Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/Oz29wQ6ImwERzVEefl3PcBijYA4.roa
File: Oz29wQ6ImwERzVEefl3PcBijYA4.roa (raw, json)
Hash identifier: 8hs9Z4rPvlXHvrWQKO70XpMBFFgTvTzrUvLLbk3nxIg=
Subject key identifier: 3B:3D:BD:C1:0E:88:9B:01:11:CD:51:1E:7E:5D:CF:70:18:A3:60:0E
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 01909CB87EEA492256ADD58CDCF4140F387A
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/Oz29wQ6ImwERzVEefl3PcBijYA4.roa
Signing time: Wed 10 Jul 2024 12:57:35 +0000
ROA not before: Wed 10 Jul 2024 12:57:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60829
IP address blocks: 45.156.113.0/24 maxlen: 24
188.95.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Aug 2024 11:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9c:b8:7e:ea:49:22:56:ad:d5:8c:dc:f4:14:0f:38:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Jul 10 12:57:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b3dbdc10e889b0111cd511e7e5dcf7018a3600e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a0:d7:a9:92:71:57:be:b5:bd:5a:10:71:37:
54:d4:fc:e0:e7:99:af:d2:ff:81:76:23:af:ed:65:
89:51:ce:4b:7a:29:66:af:e9:b5:13:b3:a3:99:30:
54:15:22:7c:ea:92:76:51:df:cf:79:2b:15:3c:c5:
4b:4a:2a:72:35:be:d5:1a:af:8d:d9:11:6b:2f:b3:
53:17:63:06:65:f2:7a:53:99:78:e9:37:20:78:2c:
dd:de:9b:f5:e7:00:bb:2a:e2:62:45:ba:66:62:d6:
c2:c0:23:fc:17:c9:8f:0e:57:f5:91:24:e9:47:30:
f1:2c:21:f7:cd:65:2e:4d:35:12:7f:be:42:7b:b5:
54:e5:51:1a:d2:b8:5c:07:c9:58:30:74:f2:65:66:
5e:30:1a:47:88:60:da:6a:66:ba:fc:e1:a2:37:bb:
cf:b6:b5:1b:c1:da:db:4a:88:9e:28:b7:e7:d8:58:
1e:e4:4d:5f:7e:c7:b9:6a:57:9a:35:5e:f6:81:96:
9b:cb:48:3c:42:d4:81:7e:d5:e2:e6:00:42:46:b8:
a9:a8:50:17:87:48:f5:db:3c:55:64:fd:c8:0c:7c:
c4:65:3a:7e:27:6e:61:3b:07:fb:08:2c:dc:de:e8:
d5:7a:3b:b3:98:bb:3a:78:2d:6e:90:f6:8c:c1:f2:
05:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3D:BD:C1:0E:88:9B:01:11:CD:51:1E:7E:5D:CF:70:18:A3:60:0E
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/Oz29wQ6ImwERzVEefl3PcBijYA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.113.0/24
188.95.151.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a4:b2:46:65:af:ad:41:a5:b5:29:dc:83:c6:70:38:6d:00:
47:6b:eb:b9:b0:18:17:b6:73:c5:86:f5:8d:ae:05:08:f5:2f:
3b:2e:ce:b0:fb:4c:27:82:39:80:f3:a0:b4:8c:68:ed:b3:62:
1b:10:89:33:1c:5f:37:29:1a:26:e2:81:ae:2a:6d:3d:2f:54:
ee:8e:94:7e:2a:01:6b:96:32:ff:57:0e:f0:c8:cb:9d:61:b3:
ab:7d:cc:c2:37:92:16:5b:4b:72:ff:eb:2d:24:a6:4f:2c:10:
a8:ac:83:5f:19:fe:23:0c:de:34:73:4d:f2:cd:59:19:53:3a:
43:ea:58:b5:db:ff:64:f5:4d:dd:f2:40:8a:6e:c1:84:44:68:
50:72:07:f1:41:4b:8c:ad:2f:fe:90:48:7b:29:b0:f3:e4:d5:
29:56:bc:46:7d:af:c1:f0:b8:2f:eb:b8:45:c0:59:82:98:b5:
2b:94:dc:ef:5a:08:58:30:e8:ad:93:31:4c:a4:72:5e:47:fc:
61:10:b6:62:0a:56:62:b5:c2:13:b5:3f:6b:ff:e2:1d:2b:e3:
20:62:ba:ae:c2:a7:b9:e5:df:55:3b:a1:e5:aa:ac:59:a3:4f:
2a:0b:db:66:a6:b5:17:ad:86:c0:e4:85:05:b0:c9:c7:de:67:
3d:18:3c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 5 15:20:46 2024 by rpki-client on console-ams.rpki-client.org