Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/olp_c91X8eT8zbC3i_mWGcEjMlE.roa
File: olp_c91X8eT8zbC3i_mWGcEjMlE.roa (raw, json)
Hash identifier: 6Qgaj4/jUo3T1f2zJwOcaS4XhXwlLQD9NvncUTjVHOI=
Subject key identifier: A2:5A:7F:73:DD:57:F1:E4:FC:CD:B0:B7:8B:F9:96:19:C1:23:32:51
Certificate issuer: /CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Certificate serial: 01856F6FF0C6241313B5F95EF23A3463847A
Authority key identifier: 8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/olp_c91X8eT8zbC3i_mWGcEjMlE.roa
Signing time: Sun 01 Jan 2023 22:24:45 +0000
ROA not before: Sun 01 Jan 2023 22:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 46.174.136.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 May 2023 08:16:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:6f:f0:c6:24:13:13:b5:f9:5e:f2:3a:34:63:84:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a5d86aab4c0974f0c27f43d968df426f53df5d2
Validity
Not Before: Jan 1 22:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a25a7f73dd57f1e4fccdb0b78bf99619c1233251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f9:23:b8:2d:6d:bd:2e:6c:d2:19:7d:80:59:
ee:f4:d2:1d:f8:3a:5b:37:ed:ff:e7:70:4c:09:6d:
09:e7:f3:e7:93:0b:a6:3d:e9:0d:60:07:d0:47:5b:
8b:aa:0e:26:8a:1e:95:83:a1:53:64:1c:8b:0b:1f:
06:7d:e7:e9:f4:16:11:72:bd:3a:9f:13:76:54:fb:
c0:de:ab:e5:d4:03:40:1b:bb:7b:17:a1:eb:00:99:
73:55:e9:2d:72:8f:5a:b1:06:c3:0a:cb:c5:12:5d:
79:48:46:ff:1a:65:1b:7a:65:c3:ec:b6:60:0b:c4:
dc:d0:c6:3c:63:49:dd:06:ce:82:3e:73:4c:ce:0a:
3d:66:5b:1a:33:68:23:b7:96:8a:04:18:9d:9e:9c:
c6:de:d0:95:7c:8f:f3:94:f0:d3:68:32:22:9e:85:
35:1f:4d:82:e6:4b:fe:f7:d8:2d:64:bc:2e:44:db:
af:5a:00:1d:bb:b7:14:ad:00:ad:81:5f:68:d0:de:
aa:06:a0:06:5d:35:1d:1b:e9:dd:fd:d5:c6:5e:88:
36:6d:55:fe:27:77:c9:22:9a:6a:95:44:fa:f6:dc:
b8:2e:f4:c2:ef:43:93:d3:c1:26:20:59:e2:a7:f1:
57:c3:08:d8:11:57:e1:1e:43:a7:93:d6:4f:77:da:
9b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5A:7F:73:DD:57:F1:E4:FC:CD:B0:B7:8B:F9:96:19:C1:23:32:51
X509v3 Authority Key Identifier:
keyid:8A:5D:86:AA:B4:C0:97:4F:0C:27:F4:3D:96:8D:F4:26:F5:3D:F5:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/il2GqrTAl08MJ_Q9lo30JvU99dI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/olp_c91X8eT8zbC3i_mWGcEjMlE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4cea79-2a09-4ae7-a50c-f8a836f01b21/1/il2GqrTAl08MJ_Q9lo30JvU99dI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.174.136.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:31:9a:37:9f:7b:71:1a:bd:b4:bc:7d:37:62:a5:1c:aa:e4:
2a:75:4a:d4:5a:29:10:47:dc:89:4a:c1:36:f8:eb:2c:cb:48:
88:84:ba:7a:93:47:45:73:88:2c:23:c2:da:a2:da:bf:f8:a0:
5a:d5:96:0d:08:e2:c0:94:a6:c2:84:d0:41:27:77:39:1d:d5:
da:4e:a9:02:bb:e8:c2:79:c4:8a:ac:01:a9:80:0a:e0:c9:dc:
27:d8:50:b8:01:9b:25:fb:a1:6f:7e:27:a8:aa:05:98:e8:30:
92:fc:e9:c5:1a:df:9f:ff:7b:c6:c7:42:52:92:5d:51:f1:d4:
0b:b0:92:f0:62:2a:69:98:c8:bb:47:a1:b0:8b:dc:71:1e:07:
3c:60:d0:0b:dc:86:5d:24:49:ef:40:69:a2:d5:ec:57:3e:9c:
5c:c3:98:81:ac:2f:44:2d:da:d5:10:9c:21:d3:ce:2b:1e:50:
29:80:55:10:ca:6c:ad:7c:2f:53:d1:ba:23:60:2d:75:a3:e9:
8f:33:c7:97:26:3b:45:a7:95:c9:c5:5c:07:98:bf:c8:26:eb:
05:06:16:a8:54:d6:72:d5:7c:0e:5b:18:ad:07:f4:ea:2c:b1:
0e:70:b1:34:73:91:04:21:b0:fc:17:97:17:e6:e1:c9:f9:a5:
8b:99:d3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:36 2024 by rpki-client on console-fra.rpki-client.org