Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/OwPvLvHxN3LPz--ojOXlDAaiyDo.roa
File: OwPvLvHxN3LPz--ojOXlDAaiyDo.roa (raw, json)
Hash identifier: +VRiwQ8KdITlAry0xE9tVl7K15ffu2AWs0/fa8dcUpQ=
Subject key identifier: 3B:03:EF:2E:F1:F1:37:72:CF:CF:EF:A8:8C:E5:E5:0C:06:A2:C8:3A
Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f
Certificate serial: 019024CA463C8E36B3CE1020B625E30D9031
Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/OwPvLvHxN3LPz--ojOXlDAaiyDo.roa
Signing time: Mon 17 Jun 2024 06:02:34 +0000
ROA not before: Mon 17 Jun 2024 06:02:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400866
IP address blocks: 45.87.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 18 Jul 2024 11:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:24:ca:46:3c:8e:36:b3:ce:10:20:b6:25:e3:0d:90:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f
Validity
Not Before: Jun 17 06:02:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b03ef2ef1f13772cfcfefa88ce5e50c06a2c83a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c5:57:5e:ed:6e:30:c4:d8:85:d5:45:0d:86:
11:4c:59:fd:89:9c:4e:fb:73:95:51:ab:69:78:16:
c7:71:3d:f5:62:bd:f5:bc:05:ce:38:fa:0d:dd:45:
61:66:be:49:55:55:9b:08:3b:c1:73:42:c0:59:b0:
40:8d:c5:c7:e4:75:56:d1:f5:97:a8:e7:1a:da:9d:
3d:bb:e2:21:75:77:26:29:94:cf:9d:2a:81:3f:e6:
6a:34:1f:a3:6f:35:58:ab:c3:94:c2:26:5b:af:78:
84:a3:cb:ae:5e:62:24:46:6d:10:d8:57:64:86:1a:
10:80:88:e6:b1:c0:7c:01:d8:d6:b7:38:34:b7:6a:
0a:ac:84:4f:9f:00:12:82:9e:e6:72:da:5d:dc:12:
41:66:50:36:eb:14:24:81:67:43:5f:7b:8e:b2:1e:
df:72:bc:eb:4f:dc:83:fa:3a:da:fb:7f:5d:60:7e:
bd:4c:67:1d:13:4f:c3:a9:b3:7e:f2:01:20:df:89:
75:94:5b:f7:d8:b9:52:03:62:23:41:9c:98:60:db:
2e:dc:74:6a:77:42:4a:ca:b9:b3:71:dd:47:c3:ae:
a2:ff:df:13:5c:c8:3d:d3:95:2d:5c:92:00:2f:06:
84:e5:25:fb:f2:39:19:14:4c:e5:22:b6:02:88:18:
52:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:03:EF:2E:F1:F1:37:72:CF:CF:EF:A8:8C:E5:E5:0C:06:A2:C8:3A
X509v3 Authority Key Identifier:
keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/OwPvLvHxN3LPz--ojOXlDAaiyDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.161.0/24
Signature Algorithm: sha256WithRSAEncryption
86:e0:24:b5:86:69:fe:1b:a9:13:b2:b7:4b:a7:9e:c3:a1:4b:
9a:83:da:20:04:d8:17:30:2f:fd:07:25:1f:98:e4:a8:79:72:
eb:28:4a:bf:0c:83:33:d6:75:39:d0:64:0e:21:10:1d:19:fb:
f3:1b:86:e8:1f:e3:55:62:f2:73:32:71:3d:79:1b:ad:75:c5:
cb:c1:b5:88:2d:12:cf:72:4c:ed:57:fb:b1:d4:c9:ae:82:64:
54:01:1e:7f:be:08:2c:5f:5d:1d:30:ad:38:2d:ad:02:cd:93:
de:1e:fc:eb:81:9d:15:a5:dc:cf:a6:bb:a0:a9:4c:ca:35:29:
97:e1:01:81:3a:e6:08:76:0f:15:2e:7c:da:f8:8c:a2:86:f9:
08:14:cd:0e:b7:55:1a:fa:ed:7b:00:fd:63:04:c7:05:55:19:
cc:d7:29:14:43:a9:b6:fe:80:0c:b0:1e:8c:10:11:e7:54:e9:
1b:93:5c:3b:b3:ef:f3:51:89:1a:81:ab:ba:af:d3:38:44:a7:
6d:c3:5b:fc:20:58:1f:86:2d:72:9d:ac:26:4b:6f:c5:2f:f5:
b2:df:04:1a:22:57:8b:d3:7c:16:6f:77:64:23:61:ff:2e:7f:
5c:83:a1:44:33:94:40:63:37:d4:b1:2e:f4:0c:41:dd:fa:bf:
4a:c3:26:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:39 2025 by rpki-client