Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/OEi5PfLwrHaRMnobFYLdGv5xFy0.roa
File: OEi5PfLwrHaRMnobFYLdGv5xFy0.roa (raw, json)
Hash identifier: HODe3Wyn1l0r+YexUR8DMWWwAzbwwQox6z5EDcnbCWc=
Subject key identifier: 38:48:B9:3D:F2:F0:AC:76:91:32:7A:1B:15:82:DD:1A:FE:71:17:2D
Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial: 018572CCC3DE83B68A052EF9664829D78305
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/OEi5PfLwrHaRMnobFYLdGv5xFy0.roa
Signing time: Mon 02 Jan 2023 14:05:00 +0000
ROA not before: Mon 02 Jan 2023 14:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200031
IP address blocks: 91.195.57.0/24 maxlen: 24
91.195.56.0/23 maxlen: 23
91.195.56.0/24 maxlen: 24
45.159.165.0/24 maxlen: 24
45.159.164.0/23 maxlen: 23
45.159.164.0/22 maxlen: 22
45.159.164.0/24 maxlen: 24
45.159.166.0/24 maxlen: 24
45.159.167.0/24 maxlen: 24
45.159.166.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 02:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:c3:de:83:b6:8a:05:2e:f9:66:48:29:d7:83:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Validity
Not Before: Jan 2 14:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3848b93df2f0ac7691327a1b1582dd1afe71172d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:38:38:16:f9:b7:91:46:10:d1:0f:37:44:
4f:20:e7:8c:67:35:61:8f:b3:62:58:53:9c:3c:9d:
18:db:af:fc:03:26:af:a5:16:49:56:a2:ef:cf:24:
9a:9e:09:cc:d5:2e:a3:49:0e:83:ed:dd:ea:df:bc:
cd:bd:3d:8b:50:41:14:38:2e:06:a6:c6:82:dc:9a:
70:bd:95:97:5c:32:1f:15:b2:da:ea:f5:b0:38:65:
08:e5:3a:38:05:56:33:49:52:63:03:6a:33:bf:47:
98:df:00:72:b0:63:ba:f1:bc:9a:c4:43:c4:e5:2b:
a4:15:82:5a:58:3c:1c:08:b3:f8:bf:9a:2e:af:b1:
29:4c:51:f4:17:33:82:ad:88:56:84:92:ff:8e:b8:
be:5d:36:54:23:1b:d4:f3:6c:e2:82:86:4c:ff:d8:
d7:6f:52:30:92:06:d3:af:0f:0b:a1:81:5d:76:be:
fc:3e:91:68:23:a0:2f:85:2d:bd:8f:14:0f:ae:b3:
15:a4:f6:1f:1a:64:c2:f8:75:0b:65:4b:f8:f4:65:
d9:8a:77:e5:1d:f3:03:19:c6:15:db:05:f5:b3:ec:
70:ea:16:a5:aa:d0:44:a3:db:8f:d8:3c:3a:b3:52:
26:5b:12:76:1e:64:eb:5c:84:2f:ce:c9:09:5f:d4:
d0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:48:B9:3D:F2:F0:AC:76:91:32:7A:1B:15:82:DD:1A:FE:71:17:2D
X509v3 Authority Key Identifier:
keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/OEi5PfLwrHaRMnobFYLdGv5xFy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.164.0/22
91.195.56.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:51:58:94:d8:cf:dd:68:cf:66:71:b6:14:1e:7f:bc:8e:d5:
ad:66:42:84:14:10:b4:a3:75:62:78:50:d2:15:41:63:18:12:
59:bc:47:eb:46:98:7a:56:9f:b3:cd:8e:2f:38:c3:25:ec:83:
0b:7c:ab:ab:52:7e:06:35:e1:9b:00:d7:4e:f9:ab:be:0c:ea:
ca:a4:0c:eb:8f:77:d8:f0:5b:cd:85:d0:12:93:5b:3b:70:11:
84:46:8a:d1:b3:f6:e1:9d:41:27:dd:0a:95:2f:dd:aa:3f:90:
54:ae:42:5b:55:6c:02:a4:b1:30:a6:91:b7:5f:b8:37:3a:64:
1f:7f:dd:03:58:57:98:c1:fa:34:d4:98:20:0e:13:42:ec:1e:
4f:58:0f:a4:50:8e:84:87:d8:51:8e:30:b4:6d:8e:1f:35:6e:
fb:ee:80:87:b1:a8:a5:0e:95:82:49:29:ad:32:9f:15:30:5f:
ab:b8:f9:45:f2:d6:fa:57:28:03:ab:a9:1e:be:fd:50:21:ca:
82:f5:70:9e:b0:78:55:fd:ed:1a:62:f0:cc:57:cf:ef:f6:ff:
7c:91:2e:20:d3:f7:38:d0:44:2d:f7:2d:e9:7b:21:66:39:b5:
d1:0c:57:81:a8:fd:57:17:31:0a:a2:a2:4c:f3:e8:e0:69:79:
7a:fc:95:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:38 2024 by rpki-client on console-ams.rpki-client.org