Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/oCJtAXEgVW5b1s-WWu-MAvjaSRA.roa
File: oCJtAXEgVW5b1s-WWu-MAvjaSRA.roa (raw, json)
Hash identifier: SFhaJxK9jWJ/m1CRzTyvVzhRqucedXqj7/ckQSS4t5A=
Subject key identifier: A0:22:6D:01:71:20:55:6E:5B:D6:CF:96:5A:EF:8C:02:F8:DA:49:10
Certificate issuer: /CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Certificate serial: 01856DD3F19CB9AD729FFEE6A93405AFEF4B
Authority key identifier: 07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/oCJtAXEgVW5b1s-WWu-MAvjaSRA.roa
Signing time: Sun 01 Jan 2023 14:54:44 +0000
ROA not before: Sun 01 Jan 2023 14:54:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42731
IP address blocks: 194.176.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:d3:f1:9c:b9:ad:72:9f:fe:e6:a9:34:05:af:ef:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07b80d5f4a9c92dd92a4605719e0ae8d1a62c043
Validity
Not Before: Jan 1 14:54:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0226d017120556e5bd6cf965aef8c02f8da4910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9b:0f:ba:a5:79:31:de:31:ed:5f:67:a3:8b:
2c:98:2e:62:95:d9:3f:ed:c0:b2:bc:7b:ad:0e:8b:
17:7e:9d:6f:05:e7:8d:e0:14:ed:f6:80:c9:78:0d:
fa:77:2e:3b:de:3b:f0:94:41:fb:3a:9b:5e:aa:1f:
bf:0c:fb:64:24:75:66:ac:63:8a:a3:92:73:69:31:
bc:ad:fe:1d:07:bc:78:cb:a7:ca:2d:a9:85:72:14:
46:f0:f1:3a:87:e5:4e:55:c0:91:2d:1c:f1:48:79:
65:7b:13:8d:df:ee:7d:6b:da:9a:45:ec:43:ee:f1:
9b:91:23:22:6f:04:65:b2:a6:cf:5a:93:8d:19:eb:
4e:f2:df:f4:d5:27:26:24:66:d7:7c:89:31:cc:3a:
23:77:47:1a:4a:6a:6e:e2:ca:67:dd:04:50:93:b6:
c8:e6:36:b9:84:8b:9a:e4:8a:33:7b:9e:aa:1c:89:
c3:1f:38:66:61:5c:ee:cb:c6:bb:66:cb:dc:c5:b1:
eb:78:c8:c9:90:37:5a:6e:54:cc:83:78:25:6e:f0:
01:ce:d8:69:ce:e8:bf:18:8b:81:86:da:e8:a4:ce:
23:19:3c:d4:df:b3:4a:3e:1f:a8:54:77:29:80:3c:
49:77:d0:45:25:78:0f:8d:f1:8c:c9:b4:fd:6e:66:
19:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:22:6D:01:71:20:55:6E:5B:D6:CF:96:5A:EF:8C:02:F8:DA:49:10
X509v3 Authority Key Identifier:
keyid:07:B8:0D:5F:4A:9C:92:DD:92:A4:60:57:19:E0:AE:8D:1A:62:C0:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7gNX0qckt2SpGBXGeCujRpiwEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/oCJtAXEgVW5b1s-WWu-MAvjaSRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/165f3d-a4fa-4da5-84e5-a265f38093a0/1/B7gNX0qckt2SpGBXGeCujRpiwEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.190.0/24
Signature Algorithm: sha256WithRSAEncryption
18:37:9a:93:97:e3:8f:18:0b:d2:35:a9:3f:94:10:6d:68:3e:
d2:90:4d:2e:63:6f:56:5f:48:d5:ca:00:d3:e9:2e:e3:1b:39:
cb:9d:13:56:19:69:98:42:c3:67:dd:99:b8:21:52:0c:f5:2a:
c5:78:46:2d:7c:af:f6:11:ca:2e:6f:53:cc:83:43:a1:c2:5d:
43:df:07:ff:27:ce:43:92:26:74:ee:a4:63:48:d4:cd:ab:b7:
60:a9:fb:aa:9d:2f:af:34:0f:d9:d9:92:4b:da:82:b9:17:18:
2b:6a:a4:55:2f:f8:33:16:4b:e1:89:66:c7:f0:b4:1f:de:3b:
7e:62:7e:6e:d2:90:b9:be:c6:83:9f:2d:0a:64:d4:ed:4a:58:
54:1f:9e:8c:9e:21:c8:6d:3d:75:a4:d1:be:bc:67:1a:41:9e:
f7:f1:72:ac:d8:5b:3b:e8:0d:38:8e:96:77:3b:d4:a0:2b:66:
78:d4:4f:c7:3c:2f:38:59:56:46:22:50:f4:11:2a:74:fb:8d:
de:43:ad:a2:de:4b:63:d7:c3:ed:59:4d:c9:8f:3f:75:c3:40:
32:6e:ff:ce:61:e8:52:d3:d7:81:b1:52:c4:d3:84:62:a3:ef:
aa:90:31:23:12:da:29:e9:fb:9b:ee:31:a4:69:9e:31:23:9c:
71:8d:05:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:54 2024 by rpki-client on console-fra.rpki-client.org