Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/osIj_HWiA-DoHyxzDeIQUeA_cGM.roa
File: osIj_HWiA-DoHyxzDeIQUeA_cGM.roa (raw, json)
Hash identifier: y8sP7I93JHxUfKXkHqPiFKoApkezmROpHNw74eDcePQ=
Subject key identifier: A2:C2:23:FC:75:A2:03:E0:E8:1F:2C:73:0D:E2:10:51:E0:3F:70:63
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 01867826D8CA33B5923C781FF7C63F661708
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/osIj_HWiA-DoHyxzDeIQUeA_cGM.roa
Signing time: Wed 22 Feb 2023 08:04:17 +0000
ROA not before: Wed 22 Feb 2023 08:04:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 45.134.159.0/24 maxlen: 24
45.134.158.0/24 maxlen: 24
185.232.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:26:d8:ca:33:b5:92:3c:78:1f:f7:c6:3f:66:17:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Feb 22 08:04:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2c223fc75a203e0e81f2c730de21051e03f7063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:bd:61:2d:d9:eb:40:cb:24:05:e7:61:ee:
10:06:b7:a4:26:b0:16:f4:92:66:45:04:c4:ca:2f:
91:f6:bc:27:b9:96:ac:ac:7c:32:87:b1:aa:01:db:
70:9e:8d:d9:3a:ba:66:13:4c:b5:6e:64:de:12:1e:
84:a0:0f:b8:bb:6d:6c:c7:40:22:e3:9d:c3:21:ba:
76:b0:6f:37:3e:a4:19:38:82:ac:6d:35:1c:d1:d0:
ab:4b:c2:96:f9:53:64:5a:3b:9e:f6:fa:a0:9e:3e:
5c:60:67:45:6e:22:ed:7a:64:0a:98:5a:03:d4:da:
08:ad:f6:38:62:cf:3d:c1:67:85:56:e5:b3:be:e2:
57:b1:da:8a:db:17:b2:9c:4c:ae:7c:a9:de:78:81:
1b:98:50:95:91:5a:44:d8:8f:e0:06:02:65:a1:b0:
b6:d8:4c:3d:2c:66:b8:79:3c:0f:7e:a5:0d:4b:1c:
38:39:11:78:57:e1:35:0e:b3:e4:ba:da:07:af:b4:
c9:2d:46:94:b3:9e:76:d4:1a:fa:a2:90:c8:28:34:
6d:03:0c:d4:55:2e:79:e5:e7:af:b0:75:f7:e8:66:
31:a9:4a:af:48:ea:29:f9:49:08:ce:a4:8c:5c:ad:
cb:2b:8a:17:22:6b:61:7e:75:9d:62:4a:ee:fd:fb:
c0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C2:23:FC:75:A2:03:E0:E8:1F:2C:73:0D:E2:10:51:E0:3F:70:63
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/osIj_HWiA-DoHyxzDeIQUeA_cGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.158.0/23
185.232.16.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b0:c1:22:d5:b7:2c:3f:5b:7c:92:07:6b:34:98:05:71:e9:
53:04:05:30:94:af:41:a2:6d:28:f3:0b:43:de:28:bc:9d:d2:
ce:5a:3c:3e:80:99:67:ec:e5:0d:ca:fb:01:e9:11:41:6c:7f:
3c:46:cb:41:53:3f:cd:d3:e0:37:54:17:58:8e:c2:d4:0a:56:
ca:c0:db:63:70:30:5c:20:de:7f:e0:7e:92:b3:8d:d9:11:09:
3e:67:cf:97:03:c1:63:04:cc:9c:e4:1c:7e:0a:0a:3c:59:54:
17:55:dc:f1:d6:13:31:84:b0:ac:dd:8d:d1:3f:34:73:2c:00:
04:83:ab:34:2b:1d:65:ca:84:9e:63:1b:d0:f6:85:56:54:c5:
68:83:c8:7e:ae:d2:33:ad:3c:64:5e:55:6f:0a:ed:d6:4a:16:
87:11:d8:ce:a9:26:d2:56:58:6a:ac:72:76:b4:68:6a:54:6a:
f0:e3:12:44:e1:bc:09:06:a1:eb:87:1e:84:50:18:bb:0b:1c:
23:ff:a4:ab:fe:b8:e0:1d:64:2b:5b:58:9d:aa:aa:70:eb:b8:
c2:29:c2:82:50:f6:b8:d2:40:ef:fa:64:cb:65:ce:38:e0:50:
0e:6b:76:da:24:38:7d:0f:37:d8:f1:d4:d6:56:c4:92:64:89:
76:05:b7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:45 2024 by rpki-client on console-fra.rpki-client.org