Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ohDpAiYMN2bmJbUqKie_aEBp8fA.roa
File: ohDpAiYMN2bmJbUqKie_aEBp8fA.roa (raw, json)
Hash identifier: WDMKcU+cZzJxRL0w8U2a4XG5yJtNwK/nFEHuXyp3oqQ=
Subject key identifier: A2:10:E9:02:26:0C:37:66:E6:25:B5:2A:2A:27:BF:68:40:69:F1:F0
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018A6F39342C697D1A7854B830F6A3EC5B39
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ohDpAiYMN2bmJbUqKie_aEBp8fA.roa
Signing time: Thu 07 Sep 2023 10:38:54 +0000
ROA not before: Thu 07 Sep 2023 10:38:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 18464
IP address blocks: 45.136.0.0/22 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6f:39:34:2c:69:7d:1a:78:54:b8:30:f6:a3:ec:5b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Sep 7 10:38:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a210e902260c3766e625b52a2a27bf684069f1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a8:9b:ae:07:0d:e6:a8:d7:e5:57:52:ea:68:
a9:08:d8:1a:f5:3e:e0:2c:97:3f:4f:58:6f:95:c8:
b1:a6:e9:2e:76:7c:0b:71:a2:2b:a1:26:9e:c2:4c:
21:0d:db:59:71:75:52:97:ad:be:9c:cd:3e:33:97:
3e:74:27:dc:01:72:ab:9b:33:1d:4e:90:04:bc:34:
03:7e:bf:b8:48:43:46:8e:cd:dc:46:5a:0f:38:0c:
fe:39:04:e8:de:c3:bd:23:df:d6:f4:2c:fa:3e:76:
6f:c0:36:6a:e2:ae:ac:35:2f:11:70:89:31:82:5a:
46:05:01:d6:9d:2b:a8:cd:d3:47:9b:01:e6:e3:79:
4f:ef:f4:55:61:dd:74:c8:19:87:62:dd:67:9a:97:
36:ca:e5:fc:38:af:df:29:e0:8b:52:09:ad:5a:da:
ec:b6:04:27:9c:18:62:c1:04:1f:f1:da:a7:e1:31:
d9:e4:96:96:7c:36:21:17:ad:38:63:eb:bf:fe:5e:
1d:cc:6b:87:af:16:72:b0:e5:c5:56:68:53:03:82:
b8:df:eb:8d:bf:e0:7a:70:25:91:0e:78:94:a0:b1:
81:8f:c0:42:f3:0f:55:fd:e8:62:8b:ca:81:54:61:
d1:81:13:db:d0:c1:3f:2c:9e:28:cb:43:41:9e:52:
40:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:10:E9:02:26:0C:37:66:E6:25:B5:2A:2A:27:BF:68:40:69:F1:F0
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/ohDpAiYMN2bmJbUqKie_aEBp8fA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/22
Signature Algorithm: sha256WithRSAEncryption
26:63:28:97:a9:3c:d7:e3:b3:d8:78:a0:35:ce:bd:e2:9d:4c:
f1:59:92:ac:00:24:87:3a:ff:4e:e7:da:84:e3:40:8b:6c:6a:
51:84:3f:5b:32:74:11:2b:9b:4d:61:0a:36:76:f0:89:1c:4b:
ad:b8:31:29:3a:0d:c4:8e:5e:4e:83:d9:9e:26:ec:aa:6b:4f:
2d:8b:57:12:b2:db:08:3a:f0:e7:0b:8b:30:d6:e2:70:85:32:
f3:ad:56:e6:c3:cf:f7:8e:87:95:37:91:7c:9b:f4:3d:14:ab:
59:2f:61:02:4a:f2:e7:20:19:a6:31:79:00:24:f3:a7:cb:43:
6b:72:1a:7c:72:8a:82:37:a5:15:a8:53:7a:15:23:4c:c5:c8:
c6:47:9b:96:9d:58:82:37:25:33:a2:bc:dd:bd:a2:14:4e:f2:
85:21:1d:7e:aa:59:eb:96:ff:2c:73:36:61:0c:b0:85:76:00:
1a:7f:ef:41:65:43:34:4d:58:d3:9a:6a:a7:6d:6e:a8:32:75:
3a:16:b1:27:9c:4f:4b:d4:68:66:d2:09:cc:e2:9e:b2:75:6f:
db:f0:50:0b:f0:63:03:8f:07:3b:70:2f:9e:4e:66:7b:fe:8c:
25:39:d7:56:63:ff:88:82:81:56:0d:dc:e8:ce:ed:49:53:46:
c4:99:ec:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:33 2024 by rpki-client on console-ams.rpki-client.org