Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/OwC269FAsJyGpnxeKZIiQDs0Id4.roa
File: OwC269FAsJyGpnxeKZIiQDs0Id4.roa (raw, json)
Hash identifier: UvY0hJCYQdw6SEG8hu8cokps5Q4uPdfjUWQLUIcZA6Y=
Subject key identifier: 3B:00:B6:EB:D1:40:B0:9C:86:A6:7C:5E:29:92:22:40:3B:34:21:DE
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 018F284CF2C67B50E0F81F8A1CF36782ACFA
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/OwC269FAsJyGpnxeKZIiQDs0Id4.roa
Signing time: Mon 29 Apr 2024 05:21:22 +0000
ROA not before: Mon 29 Apr 2024 05:21:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.137.16.0/24 maxlen: 24
45.137.17.0/24 maxlen: 24
45.137.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 18 May 2024 21:57:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:28:4c:f2:c6:7b:50:e0:f8:1f:8a:1c:f3:67:82:ac:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Apr 29 05:21:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b00b6ebd140b09c86a67c5e299222403b3421de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:96:ca:de:4a:5f:b2:e8:e2:c2:51:54:e0:
74:81:7f:a0:ea:a7:db:74:f0:21:e0:41:64:a8:dc:
f3:de:21:6e:13:bc:c5:cc:1c:2f:bf:b0:2f:ef:08:
95:64:d4:41:2e:0a:12:fb:db:2f:cc:40:23:ad:e0:
67:56:e1:49:71:64:97:44:c0:25:24:5b:eb:a5:4a:
8e:62:1f:18:cf:a5:ce:8c:a4:0e:3d:c9:ef:36:e1:
36:a0:64:92:ff:7b:2b:8b:e2:de:a4:f4:0c:32:79:
55:9e:64:12:1c:b5:de:30:91:fb:97:f0:20:f1:a7:
1c:9d:8a:42:07:45:83:b6:65:9b:36:a0:5f:61:5c:
a0:44:b2:9f:25:de:40:44:ef:28:ee:55:57:5e:23:
0a:db:e0:b5:d0:39:37:bc:26:65:f5:f2:87:5f:65:
00:bc:87:c7:88:d9:47:9a:8d:e3:1a:ca:97:f8:5f:
ae:32:e3:37:92:6e:fe:24:aa:98:07:1b:92:b5:8f:
f4:6d:6a:4f:c1:8b:f3:15:1f:23:35:ae:bf:97:24:
39:d8:1f:07:4e:e3:ee:41:49:b1:c9:fa:73:29:ca:
b7:32:8c:f7:64:89:d7:e4:9d:42:21:6f:33:0f:f1:
46:0f:73:ef:e4:81:57:41:bc:96:6a:53:6c:0d:90:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:00:B6:EB:D1:40:B0:9C:86:A6:7C:5E:29:92:22:40:3B:34:21:DE
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/OwC269FAsJyGpnxeKZIiQDs0Id4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.16.0/23
45.137.19.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:e1:90:37:7f:97:b8:00:65:74:e5:e9:02:10:d4:05:31:f1:
47:e5:10:14:be:59:0a:a2:9b:38:20:fb:4e:cb:8e:f7:84:3f:
96:be:5b:6a:51:5a:3c:52:fd:43:96:ae:f3:87:bb:fd:8d:fc:
71:9d:13:fb:a0:c4:b1:f5:14:cb:4d:30:18:f9:88:ea:7a:ce:
2f:8b:70:19:b1:47:03:fd:63:cb:bf:48:31:00:56:10:b7:b8:
65:e8:37:ef:8d:30:f3:d9:b8:96:29:89:55:73:39:7a:bf:4a:
02:d6:02:b6:ab:d1:73:6d:d0:31:b0:4e:18:03:7e:d0:be:7d:
da:d4:e0:08:a9:fa:e7:fa:bb:44:61:7e:04:8a:e7:a0:5b:7e:
ec:2a:9d:64:db:84:3c:e5:88:ec:c7:27:90:3d:be:dd:18:94:
eb:e7:66:69:e8:f3:30:25:07:46:d4:98:96:87:f2:f2:ea:6a:
ef:a8:e5:9a:9c:6d:49:15:1b:c1:d2:b7:c3:8b:2d:86:65:d6:
95:ac:07:0c:0c:74:04:f8:40:2d:44:8c:1f:34:3f:1d:62:70:
3c:fa:10:a6:a9:e6:86:ea:03:24:73:dc:e7:6a:fd:2c:ce:27:
cb:0d:0f:0e:e8:81:5d:e9:b5:11:d2:58:e0:91:ed:4d:27:90:
02:f8:bf:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:00 2024 by rpki-client on console-fra.rpki-client.org