Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/oBg_OLPKeeARLXI0zalm8STHDFU.roa
File: oBg_OLPKeeARLXI0zalm8STHDFU.roa (raw, json)
Hash identifier: rZltoio4SkchmFzKIDy9eTjhOcMJ7XAh6vkmw/svqII=
Subject key identifier: A0:18:3F:38:B3:CA:79:E0:11:2D:72:34:CD:A9:66:F1:24:C7:0C:55
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019128487D2CCA78F320913D8CEEAC054387
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/oBg_OLPKeeARLXI0zalm8STHDFU.roa
Signing time: Tue 06 Aug 2024 15:22:04 +0000
ROA not before: Tue 06 Aug 2024 15:22:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43581
IP address blocks: 45.155.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 09:48:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:28:48:7d:2c:ca:78:f3:20:91:3d:8c:ee:ac:05:43:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Aug 6 15:22:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a0183f38b3ca79e0112d7234cda966f124c70c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ce:e5:42:55:31:cb:ea:5e:07:c8:13:16:0c:
50:0d:2d:71:7e:b9:d5:c1:eb:6c:0b:4d:63:1e:00:
58:35:41:b5:25:84:16:16:1e:bd:d4:37:5c:ea:42:
27:8c:aa:ea:7a:47:92:8f:22:02:36:3c:2f:16:52:
fd:76:47:80:49:80:79:c1:7f:3c:e0:3e:0e:6a:5b:
61:37:76:1c:41:9d:69:7f:ac:0c:22:39:1c:3c:c8:
79:0c:62:6e:94:94:6c:0e:bd:01:9f:2f:30:bb:1c:
b1:1c:4c:45:c1:fb:2a:d3:45:1a:e7:20:8e:24:ac:
4c:eb:ce:60:12:0e:8b:24:1f:6c:8e:07:87:a9:2d:
a6:03:73:7f:0d:2c:7e:90:04:8a:6f:8b:6f:7e:a9:
e9:e3:84:3f:4c:1b:92:4b:8d:f0:c0:d6:b3:ca:df:
a4:23:67:97:90:eb:f3:26:19:07:e0:a0:77:d3:3d:
75:16:9e:05:01:8b:2c:ba:ed:bc:c5:f3:12:dd:4e:
e0:36:65:ce:c0:83:1e:ef:74:27:d5:56:db:36:31:
06:60:0c:c3:74:43:d1:b8:2e:7b:c0:3b:df:d4:d2:
a2:e7:4d:56:a0:6b:b0:52:5b:02:4e:d1:e3:7d:00:
9e:34:54:7c:1e:2c:f4:1e:ef:56:cf:88:32:46:bf:
51:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:18:3F:38:B3:CA:79:E0:11:2D:72:34:CD:A9:66:F1:24:C7:0C:55
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/oBg_OLPKeeARLXI0zalm8STHDFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.207.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:af:f3:71:af:5c:3b:91:b2:03:34:1f:a2:02:62:c8:c8:f8:
1c:71:94:ee:2a:b9:3a:7b:ee:c4:84:ff:70:26:86:6c:3a:bd:
18:c6:a4:54:c7:4b:85:44:80:f6:1f:d6:a1:9e:56:f3:1e:f6:
6c:67:f3:36:f9:49:75:44:f0:b1:af:1c:17:6f:1c:52:68:67:
73:22:9e:50:90:61:75:5b:1c:8f:06:36:98:0a:f3:48:49:b9:
64:0b:1b:a8:e3:03:88:af:83:48:79:85:70:a9:e3:11:5a:01:
9a:0f:2e:af:be:2c:72:20:9c:82:91:43:a6:c4:8d:5e:91:b6:
f6:27:a1:3a:08:01:cb:53:ac:3c:71:b0:12:ef:f6:0d:2e:8d:
8e:79:1b:b1:50:6d:1b:ee:86:31:66:f4:94:05:b2:f4:fd:15:
0e:0b:d8:7f:ea:5f:9e:77:94:1b:19:e8:86:d7:f3:be:a6:aa:
dc:b7:e5:a4:1c:3f:c2:94:4a:a8:07:eb:e5:38:8d:8a:3d:b7:
43:0c:37:c4:ea:91:27:13:72:66:5d:5b:2e:80:53:3e:ff:7f:
dd:77:57:46:da:b1:e1:ba:fd:8a:2c:04:98:78:e9:b0:b6:03:
68:cc:70:27:3d:0a:98:1c:1b:48:f9:b7:a9:8b:9b:b4:ac:60:
5c:fe:59:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:37 2025 by rpki-client