3f:ab:4d:fa:b9:87:7f:91:14:22:84:5f:a5:
77:ee:60:de:11:0e:1e:28:c1:c0:42:52:13:fb:5c:77:68:d4:
21:7e:81:bc:43:9a:cf:1a:72:e5:5f:4e:8b:55:21:e9:0f:f9:
d5:ec:5a:ae:f7:6c:85:38:54:7e:6e:f1:f3:25:be:72:94:f5:
c8:61:d1:42:39:10:35:51:2c:73:ca:13:04:fa:e9:95:02:fe:
1c:6e:56:3c:27:6a:50:44:7a:c7:7f:81:22:d2:49:7a:bb:56:
70:27:24:cb:fb:d6:5e:56:ae:d9:10:e1:6d:58:e3:1c:44:ec:
4d:65:46:0a:d9:7d:8d:31:13:84:c9:e1:48:61:fe:0d:74:4b:
39:12:6d:2e:ed:7f:f2:a7:4b:f0:9f:62:67:14:49:bb:8b:e1:
3d:c7:03:8f:89:31:16:3d:ee:01:cb:0e:6c:73:4d:2e:40:da:
7e:30:79:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:37 2024 by rpki-client on console-ams.rpki-client.org