Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ov39W8pjavTG967fd8H3GE9XU8o.roa
File: ov39W8pjavTG967fd8H3GE9XU8o.roa (raw, json)
Hash identifier: X+U7nnwqNU4ftdd9omyIWaVQVNll69j5pJV56SAqjeM=
Subject key identifier: A2:FD:FD:5B:CA:63:6A:F4:C6:F7:AE:DF:77:C1:F7:18:4F:57:53:CA
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 018CDE9B98A5FB285ABC09BE0DB6834FBFD4
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ov39W8pjavTG967fd8H3GE9XU8o.roa
Signing time: Sat 06 Jan 2024 11:49:48 +0000
ROA not before: Sat 06 Jan 2024 11:49:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205663
IP address blocks: 45.157.210.0/24 maxlen: 24
45.157.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jan 2024 10:04:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:de:9b:98:a5:fb:28:5a:bc:09:be:0d:b6:83:4f:bf:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Jan 6 11:49:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a2fdfd5bca636af4c6f7aedf77c1f7184f5753ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:49:6a:4a:b5:e4:13:9d:9f:9a:35:7b:cb:95:
33:77:73:1b:67:91:24:a9:6e:96:15:1b:b7:a3:c1:
29:60:eb:28:17:35:c7:21:2b:00:f8:8b:b7:c2:57:
07:99:2a:16:08:67:a9:4a:49:f3:a0:7e:f2:9a:3e:
35:2e:36:a8:18:1c:e8:e0:85:c0:2d:9e:5c:75:5b:
40:6b:87:55:f1:f3:60:cc:27:a5:8c:8e:3a:6e:35:
ba:67:04:f2:49:60:d0:e8:56:8d:58:07:4a:6c:01:
46:89:09:57:91:35:0c:9c:51:40:26:db:7b:66:9d:
82:66:71:b6:71:ee:fe:bd:bd:f0:60:49:c8:9b:64:
cb:29:8c:87:ee:42:6e:f8:0c:10:75:9e:65:fd:c0:
53:8b:df:b5:fc:34:b9:07:40:10:1d:b0:b4:3f:f4:
1b:ac:8b:4a:73:5b:fd:2f:95:4d:04:3f:1c:ed:af:
d7:02:75:ec:67:9c:d7:2a:88:fc:30:2b:75:3a:bd:
ff:ee:d6:db:af:fa:e2:ff:ba:18:4d:15:67:33:5a:
b7:a9:2e:27:37:b7:ee:9d:73:77:48:49:98:29:30:
97:b5:23:82:c6:be:60:80:55:e6:ff:92:82:52:44:
9b:df:33:e2:f5:dd:6c:84:60:16:fc:cc:49:b2:d5:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FD:FD:5B:CA:63:6A:F4:C6:F7:AE:DF:77:C1:F7:18:4F:57:53:CA
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/ov39W8pjavTG967fd8H3GE9XU8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.209.0-45.157.210.255
Signature Algorithm: sha256WithRSAEncryption
bd:d5:c0:24:59:b9:fb:bc:65:6b:ec:f6:5d:8d:b0:a4:ad:0b:
08:29:1a:b4:9e:74:49:47:cd:86:72:54:90:20:21:0a:a1:ae:
d9:50:6b:44:79:ab:df:b6:8a:00:33:32:75:09:82:c8:0d:f1:
f3:d8:bf:7c:b4:16:7f:5e:6e:05:d9:ed:75:69:f9:28:95:ce:
66:ee:23:fc:5a:cd:13:c2:21:49:d2:b5:0d:67:52:35:57:f6:
8d:1b:f0:db:b9:b2:8f:3f:61:93:a0:f0:30:ff:a3:54:0d:d9:
94:43:59:e3:cc:3a:c5:14:dd:4d:a4:31:d0:7b:48:03:a3:e5:
2b:d2:b1:5b:99:f4:53:44:2e:bf:ea:ae:1c:bd:55:63:3a:ee:
e8:ff:3d:e8:f9:bd:55:09:cd:0a:de:82:99:d8:ba:f6:76:52:
1a:83:31:f7:0d:89:c7:fc:31:17:30:a6:45:93:ed:8c:ad:d4:
f0:1a:ef:9a:03:12:b5:61:a7:26:52:13:96:83:23:95:7e:6f:
ac:ed:b3:26:f7:c0:bd:d5:e0:64:4a:90:8b:5f:d3:af:70:28:
66:99:c2:37:26:70:64:6c:e5:b3:e2:6d:09:20:f5:a9:e4:14:
5a:b0:3d:a9:6c:92:29:31:80:87:35:62:dc:ab:77:30:3e:31:
71:91:81:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 9 13:52:10 2024 by rpki-client on console-ams.rpki-client.org