Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/OQtpXhnLqgQ8ASmowBxrgEmR3nY.roa
File: OQtpXhnLqgQ8ASmowBxrgEmR3nY.roa (raw, json)
Hash identifier: DrpnoXeSf7NckOQnccfK5FAWyKmtTDYIERsNf3j6W9U=
Subject key identifier: 39:0B:69:5E:19:CB:AA:04:3C:01:29:A8:C0:1C:6B:80:49:91:DE:76
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 018CC8DCF7F9FDA03D707149D78745A7D6F4
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/OQtpXhnLqgQ8ASmowBxrgEmR3nY.roa
Signing time: Tue 02 Jan 2024 06:29:33 +0000
ROA not before: Tue 02 Jan 2024 06:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210162
IP address blocks: 45.143.31.0/24 maxlen: 24
45.143.28.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 18:51:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:f7:f9:fd:a0:3d:70:71:49:d7:87:45:a7:d6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Jan 2 06:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=390b695e19cbaa043c0129a8c01c6b804991de76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:7b:7f:4b:7f:31:31:d9:3e:77:31:d6:0d:
4c:a0:e3:a6:40:6f:b1:fb:cf:45:d1:c8:e6:4d:3d:
5a:40:88:99:c5:e6:e7:dd:4d:2a:b0:02:97:13:46:
14:e3:96:d0:88:09:b7:4d:fc:1e:1e:2b:cd:aa:a0:
b2:a4:ea:7d:21:59:91:78:e1:62:2e:58:74:bc:80:
1c:1e:b3:40:ec:6c:d7:6c:4b:3c:78:b8:c5:c5:dc:
c9:3f:17:d4:7a:37:76:d4:9a:fe:95:70:44:9b:9c:
51:67:61:ac:b1:11:cf:d2:e5:ae:05:c2:db:28:f6:
88:c7:a7:e5:b6:e4:5e:59:76:e6:a6:9f:6d:4d:f0:
0c:41:46:c9:61:5b:ce:94:17:1b:a3:e5:99:31:aa:
77:9f:4a:27:f1:d0:35:77:c2:71:3b:49:63:18:6f:
bd:cd:b6:99:cc:41:52:b4:cc:52:54:2d:fc:93:93:
5c:93:99:60:f7:4f:29:38:24:5e:82:e7:b0:9d:fc:
67:77:da:1d:13:c3:d7:c8:10:09:47:68:ac:49:81:
6e:28:eb:7d:af:dc:67:6a:cd:8b:73:3d:84:1c:de:
3b:06:81:af:f6:72:71:e4:7f:61:97:ab:e8:84:91:
db:50:4f:fb:a5:31:2a:45:a0:79:15:c6:a1:06:84:
7a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0B:69:5E:19:CB:AA:04:3C:01:29:A8:C0:1C:6B:80:49:91:DE:76
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/OQtpXhnLqgQ8ASmowBxrgEmR3nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.28.0/24
45.143.31.0/24
Signature Algorithm: sha256WithRSAEncryption
75:5a:de:55:5c:f7:46:08:00:49:26:ed:35:c0:87:a7:79:c0:
7e:a6:13:d6:f6:9b:e0:16:d5:5d:ef:a9:5d:63:bb:3e:c1:68:
84:38:51:8f:85:60:fe:62:1f:64:97:94:9b:f0:52:66:1d:a5:
78:fd:55:ca:fb:17:f7:93:bf:78:32:f7:26:5b:3e:d2:18:5e:
52:b9:43:60:1b:4f:3b:af:57:57:9e:01:d0:55:65:a4:07:58:
76:3f:b7:1a:bd:25:00:2e:46:a4:b4:b8:22:89:39:e6:26:9b:
4a:6f:e0:53:d5:96:67:64:f4:36:c1:79:c4:a9:af:53:c0:b6:
0e:be:e4:d6:c4:f2:70:b4:73:83:3f:44:a4:18:e4:44:31:52:
96:5d:00:67:29:6b:03:a6:56:09:a7:a3:2c:13:5a:88:40:46:
63:c0:6d:26:03:f9:d4:59:57:1c:5c:33:41:4d:81:e7:88:ce:
c1:f6:45:c8:5b:fa:d1:c7:92:3c:fa:cb:f0:47:71:10:40:8f:
be:c4:b5:ae:b4:0c:57:93:49:92:54:55:fc:1d:ee:1b:ff:6e:
c6:5d:52:46:ca:23:f1:bf:83:fd:bd:db:3e:38:77:fb:9e:4e:
8d:5a:a7:4c:1e:6e:a6:0b:6f:d2:c0:d1:f0:5d:bb:67:bb:f1:
72:0c:f6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:55 2024 by rpki-client on console-ams.rpki-client.org