Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/OS1Y8oofYeM-dBalki5Rj3dKjbQ.roa
File: OS1Y8oofYeM-dBalki5Rj3dKjbQ.roa (raw, json)
Hash identifier: yH7zsvMnRup11+4hKAJK+PqCGME/y9girrBAoG1U1MU=
Subject key identifier: 39:2D:58:F2:8A:1F:61:E3:3E:74:16:A5:92:2E:51:8F:77:4A:8D:B4
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018AC0B451CF00E0A8134FAFB0B53B3E718D
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/OS1Y8oofYeM-dBalki5Rj3dKjbQ.roa
Signing time: Sat 23 Sep 2023 06:22:37 +0000
ROA not before: Sat 23 Sep 2023 06:22:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 45.141.170.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:c0:b4:51:cf:00:e0:a8:13:4f:af:b0:b5:3b:3e:71:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Sep 23 06:22:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=392d58f28a1f61e33e7416a5922e518f774a8db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:62:f2:9e:ba:1c:6c:e1:b5:a9:be:90:56:90:
51:d9:cf:34:1b:f5:ef:e9:49:90:1c:b8:38:7b:52:
f3:2c:c8:dc:21:68:9b:bd:1e:46:d5:3a:19:2f:d9:
68:7f:6d:c1:03:6f:bb:c0:db:67:47:c3:e4:b0:29:
91:9e:fa:0e:9d:eb:03:c1:fc:8f:c5:15:dd:24:f1:
0b:8e:3a:db:d6:bc:72:b9:c7:1a:79:7b:8c:b8:3f:
bb:0f:6d:bb:66:0d:df:3f:dc:c3:d5:a9:0b:88:3c:
68:5b:fe:4d:0f:7e:6f:51:c0:61:b2:1f:c6:60:05:
5c:eb:12:bf:31:e7:a1:f4:9f:17:3b:8d:31:39:09:
c4:15:d4:72:3b:c0:e2:f3:24:8e:88:42:85:60:b8:
95:62:60:9d:bf:7c:b4:37:54:77:2d:ce:4d:b7:3e:
9e:c1:ea:ab:88:96:ed:33:4d:32:88:fe:52:22:3c:
3c:9c:f8:24:8f:86:d3:19:ff:d4:fa:82:c4:44:c6:
20:9a:c6:42:37:c7:7e:81:86:f7:90:39:2f:8e:54:
a1:11:6a:2f:13:d9:33:ad:0b:f4:b5:28:d8:1c:bb:
64:71:9d:92:1f:f0:3a:ec:34:a1:3c:ef:2d:57:3e:
27:b3:8f:a3:1e:1d:5b:73:1e:4f:d1:09:17:a6:ff:
f2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2D:58:F2:8A:1F:61:E3:3E:74:16:A5:92:2E:51:8F:77:4A:8D:B4
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/OS1Y8oofYeM-dBalki5Rj3dKjbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.170.0/23
Signature Algorithm: sha256WithRSAEncryption
73:a2:3e:d8:e4:69:8b:c3:e6:a8:37:ed:d3:c1:d4:c7:d3:9e:
3a:3a:2e:7c:23:b3:08:e1:c7:44:12:c6:a6:63:86:2b:bc:7b:
cd:4e:b1:62:88:c4:37:c4:a7:b7:24:17:84:ff:c5:1d:7f:4a:
52:39:8f:32:23:45:22:0b:6f:72:bd:1e:eb:6c:be:a7:ba:ed:
3b:1b:44:fc:8f:e0:d9:1f:b9:c4:f0:72:5b:35:bd:61:b9:f1:
47:22:c9:99:8a:77:a4:87:bc:83:fd:fb:6f:8f:f6:80:d2:45:
f1:53:1e:46:bc:be:2d:1d:c0:7e:04:5d:49:23:9b:4f:6f:c7:
ef:2f:ae:2f:c2:49:d1:c2:03:ad:f5:12:bd:40:f4:5f:55:4f:
3f:b3:d5:12:4e:a7:20:f7:ff:39:39:8d:d8:e8:f1:d3:3b:ec:
4c:09:8f:0e:18:8c:a9:0c:94:5a:68:d4:5b:1a:1d:a9:08:8b:
92:d7:55:e5:3c:85:c8:2d:74:32:d9:b6:4d:40:0f:bc:bf:1f:
a9:1f:22:59:8a:bd:67:f3:95:2d:d4:bc:f2:4d:bf:6b:c4:a8:
f5:48:dd:23:7d:fe:d9:3e:d5:71:bb:71:17:8c:e2:4e:a7:1f:
f8:e7:40:29:0a:08:51:51:ce:c3:e6:56:4a:7a:40:c1:0a:89:
c1:81:21:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:59 2024 by rpki-client on console-fra.rpki-client.org