Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/OYH4ClQRQd2F7ea_nRKpWCJERBA.roa
File: OYH4ClQRQd2F7ea_nRKpWCJERBA.roa (raw, json)
Hash identifier: 6E7KoMspM0PCmwI3a4zlVLkxlaO6iy+p9VfmTGstYqw=
Subject key identifier: 39:81:F8:0A:54:11:41:DD:85:ED:E6:BF:9D:12:A9:58:22:44:44:10
Certificate issuer: /CN=2719412918a6627f99cce55c7aca139057b8574e
Certificate serial: 018B1A74AC20AD605EEFBDEBFD463BBD3FC1
Authority key identifier: 27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/OYH4ClQRQd2F7ea_nRKpWCJERBA.roa
Signing time: Tue 10 Oct 2023 16:38:55 +0000
ROA not before: Tue 10 Oct 2023 16:38:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 45.149.62.0/24 maxlen: 24
45.149.62.0/23 maxlen: 23
45.149.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1a:74:ac:20:ad:60:5e:ef:bd:eb:fd:46:3b:bd:3f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2719412918a6627f99cce55c7aca139057b8574e
Validity
Not Before: Oct 10 16:38:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3981f80a541141dd85ede6bf9d12a95822444410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f8:5f:e6:75:b9:f6:3b:93:bd:e0:4a:49:a2:
56:dc:c9:ee:4c:d2:2c:11:e9:aa:04:22:d1:a7:45:
24:e8:41:53:fb:6a:98:91:b9:6a:2a:65:44:7d:1a:
89:4f:b8:cc:a2:97:93:7b:c3:ff:2c:a2:26:48:04:
1d:0f:da:29:e6:c3:80:03:58:a3:8f:d1:52:9b:e4:
83:13:d2:3d:21:78:ad:f0:36:fc:28:11:f2:1b:17:
65:1d:f5:64:ee:ce:82:29:4e:88:e1:42:0a:e2:8c:
b2:41:19:7a:23:c7:41:1f:42:60:c6:ed:1b:2c:01:
01:aa:59:a3:38:37:2c:be:4a:e3:21:9a:0d:4e:dd:
21:fb:a6:ed:62:7c:c5:e3:1f:49:27:03:7d:3c:c3:
93:62:f7:62:a6:bb:8d:1d:7a:dd:9d:df:ec:f0:bf:
7b:66:01:5f:3a:87:14:b0:4b:e1:15:8f:8b:72:c9:
47:96:40:08:ba:7c:35:8b:37:cb:99:dc:6f:ba:0f:
e1:58:67:47:fe:6e:0d:86:9d:93:53:ce:8a:f3:08:
a1:9c:56:f8:d7:1b:91:3f:33:b4:b1:28:0c:11:57:
08:f9:e8:d6:8b:41:80:14:3a:ba:9f:4a:c1:0c:a5:
a2:f3:dc:28:e2:47:dd:76:54:73:d4:b9:3e:f0:21:
c1:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:81:F8:0A:54:11:41:DD:85:ED:E6:BF:9D:12:A9:58:22:44:44:10
X509v3 Authority Key Identifier:
keyid:27:19:41:29:18:A6:62:7F:99:CC:E5:5C:7A:CA:13:90:57:B8:57:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JxlBKRimYn-ZzOVcesoTkFe4V04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/OYH4ClQRQd2F7ea_nRKpWCJERBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e92c49-bd4a-4e8d-bbf6-4e223917b860/1/JxlBKRimYn-ZzOVcesoTkFe4V04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.62.0/23
Signature Algorithm: sha256WithRSAEncryption
37:fb:bc:24:0b:75:2a:a1:2a:62:76:36:61:ed:ae:e2:2e:c3:
07:e5:0d:05:8d:85:31:56:58:78:03:cf:06:cc:ae:bd:7e:b0:
8d:d6:d2:48:a3:f0:8c:cb:a8:19:af:e5:a4:12:82:e2:7b:6a:
20:df:51:80:45:31:3d:88:bf:e8:78:12:81:33:c0:9c:aa:a2:
bb:0e:ff:b4:ba:41:69:d8:1f:97:79:5f:aa:92:ab:4f:64:a4:
8d:17:b9:72:e1:0e:9e:e9:29:91:c9:64:8d:7b:56:15:bb:38:
58:e4:45:79:6f:1b:6f:02:79:00:28:da:ab:33:67:07:cd:f5:
1e:0b:c6:30:c9:bb:e5:d6:a5:d7:08:26:ac:21:9f:dd:af:41:
31:db:0c:75:3d:6c:c9:cb:8a:ff:59:ef:be:4b:48:c6:fc:d7:
9d:a7:93:1c:94:9f:2f:93:f1:66:61:c2:a5:29:23:a2:a0:95:
87:ce:0a:8c:49:66:e6:3c:85:4c:82:ee:f7:29:37:1d:97:bc:
9c:d9:2a:64:e7:99:da:f6:d2:c7:0c:97:2d:a8:aa:8d:2d:bb:
bc:16:0c:8c:5d:04:65:e4:12:af:35:96:ae:12:21:37:ef:1c:
f7:77:7a:53:5e:6d:ca:7a:15:37:76:0e:d8:b1:ee:3c:e2:0f:
a2:92:19:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:14 2024 by rpki-client on console-fra.rpki-client.org