Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/oy5ra1Rg5H1vX2EObxIq4P26ols.roa
File: oy5ra1Rg5H1vX2EObxIq4P26ols.roa (raw, json)
Hash identifier: J/aOSQU0WcCuAMSCYHCijB6PZ41s8qCd2uxBOWrSLaE=
Subject key identifier: A3:2E:6B:6B:54:60:E4:7D:6F:5F:61:0E:6F:12:2A:E0:FD:BA:A2:5B
Certificate issuer: /CN=c4eb34dda2f8094968494892063351ee0f10e91a
Certificate serial: 0188E7462DFCDF9480D120B3DF752652CFD9
Authority key identifier: C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/oy5ra1Rg5H1vX2EObxIq4P26ols.roa
Signing time: Fri 23 Jun 2023 08:01:56 +0000
ROA not before: Fri 23 Jun 2023 08:01:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 152.89.228.0/22 maxlen: 23
45.80.250.0/23 maxlen: 23
2.58.176.0/22 maxlen: 23
141.98.68.0/22 maxlen: 23
Validation: Failed, certificate revoked on Fri 28 Jul 2023 09:19:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:e7:46:2d:fc:df:94:80:d1:20:b3:df:75:26:52:cf:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4eb34dda2f8094968494892063351ee0f10e91a
Validity
Not Before: Jun 23 08:01:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a32e6b6b5460e47d6f5f610e6f122ae0fdbaa25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:df:21:02:cc:2b:e8:21:11:4c:8d:94:e9:fc:
f4:c5:72:df:44:ed:1e:4e:38:9b:f0:08:14:7d:f2:
3f:fe:42:8e:4c:66:7e:c1:24:c2:6b:ab:86:ed:93:
7f:ad:53:cd:d5:2c:69:9c:1e:a4:ea:4b:40:7e:3c:
b6:28:12:63:13:66:f6:73:38:6e:4b:5e:35:ad:fe:
f0:55:c2:0f:aa:df:66:13:e8:0e:2f:e8:4a:11:89:
43:8d:a7:ca:5a:fa:f9:4a:1e:a2:4f:71:e0:70:48:
98:0b:db:b6:bc:0c:01:a8:3e:49:95:a5:80:2a:ae:
67:17:64:04:07:e9:82:9e:ef:30:64:95:f6:73:80:
17:79:b6:18:81:61:0f:85:f9:f6:6a:9c:0f:48:3f:
49:2a:ef:f9:7d:53:12:cb:ec:d7:09:45:89:e7:1b:
b6:f5:82:07:8e:85:f9:67:73:bd:9e:b6:28:3f:73:
f9:5d:f3:95:bd:75:e9:33:58:2f:52:54:08:a6:86:
83:4c:55:b2:6d:f7:67:62:e7:85:74:9a:17:77:10:
2b:cf:25:45:19:cb:16:c7:5f:5a:1a:29:f8:cf:f6:
75:15:9e:67:e2:31:32:49:54:4c:da:bf:f2:1d:6b:
71:56:99:26:c5:8d:2f:71:c7:fc:a2:f1:45:87:f4:
77:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:2E:6B:6B:54:60:E4:7D:6F:5F:61:0E:6F:12:2A:E0:FD:BA:A2:5B
X509v3 Authority Key Identifier:
keyid:C4:EB:34:DD:A2:F8:09:49:68:49:48:92:06:33:51:EE:0F:10:E9:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOs03aL4CUloSUiSBjNR7g8Q6Ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/oy5ra1Rg5H1vX2EObxIq4P26ols.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/b96584-1f71-48bb-a021-a347b56f3b9a/1/xOs03aL4CUloSUiSBjNR7g8Q6Ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.176.0/22
45.80.250.0/23
141.98.68.0/22
152.89.228.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:05:b3:3a:83:af:f8:8a:43:fc:1c:29:52:3a:8e:1d:63:be:
12:aa:bb:20:8c:76:4d:33:ab:e8:e1:2d:e7:cb:2e:f5:16:5a:
bf:51:d8:4d:a6:aa:b9:bb:2b:32:92:79:09:4e:f1:d9:e7:3d:
4b:8a:59:84:24:6b:60:1d:a9:87:aa:df:90:f3:ff:b4:16:b1:
72:a7:25:4a:13:74:f5:c7:b8:b9:74:53:e5:f1:38:a2:a6:18:
ae:64:b2:10:30:9a:8a:1d:63:18:e4:e9:ac:61:37:99:30:ce:
75:c8:7b:b9:85:b7:be:f0:06:4c:d7:63:64:55:c2:e6:64:15:
44:50:d8:8b:7b:09:ee:33:1b:98:ae:14:5c:b5:e7:87:bc:04:
a8:4b:77:b6:5d:82:02:e8:23:6d:e7:59:d0:72:98:b5:b2:28:
6d:6c:ff:6d:16:77:96:1e:12:39:93:25:b7:80:be:e8:df:98:
b6:26:20:a6:f5:ef:82:83:50:6d:08:25:bc:e0:bd:a2:92:20:
9b:a8:db:fa:4e:ff:e3:2b:e0:fc:78:69:3a:76:bd:e0:2c:f1:
b1:51:19:44:d2:f3:35:58:22:9a:23:66:cb:93:8e:ee:23:bc:
8e:06:2e:83:fe:e0:7a:ff:a9:73:2e:5e:55:a1:35:bb:83:84:
2a:2f:42:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:01 2024 by rpki-client on console-fra.rpki-client.org