Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/omLSO-sCtCB481QVdesf5c4b-Bk.roa
File: omLSO-sCtCB481QVdesf5c4b-Bk.roa (raw, json)
Hash identifier: zwJZAeZQuVyy6L6C6slVC4TbHHKOv31wElksPK2yn9Y=
Subject key identifier: A2:62:D2:3B:EB:02:B4:20:78:F3:54:15:75:EB:1F:E5:CE:1B:F8:19
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018B5C0E80713181E35A3C87D7791420C366
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/omLSO-sCtCB481QVdesf5c4b-Bk.roa
Signing time: Mon 23 Oct 2023 10:22:16 +0000
ROA not before: Mon 23 Oct 2023 10:22:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Oct 2023 04:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5c:0e:80:71:31:81:e3:5a:3c:87:d7:79:14:20:c3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 23 10:22:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a262d23beb02b42078f3541575eb1fe5ce1bf819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f4:fa:47:85:c2:e2:21:31:0d:1d:6b:68:a1:
04:cd:cd:3b:28:53:43:d2:24:68:07:e1:fd:b7:cb:
ab:fe:e9:21:bf:98:0b:28:9a:ef:7a:ca:88:c3:28:
45:04:12:0a:fe:38:9b:2b:71:37:3b:53:4b:bd:a6:
e1:19:15:48:99:38:3e:6a:b6:40:ea:04:52:57:ef:
b6:c3:57:8e:76:8c:01:0b:ff:56:d8:08:c2:c1:5b:
55:db:e9:c8:8a:bc:b1:3c:70:45:11:81:9b:36:ff:
30:d8:e4:73:ac:a9:c0:22:e2:38:82:a6:8c:2e:a9:
43:76:04:a4:08:c9:69:99:0a:c9:c5:6d:28:f7:5c:
09:95:37:f4:28:3d:26:14:c5:2a:65:dc:bf:82:7b:
c5:e8:24:c3:9a:a5:57:19:dc:6f:3e:10:6b:0d:9f:
f6:49:6e:3a:ac:14:04:d8:19:41:e5:91:1a:da:02:
8e:1b:3c:54:96:13:fa:1f:d4:f2:c2:b8:cf:a5:ee:
37:2b:8b:cb:56:36:66:6a:0f:a7:e0:42:96:cf:58:
08:9c:80:35:80:87:76:b8:68:4d:f5:a7:37:c0:14:
cf:93:03:ed:8c:42:73:38:2a:47:e0:1e:1f:0d:49:
2a:64:d6:89:62:b5:ea:72:f9:58:70:03:05:f1:cd:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:62:D2:3B:EB:02:B4:20:78:F3:54:15:75:EB:1F:E5:CE:1B:F8:19
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/omLSO-sCtCB481QVdesf5c4b-Bk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:f5:b7:fc:26:db:d6:56:b6:f0:5c:3c:8a:ec:46:c0:74:a7:
ca:b6:64:fa:fb:09:27:95:14:58:a7:2c:8e:58:a4:cb:ee:d1:
6f:e4:26:4b:25:b3:b0:85:f8:82:db:e0:71:c8:ac:80:51:e6:
1b:44:c5:0b:97:a5:2b:31:3f:70:9d:0a:e7:40:42:c4:9d:66:
76:72:68:e6:04:4d:14:ca:1f:b2:84:ce:32:55:14:d0:e5:f1:
7b:05:1b:63:d5:19:6e:75:71:c8:9f:e4:60:08:4f:23:ad:e8:
f3:4c:d8:db:e4:e8:e1:aa:79:d7:cd:4b:79:5f:c1:2d:9d:00:
8e:28:a4:69:ea:3a:f8:59:18:c3:b0:a0:95:6c:e6:14:30:c9:
6d:9a:f9:7a:51:5e:60:d3:a9:cd:4e:86:7c:56:31:c7:53:d3:
54:ae:81:37:ec:08:30:c4:73:c5:e6:a8:96:61:9a:0f:b1:f4:
2c:7c:ad:2f:c5:70:02:a6:67:70:ba:2b:ca:0a:c3:c6:1f:e9:
03:ef:21:12:45:8d:ea:78:d3:16:7a:74:e7:ef:74:e4:45:93:
a8:d5:04:f9:f9:7c:30:32:ed:57:55:77:c3:89:f8:15:68:97:
ba:4c:d0:27:22:b7:6d:b8:f7:34:41:66:a0:ed:5e:96:bb:b2:
0e:a3:8b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:37 2024 by rpki-client on console-fra.rpki-client.org