Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/om41jMdBey0i-fSlusww8K_w49I.roa
File: om41jMdBey0i-fSlusww8K_w49I.roa (raw, json)
Hash identifier: pEiX68o8vhTyXAo+HX5mmihpslctVsmEMa2qw4G88gU=
Subject key identifier: A2:6E:35:8C:C7:41:7B:2D:22:F9:F4:A5:BA:CC:30:F0:AF:F0:E3:D2
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 018571DE84A23CD5011E6A42EFEA351566C1
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/om41jMdBey0i-fSlusww8K_w49I.roa
Signing time: Mon 02 Jan 2023 09:44:46 +0000
ROA not before: Mon 02 Jan 2023 09:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 328543
IP address blocks: 45.81.34.0/23 maxlen: 24
45.150.236.0/22 maxlen: 24
2a0e:4c80::/29 maxlen: 29
2a0f:9a00::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:de:84:a2:3c:d5:01:1e:6a:42:ef:ea:35:15:66:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Jan 2 09:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a26e358cc7417b2d22f9f4a5bacc30f0aff0e3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:04:02:d3:31:d9:20:22:2a:ec:71:63:4c:73:
e7:49:4f:f0:c5:aa:a1:73:00:74:6e:fe:4e:8d:9f:
71:73:09:8f:2c:a0:da:c0:d3:0d:1c:d8:62:bc:bb:
9d:9f:e9:e5:81:8f:68:f2:90:20:85:fd:24:c9:d3:
c4:a5:b1:1a:fb:7d:c8:40:c9:5b:4f:1e:67:92:10:
5f:8a:41:aa:56:f3:30:f3:5c:e2:a3:52:13:3f:20:
94:ab:b9:10:bd:38:53:f6:be:e8:c2:79:d3:f9:dc:
bd:51:8f:33:be:17:0d:38:87:8c:2e:58:3e:22:81:
06:f8:93:8d:98:4c:ca:aa:9a:d4:4b:78:25:7a:06:
2a:0e:7a:78:fd:61:76:6a:ec:d5:3c:89:81:16:db:
4f:a7:2c:20:10:de:6d:b8:68:67:1d:b1:4e:b5:fc:
8d:d1:54:66:a5:04:f2:c0:b3:e7:aa:e3:fc:35:2e:
5a:82:ef:59:09:91:1d:6e:4f:f5:13:54:59:eb:61:
61:77:e2:a4:40:1f:4c:f6:35:68:e7:23:a9:23:5f:
b7:54:bf:50:43:45:ee:82:ae:a9:a4:ed:e9:4d:9a:
2f:1c:62:2e:a9:2b:85:56:1c:f2:dd:01:7c:d9:6d:
f9:10:09:a0:33:72:f3:e5:86:2e:b6:f5:d6:6c:6e:
1f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6E:35:8C:C7:41:7B:2D:22:F9:F4:A5:BA:CC:30:F0:AF:F0:E3:D2
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/om41jMdBey0i-fSlusww8K_w49I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.34.0/23
45.150.236.0/22
IPv6:
2a0e:4c80::/29
2a0f:9a00::/29
Signature Algorithm: sha256WithRSAEncryption
42:40:5d:78:69:75:9d:27:11:0d:28:73:05:ef:c4:36:de:63:
a9:95:1c:84:57:72:b7:2c:d2:f9:b2:56:2c:9b:77:d0:e2:5d:
1e:bf:dd:ea:54:56:05:e5:7b:c2:ed:20:ad:3f:b9:42:39:06:
21:23:18:3f:c8:37:ba:b5:99:56:d7:60:d4:3c:a8:73:b1:2c:
c0:c7:8e:01:83:c2:82:ce:58:8f:9d:4f:83:33:cc:c3:1a:ad:
52:8e:ba:f3:4e:ed:87:84:04:17:c5:6b:31:35:4b:20:43:25:
6b:f5:ef:24:df:54:ac:d9:b7:ce:50:c1:c8:8c:81:6e:19:5e:
5b:c4:71:81:35:87:2f:45:3f:0f:84:e5:3f:3c:55:1e:b0:e0:
e5:a8:10:e4:fc:78:ed:da:fe:06:0b:17:23:36:2e:bd:12:9e:
ce:30:87:b0:44:9a:b8:04:36:bb:7b:9e:44:1d:27:8c:72:49:
f8:1b:84:6a:ca:a9:03:d4:1a:80:6c:d5:7d:9f:c8:b7:9a:2b:
98:66:9a:2c:1f:83:e8:22:62:80:9b:52:79:84:ab:b7:08:5c:
25:fd:d2:27:a5:f9:89:63:ca:8b:eb:5a:fd:d5:a2:04:ad:ca:
bc:bd:c2:db:08:d9:81:2a:dc:65:ec:fa:f1:b6:22:e2:0e:8d:
99:20:6e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:43 2024 by rpki-client on console-ams.rpki-client.org