Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/OGjM-dReoTCZzRHhyP81J6EpZCY.roa
File: OGjM-dReoTCZzRHhyP81J6EpZCY.roa (raw, json)
Hash identifier: oPq0zBCnPM2kK8FVu1LJM+V7VobAVQsuRNtRQ32JNUE=
Subject key identifier: 38:68:CC:F9:D4:5E:A1:30:99:CD:11:E1:C8:FF:35:27:A1:29:64:26
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 01856C9397FE6D10760AB923AA073DAE36EE
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/OGjM-dReoTCZzRHhyP81J6EpZCY.roa
Signing time: Sun 01 Jan 2023 09:04:50 +0000
ROA not before: Sun 01 Jan 2023 09:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207442
IP address blocks: 45.143.30.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:93:97:fe:6d:10:76:0a:b9:23:aa:07:3d:ae:36:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Jan 1 09:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3868ccf9d45ea13099cd11e1c8ff3527a1296426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6d:e9:70:ab:cf:15:5d:69:96:cb:66:2e:23:
df:dc:89:dc:b7:d0:30:06:d3:c9:15:19:be:3f:01:
b7:98:6a:a6:59:66:41:c9:6a:d1:a8:a9:f3:ca:aa:
7b:ee:dd:c4:b4:4b:41:e3:fd:fc:00:0d:fa:f9:bf:
a6:b7:a5:c8:0c:44:eb:2a:43:c6:83:18:e8:8f:10:
78:da:4c:8c:26:f1:b3:60:42:7d:d0:8a:b3:d8:ab:
e7:54:e8:6b:27:54:1c:6a:83:a1:d1:90:f4:86:59:
2e:40:a7:70:5f:9e:9a:a5:72:cd:da:10:17:c6:a5:
93:18:fa:a6:26:13:f8:bb:26:db:63:a8:6b:2b:16:
20:e6:0f:36:43:f1:bb:77:6a:cc:14:ad:c3:e6:11:
9d:5f:23:7c:13:18:9f:de:de:80:08:e8:8c:22:e2:
bc:9e:27:06:6c:87:f5:4c:99:ad:16:c2:a1:60:41:
2c:87:11:9e:89:63:44:d9:18:ff:fe:7a:8e:4c:92:
c4:14:c5:2e:98:eb:cc:cb:d0:4a:35:f8:2b:4f:58:
7a:1b:39:6e:12:2c:39:3f:51:f2:1c:72:c7:98:20:
06:28:ab:3f:f8:3c:2b:ae:50:29:e7:b9:2b:bc:a3:
25:a7:87:78:3b:c4:ba:bb:5c:a7:0c:5d:b3:67:4b:
ab:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:68:CC:F9:D4:5E:A1:30:99:CD:11:E1:C8:FF:35:27:A1:29:64:26
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/OGjM-dReoTCZzRHhyP81J6EpZCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.30.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:d4:c6:9c:91:a9:62:33:91:5c:ae:f1:8c:71:5a:01:11:3e:
12:cf:54:d8:47:46:1a:63:6b:d8:90:b9:24:45:cf:a7:30:8a:
93:97:b6:30:ee:19:33:fc:3e:31:c4:91:75:9a:94:05:82:99:
00:cc:eb:94:a0:f8:02:77:72:9f:70:39:b9:48:ff:f7:ff:dc:
81:49:08:a8:9a:46:e7:d6:9a:88:f1:43:63:ad:96:cd:7a:e6:
d3:8b:11:85:00:29:c4:32:c0:da:fb:df:14:90:5e:f0:06:01:
2d:39:0b:9e:30:75:05:c6:98:b0:05:9e:d5:67:94:20:b0:d0:
c2:fe:e1:2b:d2:46:cd:58:6a:1f:f3:d3:5a:7a:a0:08:e7:0a:
5e:f6:20:ff:f3:6b:ce:18:87:5e:bc:04:65:7f:75:f0:44:a1:
6e:af:82:98:c5:e1:bf:fe:a5:90:03:2d:0f:a4:8f:43:c2:2d:
d1:db:70:98:46:87:d6:db:2a:d9:41:3b:e8:c8:84:f0:5f:21:
fc:10:ea:23:40:ab:44:a2:99:a8:3d:92:cb:d1:04:5d:8d:95:
0a:f2:b5:f3:11:bc:f9:8d:62:78:0b:9c:c1:14:42:b8:78:76:
ad:72:fd:5d:53:15:c2:83:23:f0:bd:72:10:c7:06:ab:68:fb:
4d:a9:2c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:55 2024 by rpki-client on console-ams.rpki-client.org