Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/OshWcbNL-szFTCMQATbnyfAiWac.roa
File: OshWcbNL-szFTCMQATbnyfAiWac.roa (raw, json)
Hash identifier: P+4JlUMQBFIUFOxhRQNTRAjPqLx2h4xlvXK8dhIvXC0=
Subject key identifier: 3A:C8:56:71:B3:4B:FA:CC:C5:4C:23:10:01:36:E7:C9:F0:22:59:A7
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018CEF2FE0161977909FA8BB60BA282E7B78
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/OshWcbNL-szFTCMQATbnyfAiWac.roa
Signing time: Tue 09 Jan 2024 17:05:41 +0000
ROA not before: Tue 09 Jan 2024 17:05:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198078
IP address blocks: 45.139.199.0/24 maxlen: 24
45.139.198.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Apr 2024 19:30:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ef:2f:e0:16:19:77:90:9f:a8:bb:60:ba:28:2e:7b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 9 17:05:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3ac85671b34bfaccc54c23100136e7c9f02259a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:80:a1:06:82:d5:4c:33:8f:4c:4c:78:e7:db:
d3:4d:01:c0:88:25:e3:dd:9e:fb:eb:48:dd:0a:97:
54:ef:84:1f:c1:44:5a:33:bd:a3:bb:ef:dd:cc:5f:
56:63:b4:c0:56:eb:c1:88:e7:ff:de:1a:0a:d0:7e:
48:ab:7e:cc:e2:1c:95:5c:fd:7e:03:bd:3d:65:b4:
b9:ae:85:a5:6d:53:50:01:f3:55:0b:56:13:0c:67:
89:c4:64:48:fa:0a:be:14:45:a0:83:78:66:26:6e:
d3:3d:26:1b:74:17:70:df:59:2e:0e:27:bb:41:60:
9d:df:47:c0:6f:ab:3e:1c:15:32:c1:32:17:89:0c:
50:96:f1:70:f1:22:3b:8f:a2:fd:1d:19:f8:7f:be:
90:50:a0:17:b7:e9:8c:db:47:0a:ec:47:10:46:3a:
ea:6b:58:f9:3c:ea:98:11:f1:6d:63:77:9e:94:64:
18:a2:48:28:7a:d4:be:47:ce:04:1e:52:79:80:f9:
e7:4e:f3:58:06:89:14:aa:15:2a:82:55:70:4b:0f:
e4:69:5d:37:c9:94:07:11:53:1d:5d:7b:d6:3e:90:
f5:f6:98:be:0a:bc:fd:ef:13:ec:83:2e:db:d9:5e:
5e:78:4f:36:20:07:81:eb:5d:aa:6e:a2:63:e6:14:
ab:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C8:56:71:B3:4B:FA:CC:C5:4C:23:10:01:36:E7:C9:F0:22:59:A7
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/OshWcbNL-szFTCMQATbnyfAiWac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.198.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:c5:74:ac:3e:70:9b:6c:dd:83:c7:44:55:79:a1:c8:b9:79:
e3:25:96:53:0b:53:63:af:45:dc:23:39:26:a6:7f:22:1c:85:
3f:36:4d:c3:c9:b8:96:6b:28:27:5f:2e:f8:4e:9c:01:87:9e:
b0:16:66:c8:b4:a3:02:05:94:10:c3:ec:c0:37:4c:4f:a3:80:
07:22:5c:a8:2f:51:db:0d:8c:da:e4:39:b3:26:47:ea:01:14:
98:78:ae:8f:35:78:27:37:c1:db:e5:e6:77:c9:a6:69:73:b4:
8d:54:f0:53:dd:5f:61:71:ed:18:d7:fe:53:0a:dc:33:58:20:
61:a8:7d:58:2c:85:41:fc:e5:6b:10:f1:eb:5c:c3:c9:55:a5:
35:54:3a:d4:43:46:eb:fd:3b:88:1b:83:90:c1:ac:b4:53:07:
aa:68:f0:1d:f0:19:39:92:06:d8:27:d5:ed:d2:cb:4f:ff:99:
ed:8f:4b:18:34:9e:00:05:c2:9d:8c:ed:c8:bf:7a:f1:3c:28:
20:70:c4:21:8f:c4:a4:ed:14:27:24:8a:44:3d:ae:99:e8:fb:
c2:d5:62:f2:f0:38:55:2b:19:cc:93:f6:48:cd:d4:3e:5e:72:
a6:c4:c4:59:ee:4f:66:8b:eb:b8:91:bf:61:2d:87:95:c6:a8:
6a:1c:19:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:43 2024 by rpki-client on console-ams.rpki-client.org