Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/OIof2-mCssG7wOty58eL1D-uY2M.roa
File: OIof2-mCssG7wOty58eL1D-uY2M.roa (raw, json)
Hash identifier: DcF25NFU72Ehe7vEw2LX8k8VXzFVHH6QFLMvM5fC280=
Subject key identifier: 38:8A:1F:DB:E9:82:B2:C1:BB:C0:EB:72:E7:C7:8B:D4:3F:AE:63:63
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C5403B176F54891CC6BF13F3B450390
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/OIof2-mCssG7wOty58eL1D-uY2M.roa
Signing time: Sun 01 Jan 2023 07:55:23 +0000
ROA not before: Sun 01 Jan 2023 07:55:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133295
IP address blocks: 45.132.15.0/24 maxlen: 24
2a06:7a02::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:54:03:b1:76:f5:48:91:cc:6b:f1:3f:3b:45:03:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=388a1fdbe982b2c1bbc0eb72e7c78bd43fae6363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:d7:ba:5b:8d:9b:dc:1e:b9:52:2b:16:24:
34:14:b2:19:30:67:34:f0:87:9a:3b:9b:58:ac:ed:
5e:09:51:b3:d6:60:b9:4b:7c:2f:df:6b:b2:ba:6b:
b3:27:51:02:1d:78:27:14:7f:5c:e6:15:26:c7:e1:
67:b4:c5:c6:22:19:41:ce:8f:da:05:7e:80:06:9f:
07:27:c2:90:ea:41:4c:3f:2c:bc:63:4d:54:c6:39:
d4:88:70:8e:b5:42:6f:a7:b3:f4:91:7b:54:14:5a:
52:25:f7:d5:f8:4e:8d:bc:04:e1:f0:7f:89:8b:27:
17:12:ec:14:17:94:c9:5e:7f:1c:04:19:b0:40:58:
34:7a:c0:5e:ad:1e:f6:71:5e:93:71:12:23:7b:ca:
31:45:bc:7c:3a:c3:e4:39:ea:76:47:90:63:19:7f:
f5:d5:fe:37:e8:d5:2b:67:be:e6:97:0b:bb:23:7a:
8b:0f:0c:c4:62:a8:9d:f0:11:59:0d:22:1e:26:03:
1f:c8:46:98:70:da:2a:ce:09:02:b0:4e:28:e4:85:
d9:2d:f0:00:36:4b:9a:64:6c:6b:e8:de:1a:f4:40:
01:01:57:02:03:9b:2c:05:85:9d:d5:a2:3f:31:be:
86:61:35:22:9d:4b:17:28:df:e2:02:f9:56:33:0b:
ff:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:8A:1F:DB:E9:82:B2:C1:BB:C0:EB:72:E7:C7:8B:D4:3F:AE:63:63
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/OIof2-mCssG7wOty58eL1D-uY2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.15.0/24
IPv6:
2a06:7a02::/48
Signature Algorithm: sha256WithRSAEncryption
6f:05:d2:03:b2:bf:c7:5a:4a:7f:d3:2f:c2:fe:cc:17:4d:ea:
a4:67:5a:30:a3:2d:bb:56:3b:c2:57:6f:9c:4b:ae:0a:6a:f3:
90:17:e2:2b:fd:7c:c3:fc:e6:49:f5:f9:76:3a:44:f8:7e:d2:
44:1c:ce:fb:71:18:43:dc:e9:c1:db:3f:fb:07:3a:27:0f:34:
d4:1e:86:da:73:ec:9f:6b:de:ab:12:a0:35:bb:78:f3:18:62:
f7:b1:26:a2:34:17:18:cf:a3:4f:db:03:a4:4b:73:24:cd:1f:
af:f1:e3:4d:50:0b:dd:d8:18:d4:28:d0:67:72:73:94:20:60:
37:a0:1e:ec:69:27:7c:15:b7:1d:57:f9:ac:3e:97:67:b2:e1:
35:d8:e7:59:a4:9d:95:42:fe:75:e6:d3:03:21:03:69:b5:fc:
d3:5c:03:72:1a:26:ce:dc:63:37:dc:19:32:8f:cf:89:5e:ed:
4a:78:26:8d:b0:5a:ad:12:8f:af:fb:49:ac:67:44:86:f4:99:
82:bf:1c:59:e2:e1:29:b1:78:e4:2d:a4:4d:cf:6e:aa:87:24:
8e:5d:fb:d4:96:1b:1c:ba:51:7e:6a:5f:5c:5c:67:f1:ed:4a:
fa:55:30:f1:15:48:be:0f:3b:9a:2b:4b:89:3c:a4:46:14:34:
f2:44:8d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:35:55 2024 by rpki-client on console-fra.rpki-client.org