Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oe9h-SVXmENX2ahTtZloLIu1xsY.roa
File: oe9h-SVXmENX2ahTtZloLIu1xsY.roa (raw, json)
Hash identifier: nx3/dqXtlXbxkrdhyjBGdmvkGjfYBYcRAA4olbSL8fE=
Subject key identifier: A1:EF:61:F9:25:57:98:43:57:D9:A8:53:B5:99:68:2C:8B:B5:C6:C6
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0187E6A826AAEBEC451F705FC8CAE5C1BEE1
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oe9h-SVXmENX2ahTtZloLIu1xsY.roa
Signing time: Thu 04 May 2023 12:06:32 +0000
ROA not before: Thu 04 May 2023 12:06:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209260
IP address blocks: 45.147.226.0/24 maxlen: 24
185.223.78.0/24 maxlen: 24
45.131.132.0/24 maxlen: 24
45.131.135.0/24 maxlen: 24
45.131.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 15 May 2023 17:03:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:e6:a8:26:aa:eb:ec:45:1f:70:5f:c8:ca:e5:c1:be:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: May 4 12:06:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a1ef61f92557984357d9a853b599682c8bb5c6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f9:86:78:9f:70:1c:26:59:2f:2a:a6:ba:eb:
78:60:88:07:f4:cf:58:4a:60:8d:1d:52:e7:16:df:
33:92:06:7b:3c:30:02:14:41:52:49:9a:52:2b:a8:
de:dc:79:aa:50:ad:ba:e1:c7:18:52:c3:f3:cc:c7:
77:6e:bf:59:34:31:2d:36:65:1d:66:6a:2d:9a:52:
36:49:96:b8:fb:5c:d7:22:b7:37:5b:96:20:38:0a:
72:12:1b:c6:f5:14:42:4c:e4:dd:bb:ae:f1:bd:94:
be:7a:67:32:b6:ea:f5:43:74:f8:8e:3e:ca:66:0a:
f5:8c:a7:e0:63:bf:03:a1:fe:92:52:6a:dc:80:1d:
c1:c8:63:8c:22:96:81:f9:7c:c9:d2:bf:cf:f4:e6:
32:b1:ff:50:6c:f1:02:8d:bd:d3:ed:2a:54:4a:2a:
0e:dd:12:5c:d5:6c:aa:6e:85:ed:02:5b:5b:20:ff:
5e:8e:1a:5d:42:83:58:cf:02:f4:3d:2b:93:f4:3b:
ca:f0:b2:ab:0d:42:c4:e7:94:da:83:1e:81:fc:07:
76:75:74:59:e5:82:c7:43:37:74:f6:94:ac:46:4b:
56:1c:f2:d3:fa:cb:0e:bd:80:09:27:2a:3b:43:6d:
e5:a0:8c:7d:f7:27:50:c0:8c:c3:f2:52:67:33:70:
48:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:EF:61:F9:25:57:98:43:57:D9:A8:53:B5:99:68:2C:8B:B5:C6:C6
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/oe9h-SVXmENX2ahTtZloLIu1xsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.132.0/23
45.131.135.0/24
45.147.226.0/24
185.223.78.0/24
Signature Algorithm: sha256WithRSAEncryption
81:89:33:04:c5:d2:03:84:0e:21:f4:87:4b:fe:d0:57:b2:15:
07:97:00:80:b9:65:83:ba:9d:a2:23:3c:b1:40:36:b3:ef:d3:
40:e4:8d:e7:e7:92:57:72:42:7a:b2:61:1e:7a:86:bf:6b:34:
42:7b:5a:75:9e:1b:1b:b2:cf:6f:cd:e2:dd:e1:e5:84:76:00:
27:a0:76:a9:61:94:29:bc:78:5f:6d:3d:b8:64:ca:55:b1:f0:
c0:6d:2e:3c:7b:4b:c2:01:d5:14:7d:19:bf:49:ab:f3:1a:67:
da:b5:9e:f2:74:40:d3:2a:32:bc:91:84:9f:95:53:f7:ce:0f:
e1:aa:21:a2:00:6a:e7:cd:7d:03:45:e0:26:e3:87:f1:fb:7e:
cb:fd:a2:e3:7a:3b:ec:cd:09:fd:4d:7c:0a:4b:3a:3a:84:f5:
db:12:5b:27:77:b8:f4:96:16:f2:1e:04:11:9a:54:63:d1:f7:
2c:63:87:2a:bc:eb:25:f0:50:1b:8e:a9:08:c3:ba:c5:9d:a7:
b2:0b:36:b7:55:e6:cd:7e:0f:16:a1:82:db:92:5b:5a:0b:60:
6e:0e:0a:43:2b:e1:dc:d9:95:ec:33:37:91:38:39:3d:aa:70:
d9:91:74:20:4b:61:bf:d1:29:e6:e4:6d:cc:96:c8:0e:63:5f:
a1:6b:e6:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:29 2024 by rpki-client on console-ams.rpki-client.org