Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/O2yn2Jj53jOk4HxnRSn74rswxVY.roa
File: O2yn2Jj53jOk4HxnRSn74rswxVY.roa (raw, json)
Hash identifier: ovDBsIWxzV/+dtSYEGR0rD26MnRH27gaAPYAsAFn6Lk=
Subject key identifier: 3B:6C:A7:D8:98:F9:DE:33:A4:E0:7C:67:45:29:FB:E2:BB:30:C5:56
Certificate issuer: /CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Certificate serial: 01856C0A2F31E6CBCB66CABB3E4860256B0A
Authority key identifier: 44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/O2yn2Jj53jOk4HxnRSn74rswxVY.roa
Signing time: Sun 01 Jan 2023 06:34:44 +0000
ROA not before: Sun 01 Jan 2023 06:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208007
IP address blocks: 45.155.135.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:2f:31:e6:cb:cb:66:ca:bb:3e:48:60:25:6b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4426d9b3a78543b6964335ee1941ca2971c5694e
Validity
Not Before: Jan 1 06:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b6ca7d898f9de33a4e07c674529fbe2bb30c556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:50:71:2d:6c:58:6e:ad:93:78:5a:da:11:
1a:6e:bb:f7:06:ce:9b:94:47:8c:8c:90:45:17:6a:
92:23:40:95:2e:e4:f5:28:43:a4:a7:a9:e7:1f:b0:
40:02:d8:21:b5:88:f2:63:83:d3:74:9a:51:31:b1:
f7:3a:06:c9:78:37:4c:4b:04:d6:44:fc:b3:81:92:
03:25:05:5a:e3:14:7e:68:2e:fa:3f:58:ce:ff:87:
20:15:d3:1f:3a:bc:50:fe:a1:b0:ef:d9:ec:12:b9:
06:fe:86:f4:8b:1d:ff:62:67:3f:a3:a6:84:03:d1:
41:07:f8:e2:b2:79:3c:45:07:3e:10:79:4c:97:d7:
fe:1b:1e:cf:a5:75:2b:57:2d:b8:3e:40:5c:e1:17:
ce:ca:bf:77:f7:a0:54:23:bb:c9:30:d8:4c:11:ee:
c8:5a:30:79:04:99:9f:7e:80:94:88:6e:59:41:43:
29:f7:94:2d:4a:c9:bb:d3:0e:45:1a:01:4c:dc:26:
21:cd:bf:24:e9:f7:79:73:ee:b2:d6:74:7c:52:9b:
c3:0a:81:6f:9f:27:21:7e:bb:a1:73:08:25:6b:70:
02:13:13:88:7b:c2:2a:80:5f:a8:4c:f1:71:78:97:
0e:4e:28:cb:42:e1:df:ac:a5:8d:5f:5f:a9:28:bf:
df:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6C:A7:D8:98:F9:DE:33:A4:E0:7C:67:45:29:FB:E2:BB:30:C5:56
X509v3 Authority Key Identifier:
keyid:44:26:D9:B3:A7:85:43:B6:96:43:35:EE:19:41:CA:29:71:C5:69:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/O2yn2Jj53jOk4HxnRSn74rswxVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/b8e323-9349-4449-b954-0de796a4a332/1/RCbZs6eFQ7aWQzXuGUHKKXHFaU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.135.0/24
Signature Algorithm: sha256WithRSAEncryption
52:30:4a:b4:a8:a0:ac:83:86:92:7a:58:34:6c:0a:97:e1:5a:
6a:b0:fc:a8:fb:97:ca:12:6c:4e:5e:7f:a7:ff:48:87:4e:f6:
0d:3a:04:fb:f2:d5:24:61:3f:d8:e7:1c:d3:21:a9:9c:67:33:
4e:71:8d:e8:3c:f5:f8:d2:a0:96:01:6c:9b:30:98:03:5c:28:
f0:c2:b9:76:68:6f:65:ab:b1:20:83:43:47:7a:ab:3e:78:4c:
db:8e:b5:10:67:8a:22:60:77:4b:b1:be:42:b9:ae:a8:6f:a3:
24:4d:4f:f4:6e:e1:1f:09:70:9b:55:92:f5:57:b1:35:4e:da:
18:d7:c7:d6:f9:7a:de:5d:cf:7a:b5:08:2e:f0:5b:05:0b:64:
55:61:a5:03:40:64:7a:95:84:9b:03:26:c7:bc:10:d9:e0:e0:
ed:76:40:65:bd:79:74:87:4a:90:34:29:8a:bf:dd:7f:6f:b5:
78:11:40:ea:5f:54:9f:84:2e:c2:62:4c:65:14:9a:9a:3a:d3:
d4:ee:56:0d:2b:c1:44:16:ed:28:35:d1:92:40:5d:ef:5a:07:
29:93:70:37:eb:f2:b5:63:5b:fc:51:8d:bb:da:b6:49:52:4a:
23:73:29:33:c5:7b:5a:b8:60:de:65:f9:7b:7c:ea:f7:b0:ec:
9d:9c:62:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:15:34 2024 by rpki-client on console-ams.rpki-client.org