Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/Ob2PJNujnArd1lnUKC3_VU7tfe8.roa
File: Ob2PJNujnArd1lnUKC3_VU7tfe8.roa (raw, json)
Hash identifier: KpnJHiLG12A8rZZlLUr3+7o9mWcNw+KvtS6J+rbbqsc=
Subject key identifier: 39:BD:8F:24:DB:A3:9C:0A:DD:D6:59:D4:28:2D:FF:55:4E:ED:7D:EF
Certificate issuer: /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Certificate serial: 0188297020A12E81FAFDFF1CB1096776FAB4
Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/Ob2PJNujnArd1lnUKC3_VU7tfe8.roa
Signing time: Wed 17 May 2023 11:19:54 +0000
ROA not before: Wed 17 May 2023 11:19:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 45.85.99.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:70:20:a1:2e:81:fa:fd:ff:1c:b1:09:67:76:fa:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Validity
Not Before: May 17 11:19:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39bd8f24dba39c0addd659d4282dff554eed7def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:19:a4:20:23:6a:2e:eb:85:65:32:4c:6a:bd:
43:ea:34:7b:5b:31:02:ca:46:91:5c:5f:c2:98:c1:
8c:8a:5a:87:e7:84:56:75:31:7c:b7:a0:d3:bb:1e:
ee:be:e0:03:08:79:08:40:f4:a5:bd:14:a4:4f:b1:
33:42:85:05:f7:96:ba:b3:e5:5a:ef:03:17:b7:53:
cb:59:a2:a7:ce:e3:af:21:b3:3b:cb:25:b4:d9:f4:
75:91:4c:d9:16:e3:9f:9d:8c:f2:3d:a0:f4:67:50:
43:af:72:b6:dc:6d:8b:fe:f0:ad:38:47:ad:1a:d5:
20:4b:4a:2e:9a:85:29:42:c7:8a:1d:c3:79:4e:9a:
38:0f:9d:d1:19:29:c1:ca:52:8e:f3:e5:61:13:a2:
71:f1:6f:2a:b3:95:85:4b:20:39:29:ab:bd:49:b7:
9b:e7:5c:17:74:8d:26:d7:a0:12:83:ce:91:f4:0b:
5a:c8:c7:c5:62:32:84:5d:18:50:39:97:39:eb:35:
0c:41:26:9c:36:65:df:d0:24:09:5c:74:ed:5d:23:
c7:67:10:6b:5d:82:5b:14:6d:ec:b2:fe:26:2a:6c:
2e:da:27:ce:a0:0c:aa:4b:20:71:c5:94:70:c8:6a:
48:eb:55:c4:da:21:b4:77:93:31:fe:cd:ea:a5:8b:
43:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:BD:8F:24:DB:A3:9C:0A:DD:D6:59:D4:28:2D:FF:55:4E:ED:7D:EF
X509v3 Authority Key Identifier:
keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/Ob2PJNujnArd1lnUKC3_VU7tfe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.99.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:09:e2:c6:0c:48:e5:61:8c:74:20:44:f7:1e:83:bd:55:d2:
5f:3a:14:b5:2f:57:e4:76:15:d7:4f:fc:f1:d7:b9:1e:b4:43:
95:00:33:b3:2d:d9:cd:7d:1e:12:f1:61:98:a9:a2:61:56:eb:
f9:09:2d:c0:9e:f8:28:d4:06:4d:13:d9:9b:0e:06:75:f5:61:
1a:3e:28:fe:3c:1f:5a:a5:45:f8:5b:1e:86:07:c9:89:78:4e:
08:46:81:e0:dd:de:b4:a6:5f:13:ae:a7:b5:fa:c7:a1:e4:a2:
b4:a6:7d:66:dd:05:44:18:89:3d:d2:a1:41:8f:ba:1a:fe:d1:
aa:89:15:37:2b:45:8c:e4:b1:31:39:9b:8b:14:c5:d0:dc:77:
d2:28:87:9f:03:7a:fe:f7:9d:a7:2c:e0:48:da:df:fa:03:a5:
85:03:3a:46:4a:95:f2:88:06:71:a1:a3:7c:da:a7:ce:36:68:
e2:c1:b9:ed:66:9c:fa:99:87:e6:a3:92:e5:24:ba:1f:de:73:
67:71:25:23:cf:d0:38:f5:eb:e3:de:b3:51:40:78:91:48:f3:
e2:35:35:aa:cf:3f:ee:b7:a0:26:12:a8:6c:e2:9f:5f:64:39:
d8:c6:ff:79:d4:00:31:f8:13:cf:99:1b:3c:34:38:90:74:03:
64:e9:c4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 15:02:30 2024 by rpki-client on console-ams.rpki-client.org