Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/O_G73QLgHVATv38QmDYfbI5BcjQ.roa
File: O_G73QLgHVATv38QmDYfbI5BcjQ.roa (raw, json)
Hash identifier: facxXECB/whTZ98XZI7S32kyE2DFR013ElwloNv/agM=
Subject key identifier: 3B:F1:BB:DD:02:E0:1D:50:13:BF:7F:10:98:36:1F:6C:8E:41:72:34
Certificate issuer: /CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Certificate serial: 018CC3B700189A02D6EC2E2B1C4D552118B5
Authority key identifier: E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/O_G73QLgHVATv38QmDYfbI5BcjQ.roa
Signing time: Mon 01 Jan 2024 06:29:59 +0000
ROA not before: Mon 01 Jan 2024 06:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208520
IP address blocks: 45.94.14.0/24 maxlen: 24
2001:1497:2::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:00:18:9a:02:d6:ec:2e:2b:1c:4d:55:21:18:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84df52af460ca6fa8c923a49f5cb795ea6707f7
Validity
Not Before: Jan 1 06:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3bf1bbdd02e01d5013bf7f1098361f6c8e417234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:80:16:f9:f1:78:ce:58:05:7a:25:95:ea:d4:
6a:1e:e9:dc:40:30:69:d6:89:28:b3:de:96:d7:6f:
ee:9f:da:cd:81:94:8c:0f:14:b8:2c:ed:02:5f:2b:
b0:bf:b3:de:a0:99:64:df:41:0b:59:fd:92:46:d7:
98:9d:ac:3a:b2:69:63:45:1e:38:da:40:01:88:46:
39:2d:23:a2:c5:60:1b:a3:6a:ce:c5:86:52:ea:87:
79:c1:7f:2c:cf:b4:72:ff:52:98:4a:92:af:86:b9:
58:49:cc:3f:6e:1a:ab:92:76:dc:c0:cc:e8:14:33:
53:ac:b5:fa:28:85:13:9c:35:5c:10:41:8f:0e:4b:
81:0f:c9:16:8c:b7:43:f2:48:9d:ff:34:02:fd:d9:
92:f0:ff:ba:a6:d4:b2:33:ef:56:48:bf:32:62:3e:
a7:31:3f:94:dd:e0:54:51:c6:71:32:c8:22:f7:33:
f4:75:dc:4e:19:73:4b:f9:66:20:c5:40:8f:4e:fb:
6e:bf:89:a1:72:3a:1e:1e:3c:30:4b:53:b5:29:76:
a8:30:e8:dd:e6:30:c5:19:52:aa:a5:ce:fd:bd:af:
a0:0e:37:ac:62:16:8d:55:8f:d8:0c:38:41:04:bd:
ba:8a:fb:70:82:af:0f:72:d3:51:a3:d0:66:9e:cf:
17:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:F1:BB:DD:02:E0:1D:50:13:BF:7F:10:98:36:1F:6C:8E:41:72:34
X509v3 Authority Key Identifier:
keyid:E8:4D:F5:2A:F4:60:CA:6F:A8:C9:23:A4:9F:5C:B7:95:EA:67:07:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E31KvRgym-oySOkn1y3lepnB_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/O_G73QLgHVATv38QmDYfbI5BcjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be692b-7932-4554-8c15-94c2fda39ead/1/6E31KvRgym-oySOkn1y3lepnB_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.14.0/24
IPv6:
2001:1497:2::/48
Signature Algorithm: sha256WithRSAEncryption
b3:fa:43:a5:32:02:2f:8f:35:77:c6:32:79:1b:5d:b6:71:46:
1b:1d:d6:a0:8b:05:79:71:2c:45:d8:c9:a7:d8:b7:58:c6:92:
14:72:bc:4e:0a:25:0c:62:20:f2:eb:99:6e:9d:6e:20:55:b2:
c4:93:2c:4f:e8:d6:0d:51:26:4b:26:48:d4:28:a0:65:9e:c8:
9c:44:a2:1e:0b:7b:e3:9a:ef:a3:b2:c4:15:3b:47:f7:6d:d4:
d2:7b:4c:b3:31:0b:bb:25:3e:b4:f5:27:15:90:a5:12:4f:3b:
95:71:40:53:08:fc:3d:cc:a9:53:0a:9b:6d:bd:98:9b:95:f2:
31:d6:d4:65:47:15:e4:66:57:c5:19:b1:99:31:76:61:3b:f0:
a6:0b:bf:22:27:d4:f7:cc:7f:61:9f:03:2d:f2:62:b8:a9:c6:
51:07:e0:bf:fd:89:e6:47:22:d0:2a:ef:5f:2d:cc:a4:0c:11:
0e:09:59:6d:7a:ac:21:4d:81:14:4f:0a:72:b7:af:df:6a:49:
36:7d:eb:b0:79:a0:c6:dd:a8:63:8f:bf:53:7d:0f:aa:a3:46:
25:46:b2:20:d2:81:f2:57:88:1a:d5:6e:c6:47:f1:27:c7:28:
a9:30:dc:15:b8:a9:80:cf:44:3c:35:ec:e5:60:26:b2:42:a9:
cf:66:ac:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:47 2024 by rpki-client on console-fra.rpki-client.org