Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/OB9h3ixD1BnriBgmABRBptZTKVE.roa
File: OB9h3ixD1BnriBgmABRBptZTKVE.roa (raw, json)
Hash identifier: clK8MzoDVIVuIYOlkTRUNl/xxFbHlbMEcnbetavTs8A=
Subject key identifier: 38:1F:61:DE:2C:43:D4:19:EB:88:18:26:00:14:41:A6:D6:53:29:51
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01948EACA4CC8E158B8F46D49E25DD5A7EB7
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/OB9h3ixD1BnriBgmABRBptZTKVE.roa
Signing time: Wed 22 Jan 2025 15:41:06 +0000
ROA not before: Wed 22 Jan 2025 15:41:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213702
IP address blocks: 147.45.220.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Jan 2025 20:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8e:ac:a4:cc:8e:15:8b:8f:46:d4:9e:25:dd:5a:7e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 22 15:41:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=381f61de2c43d419eb881826001441a6d6532951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:28:c6:c3:7a:56:5a:c3:ce:74:c7:a4:50:
96:91:b7:15:de:16:5b:8c:57:8a:3a:71:12:2b:48:
bd:f5:3f:b6:99:a8:9a:f0:f1:14:95:8d:2a:03:cf:
2d:25:63:3c:55:e7:07:c7:5e:4b:30:07:09:72:2c:
df:eb:e5:39:32:5c:91:09:35:db:c6:27:10:1b:25:
09:b5:ea:1d:3c:8d:ff:e3:a6:dd:62:97:2c:23:1a:
10:b5:7c:6d:d7:ec:28:20:aa:fc:5e:15:57:aa:0a:
f0:8f:9e:ef:4e:54:05:a7:8c:43:87:d3:6a:7e:d6:
90:e5:f8:eb:e5:50:35:be:d3:2d:80:41:49:04:b4:
83:2a:8b:f0:47:97:fb:f9:da:b5:fb:27:69:3c:9e:
aa:10:2a:65:19:3d:ca:cd:55:45:6b:c5:47:70:5c:
2d:04:fe:59:53:e1:f6:c3:2f:66:96:15:26:ce:04:
f4:77:e9:39:11:cf:ee:02:21:af:f7:bf:23:7b:84:
3c:e2:78:25:ce:04:34:d2:23:b2:4a:68:fe:0d:7a:
64:d5:db:8c:ff:d5:f4:e8:4c:f7:f1:96:b0:02:d7:
61:ae:4d:bc:1f:0c:ef:24:8b:91:c6:a9:15:ff:2d:
51:81:b3:f4:b3:a6:3f:8d:18:07:1b:db:b0:62:9d:
8e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1F:61:DE:2C:43:D4:19:EB:88:18:26:00:14:41:A6:D6:53:29:51
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/OB9h3ixD1BnriBgmABRBptZTKVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.220.0/24
Signature Algorithm: sha256WithRSAEncryption
71:2e:c5:ab:61:43:45:3d:54:8e:65:f4:ed:d4:20:18:97:f9:
fe:d4:6d:27:3b:70:d3:82:1c:26:bd:c3:31:09:32:71:af:71:
ce:cf:31:5f:47:46:44:78:9c:a9:23:fd:00:d0:c2:34:93:81:
18:bb:ef:7f:be:03:87:22:98:19:24:07:eb:70:95:c1:a6:ec:
67:3e:55:c5:57:b8:69:af:97:45:b0:6a:c8:80:c5:2d:4c:a5:
1e:c5:32:7b:48:19:0c:d3:93:2f:0a:2d:ad:f6:08:39:ac:e4:
1f:2b:63:85:3e:e1:fb:b1:d5:5a:3d:47:78:95:b3:7d:6e:4e:
66:94:54:ca:a4:5d:82:a0:72:4f:22:55:47:e8:49:e1:ce:75:
89:c8:ff:01:51:36:5f:80:af:45:8f:16:98:c3:f2:9e:d0:b4:
37:ec:c5:cf:a6:c8:7c:b8:e3:d1:37:30:4c:0e:42:bf:0f:99:
83:a3:40:ab:a9:f3:86:ac:bb:3a:72:0a:64:da:74:85:83:98:
61:e1:20:b5:c9:ef:c3:b9:76:36:28:b7:c5:eb:f2:f8:21:2c:
72:d1:81:38:a5:f7:8b:91:d8:29:0e:2a:21:da:55:e8:6b:e3:
35:6a:80:25:50:5d:fe:53:bf:f3:cc:29:eb:cb:22:eb:ad:08:
ae:e3:63:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:20:24 2025 by rpki-client