Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ojnMNmGYeiQL1G9JPurCplp7atw.roa
File: ojnMNmGYeiQL1G9JPurCplp7atw.roa (raw, json)
Hash identifier: 4w8bV3kNJqFE2NtWS2RFOV62SHN0LE+99z18kZiBePc=
Subject key identifier: A2:39:CC:36:61:98:7A:24:0B:D4:6F:49:3E:EA:C2:A6:5A:7B:6A:DC
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018BDD6DC93A43F6EC06D9D5EC78794233DF
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ojnMNmGYeiQL1G9JPurCplp7atw.roa
Signing time: Fri 17 Nov 2023 13:17:21 +0000
ROA not before: Fri 17 Nov 2023 13:17:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44103
IP address blocks: 45.139.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:dd:6d:c9:3a:43:f6:ec:06:d9:d5:ec:78:79:42:33:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Nov 17 13:17:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a239cc3661987a240bd46f493eeac2a65a7b6adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:29:d8:8a:f4:48:ec:6e:b6:e5:2a:62:53:5d:
69:14:69:c9:56:38:95:8c:cc:85:97:81:95:10:00:
c3:8e:51:11:26:48:8a:8a:d3:f5:d4:fc:79:ce:8f:
cc:48:5b:5a:55:6a:d9:3e:14:00:dc:7b:e8:20:48:
97:81:48:3a:d3:9e:a1:c2:ec:25:a9:29:82:2d:b9:
28:76:5b:86:35:f6:72:50:df:cf:b2:ec:b3:9c:0e:
4d:70:f2:af:5b:9b:0f:79:b3:d7:8d:ea:5f:de:61:
08:a0:26:ae:bb:24:17:ce:de:f3:d0:97:53:46:f4:
b6:f0:b0:95:49:30:81:7a:05:e0:de:fb:ed:67:f0:
0c:19:2a:f2:f4:7e:dd:82:82:4b:47:f0:1c:1b:51:
eb:e1:0c:7c:54:83:7b:10:95:b8:c3:8d:69:25:99:
ac:7d:ae:46:33:13:22:85:46:6c:55:2d:cd:95:a3:
bc:8e:bf:6b:77:c6:55:1a:ae:24:eb:cd:74:6b:18:
54:e3:70:55:e9:d7:72:17:46:bc:73:ee:2f:7b:10:
47:16:cd:e6:f4:26:c5:86:a5:8c:56:8a:71:89:25:
3c:fb:be:7f:17:1e:22:06:9d:7a:94:37:fd:3e:aa:
b0:6f:07:5b:18:c1:47:b8:73:ed:82:71:41:c5:b0:
e3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:39:CC:36:61:98:7A:24:0B:D4:6F:49:3E:EA:C2:A6:5A:7B:6A:DC
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/ojnMNmGYeiQL1G9JPurCplp7atw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.163.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:52:ec:11:33:90:34:e2:eb:68:eb:ef:65:f3:74:6f:dd:fa:
e8:6e:59:c9:02:0a:1d:f3:a0:02:15:26:8d:0a:8f:b1:3b:fe:
57:4d:4c:8d:98:60:ef:44:cb:af:d8:83:b8:3b:19:9d:f1:88:
4b:30:e6:ba:47:40:e8:48:0c:97:7f:7a:6b:ba:78:04:fc:34:
ef:5d:9a:28:3b:e8:e9:4f:b9:f1:19:a4:b4:00:fa:f3:f7:6b:
5f:16:4b:81:20:c8:db:b6:72:ae:0f:fb:69:73:62:1b:4a:59:
1b:71:e5:ea:00:76:50:a4:f3:90:56:90:b2:73:e8:8c:bd:8f:
2a:e3:9f:a3:4b:e7:1a:15:54:4d:c9:e7:73:c9:c8:e5:08:9f:
d3:10:d6:b6:dc:d5:5e:69:ee:7d:5e:0c:0b:9e:5c:b5:b5:c3:
f4:44:cf:d8:64:75:64:24:5d:f8:5b:3c:cb:d5:2f:47:3c:dd:
7c:0a:d2:01:61:49:72:e8:b3:d4:43:5c:0b:0d:09:26:8b:37:
bc:e8:56:34:ec:ac:6e:ad:7a:54:1c:85:70:85:a6:32:15:5d:
5c:f0:c0:ac:8f:c0:2e:25:4b:78:b3:2e:fb:21:23:5a:eb:67:
61:8b:ac:ac:47:72:ec:5d:ab:09:b3:0e:64:53:6d:03:4a:78:
c2:0e:a8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:01:43 2024 by rpki-client on console-ams.rpki-client.org