Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/Ow92SA9Sf3PpbmEGXGH2kK4Tkfo.roa
File: Ow92SA9Sf3PpbmEGXGH2kK4Tkfo.roa (raw, json)
Hash identifier: ccA4ejNyMZjqajF3al+a8b3jwmrWg7YUa8dgDYQCLTw=
Subject key identifier: 3B:0F:76:48:0F:52:7F:73:E9:6E:61:06:5C:61:F6:90:AE:13:91:FA
Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Certificate serial: 018AD418276591643CE5E398909AA9326431
Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/Ow92SA9Sf3PpbmEGXGH2kK4Tkfo.roa
Signing time: Wed 27 Sep 2023 00:44:27 +0000
ROA not before: Wed 27 Sep 2023 00:44:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46261
IP address blocks: 45.94.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d4:18:27:65:91:64:3c:e5:e3:98:90:9a:a9:32:64:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba
Validity
Not Before: Sep 27 00:44:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3b0f76480f527f73e96e61065c61f690ae1391fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:99:22:4d:48:76:4e:bc:1d:17:26:05:8a:d6:
ad:ec:b0:8e:78:82:da:31:7d:dc:e8:4f:1d:cd:dc:
55:25:7e:e0:07:63:f1:91:67:5a:69:ae:f9:e0:05:
45:8d:3d:96:32:b3:5c:9b:a3:3d:5c:40:95:da:3c:
e3:fb:7e:7a:fc:4d:55:e8:6f:50:8d:ce:49:da:27:
49:1c:3d:5b:f7:30:04:af:1a:6c:f4:cd:15:6d:b2:
0f:75:58:e4:a9:78:0f:69:b9:79:d6:c9:4e:da:ad:
ff:ee:91:c1:97:49:bc:cf:05:24:f6:57:c8:ee:8a:
59:08:56:0b:b1:46:c6:70:8e:a6:0c:d9:f4:c8:d9:
e2:0d:f5:88:0d:02:9b:0c:e6:6d:8d:7b:e5:8b:a1:
5e:59:bd:91:ac:65:65:b4:9f:7d:4f:a7:b2:66:cd:
b1:f3:68:5d:9a:b8:3d:3c:43:0a:f0:7b:44:e6:d3:
03:71:d4:0d:0f:73:34:8a:71:c0:82:b9:53:58:67:
0f:af:9a:f9:cf:c3:ad:9f:58:6c:97:75:3f:35:ec:
8e:4c:24:7b:5d:32:cb:e0:da:f3:94:bc:91:65:a5:
b3:5c:80:5a:15:e8:3d:cb:40:c7:34:4d:36:bb:51:
b0:84:f6:12:ad:99:db:be:97:ce:1e:73:3a:b3:73:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0F:76:48:0F:52:7F:73:E9:6E:61:06:5C:61:F6:90:AE:13:91:FA
X509v3 Authority Key Identifier:
keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/Ow92SA9Sf3PpbmEGXGH2kK4Tkfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:69:1a:53:fe:dd:6a:28:68:39:bc:c4:71:87:6f:69:bc:27:
17:b4:c4:6f:41:3b:bd:e2:98:38:a9:9c:9a:48:b2:4b:6a:ac:
61:45:ec:74:77:73:30:6a:04:18:aa:74:98:e3:b2:71:89:d7:
b8:0b:43:d3:2f:b0:69:1b:07:12:65:d0:b3:49:cf:91:7b:55:
6a:a5:a0:e1:47:44:a4:c7:7d:93:af:cd:a5:62:f1:c0:cf:37:
b9:17:aa:ae:27:b2:10:e0:38:df:89:0f:37:68:ed:d9:e6:07:
21:67:ab:c8:e5:2b:63:0e:e0:f8:6b:a4:de:d6:55:0e:7d:cf:
70:d6:68:3e:0a:e2:b5:a6:b1:b1:23:8c:d9:0d:8d:71:bb:1a:
30:22:84:70:5b:a9:d7:46:b3:c7:d9:2f:2a:75:b3:cf:fd:2d:
b1:e6:53:bb:72:b3:bb:2c:22:5f:6d:c0:fd:d0:11:6f:d8:f9:
40:27:c9:31:ce:3a:27:97:42:40:6b:df:e9:e8:45:a6:13:85:
b5:43:1c:42:a7:7e:0d:f9:3c:22:fe:5f:17:f1:f1:7f:ad:61:
85:da:d6:bb:d7:be:84:8d:f9:bf:cc:15:5f:0e:6a:d2:7a:d7:
d0:1b:ea:3c:16:34:e6:37:91:ee:89:35:93:3e:09:e9:bd:9b:
76:6f:bb:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:26 2024 by rpki-client on console-ams.rpki-client.org