Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OY6E81jGAYCZ6e6AHYXnU97YCPs.roa
File: OY6E81jGAYCZ6e6AHYXnU97YCPs.roa (raw, json)
Hash identifier: B5IEYTGrZlcVhf4cXH5B9MVqbftZ7MoLFXiJEUK+Fpw=
Subject key identifier: 39:8E:84:F3:58:C6:01:80:99:E9:EE:80:1D:85:E7:53:DE:D8:08:FB
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019081FCADA63F9595E76EC59E93423B287F
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OY6E81jGAYCZ6e6AHYXnU97YCPs.roa
Signing time: Fri 05 Jul 2024 08:22:18 +0000
ROA not before: Fri 05 Jul 2024 08:22:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 45.8.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jul 2024 10:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:81:fc:ad:a6:3f:95:95:e7:6e:c5:9e:93:42:3b:28:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 5 08:22:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=398e84f358c6018099e9ee801d85e753ded808fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c7:15:5b:40:a8:fe:79:05:1b:73:52:a5:9c:
1d:be:bd:4a:98:fb:09:79:52:b9:95:93:1e:ac:48:
20:dd:e4:74:b8:11:35:dc:69:7a:b8:ac:51:72:a3:
d6:76:73:fe:04:26:13:44:50:b3:e2:78:11:e9:62:
f7:55:fc:32:e5:fb:91:dd:6c:94:b8:a3:ab:03:d9:
4b:f3:44:09:bf:f7:ee:39:be:98:42:6a:71:ac:35:
f0:24:03:aa:22:64:c7:b6:49:52:de:29:df:f1:d3:
ef:57:9c:ce:45:ec:37:57:d3:20:76:8f:03:04:41:
8b:09:c7:eb:d6:7b:54:89:f3:16:cc:3b:9b:ef:1d:
16:eb:dd:06:63:ac:84:a0:6a:84:a9:9a:96:cb:02:
dc:18:01:c7:b0:fb:19:69:66:9f:85:d9:8f:0a:63:
09:1c:b4:92:f3:7d:89:bc:9d:c6:76:9d:b1:ac:34:
80:60:ab:30:c0:0d:67:e9:76:67:b8:02:f9:13:17:
8f:78:08:c0:00:a6:c9:bf:a8:a6:64:57:a3:7d:0b:
fb:db:52:ea:8c:e9:1c:88:69:9a:11:0e:52:96:14:
f4:59:13:65:fa:b6:c0:d5:db:0c:8e:dd:7f:c3:94:
59:58:d9:18:25:41:f0:80:2d:58:10:00:b0:60:d8:
99:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8E:84:F3:58:C6:01:80:99:E9:EE:80:1D:85:E7:53:DE:D8:08:FB
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/OY6E81jGAYCZ6e6AHYXnU97YCPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.205.0/24
Signature Algorithm: sha256WithRSAEncryption
24:61:2d:5e:05:9b:c7:ec:66:82:2e:75:c3:6d:0d:99:49:77:
9e:f2:ba:c8:61:f9:2d:e6:ef:1a:f1:eb:93:9e:1b:2a:90:b5:
e0:83:5c:1c:bb:8a:61:39:20:d9:2d:b8:9f:28:a0:f0:9c:55:
d1:e6:3e:e0:5a:89:f2:cf:cc:f4:c1:d8:35:4b:9f:3a:8f:87:
6b:60:51:9a:c9:df:64:11:a8:b3:8a:01:82:37:e2:6e:e6:8b:
d5:2d:18:2d:77:d9:d3:63:ad:a0:53:8b:5a:bc:b3:ef:a9:42:
e1:e4:ae:22:c8:05:fa:b2:f9:8f:88:0a:0e:84:09:a2:44:a9:
cf:fc:e6:80:3c:5b:f3:cb:e4:2c:05:6c:d9:1c:fa:6d:95:7e:
47:95:51:8a:da:28:1a:ec:1c:f5:da:3c:78:f2:43:79:f7:8e:
a0:52:ff:18:28:09:4a:5f:4e:d9:b2:49:f3:6b:13:42:07:15:
37:40:15:00:6f:bc:5c:2c:fe:13:bf:5b:44:d1:d2:c8:12:82:
4b:69:38:fb:63:3d:da:e7:67:af:29:ee:f2:4f:bf:17:dd:3e:
08:dc:d6:42:9a:df:92:18:0b:27:00:49:53:70:2e:f5:c2:f5:
bf:dc:0d:12:47:9f:06:f9:2e:12:07:b9:c1:b8:e6:49:3f:52:
4f:ab:31:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:12 2025 by rpki-client