Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/owxiUnqJBsKjPeXUYjekg0a4bSI.roa
File: owxiUnqJBsKjPeXUYjekg0a4bSI.roa (raw, json)
Hash identifier: kIRMeSg9ndWTsV6nGWdMzHTFbpSt2uDCHRYSY1eKVEM=
Subject key identifier: A3:0C:62:52:7A:89:06:C2:A3:3D:E5:D4:62:37:A4:83:46:B8:6D:22
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018BA5426E536F5B689DA34A750F86A82CA1
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/owxiUnqJBsKjPeXUYjekg0a4bSI.roa
Signing time: Mon 06 Nov 2023 15:31:16 +0000
ROA not before: Mon 06 Nov 2023 15:31:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212815
IP address blocks: 45.134.144.0/24 maxlen: 24
185.235.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Dec 2023 12:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a5:42:6e:53:6f:5b:68:9d:a3:4a:75:0f:86:a8:2c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Nov 6 15:31:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a30c62527a8906c2a33de5d46237a48346b86d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:95:31:1a:66:e9:89:48:3b:e4:f1:b7:79:0c:
b3:9b:5a:c8:b4:da:08:e4:c4:0d:a3:33:d9:a9:e0:
ea:0e:b3:56:91:4d:93:78:da:79:05:4c:14:bd:18:
02:9c:f6:52:b2:2a:f5:cb:a7:cd:00:5d:72:74:36:
99:2e:d9:f8:ab:5d:36:7f:72:9d:ec:b3:ed:52:aa:
ae:6a:c1:1b:4f:bf:18:ee:6e:2e:28:96:f9:5a:01:
fc:5a:ff:5d:dc:ec:3b:df:73:c0:ae:7d:56:91:ac:
ee:44:0b:de:09:7a:5d:cb:bc:13:07:d8:08:66:9e:
53:4f:d1:a7:d2:f7:e4:4a:6d:66:84:94:c8:84:66:
ac:7b:8a:0e:54:d7:2f:97:7d:b8:77:f9:2f:41:60:
9d:69:f4:0b:e6:3b:68:9a:c3:67:3b:83:2e:77:28:
21:bb:9f:6b:51:bc:5a:cd:55:79:c4:7f:e6:a8:e7:
a8:69:77:ed:e0:f3:7a:25:40:cc:a2:ac:22:f1:7e:
1b:06:74:d0:ca:30:16:8d:d4:2a:ff:d1:c5:d4:39:
e2:42:d6:8c:39:d3:c2:0f:fb:d8:ad:c3:cb:6d:d6:
41:68:9b:2c:76:32:ea:b8:9e:33:17:66:12:5f:ba:
6a:03:20:8a:e4:2a:64:e8:5b:c0:70:27:41:7d:10:
70:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0C:62:52:7A:89:06:C2:A3:3D:E5:D4:62:37:A4:83:46:B8:6D:22
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/owxiUnqJBsKjPeXUYjekg0a4bSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.144.0/24
185.235.164.0/24
Signature Algorithm: sha256WithRSAEncryption
11:f4:94:a5:a7:b8:c2:82:fe:48:d3:68:b1:c7:c9:42:75:57:
32:70:7e:a0:e5:26:d7:74:2a:ea:e6:da:fe:6d:59:bf:15:f8:
61:de:7b:bf:70:08:1e:83:04:40:69:0c:cc:14:0d:58:c9:3d:
ac:43:ea:2a:e0:09:51:4b:f3:2c:b7:19:c7:4a:81:38:92:a4:
5b:c1:0c:0c:44:f6:9f:14:4f:4f:19:1b:c1:9a:26:aa:56:0e:
e0:09:b8:83:57:bf:8c:ed:bd:06:17:3c:98:b9:67:92:18:6f:
e2:39:03:73:0a:ee:ef:fb:b5:66:5e:cb:a1:6c:b3:96:03:a4:
aa:77:5b:85:fe:e5:8a:91:7e:fd:90:5a:fb:45:4e:67:23:a6:
76:9b:60:17:6e:16:ff:de:51:9f:d2:7e:38:fa:23:fc:c3:c1:
48:91:38:60:a0:85:f1:e8:85:1c:2e:ed:e5:9e:ba:2d:8f:d8:
46:b6:d0:8f:47:d6:42:3e:5d:d2:5f:3c:89:63:ef:ee:23:18:
79:da:51:c8:b1:2f:21:1e:56:b5:f6:63:b8:01:1b:4d:f2:7a:
2c:92:8c:a8:78:33:55:cf:49:e2:b6:29:3e:37:39:d9:af:83:
6a:7b:6f:2e:11:c0:ca:64:b5:07:1f:35:a5:17:35:78:0d:14:
6a:c9:52:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org