Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/OcauH6eY8EYCwniNqimqSfekAoE.roa
File: OcauH6eY8EYCwniNqimqSfekAoE.roa (raw, json)
Hash identifier: Z60ngGA5SJcD4kYUUXhvcgiMTSJWzb6Mqt3aSIfdDo0=
Subject key identifier: 39:C6:AE:1F:A7:98:F0:46:02:C2:78:8D:AA:29:AA:49:F7:A4:02:81
Certificate issuer: /CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Certificate serial: 01856D01719AF49D4FDB77C0CD81347B3483
Authority key identifier: 16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/OcauH6eY8EYCwniNqimqSfekAoE.roa
Signing time: Sun 01 Jan 2023 11:04:49 +0000
ROA not before: Sun 01 Jan 2023 11:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8132
IP address blocks: 155.45.0.0/17 maxlen: 17
155.45.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:01:71:9a:f4:9d:4f:db:77:c0:cd:81:34:7b:34:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16cde139ae0573b0a4dda93e77b57ff27f9beba1
Validity
Not Before: Jan 1 11:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=39c6ae1fa798f04602c2788daa29aa49f7a40281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:49:5a:63:5f:a0:84:c6:52:c2:e2:d5:21:72:
4c:f1:f3:0f:42:53:cc:2e:81:9c:80:76:f9:2a:04:
f7:67:f7:08:2d:89:0e:43:68:df:c1:86:5f:87:ce:
0a:58:42:03:3c:16:20:12:97:af:21:26:b5:2f:d4:
8c:7e:a5:10:36:1a:22:9a:1c:d4:b2:68:d9:d1:f2:
a7:83:d9:f2:a2:29:7e:eb:26:b1:55:ed:00:4d:16:
02:99:4a:20:a2:84:0a:e7:94:c5:03:26:48:94:3e:
1e:6c:36:d3:3e:22:d5:db:3c:64:c4:c6:ce:ef:1a:
00:0c:cb:34:f0:97:0e:a7:f9:f7:0a:cd:77:bb:b3:
a0:dc:24:f5:c8:f1:a3:28:8c:61:4d:76:d3:52:30:
00:36:02:25:72:d2:19:14:e6:b6:44:e6:a4:b1:ac:
92:a3:b7:d7:27:4a:16:da:7c:4e:f5:18:27:2a:23:
ce:48:82:88:32:e3:ba:24:79:64:34:e0:0d:8c:c6:
e1:8f:c4:bd:69:87:b7:d3:6a:03:7c:9e:e0:c1:31:
7b:e3:af:54:a3:58:0a:c7:33:ea:db:3a:5a:c1:61:
19:13:99:14:95:b8:2d:37:16:ba:de:ae:f4:d0:ed:
02:d8:46:e9:eb:ba:33:16:f1:29:47:4c:a0:7d:13:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C6:AE:1F:A7:98:F0:46:02:C2:78:8D:AA:29:AA:49:F7:A4:02:81
X509v3 Authority Key Identifier:
keyid:16:CD:E1:39:AE:05:73:B0:A4:DD:A9:3E:77:B5:7F:F2:7F:9B:EB:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/OcauH6eY8EYCwniNqimqSfekAoE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/3c02f6-7c41-49bb-b9de-b69dce7547a1/1/Fs3hOa4Fc7Ck3ak-d7V_8n-b66E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.45.0.0/17
155.45.249.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:87:40:e8:8c:3c:64:bf:6c:77:02:24:66:55:cd:b8:49:ed:
e9:53:36:05:51:4c:2e:6a:4b:70:ad:b4:38:92:d7:f6:48:53:
c8:85:20:85:ee:52:7d:25:5d:bc:88:bc:30:04:26:70:92:c9:
6c:ab:3d:9c:67:bd:f5:48:f5:96:a5:b4:6d:f4:a4:b3:c4:4f:
f4:39:aa:c3:b5:8e:61:df:d7:30:52:fd:2c:7b:91:33:d4:12:
03:69:d3:d9:13:e9:58:23:db:95:f7:fd:28:76:c8:d2:08:24:
78:3c:6e:df:0b:a2:bc:57:88:b6:e3:7c:0b:06:5a:b7:f4:df:
dd:4e:39:b3:d8:b7:5e:44:d3:db:0d:11:6f:9d:09:fb:ee:4f:
81:35:6c:08:e8:99:e0:a7:40:8f:96:01:a3:06:aa:1e:6e:e5:
79:40:0b:9c:bd:1a:55:85:eb:1d:ef:30:86:99:4a:fd:3f:99:
6a:81:3b:dd:53:82:5d:e6:84:2c:b1:a7:d7:42:4f:e2:94:30:
67:ff:86:dd:f5:fd:e7:fb:c1:4a:08:74:87:6c:ac:b4:6c:58:
77:fc:49:a6:28:02:c2:7b:8c:c2:37:62:1e:17:28:82:be:5e:
f9:11:7e:26:9e:d4:83:2e:54:f2:92:bf:6d:dc:34:24:ca:8a:
b7:d1:d5:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:38:07 2024 by rpki-client on console-fra.rpki-client.org