Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/owSVCzNQS8wkYx554nqlosvSyzE.roa
File: owSVCzNQS8wkYx554nqlosvSyzE.roa (raw, json)
Hash identifier: R6eFIUmUrW+GKc8scnvLsdki9Stp9oYPQ2SkCkjkHiw=
Subject key identifier: A3:04:95:0B:33:50:4B:CC:24:63:1E:79:E2:7A:A5:A2:CB:D2:CB:31
Certificate issuer: /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial: 018B480F05B493FD1736CA9092D2CD88AF2D
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/owSVCzNQS8wkYx554nqlosvSyzE.roa
Signing time: Thu 19 Oct 2023 13:10:25 +0000
ROA not before: Thu 19 Oct 2023 13:10:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206452
IP address blocks: 188.74.40.0/22 maxlen: 24
2a03:4b27:d000::/36 maxlen: 36
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:0f:05:b4:93:fd:17:36:ca:90:92:d2:cd:88:af:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Validity
Not Before: Oct 19 13:10:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a304950b33504bcc24631e79e27aa5a2cbd2cb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:e1:b0:63:17:97:e0:80:b1:b6:2f:8f:33:
91:bf:52:f9:8e:97:2b:3b:0a:94:ea:69:1a:b6:32:
b8:97:a4:a4:74:fb:e7:da:21:cc:2a:18:dd:fb:43:
53:74:6d:ec:d5:03:46:f6:c3:7c:f1:42:b5:63:c4:
12:90:01:48:c4:9d:5b:12:f8:59:a0:f2:58:cb:c8:
c3:af:41:2f:d9:9d:2f:7f:6b:b9:7f:dc:af:96:7f:
92:af:d5:d8:c2:d0:f1:70:b7:01:b2:4d:8b:e1:76:
ae:4d:3a:76:b8:ac:60:bf:7c:47:3b:ad:54:81:e0:
37:d6:08:8b:66:53:15:05:2d:30:63:f6:d6:eb:d0:
d2:5a:17:b8:e0:90:cc:bb:04:45:c1:90:b2:8c:6d:
c2:a7:be:f9:98:b8:cf:2d:89:a7:be:91:38:2c:68:
84:9e:32:4a:11:96:0b:72:05:60:cb:ed:c0:f0:76:
51:2a:f2:93:a0:ae:ef:47:e9:a1:ce:4e:b9:54:bd:
c3:b4:e2:80:9b:1a:4e:ad:a6:56:4a:f6:e3:e5:67:
d2:28:34:11:62:68:33:20:10:31:9b:fd:40:01:d8:
1f:95:2d:4d:b5:55:f2:c7:d8:c4:37:08:a6:a7:9b:
b5:a7:f9:18:69:0a:84:17:aa:6f:e8:cf:37:f7:0c:
07:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:04:95:0B:33:50:4B:CC:24:63:1E:79:E2:7A:A5:A2:CB:D2:CB:31
X509v3 Authority Key Identifier:
keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/owSVCzNQS8wkYx554nqlosvSyzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.74.40.0/22
IPv6:
2a03:4b27:d000::/36
Signature Algorithm: sha256WithRSAEncryption
2b:a4:7d:80:75:fc:10:7b:95:e8:5e:20:2c:f4:51:18:23:99:
4a:0b:c2:54:48:8b:ea:7b:c3:fd:f7:f7:f9:29:93:36:26:63:
78:28:d3:fa:02:3a:c1:8d:96:5f:ac:80:1e:e3:d0:a7:9b:ce:
e1:67:f9:37:4d:5b:dc:fd:6e:70:e6:eb:0a:e6:c1:9d:ec:7f:
5b:54:60:d2:d7:57:e3:35:50:a2:1d:7b:00:3e:ba:26:27:d8:
87:44:46:93:5c:85:7d:09:43:36:ca:50:10:41:dc:10:5d:d7:
10:4f:ca:b4:c2:09:ff:b2:f4:52:e1:e5:0e:9f:37:f8:84:e9:
b4:77:ec:76:5a:14:65:84:2e:e2:ce:84:11:e2:e9:ff:d3:a4:
d4:e9:35:5b:59:1f:12:2b:a8:41:5f:3c:41:d3:69:3d:03:b4:
81:71:67:41:f5:ef:74:15:71:f9:20:d2:95:30:e2:b7:0e:92:
41:dd:67:a8:bb:4c:16:0c:1b:2a:07:e5:84:be:ae:e9:26:05:
72:1c:05:e4:7f:d0:db:14:d7:a3:a1:b8:b6:69:70:63:1e:38:
e6:4a:c6:05:91:45:54:66:68:3a:51:99:b1:a9:7f:93:88:3b:
35:c6:97:c7:df:09:8f:b7:83:48:d8:9d:35:a7:68:ba:a7:0b:
5a:e3:98:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:27 2024 by rpki-client on console-ams.rpki-client.org