Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/OLWlxyX-GvVOJh5UtBTcNDagbsw.roa
File: OLWlxyX-GvVOJh5UtBTcNDagbsw.roa (raw, json)
Hash identifier: Ep6CcGe63JVXKe5ALcLSy2eH5w5YAMBRLQWfc3t1Bbw=
Subject key identifier: 38:B5:A5:C7:25:FE:1A:F5:4E:26:1E:54:B4:14:DC:34:36:A0:6E:CC
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 018CC56E30BB8AA4743BF26B522BF6C14B8B
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/OLWlxyX-GvVOJh5UtBTcNDagbsw.roa
Signing time: Mon 01 Jan 2024 14:29:42 +0000
ROA not before: Mon 01 Jan 2024 14:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48357
IP address blocks: 45.154.206.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 27 Jan 2024 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:30:bb:8a:a4:74:3b:f2:6b:52:2b:f6:c1:4b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Jan 1 14:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=38b5a5c725fe1af54e261e54b414dc3436a06ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:15:a5:67:b5:af:3a:a8:f5:03:6d:37:8c:be:
18:40:fa:3e:c5:fc:71:2f:54:8e:1a:ca:10:13:16:
0d:1b:d5:06:b6:93:53:d2:1f:14:52:3c:ce:84:c9:
16:d4:d1:26:39:31:2d:80:f1:8c:f5:29:a1:2d:e9:
63:52:80:4d:09:76:85:b0:ca:74:4a:ff:c9:9d:8a:
d3:28:00:f1:62:d6:5e:7a:84:4d:4f:75:70:7d:2c:
37:df:3f:c2:e6:95:b2:4f:dd:3d:5b:cc:0c:d4:ec:
a7:b8:bf:63:2f:db:e0:cd:41:81:a6:62:23:84:48:
55:0e:82:a2:23:44:c3:6f:74:f5:88:8a:d5:a1:df:
c3:0b:68:51:2d:51:95:0d:60:20:aa:06:e5:41:64:
a8:8e:f6:3a:19:34:05:0f:92:a9:72:48:3c:eb:23:
d3:b3:ac:64:ef:4d:d8:e8:ed:74:01:78:a4:dd:7c:
f1:3f:66:e9:d0:ac:0f:5f:27:e0:74:e2:35:73:5d:
6f:19:67:76:4d:72:cc:ea:f9:c2:ef:37:c7:c8:63:
a8:d0:69:e3:0c:55:66:34:e6:24:b0:d1:2d:84:91:
0a:6c:70:cc:87:d9:e6:83:bf:20:47:a5:79:bb:aa:
9f:a1:d4:ce:c2:e0:ef:cb:42:6c:45:f9:13:72:74:
79:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B5:A5:C7:25:FE:1A:F5:4E:26:1E:54:B4:14:DC:34:36:A0:6E:CC
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/OLWlxyX-GvVOJh5UtBTcNDagbsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.206.0/24
Signature Algorithm: sha256WithRSAEncryption
d6:7d:62:38:c8:5f:e0:64:3b:ba:77:04:43:84:e5:7a:af:d0:
07:ee:c6:4b:cb:43:9e:14:f3:77:9c:99:81:72:da:c6:06:94:
d9:0c:ca:26:6d:36:c8:b7:cd:9a:c4:2b:06:67:b4:d4:e5:4a:
8d:91:1f:52:4b:c9:2c:3a:bb:df:e8:8b:10:57:01:48:8a:6e:
09:54:90:1f:25:a7:87:ed:1a:0e:3b:94:d8:b1:f2:01:08:13:
5b:9d:2e:3e:66:80:50:da:11:58:b4:8f:d9:47:ec:09:6a:28:
3e:e2:63:1c:43:67:04:8a:9c:86:12:13:b9:6e:44:e5:f4:18:
83:5a:81:40:69:04:c4:4b:ff:36:e7:a6:57:c7:1f:c1:06:f9:
28:52:0b:d9:64:53:84:b5:a1:28:72:34:4f:5d:8d:59:c7:ed:
ad:ac:cc:06:9d:38:db:b6:14:85:3e:18:19:67:54:f0:9e:dd:
80:2d:02:61:44:a6:f7:f9:b9:3d:1a:e6:cd:f5:78:61:40:2b:
a4:60:6b:f0:c8:e8:a4:4d:ab:11:b1:73:63:8c:b2:d3:e1:1e:
2b:08:c5:32:ff:18:3e:5a:5d:c1:c4:c5:18:56:90:2d:4f:1e:
fd:f3:0d:34:24:a4:3c:5a:5e:3c:a9:45:81:b9:a1:65:b3:c2:
e9:00:9b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:17 2024 by rpki-client on console-ams.rpki-client.org