Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/OMR6Ad_NPgjIcxKKvhNbW2YwAkQ.roa
File: OMR6Ad_NPgjIcxKKvhNbW2YwAkQ.roa (raw, json)
Hash identifier: nWr8BrailKCAWt02ZwHywL60/HcFTXb3UeRAtnMNrwM=
Subject key identifier: 38:C4:7A:01:DF:CD:3E:08:C8:73:12:8A:BE:13:5B:5B:66:30:02:44
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 019284F96DE9C3243C6A2645C4ABAD356BF6
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/OMR6Ad_NPgjIcxKKvhNbW2YwAkQ.roa
Signing time: Sun 13 Oct 2024 08:23:12 +0000
ROA not before: Sun 13 Oct 2024 08:23:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 5.181.2.0/24 maxlen: 24
5.181.3.0/24 maxlen: 24
45.150.109.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 19 Oct 2024 13:49:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:84:f9:6d:e9:c3:24:3c:6a:26:45:c4:ab:ad:35:6b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Oct 13 08:23:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38c47a01dfcd3e08c873128abe135b5b66300244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:99:42:c5:01:a6:0e:75:8a:9a:32:e6:01:
48:3e:76:f0:d0:da:75:f9:b5:5e:96:58:13:1e:7a:
0b:b4:d1:87:6f:e1:b3:3d:01:34:b7:f7:e6:f0:3b:
da:28:7a:ab:04:59:91:77:fc:6b:22:91:f9:4d:a8:
8b:bb:f8:ba:97:d1:2f:4e:fb:87:9b:ac:7c:73:89:
c3:7a:fc:c8:7e:b1:9e:3d:d8:d8:6a:58:88:d7:c4:
fb:f3:4a:cc:67:47:dd:f9:b8:eb:e9:ce:75:f2:98:
47:45:1b:dd:cb:b1:29:d5:2b:11:99:26:66:97:40:
4f:15:61:7a:e9:59:f5:df:27:b5:a0:11:fc:1a:73:
61:96:9d:46:9d:ba:07:4c:c8:f5:de:10:0c:e5:58:
37:97:15:da:05:76:b1:02:71:77:a9:f1:d3:0d:6c:
3d:9e:dc:fa:3c:7e:2c:57:01:6b:86:f3:1d:86:92:
01:34:af:4d:44:d1:f7:58:85:25:96:3a:3f:13:6c:
e6:f7:2f:74:72:15:d0:16:d2:ac:9a:88:4a:62:bd:
ae:d8:d0:74:fa:51:e4:cd:d1:45:13:ec:8f:e7:aa:
45:b2:15:2f:89:c0:23:1f:c9:2b:d1:7f:77:36:16:
22:19:96:ab:57:1f:3c:46:5d:c9:bb:cc:d6:61:6b:
f2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C4:7A:01:DF:CD:3E:08:C8:73:12:8A:BE:13:5B:5B:66:30:02:44
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/OMR6Ad_NPgjIcxKKvhNbW2YwAkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.2.0/23
45.150.109.0/24
Signature Algorithm: sha256WithRSAEncryption
02:0b:7d:98:cb:eb:ad:a9:4d:a4:cc:54:a8:27:b4:8b:c9:32:
ad:3a:85:cb:8e:eb:bb:0e:77:5b:44:62:b0:fd:7d:3a:a4:79:
8b:ba:79:04:23:5f:6a:48:fb:23:d7:41:01:b5:55:e8:97:28:
80:1b:6b:f9:14:4e:d5:08:c5:21:c6:a7:54:2d:88:2a:66:66:
0e:aa:7a:82:46:80:5f:50:04:9c:98:48:4a:ab:e8:b0:13:fb:
a4:d1:31:4c:27:7e:b6:bc:8a:d8:b7:43:d9:d7:ba:0b:07:74:
37:10:fc:9d:1e:f0:c1:07:6b:ce:c0:7d:73:57:e4:8d:ac:b0:
69:a5:d1:f6:d7:72:bf:9e:69:34:0c:e9:ae:d0:7d:ba:fa:68:
ac:d5:a2:6e:8f:84:27:45:c9:eb:e1:2d:57:84:9d:fb:51:81:
31:98:61:91:02:70:7f:90:ad:6f:a1:f7:a2:66:3b:4f:f8:8a:
81:d3:d1:a3:6e:70:f6:b2:b2:a4:87:e5:03:aa:73:98:1d:6e:
24:3b:8b:cc:ee:63:b0:e8:8f:28:78:3d:44:ca:9a:cf:aa:a4:
82:4f:57:c9:0c:1d:b8:65:8e:e0:9e:cd:91:d4:98:8b:58:2e:
93:57:ec:7c:24:ee:d7:e2:57:c4:17:90:30:b1:f5:4d:5b:a8:
73:ef:b2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 19 15:10:59 2024 by rpki-client on console-ams.rpki-client.org